Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
BCE Home cover_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE Introduction_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE RESOURCE AND SUPPORT_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:08
BCE RULES AND REGULATIONS_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:07
BCE THE LEARNING PROGRAMME_files	[ DIR ]	drwxr-sr-x	2012-03-12 06:08
SpryAssets	[ DIR ]	drwxr-sr-x	2013-02-14 22:54
ajax	[ DIR ]	drwxr-sr-x	2026-08-20 14:43
assignments	[ DIR ]	drwxr-sr-x	2022-03-07 13:03
docthumbs	[ DIR ]	drwxr-sr-x	2022-03-14 09:40
facilitators	[ DIR ]	drwxr-sr-x	2012-01-18 08:00
guidelines	[ DIR ]	drwxr-sr-x	2021-04-29 08:34
images	[ DIR ]	drwxr-sr-x	2023-04-18 07:54
includes	[ DIR ]	drwxr-sr-x	2024-02-23 09:41
lightbox	[ DIR ]	drwxr-sr-x	2012-07-02 08:44
pdf	[ DIR ]	drwxr-sr-x	2012-03-15 12:53
pdf-viewer	[ DIR ]	drwxr-sr-x	2025-02-20 13:18
visual-countdown-timer	[ DIR ]	drwxr-sr-x	2021-11-03 09:27
activities.php	6.49 KB	-rw-r--r--	2024-02-23 09:36
activityadd.php	7.44 KB	-rw-r--r--	2024-02-23 09:36
advisory.php	1.37 KB	-rw-r--r--	2024-02-23 09:36
assignmentadd.php	43.1 KB	-rw-r--r--	2026-08-19 12:45
assignmentinfo.php	2.96 KB	-rw-r--r--	2025-02-24 16:01
assignmentpack.php	4.66 KB	-rw-r--r--	2024-02-23 09:36
assignmentpdf.php	3.64 KB	-rw-r--r--	2024-02-23 09:36
assignments.php	14.04 KB	-rw-r--r--	2026-06-24 12:03
assigsummary.php	12.25 KB	-rw-r--r--	2025-04-14 08:46
calendar.js	13.28 KB	-rw-r--r--	2024-02-23 09:36
calendar.php	502 B	-rw-r--r--	2024-02-23 09:47
cceregister.php	22.5 KB	-rw-r--r--	2013-10-09 08:40
changedates.php	1.35 KB	-rw-r--r--	2024-02-23 09:36
contacts.php	4.87 KB	-rw-r--r--	2025-06-26 12:42
contacts_students.php	2.34 KB	-rw-r--r--	2024-02-27 11:36
details.php	9.24 KB	-rw-r--r--	2025-02-06 10:38
document-pdf-proxy.php	1.95 KB	-rw-r--r--	2025-06-27 10:14
document-view.php	7.35 KB	-rw-r--r--	2025-06-27 12:42
download_student_agreement.php	1.71 KB	-rw-r--r--	2026-03-16 11:53
evaluations.php	6.85 KB	-rw-r--r--	2024-02-23 09:36
exam.php	47.02 KB	-rw-r--r--	2026-08-25 07:11
examresults.php	3.01 KB	-rw-r--r--	2026-02-17 09:45
extension.php	11.33 KB	-rw-r--r--	2026-08-19 12:45
feedback.php	3.91 KB	-rw-r--r--	2024-02-23 09:36
feedbackmsgs.php	5.04 KB	-rw-r--r--	2024-03-25 10:07
file-download.php	343 B	-rw-r--r--	2026-06-24 12:03
forgotpwd.php	2.57 KB	-rw-r--r--	2024-02-23 09:36
gallery.php	1.75 KB	-rw-r--r--	2024-02-23 09:36
guideline-view.php	812 B	-rw-r--r--	2026-02-17 09:45
guideline.php	1 KB	-rw-r--r--	2026-02-17 09:45
guideline_intro.php	14.2 KB	-rw-r--r--	2024-02-23 09:36
guideline_notes.php	2.35 KB	-rw-r--r--	2024-02-23 09:36
guideline_programme.php	39.82 KB	-rw-r--r--	2024-02-23 09:36
guideline_resources.php	21.47 KB	-rw-r--r--	2024-02-23 09:36
guideline_rules.php	44.97 KB	-rw-r--r--	2024-02-23 09:36
inc_dashboard.php	28.4 KB	-rw-r--r--	2026-08-20 12:16
inc_footer.php	412 B	-rw-r--r--	2025-02-20 13:01
inc_footer_html.php	59 B	-rw-r--r--	2024-02-23 09:36
inc_functions.php	1.86 KB	-rw-r--r--	2026-06-24 12:03
inc_guidelinemenu.php	944 B	-rw-r--r--	2024-02-23 09:36
inc_header.php	2.46 KB	-rw-r--r--	2025-02-20 13:01
inc_header_html.php	1.34 KB	-rw-r--r--	2024-02-23 09:36
inc_shared.php	27.07 KB	-rw-r--r--	2026-08-19 12:45
inc_sidebar.php	9.54 KB	-rw-r--r--	2026-05-13 15:17
index.php	8.47 KB	-rw-r--r--	2026-06-02 08:33
library-old.php	8.46 KB	-rw-r--r--	2024-02-16 11:19
library-render.php	11.09 KB	-rw-r--r--	2026-04-29 07:23
library.php	474 B	-rw-r--r--	2024-02-25 11:44
login.php	2.79 KB	-rw-r--r--	2025-02-06 10:39
logout.php	129 B	-rw-r--r--	2024-02-23 09:36
markmessagesread.php	546 B	-rw-r--r--	2024-02-23 09:36
messages.php	4.14 KB	-rw-r--r--	2026-05-05 11:48
modcontact.php	26.51 KB	-rw-r--r--	2026-07-30 15:46
module.php	2.78 KB	-rw-r--r--	2024-02-23 09:36
notices.php	2.73 KB	-rw-r--r--	2024-02-23 09:36
password.php	2.52 KB	-rw-r--r--	2024-02-23 09:36
pdfthumb.php	230 B	-rw-r--r--	2024-02-23 09:36
php_errors.log	14.11 KB	-rw-r--r--	2026-08-21 08:24
phpinfo.php	17 B	-rw-r--r--	2025-06-09 13:16
popups.php	1.71 KB	-rw-r--r--	2024-02-23 09:36
profile.php	14.69 KB	-rw-r--r--	2026-03-16 11:53
profile_mentor.php	4.23 KB	-rw-r--r--	2024-02-23 09:36
progress_report.php	2.53 KB	-rw-r--r--	2026-05-13 15:17
readmessage.php	2.49 KB	-rw-r--r--	2026-05-19 07:04
recommended.php	5.94 KB	-rw-r--r--	2024-02-16 11:18
resources.php	4.14 KB	-rw-r--r--	2024-02-23 09:36
results.php	1.54 KB	-rw-r--r--	2024-02-23 09:36
saveexam.php	5.72 KB	-rw-r--r--	2025-11-19 09:45
sentmessages.php	1.66 KB	-rw-r--r--	2024-03-27 09:30
style.css	26.86 KB	-rw-r--r--	2025-02-20 13:04
submittedactivities.php	2.98 KB	-rw-r--r--	2024-02-23 09:36
submittedassignments.php	7.78 KB	-rw-r--r--	2026-06-24 12:03
templates.php	2.08 KB	-rw-r--r--	2024-02-23 09:36
timetable-render.php	2.27 KB	-rw-r--r--	2025-02-20 13:03
timetable.php	476 B	-rw-r--r--	2024-03-16 16:02
v3_feedback_form.php	2.52 KB	-rw-r--r--	2026-05-27 08:23
v3_feedback_submit.php	2.55 KB	-rw-r--r--	2026-05-27 08:23
videos.php	4.06 KB	-rw-r--r--	2024-02-23 09:36

Rename

<?php

include("inc_functions.php");

$sRedirServer = '/cesanet/'; //"http" . ($_SERVER["HTTPS"] == "on" ? "s" : "") . "://" . $_SERVER["HTTP_HOST"] . "/cesanet/";

if (!isset($_SESSION["StudentID"]) || empty($_SESSION["StudentID"])) {
    header("Location: " . $sRedirServer . "login.php");
}

$conni_orange = $conni;
$conn = $conni;

$Questionnaire_ID = intval($_POST["qid"]);

if (isset($_POST["StudentNumber"])) {
    $sql = "UPDATE CCEExamTiming SET StudentNumber='" . filter_input(INPUT_POST, "StudentNumber", FILTER_SANITIZE_STRING) . "' WHERE CCEStudentID=" . intval($_SESSION["StudentID"]) . " AND Questionnaire_ID=" . $Questionnaire_ID;
    mysqli_query($conn, $sql);
    die();
}

if (isset($_POST["IDNumber"])) {
    $sql = "UPDATE CCEExamTiming SET IDNumber='" . filter_input(INPUT_POST, "IDNumber", FILTER_SANITIZE_STRING) . "' WHERE CCEStudentID=" . intval($_SESSION["StudentID"]) . " AND Questionnaire_ID=" . $Questionnaire_ID;
    mysqli_query($conn, $sql);
    die();
}

$GroupID = 0;
$iRespondeeID = $_SESSION["StudentID"];
$iInterim = intval($_REQUEST["i"]);
$sql = "SELECT CCEExams.*, CCEExamTiming.CCEExamTimingID, CCEExamTiming.TimeStarted, CCEExamTiming.NewEndTime
FROM CCEExams LEFT JOIN CCEExamTiming ON (CCEExams.Questionnaire_ID=CCEExamTiming.Questionnaire_ID AND CCEExamTiming.CCEStudentID=" . $_SESSION["StudentID"] . ")
WHERE CCEExams.Questionnaire_ID='" . $Questionnaire_ID . "' ORDER BY `CCEExamTiming`.`TimeStarted` DESC";
$rec = mysqli_query($conn, $sql);
if ($rec && $row = mysqli_fetch_assoc($rec)) {
    extract($row);
    if (!empty($NewEndTime))
        $CloseDate = $NewEndTime;

if ($CCEExamTimingID <= 0) {
        $CCEExamTimingID = 0;
    }
}
mysqli_free_result($rec);

$sql = "SELECT CCEExamQuestions.IsMulti, CCEExamQuestions.QuestionTitle, CCEExamQuestions.Answer_Type, CCEExamAnswers.* "
        . "FROM CCEExamAnswers JOIN CCEExamQuestions USING (Question_ID) "
        . "WHERE CCEExamQuestions.Question_ID = '" . intval($_REQUEST["q"]) . "' OR CCEExamQuestions.ParentQuestionID = '" . intval($_REQUEST["q"]) . "' ";

//echo $sql . '<br />';
//exit;

$rec = mysqli_query($conn, $sql);
$bSaved = false;
while ($rec && $row = mysqli_fetch_assoc($rec)) {
    if ($row["Answer_Type"] == 'a') {
        // This is a free text answer
        if (isset($_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]])) {
            $sTextAnswer = $_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]];
        } else {
            $sTextAnswer = $_POST["Question_" . $row["Question_ID"]];
        }
        if (empty($sTextAnswer)) {
            $sql = "UPDATE CCEExamStudentAnswers SET InterimSave=1 WHERE Question_ID=" . $row["Question_ID"] . " AND Respondee_ID=" . $iRespondeeID;
            mysqli_query($conn, $sql);
            if (!isset($_REQUEST["noredirect"])) {
                $_SESSION["ExamError"] = "Nothing to save, please write your answer in the block provided.";
                header("Location: " . $sRedirServer . "exam.php?qid=" . $Questionnaire_ID . "&q=" . intval($_REQUEST["q"]));
            }
            die();
        } else {
            $sql = "REPLACE INTO CCEExamStudentAnswers (GroupID, Questionnaire_ID, Question_ID, Answer_ID, Answer_Text, Respondee_ID, InterimSave, ExamTimingID)
            VALUES (" . $GroupID . ", " . $Questionnaire_ID . ", " . $row["Question_ID"] . ", " . $row["Answer_ID"] . ", '" . addslashes($sTextAnswer) . "', " . $iRespondeeID . ", " . $iInterim . ", " . $CCEExamTimingID . ")";

//            echo $sql . '<br />';
//            exit;

mysqli_query($conn, $sql);
            $bSaved = true;
            //echo 'saved it';
            //exit;
        }
    } elseif ($row["IsMulti"] == 1) {
        $sql = "REPLACE INTO CCEExamStudentAnswers (GroupID, Questionnaire_ID, Question_ID, Answer_ID, Answer_Text, Respondee_ID, InterimSave, ExamTimingID) VALUES "
                . "(" . $GroupID . ", " . $Questionnaire_ID . ", " . $row["Question_ID"] . ", " . $row["Answer_ID"] . ", '" . implode(",", $_POST["Question_" . $row["Question_ID"]]) . "', " . $iRespondeeID . ", " . $iInterim . ", " . $CCEExamTimingID . ")";
        mysqli_query($conn, $sql);
        $bSaved = true;
    } else {
        if ($_POST["Question_" . $row["Question_ID"]] == $row["Answer_ID"]) {
            if (isset($_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]]) && !empty($_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]])) {
                $sTextAnswer = $_POST["Question_" . $row["Question_ID"] . "_" . $row["Answer_ID"]];
            } else {
                $sTextAnswer = $row["Answer_ID"];
            }
            $sql = "REPLACE INTO CCEExamStudentAnswers (GroupID, Questionnaire_ID, Question_ID, Answer_ID, Respondee_ID, Answer_Text, InterimSave, ExamTimingID) VALUES "
                    . "(" . $GroupID . ", " . $Questionnaire_ID . ", " . $row["Question_ID"] . ", " . $_POST["Question_" . $row["Question_ID"]] . ", " . $iRespondeeID . ", '" . addslashes($sTextAnswer) . "', " . $iInterim . ", " . $CCEExamTimingID . ")";

//            echo $sql;

mysqli_query($conn, $sql);
            $bSaved = true;
        }
    }
    if ($bSaved) {
        $_SESSION["ExamAlert"] = "Question '" . $row["QuestionTitle"] . "' saved.";
        $_SESSION["saved"] = intval($_REQUEST["q"]);
    }
//    echo $_SESSION["ExamAlert"];
//    exit;
} //while
//echo 'after while';
//exit;

if (!isset($_REQUEST["noredirect"])) {
    if ($bSaved) {
        header("Location: " . $sRedirServer . "exam.php?qid=" . $Questionnaire_ID);
    } else {
        header("Location: " . $sRedirServer . "exam.php?qid=" . $Questionnaire_ID . "&q=" . intval($_REQUEST["q"]));
    }
}