Your IP : 216.73.217.79
<?php
include("inc_db.php");
$EventID = 347;
$sql = "SELECT MarketingEvents.EventName, MarketingEvents.Level, MarketingEvents.City, MarketingEvents.Venue,
MarketingEvents.AvailableSpaces, MarketingEvents.CostPerPerson, MarketingEvents.EventDescription, MarketingEvents.Hours,
MarketingEvents.CPD, MarketingEvents.CODE, MarketingEvents.AccredNum, MarketingEvents.Province, MarketingEvents.RegDeadline,
MarketingEvents.MemberDiscount, MarketingEvents.EarlyBirdDiscount, MarketingEvents.Cancelled, MarketingEvents.BankAccName,
MarketingEvents.StartDate, MarketingEvents.StartTime, CourseVenues.CourseVenueCity, CourseVenues.CourseVenueArea
FROM MarketingEvents LEFT JOIN CourseVenues ON MarketingEvents.Venue = CourseVenues.CourseVenueName
WHERE MarketingEvents.EventID=" . $EventID;
$queryresult = mysql_query($sql) or die(mysql_error());
if ($row = mysql_fetch_array($queryresult)) {
// check the dates
$StartDatePlusTime = date("Y-m-d", strtotime($row["StartDate"])) . " " . date("H:i", strtotime($row["StartTime"]));
if (strtotime($StartDatePlusTime) < time())
$bEventInPast = true;
// check that there are still available spaces
$iNumBooked = 0;
$sql2 = "SELECT count(*) AS NumBooked FROM MarketingAttendees WHERE Cancelled=0 AND EventID=" . $EventID;
$queryresult2 = mysql_query($sql2);
if ($row2 = mysql_fetch_array($queryresult2)) {
$iNumBooked = $row2["NumBooked"];
}
$bNoSpace = (($row["AvailableSpaces"] > 0) && ($iNumBooked >= $row["AvailableSpaces"]));
if (($bEventInPast || $bNoSpace || ($row["Cancelled"] == 1)) && !isset($_REQUEST["override"])) {
// No space left
echo "<b><center>Registrations have now closed for this event, please contact CESA (<a href='mailto:events@cesa.co.za'>events@cesa.co.za</a>) for more information.</center></b>";
} else {
if (!isset($_REQUEST["action"])) {
?>
<p>Please login with the email address you used and the password provided to you when you registered for the event:</p>
<form method="post" action="/node/524">
<input type="hidden" name="action" value="login">
<?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
<table border="0" cellpadding="2">
<tbody>
<tr>
<td>Email address:</td>
<td><input type="text" name="email" size="40"></td>
</tr>
<tr>
<td>Password:</td>
<td><input type="password" name="password" size="40"></td>
</tr>
<tr>
<td colspan="2" align="center"><input type="submit" value="Login"></td>
</tr>
</tbody>
</table>
</form>
<?php
} else {
if (($_POST["action"] == "login") || ($_POST["action"] == "continue")) {
if ($_POST["action"] == "login") {
$sql = "SELECT * FROM MarketingAttendees WHERE Password='" . $_POST["password"] . "'";
} else {
$sql = "SELECT * FROM MarketingAttendees WHERE AttendeeID='" . $_POST["attendee"] . "'";
}
$rec = mysql_query($sql);
if ($row = mysql_fetch_assoc($rec)) {
?>
<p>Welcome, <?php echo $row["ContactFirstName"] . " " . $row["ContactLastName"] . " (" . $row["CompanyName"] . ")"; ?></p>
<?php
$sql = "SELECT DISTINCT MarketingTables.EventTableID, MarketingTables.TableNum, MarketingTables.TableName
FROM MarketingAttendeeTables, MarketingTables WHERE MarketingAttendeeTables.EventTableID=MarketingTables.EventTableID
AND MarketingAttendeeTables.BookedBy=" . $row["AttendeeID"] . " ORDER BY TableNum";
$recT = mysql_query($sql);
if (mysql_num_rows($recT) > 0) {
?>
<p><b>You have registered attendees for the following tables:</b></p>
<p>
<?php
while ($rowT = mysql_fetch_assoc($recT)) {
echo $rowT["TableName"] . " - <a href='/node/524?action=edittable&attendee=" . $row["AttendeeID"] . "&event=" . $row["EventID"] . "&table=" . $rowT["EventTableID"] . "'>Click here to update attendees' details for this booking</a><br>";
}
?>
</p>
<?php
}
$sql = "SELECT * FROM MarketingTables WHERE EventID=" . $EventID . " AND EventTableID NOT IN (SELECT DISTINCT EventTableID FROM MarketingAttendeeTables) ORDER BY TableName";
$recT = mysql_query($sql);
if (mysql_num_rows($recT) == 0) {
echo "<p>No more tables are available for booking, all tables have currently been allocated.</p>";
} else {
?>
<p><b>A table layout is shown at the bottom of this page for your reference.</b></p>
<p><b><u>NB: If your company has been pre-allocated specific tables, please select one from those. Pre-allocated tables are labelled with the company name.</u></b></p>
<form method="post" action="/node/524">
<input type="hidden" name="action" value="choosetable">
<?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
<input type="hidden" name="AttendeeID" value="<?php echo $row["AttendeeID"]; ?>">
<input type="hidden" name="EventID" value="<?php echo $row["EventID"]; ?>">
<input type="hidden" name="AttendeeEmail" value="<?php echo $row["EmailAddress"]; ?>">
<input type="hidden" name="AttendeeName" value="<?php echo $row["ContactFirstName"] . " " . $row["ContactLastName"] . " (" . $row["CompanyName"] . ")"; ?>">
<table border="0" cellpadding="2">
<tr><td><b>Table:</b></td><td><select name="table">
<?php
while ($rowT = mysql_fetch_assoc($recT)) {
?><option value="<?php echo $rowT["EventTableID"]; ?>"><?php echo $rowT["TableName"]; ?></option>
<?php
}
?>
</select></td></tr>
<tr><td valign="top" colspan="2">Attendees:</td></tr>
<tr><td colspan="2">
<table style="width: 100%">
<tr>
<td>First Name</td>
<td>Surname</td>
<td>Company</td>
<td>Dietary Requirements</td>
</tr>
<?php
for ($i = 1; $i <= 10; $i++) {
?>
<tr>
<td><input type="text" name="FirstName<?php echo $i; ?>"></td>
<td><input type="text" name="Surname<?php echo $i; ?>"></td>
<td><input type="text" name="Company<?php echo $i; ?>" value="<?php echo $row["CompanyName"]; ?>"></td>
<td><input type="text" name="Dietary<?php echo $i; ?>"></td>
</tr>
<?php
}
?>
</table>
</td></tr>
<tr><td colspan="2" align="center"><input type="submit"></td></tr>
</table>
</form>
<img src="/awards/images/awardstables2019.jpg?y=2019">
<?php
}
} else {
echo "<div style='border:5px solid red; padding:5px'><b>Password not recognised. <a href='/node/524'>Please login again.</a></b></div>";
}
}
if ($_POST["action"] == "choosetable") {
$sql = "SELECT TableNum, TableName FROM MarketingTables WHERE EventTableID=" . $_POST["table"];
$recT = mysql_query($sql);
$rowT = mysql_fetch_assoc($recT);
mysql_query("UPDATE MarketingAttendees SET TableNumber=NULL WHERE TableNumber=" . $rowT["TableNum"] . " AND EventID=" . $_POST["EventID"]);
$sAttendees = "";
for ($i = 1; $i <= 10; $i++) {
$sAttendees .= $_POST["FirstName" . $i] . " " . $_POST["Surname" . $i] . "\r\n";
if (!empty($_POST["FirstName" . $i])) {
$sql = "SELECT AttendeeID FROM MarketingAttendees WHERE ContactFirstName='" . addslashes($_POST["FirstName" . $i]) . "'
AND ContactLastName='" . addslashes($_POST["Surname" . $i]) . "'
AND EventID=" . $_POST["EventID"];
// AND CompanyName='".addslashes($_POST["Company".$i])."'
$recExist = mysql_query($sql);
if ($rowExist = mysql_fetch_assoc($recExist)) {
$sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
" . $rowExist["AttendeeID"] . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
mysql_query($sql);
$sql = "UPDATE MarketingAttendees SET TableNumber=" . $rowT["TableNum"] . " WHERE AttendeeID=" . $rowExist["AttendeeID"];
mysql_query($sql);
} else {
$sql = "INSERT INTO MarketingAttendees (ContactFirstName, ContactLastName, CompanyName, DietaryReq, EventID, TableNumber, DateBooked)
VALUES ('" . addslashes($_POST["FirstName" . $i]) . "', '" . addslashes($_POST["Surname" . $i]) . "', '" . addslashes($_POST["Company" . $i]) . "',
'" . addslashes($_POST["Dietary" . $i]) . "', " . $_POST["EventID"] . ", " . $rowT["TableNum"] . ", '" . date("Y-m-d H:i:s") . "')";
mysql_query($sql);
$iNewAttendeeID = mysql_insert_id();
$sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
" . $iNewAttendeeID . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
mysql_query($sql);
}
}
}
$sql = "INSERT INTO MarketingTableBookings (AttendeeID, DateBooked, NamesBooked, EventTableID) VALUES (" . $_POST["AttendeeID"] . ", '" . date("Y-m-d H:i:s") . "', '" . addslashes(stripslashes($sAttendees)) . "', " . $_POST["table"] . ")";
mysql_query($sql);
$sMsg = $_POST["AttendeeName"] . " has booked the following table: " . $rowT["TableName"] . "\r\n" . "\r\n" . "Attendees:" . "\r\n" . "\r\n" . $sAttendees;
mail($_POST["AttendeeEmail"], "CESA Aon Awards Table Booking", $sMsg, "CC: bonolo@cesa.co.za" . "\r\n" . "CC: events@cesa.co.za" . "\r\n" . "BCC: julia@xe.co.za");
?>
<p>Thank you, your table booking has been saved as follows:</p>
<p><?php echo nl2br($sMsg); ?></p>
<form method="post">
<input type="hidden" name="action" value="continue">
<?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
<input type="hidden" name="attendee" value="<?php echo $_POST["AttendeeID"]; ?>">
<input type="submit" value="Return to Table Bookings">
</form>
<?php
}
if ($_REQUEST["action"] == "edittable") {
$sql = "SELECT TableNum, TableName FROM MarketingTables WHERE EventTableID=" . $_GET["table"];
$recT = mysql_query($sql);
$rowT = mysql_fetch_assoc($recT);
?>
<form method="post" action="/node/524">
<input type="hidden" name="action" value="savechanges">
<?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
<input type="hidden" name="AttendeeID" value="<?php echo $_GET["attendee"]; ?>">
<input type="hidden" name="EventID" value="<?php echo $_GET["event"]; ?>">
<input type="hidden" name="table" value="<?php echo $_GET["table"]; ?>">
<table border="0" cellpadding="2">
<tr><td><b>Table:</b></td><td><?php echo $rowT["TableName"]; ?></td></tr>
<tr><td valign="top" colspan="2">Attendees:</td></tr>
<tr><td valign="top" colspan="2">
<table style="width: 100%">
<tr>
<td>First Name</td>
<td>Surname</td>
<td>Company</td>
<td>Dietary Requirements</td>
</tr>
<?php
$sql = "SELECT CompanyName FROM MarketingAttendees WHERE AttendeeID=" . $_GET["attendee"];
$recC = mysql_query($sql);
$rowC = mysql_fetch_assoc($recC);
$sql = "SELECT DISTINCT MarketingAttendees.AttendeeID, MarketingAttendees.ContactFirstName, MarketingAttendees.ContactLastName,
MarketingAttendees.CompanyName, MarketingAttendees.DietaryReq FROM MarketingAttendees, MarketingAttendeeTables
WHERE MarketingAttendees.AttendeeID=MarketingAttendeeTables.AttendeeID AND MarketingAttendeeTables.EventTableID=" . $_GET["table"];
//echo $sql;
$recA = mysql_query($sql);
//$sql2="SELECT NamesBooked FROM MarketingTableBookings WHERE EventTableID=".$_GET["table"];
//$recA2=mysql_query($sql2);
for ($i = 1; $i <= 10; $i++) {
$iAttendeeID = 0;
$sFirstName = "";
$sSurname = "";
$sCompany = $rowC["CompanyName"];
$sDietary = "";
if ($rowA = mysql_fetch_assoc($recA)) {
$iAttendeeID = $rowA["AttendeeID"];
$sFirstName = $rowA["ContactFirstName"];
$sSurname = $rowA["ContactLastName"];
$sCompany = $rowA["CompanyName"];
$sDietary = $rowA["DietaryReq"];
/* } else {
if ($rowA2=mysql_fetch_assoc($recA2)) {
$arrAttendees=split("\r\n", $rowA2["NamesBooked"]);
mysql_data_seek($recA2,0);
if (isset($arrAttendees[$i-1])) {
$sNames=$arrAttendees[$i-1];
if (!empty($sNames)) {
$arrNames=split(" ",$sNames);
$sFirstName=$arrNames[0];
$sSurname=trim(substr($sNames,strlen($sFirstName)));
}
}
}
*/
}
?>
<tr>
<td><input type="hidden" name="AttendeeID<?php echo $i; ?>" value="<?php echo $iAttendeeID; ?>">
<input type="text" name="FirstName<?php echo $i; ?>" value="<?php echo $sFirstName; ?>"></td>
<td><input type="text" name="Surname<?php echo $i; ?>" value="<?php echo $sSurname; ?>"></td>
<td><input type="text" name="Company<?php echo $i; ?>" value="<?php echo $sCompany; ?>"></td>
<td><input type="text" name="Dietary<?php echo $i; ?>" value="<?php echo $sDietary; ?>"></td>
</tr>
<?php
}
?>
</table>
</td></tr>
<tr><td colspan="2" align="center"><input type="submit"></td></tr>
</table>
</form>
<?php
}
if ($_POST["action"] == "savechanges") {
$sql = "SELECT TableNum, TableName FROM MarketingTables WHERE EventTableID=" . $_POST["table"];
$recT = mysql_query($sql);
$rowT = mysql_fetch_assoc($recT);
$iTableNum = $rowT["TableNum"];
mysql_query("UPDATE MarketingAttendees SET TableNumber=NULL WHERE TableNumber=" . $iTableNum . " AND EventID=" . $_POST["EventID"]);
$sAttendees = "";
for ($i = 1; $i <= 10; $i++) {
$sAttendees .= $_POST["FirstName" . $i] . " " . $_POST["Surname" . $i] . "\r\n";
if (empty($_POST["FirstName" . $i])) {
if (!empty($_POST["AttendeeID" . $i])) {
mysql_query("DELETE FROM MarketingAttendeeTables WHERE EventTableID=" . $_POST["table"] . " AND AttendeeID=" . $_POST["AttendeeID" . $i]);
mysql_query($sql);
$sql = "UPDATE MarketingAttendees SET Cancelled=1 WHERE TableNumber IS NULL AND AttendeeID=" . $_POST["AttendeeID" . $i];
mysql_query($sql);
}
} else {
$sql = "SELECT AttendeeID FROM MarketingAttendees WHERE ContactFirstName='" . addslashes($_POST["FirstName" . $i]) . "'
AND ContactLastName='" . addslashes($_POST["Surname" . $i]) . "'
AND EventID=" . $_POST["EventID"];
// AND CompanyName='".addslashes($_POST["Company".$i])."'
$recExist = mysql_query($sql);
if ($rowExist = mysql_fetch_assoc($recExist)) {
$iNewAttendeeID = $rowExist["AttendeeID"];
$sql = "UPDATE MarketingAttendees SET CompanyName='" . addslashes($_POST["Company" . $i]) . "',
DietaryReq='" . addslashes($_POST["Dietary" . $i]) . "', Cancelled=0 WHERE AttendeeID=" . $iNewAttendeeID;
// echo $sql;
mysql_query($sql);
} else {
$sql = "INSERT INTO MarketingAttendees (ContactFirstName, ContactLastName, CompanyName, DietaryReq, EventID, TableNumber, DateBooked)
VALUES ('" . addslashes($_POST["FirstName" . $i]) . "', '" . addslashes($_POST["Surname" . $i]) . "', '" . addslashes($_POST["Company" . $i]) . "',
'" . addslashes($_POST["Dietary" . $i]) . "', " . $_POST["EventID"] . ", " . $iTableNum . ", '" . date("Y-m-d H:i:s") . "')";
// echo $sql;
mysql_query($sql);
$iNewAttendeeID = mysql_insert_id();
}
if ($_POST["AttendeeID" . $i] == 0) {
$sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
" . $iNewAttendeeID . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
// echo $sql;
mysql_query($sql);
} else {
if ($_POST["AttendeeID" . $i] != $iNewAttendeeID) {
$sql = "SELECT * FROM MarketingAttendeeTables WHERE EventTableID=" . $_POST["table"] . " AND AttendeeID=" . $_POST["AttendeeID" . $i];
$recExist = mysql_query($sql);
if ($rowExist = mysql_fetch_assoc($recExist)) {
$sql = "UPDATE MarketingAttendeeTables SET AttendeeID=" . $iNewAttendeeID . " WHERE EventTableID=" . $_POST["table"] . " AND AttendeeID=" . $_POST["AttendeeID" . $i];
// echo $sql;
mysql_query($sql);
} else {
$sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
" . $iNewAttendeeID . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
// echo $sql;
mysql_query($sql);
}
$sql = "UPDATE MarketingAttendees SET Cancelled=1 WHERE TableNumber IS NULL AND AttendeeID=" . $_POST["AttendeeID" . $i];
/// echo $sql;
mysql_query($sql);
}
}
}
}
$sql = "UPDATE MarketingTableBookings SET NamesBooked='" . addslashes(stripslashes($sAttendees)) . "' WHERE EventTableID=" . $_POST["table"] . ")";
mysql_query($sql);
$sql = "update MarketingAttendees join MarketingAttendeeTables using (AttendeeID) join MarketingTables using (EventTableID) set MarketingAttendees.TableNumber=MarketingTables.`TableNum` where MarketingAttendeeTables.EventTableID=" . $_POST["table"] . " AND TableNumber is null";
mysql_query($sql);
$sql = "SELECT ContactFirstName, ContactLastName, EmailAddress FROM MarketingAttendees WHERE AttendeeID=" . $_POST["AttendeeID"];
$rec = mysql_query($sql);
$row = mysql_fetch_assoc($rec);
$sMsg = $row["ContactFirstName"] . " " . $row["ContactLastName"] . " has updated the booking for the following table: " . $rowT["TableName"] . "\r\n" . "\r\n" . "Attendees:" . "\r\n" . "\r\n" . $sAttendees;
mail($row["EmailAddress"], "CESA Aon Awards Table Booking", $sMsg, "CC: bonolo@cesa.co.za" . "\r\n" . "CC: events@cesa.co.za" . "\r\n" . "BCC: julia@xe.co.za");
?>
<p>Thank you, your table booking has been saved as follows:</p>
<p><?php echo nl2br($sMsg); ?></p>
<form method="post">
<input type="hidden" name="action" value="continue">
<?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
<input type="hidden" name="attendee" value="<?php echo $_POST["AttendeeID"]; ?>">
<input type="submit" value="Return to Table Bookings">
</form>
<?php
}
}
}
}
?>