Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
BCE Home cover_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE Introduction_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE RESOURCE AND SUPPORT_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:08
BCE RULES AND REGULATIONS_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE THE LEARNING PROGRAMME_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:08
SpryAssets	[ DIR ]	drwxr-sr-x	2013-02-14 22:54
ajax	[ DIR ]	drwxr-sr-x	2026-08-20 14:43
assignments	[ DIR ]	drwxr-sr-x	2022-03-07 13:03
docthumbs	[ DIR ]	drwxr-sr-x	2022-03-14 09:40
facilitators	[ DIR ]	drwxr-sr-x	2012-01-18 08:00
guidelines	[ DIR ]	drwxr-sr-x	2021-04-29 08:34
images	[ DIR ]	drwxr-sr-x	2023-04-18 07:54
includes	[ DIR ]	drwxr-sr-x	2024-02-23 09:41
lightbox	[ DIR ]	drwxr-sr-x	2012-07-02 08:44
pdf	[ DIR ]	drwxr-sr-x	2012-03-15 12:53
pdf-viewer	[ DIR ]	drwxr-sr-x	2025-02-20 13:18
visual-countdown-timer	[ DIR ]	drwxr-sr-x	2021-11-03 09:27
activities.php	6.49 KB	-rw-r--r--	2024-02-23 09:36
activityadd.php	7.44 KB	-rw-r--r--	2024-02-23 09:36
advisory.php	1.37 KB	-rw-r--r--	2024-02-23 09:36
assignmentadd.php	43.1 KB	-rw-r--r--	2026-08-19 12:45
assignmentinfo.php	2.96 KB	-rw-r--r--	2025-02-24 16:01
assignmentpack.php	4.66 KB	-rw-r--r--	2024-02-23 09:36
assignmentpdf.php	3.64 KB	-rw-r--r--	2024-02-23 09:36
assignments.php	14.04 KB	-rw-r--r--	2026-06-24 12:03
assigsummary.php	12.25 KB	-rw-r--r--	2025-04-14 08:46
calendar.js	13.28 KB	-rw-r--r--	2024-02-23 09:36
calendar.php	502 B	-rw-r--r--	2024-02-23 09:47
cceregister.php	22.5 KB	-rw-r--r--	2013-10-09 08:40
changedates.php	1.35 KB	-rw-r--r--	2024-02-23 09:36
contacts.php	4.87 KB	-rw-r--r--	2025-06-26 12:42
contacts_students.php	2.34 KB	-rw-r--r--	2024-02-27 11:36
details.php	9.24 KB	-rw-r--r--	2025-02-06 10:38
document-pdf-proxy.php	1.95 KB	-rw-r--r--	2025-06-27 10:14
document-view.php	7.35 KB	-rw-r--r--	2025-06-27 12:42
download_student_agreement.php	1.71 KB	-rw-r--r--	2026-03-16 11:53
evaluations.php	6.85 KB	-rw-r--r--	2024-02-23 09:36
exam.php	47.02 KB	-rw-r--r--	2026-08-25 07:11
examresults.php	3.01 KB	-rw-r--r--	2026-02-17 09:45
extension.php	11.33 KB	-rw-r--r--	2026-08-19 12:45
feedback.php	3.91 KB	-rw-r--r--	2024-02-23 09:36
feedbackmsgs.php	5.04 KB	-rw-r--r--	2024-03-25 10:07
file-download.php	343 B	-rw-r--r--	2026-06-24 12:03
forgotpwd.php	2.57 KB	-rw-r--r--	2024-02-23 09:36
gallery.php	1.75 KB	-rw-r--r--	2024-02-23 09:36
guideline-view.php	812 B	-rw-r--r--	2026-02-17 09:45
guideline.php	1 KB	-rw-r--r--	2026-02-17 09:45
guideline_intro.php	14.2 KB	-rw-r--r--	2024-02-23 09:36
guideline_notes.php	2.35 KB	-rw-r--r--	2024-02-23 09:36
guideline_programme.php	39.82 KB	-rw-r--r--	2024-02-23 09:36
guideline_resources.php	21.47 KB	-rw-r--r--	2024-02-23 09:36
guideline_rules.php	44.97 KB	-rw-r--r--	2024-02-23 09:36
inc_dashboard.php	28.4 KB	-rw-r--r--	2026-08-20 12:16
inc_footer.php	412 B	-rw-r--r--	2025-02-20 13:01
inc_footer_html.php	59 B	-rw-r--r--	2024-02-23 09:36
inc_functions.php	1.86 KB	-rw-r--r--	2026-06-24 12:03
inc_guidelinemenu.php	944 B	-rw-r--r--	2024-02-23 09:36
inc_header.php	2.46 KB	-rw-r--r--	2025-02-20 13:01
inc_header_html.php	1.34 KB	-rw-r--r--	2024-02-23 09:36
inc_shared.php	27.07 KB	-rw-r--r--	2026-08-19 12:45
inc_sidebar.php	9.54 KB	-rw-r--r--	2026-05-13 15:17
index.php	8.47 KB	-rw-r--r--	2026-06-02 08:33
library-old.php	8.46 KB	-rw-r--r--	2024-02-16 11:19
library-render.php	11.09 KB	-rw-r--r--	2026-04-29 07:23
library.php	474 B	-rw-r--r--	2024-02-25 11:44
login.php	2.79 KB	-rw-r--r--	2025-02-06 10:39
logout.php	129 B	-rw-r--r--	2024-02-23 09:36
markmessagesread.php	546 B	-rw-r--r--	2024-02-23 09:36
messages.php	4.14 KB	-rw-r--r--	2026-05-05 11:48
modcontact.php	26.51 KB	-rw-r--r--	2026-07-30 15:46
module.php	2.78 KB	-rw-r--r--	2024-02-23 09:36
notices.php	2.73 KB	-rw-r--r--	2024-02-23 09:36
password.php	2.52 KB	-rw-r--r--	2024-02-23 09:36
pdfthumb.php	230 B	-rw-r--r--	2024-02-23 09:36
php_errors.log	14.11 KB	-rw-r--r--	2026-08-21 08:24
phpinfo.php	17 B	-rw-r--r--	2025-06-09 13:16
popups.php	1.71 KB	-rw-r--r--	2024-02-23 09:36
profile.php	14.69 KB	-rw-r--r--	2026-03-16 11:53
profile_mentor.php	4.23 KB	-rw-r--r--	2024-02-23 09:36
progress_report.php	2.53 KB	-rw-r--r--	2026-05-13 15:17
readmessage.php	2.49 KB	-rw-r--r--	2026-05-19 07:04
recommended.php	5.94 KB	-rw-r--r--	2024-02-16 11:18
resources.php	4.14 KB	-rw-r--r--	2024-02-23 09:36
results.php	1.54 KB	-rw-r--r--	2024-02-23 09:36
saveexam.php	5.72 KB	-rw-r--r--	2025-11-19 09:45
sentmessages.php	1.66 KB	-rw-r--r--	2024-03-27 09:30
style.css	26.86 KB	-rw-r--r--	2025-02-20 13:04
submittedactivities.php	2.98 KB	-rw-r--r--	2024-02-23 09:36
submittedassignments.php	7.78 KB	-rw-r--r--	2026-06-24 12:03
templates.php	2.08 KB	-rw-r--r--	2024-02-23 09:36
timetable-render.php	2.27 KB	-rw-r--r--	2025-02-20 13:03
timetable.php	476 B	-rw-r--r--	2024-03-16 16:02
v3_feedback_form.php	2.52 KB	-rw-r--r--	2026-05-27 08:23
v3_feedback_submit.php	2.55 KB	-rw-r--r--	2026-05-27 08:23
videos.php	4.06 KB	-rw-r--r--	2024-02-23 09:36

Rename

<?php
include("inc_functions.php");

if (!isset($_SESSION["StudentID"]) || empty($_SESSION["StudentID"]))
    header("Location: /cesanet/login.php");
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
        <title>CESAnet</title>
        <link href="style.css" rel="stylesheet" type="text/css" />
        
    </head>

<div id="container">
            <?php include("inc_header.php"); ?>
            <?php include("inc_sidebar.php"); ?>
            <div id="mainContent">
                <h1>Evaluation Forms</h1>
                <h1> Upload Evaluation Form</h1>
                <?php
                if (!CurrentStudent()) {
                    echo "<p><b>Only available to current students.</b></p>";
                    die();
                }
                if (isset($_REQUEST["go"]) && ($_REQUEST["go"] == 1)) {

$uploaddir = '../cceadmin/documents/';
                    $uploadfilename1 = "";
                    if (isset($_FILES['file1'])) {
                        $uploadfilename1 = strtolower(str_replace(array("'", "\"", "(", ")", "#", " "), "_", basename(stripslashes($_FILES['file1']['name']))));
                        $uploadfile1 = $uploaddir . $uploadfilename1;
                        $ifilenum = 1;
                        while (file_exists($uploadfile1) && !empty($uploadfilename1)) {
                            $uploadfile1 = $uploaddir . $ifilenum . "_" . $uploadfilename1;
                            $ifilenum++;
                        }
                        move_uploaded_file($_FILES['file1']['tmp_name'], $uploadfile1);

$sql = "INSERT INTO CCEUploads (CCEStudentID, DocFile, DocName, UploadCategory, DateUploaded, UploadedBy)
		VALUES ('" . $_SESSION["StudentID"] . "', '" . str_replace('../cceadmin/documents/', '', $uploadfile1) . "',
		'BCE " . date("Y") . " Evaluation" . " " . $_REQUEST["DocName"] . "', 'Contact Session Evaluation', NOW(), 'Student')";
                        mysql_query($sql);

$sql = "SELECT * FROM CCEStudents WHERE CCEStudentID=" . $_SESSION["StudentID"];
                        $rec = mysql_query($sql);
                        if ($row = mysql_fetch_assoc($rec))
                            mail("brenda@cesa.co.za", "BCE Contact Session Evaluation Form loaded by " . $row["FirstName"] . " " . $row["Surname"], $row["FirstName"] . " " . $row["Surname"] . " has loaded a form for session: " . $_REQUEST["DocName"] . "." . "\r\n\r\n" . "http://www.cesa.co.za/cceadmin/documents/" . str_replace('../cceadmin/documents/', '', $uploadfile1), "From: sce@cesa.co.za");
                        ?>
                        <p><b>Thank you for uploading your evaluation form.</b></p>
                        <?php
                    } else {
                        ?>
                        <p><b>Error: please upload a file.</b></p>
                        <?php
                    }
                }
                ?>
                <form action="evaluations.php" method="post" enctype="multipart/form-data" name="form1" id="form1">
                    <input type="hidden" name="go" value="1" />
                    <p><b>Please note the following instructions:</b><br />
                        <ul>
                            <li>Please do not use unusual characters, especially subscripts, superscripts and symbols, when naming your files. File names may contain letters, numbers, spaces, hyphens and underscores, but no other characters are allowed.<br />
                            </li>
                        </ul></p>
                    <?php
                    ?>
                    <p>Session: <select name="DocName">
                            <?php
                            $sql = "SELECT CCESessions.CCESessionName, StartDate, EndDate FROM CCESessions JOIN CCESessionSchedules USING (CCESessionID) WHERE CCESessionSchedules.EndDate>='" . date("Y") . "-01-01' AND CCESessionSchedules.StartDate<='" . date("Y-m-d") . "' ORDER BY CCESessions.CCESessionOrder DESC";
                            $rec = mysql_query($sql);
                            while ($row = mysql_fetch_assoc($rec)) {
                                for ($i = 11; $i >= 0; $i--) {
                                    $iDate = strtotime("+" . $i . " week", strtotime($row["StartDate"]));
                                    if (($iDate <= time()) && ($iDate <= strtotime($row["EndDate"]))) {
                                        ?>
                                        <option value="<?php echo $row["CCESessionName"] . " " . date("Y-m-d", $iDate); ?>"><?php echo $row["CCESessionName"] . " " . date("Y-m-d", $iDate); ?></option>
                                        <?php
                                    }
                                }
                            }
                            ?>
                        </select></p>
                    <p>
                        File: <input type="file" name="file1" id="file1" />
                    </p>
                    <p>
                        <label>
                            <input type="submit" name="button" id="button" value="Submit" />
                        </label>
                    </p>
                </form>
                <p>&nbsp;</p>
                <p>You have previously uploaded the following evaluation forms:</p>
                <ul>
                    <?php
                    $sql = "SELECT * FROM CCEUploads WHERE CCEStudentID=" . $_SESSION["StudentID"] . " AND UploadCategory='Contact Session Evaluation' AND UploadedBy='Student' ORDER BY DateUploaded DESC";
                    $rec = mysql_query($sql);
                    if (mysql_num_rows($rec) == 0)
                        echo "<li>None.</li>";
                    while ($row = mysql_fetch_assoc($rec)) {
                        ?>
                        <li><?php echo $row["DocName"]; ?> - uploaded on <?php echo date("Y-m-d", strtotime($row["DateUploaded"])); ?></li>
                        <?php
                    }
                    ?>
                </ul>
            </div>
            <?php include("inc_footer.php"); ?>
        </div>
    </body>
</html>