Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
SpryAssets	[ DIR ]	drwxr-sr-x	2013-09-25 09:36
docthumbs	[ DIR ]	drwxr-sr-x	2015-07-16 10:47
downloads	[ DIR ]	drwxr-sr-x	2015-05-20 09:39
guidelines	[ DIR ]	drwxr-sr-x	2017-10-25 14:17
images	[ DIR ]	drwxr-sr-x	2015-07-14 05:06
lightbox	[ DIR ]	drwxr-sr-x	2013-09-25 09:35
pdf	[ DIR ]	drwxr-sr-x	2013-09-25 09:36
Guideline 2 - Developing a WPTP.DOCX	182.26 KB	-rw-r--r--	2013-09-25 09:33
ReportMilestones.php	7.54 KB	-rw-r--r--	2014-07-07 06:49
archivedmessages.php	2.69 KB	-rw-r--r--	2013-10-21 10:34
calendar.js	13.62 KB	-rw-r--r--	2013-09-25 09:33
calendar.php	2.88 KB	-rw-r--r--	2014-01-22 08:36
changedates.php	1.37 KB	-rw-r--r--	2013-09-25 09:33
contacts.php	3.2 KB	-rw-r--r--	2013-09-25 09:33
details.php	5.48 KB	-rw-r--r--	2013-09-25 09:33
feedback.php	16.68 KB	-rw-r--r--	2015-09-16 05:17
forgotpwd.php	2.49 KB	-rw-r--r--	2013-10-14 07:07
gallery.php	2.27 KB	-rw-r--r--	2013-09-25 09:33
guidelines.php	1.95 KB	-rw-r--r--	2014-10-13 08:37
inc_footer.php	349 B	-rw-r--r--	2013-09-25 09:34
inc_functions.php	739 B	-rw-r--r--	2013-10-10 13:34
inc_header.php	114 B	-rw-r--r--	2014-01-22 08:56
inc_sidebar.php	3.7 KB	-rw-r--r--	2018-11-21 13:29
index.php	8.85 KB	-rw-r--r--	2015-07-14 05:07
library.php	3.98 KB	-rw-r--r--	2013-09-25 09:35
login.php	3.88 KB	-rw-r--r--	2014-07-21 09:41
logout.php	104 B	-rw-r--r--	2013-09-25 09:35
messages.php	4.35 KB	-rw-r--r--	2014-01-22 08:56
milestones.php	15.55 KB	-rw-r--r--	2015-07-13 09:14
milestones_backup.php	18.64 KB	-rw-r--r--	2014-01-16 08:07
modcontact.php	5.75 KB	-rw-r--r--	2014-04-14 08:20
notices.php	2.76 KB	-rw-r--r--	2013-09-25 09:35
password.php	5.11 KB	-rw-r--r--	2014-11-03 09:00
pdfthumb.php	230 B	-rw-r--r--	2013-09-25 09:48
php_errors.log	1.92 KB	-rw-r--r--	2026-08-20 23:56
profile.php	8.1 KB	-rw-r--r--	2018-11-23 12:50
readmessage.php	4.21 KB	-rw-r--r--	2014-01-22 08:56
register.php	79.1 KB	-rw-r--r--	2014-09-02 10:32
register_step2.php	56.18 KB	-rw-r--r--	2014-11-03 09:09
sentmessages.php	2.51 KB	-rw-r--r--	2013-10-21 10:34
style.css	3.72 KB	-rw-r--r--	2013-09-25 09:36
templates.php	1.91 KB	-rw-r--r--	2013-09-25 09:36

Rename

<?php
include("inc_functions.php");

if (!isset($_SESSION["StudentID"]) || empty($_SESSION["StudentID"])) header("Location: http://www.cesa.co.za/mentanet/login.php");
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>MentaNet</title>
<link href="style.css" rel="stylesheet" type="text/css" />

</head>

<div id="container">
<?php include("inc_header.php"); ?>
<?php include("inc_sidebar.php"); ?>
  <div id="mainContent">
    <h1>Milestones</h1>
<?php

$TrueMilestoneNum=9;
$sql="SELECT MAX(CCMMilestoneNum) AS CCMMilestoneNum FROM CCMStudentProgress WHERE CCMStudentID=".$_SESSION["StudentID"];
$rec=mysql_query($sql);
if ($row=mysql_fetch_assoc($rec)) $TrueMilestoneNum=$row["CCMMilestoneNum"];
mysql_free_result($rec);
if ($TrueMilestoneNum>12) $TrueMilestoneNum=12;
if (!isset($_REQUEST["MilestoneNum"]) || empty($_REQUEST["MilestoneNum"])) {
	$MilestoneNum=$TrueMilestoneNum;
} else {
	$MilestoneNum=intval($_REQUEST["MilestoneNum"]);
}
$sql="SELECT MIN(CCMMilestoneNum) AS CCMMilestoneNum FROM CCMStudentProgress WHERE CCMStudentID=".$_SESSION["StudentID"];
$rec=mysql_query($sql);
$FirstMilestoneNum=1;
if ($row=mysql_fetch_assoc($rec)) $FirstMilestoneNum=$row["CCMMilestoneNum"];
mysql_free_result($rec);
?>
    <p>You are currently viewing: <strong>Milestone <?php echo $MilestoneNum; ?></strong></p>
<?php
if ($TrueMilestoneNum > $FirstMilestoneNum) {
?>
<ul>
<?php	
	for ($iPrev=$FirstMilestoneNum; $iPrev<=$TrueMilestoneNum; $iPrev++) {
		if ($iPrev!=$MilestoneNum) {
?>
<li><a href="milestones.php?MilestoneNum=<?php echo $iPrev; ?>">Go to Milestone <?php echo $iPrev; ?></a></li>
<?php		
		}
	}
?>
</ul>	
<?php	
}
?>    
    <p>As a <strong><?php echo $_SESSION["UserTypeDesc"]; ?></strong>, you need to complete the following tasks:</p>
    <ul>
<?php
$sDiscipline="";
$sql="SELECT SelectionCategory FROM CCMStudents WHERE CCMStudentID='".$_SESSION["StudentID"]."'";
$recD=mysql_query($sql);
if ($rowD=mysql_fetch_assoc($recD)) {
	$arr=explode("-",$rowD["SelectionCategory"]);
	$sDiscipline=$arr[count($arr)-1];
	if (($sDiscipline=="Res") && (count($arr)>1)) $sDiscipline=$arr[count($arr)-2];
}
$sql="SELECT * FROM CCMMilestoneSteps WHERE UserType='".$_SESSION["UserType"]."' AND MilestoneNum=".$MilestoneNum." AND Active=1 
AND (Discipline IS NULL OR Discipline='".$sDiscipline."')
ORDER BY StepOrder";
// echo $sql;
$recSteps=mysql_query($sql);
while ($rowSteps=mysql_fetch_assoc($recSteps)) {
?>
<li><?php echo $rowSteps["StepDesc"]; ?><br />
	<?php 
$sql="SELECT * FROM CCMMilestones WHERE CCMStudentID='".$_SESSION["StudentID"]."' AND MilestoneNum=".$MilestoneNum." AND StepType='".$rowSteps["InputFieldStepName"]."' ORDER BY DateUpdated DESC";
$rec2=mysql_query($sql);
if ($row2=mysql_fetch_assoc($rec2)) {
	echo "<i style='color:red'>Completed on ".date("Y-m-d", strtotime($row2["DateUpdated"]));
	if (!empty($row2["StepFile"])) echo ", file: <a href='".$uploaddir.$row2["StepFile"]."' target='_blank'>".$row2["StepFile"]."</a>";
		$sql="SELECT * FROM CCMMilestoneSteps, CCMMilestoneStepsData WHERE CCMStudentID='".$_SESSION["StudentID"]."' AND CCMMilestoneStepID=CCMMilestoneSteps.id AND CCMMilestoneSteps.MilestoneNum=".$MilestoneNum." AND CCMMilestoneSteps.InputFieldStepName='".$row2["StepType"]."'";
	$rec2=mysql_query($sql);
	while ($row2=mysql_fetch_assoc($rec2)) {
		if (!empty($row2["StepFile"])) echo ", file: <a href='".$uploaddir.$row2["StepFile"]."' target='_blank'>".$row2["StepFile"]."</a>";
	}
	echo "</i><br>";
}
?>
        <br />
      </li>
<?php
}
?>
    </ul>
    <p><strong><br />
      <br />
    Update your task completion below:</strong></p>
<?php
	if (isset($_POST["go"]) && ($_POST["go"]==1)) {
?>
<p style='color:red'><b>Thank you for updating your tasks.</b></p>
<?php
			mysql_data_seek($recSteps,0);
			while ($rowSteps=mysql_fetch_assoc($recSteps)) {
				$sValue="";
				$sFile="";
				if ($rowSteps["PerCandidate"]==1) {
					$sql="SELECT * FROM CCMStudents WHERE (EmployerID=".$_SESSION["StudentID"]." OR MentorID=".$_SESSION["StudentID"].") AND Archived=0 ORDER BY Surname";
					$recSt=mysql_query($sql);
					$iStudentsDone=0;
					$iStudentsReq=mysql_num_rows($recSt);
					while ($rowSt=mysql_fetch_assoc($recSt)) {
						$sql="SELECT * FROM CCMMilestoneStepsData WHERE CCMStudentID='".$_SESSION["StudentID"]."' AND CCMMilestoneStepID=".$rowSteps["id"]." AND CCMForStudentID=".$rowSt["CCMStudentID"];
//						echo $sql;
						$rec2=mysql_query($sql);
						if ($row2=mysql_fetch_assoc($rec2)) {
							$sValueExist=$row2["StepData"];
							$sFileExist=$row2["StepFile"];
						}
						for ($iFT=1; $iFT<=4; $iFT++) {
							if (!empty($rowSteps["InputFieldType".$iFT])) {
								if ($rowSteps["InputFieldType".$iFT]=="f") {
									$uploadfilename1="";
									$uploadfile1="";
//									var_dump($_FILES);
									if (isset($_FILES["field".$iFT."_".$rowSteps["id"]."_".$rowSt["CCMStudentID"]])) {
										$uploadfilename1 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES["field".$iFT."_".$rowSteps["id"]."_".$rowSt["CCMStudentID"]]['name']))));
										$uploadfile1 = $uploaddir . $uploadfilename1;
										$ifilenum=1;
										while (file_exists($uploadfile1) && !empty($uploadfilename1)) {
											$uploadfile1 = $uploaddir . $ifilenum."_".$uploadfilename1;
											$ifilenum++;
										}
										move_uploaded_file($_FILES["field".$iFT."_".$rowSteps["id"]."_".$rowSt["CCMStudentID"]]['tmp_name'], $uploadfile1);
									}
									$uploadfile1=str_replace($uploaddir, '', $uploadfile1);
									if (isset($_FILES["field".$iFT."_".$rowSteps["id"]."_".$rowSt["CCMStudentID"]]) && !empty($uploadfile1)) {
										$sFile=$uploadfile1;
									}
								} else {
									if (!empty($_POST["field".$iFT."_".$rowSteps["id"]."_".$rowSt["CCMStudentID"]])) {
										if (!empty($sValue)) $sValue.=", ";
										$sValue.=str_replace(","," ",$_POST["field".$iFT."_".$rowSteps["id"]."_".$rowSt["CCMStudentID"]]);
									}
								}
								
							}
						}
						if (empty($sFile) && !empty($sFileExist)) $sFile=$sFileExist;
						if (!empty($sFile) && empty($sValue)) $sValue="File uploaded";
						if (empty($sValue) && empty($sFile)) {
							$sql = "DELETE FROM CCMMilestoneStepsData WHERE CCMStudentID=".$_SESSION["StudentID"]." AND CCMMilestoneStepID=".$rowSteps["id"]." AND CCMForStudentID=".$rowSt["CCMStudentID"];
//								echo $sql;
							mysql_query($sql);
						} else {
							$sql = "REPLACE INTO CCMMilestoneStepsData (CCMStudentID, CCMForStudentID, CCMMilestoneStepID, StepData, StepFile) VALUES (".$_SESSION["StudentID"].", ".$rowSt["CCMStudentID"].", ".$rowSteps["id"].", '".$sValue."', '".$sFile."')";
//								echo $sql;
							mysql_query($sql);
							$iStudentsDone++;
						}
					}
					if ($iStudentsDone >= $iStudentsReq) {
						if ($rowSteps["InputFieldType1"]=="f") {
							$sStudentsDone=$iStudentsDone." file/s uploaded";
						} else {
							$sStudentsDone=$iStudentsDone." candidate/s updated";
						}
						$sql = "REPLACE INTO CCMMilestones (CCMStudentID, DateUpdated, MilestoneNum, StepType, StepData, StepFile) VALUES (".$_SESSION["StudentID"].", '".date("Y-m-d H:i:s")."', ".$MilestoneNum.", '".$rowSteps["InputFieldStepName"]."', '".$sStudentsDone."', '')";
		//					echo $sql;
						mysql_query($sql);
					}
				} else {
					$sql="SELECT * FROM CCMMilestones WHERE CCMStudentID='".$_SESSION["StudentID"]."' AND MilestoneNum=".$MilestoneNum." AND StepType='".$rowSteps["InputFieldStepName"]."' ORDER BY DateUpdated DESC";
					$rec2=mysql_query($sql);
					if ($row2=mysql_fetch_assoc($rec2)) {
						$sValueExist=$row2["StepData"];
						$sFileExist=$row2["StepFile"];
					}
					for ($iFT=1; $iFT<=4; $iFT++) {
						if (!empty($rowSteps["InputFieldType".$iFT])) {
							if ($rowSteps["InputFieldType".$iFT]=="f") {
								$uploadfilename1="";
								$uploadfile1="";
								if (isset($_FILES["field".$iFT."_".$rowSteps["id"]])) {
									$uploadfilename1 = strtolower(str_replace(array("'","\"","(",")","#"," "), "_", basename(stripslashes($_FILES["field".$iFT."_".$rowSteps["id"]]['name']))));
									$uploadfile1 = $uploaddir . $uploadfilename1;
									$ifilenum=1;
									while (file_exists($uploadfile1) && !empty($uploadfilename1)) {
										$uploadfile1 = $uploaddir . $ifilenum."_".$uploadfilename1;
										$ifilenum++;
									}
									move_uploaded_file($_FILES["field".$iFT."_".$rowSteps["id"]]['tmp_name'], $uploadfile1);
								}
								$uploadfile1=str_replace($uploaddir, '', $uploadfile1);
								if (isset($_FILES["field".$iFT."_".$rowSteps["id"]]) && !empty($uploadfile1)) {
									$sFile=$uploadfile1;
								}
							} else {
								if (!empty($_POST["field".$iFT."_".$rowSteps["id"]])) {
									if (!empty($sValue)) $sValue.=", ";
									$sValue.=str_replace(","," ",$_POST["field".$iFT."_".$rowSteps["id"]]);
								}
							}
							
						}
					}
					if (empty($sFile) && !empty($sFileExist)) $sFile=$sFileExist;
					if (!empty($sFile) && empty($sValue)) $sValue="File uploaded";
					if (empty($sValue) && empty($sFile)) {
						$sql = "DELETE FROM CCMMilestones WHERE CCMStudentID=".$_SESSION["StudentID"]." AND MilestoneNum=".$MilestoneNum." AND StepType='".$rowSteps["InputFieldStepName"]."'";
		//					echo $sql;
						mysql_query($sql);
					} else {
						$sql = "REPLACE INTO CCMMilestones (CCMStudentID, DateUpdated, MilestoneNum, StepType, StepData, StepFile) VALUES (".$_SESSION["StudentID"].", '".date("Y-m-d H:i:s")."', ".$MilestoneNum.", '".$rowSteps["InputFieldStepName"]."', '".$sValue."', '".$sFile."')";
		//					echo $sql;
						mysql_query($sql);
					}
				}
				if ($rowSteps["id"]==12) {
					$sUpdateSql="";
					if (!empty($_POST["field1_12"])) {
						$sUpdateSql.="AccountName='".addslashes(stripslashes($_POST["field1_12"]))."', ";
					}
					if (!empty($_POST["field2_12"])) {
						$sUpdateSql.="BankName='".addslashes(stripslashes($_POST["field2_12"]))."', ";
					}
					if (!empty($_POST["field3_12"])) {
						$sUpdateSql.="BranchName='".addslashes(stripslashes($_POST["field3_12"]))."', ";
					}
					if (!empty($_POST["field4_12"])) {
						$sUpdateSql.="AccountNum='".addslashes(stripslashes($_POST["field4_12"]))."', ";
					}
					if (!empty($sUpdateSql)) {
						mysql_query("UPDATE CCMEmployers SET ".trim($sUpdateSql,", ")." WHERE CCMEmployerID=".$_SESSION["StudentID"]);
					}
				}
			}
if ($MilestoneNum==$TrueMilestoneNum) {					
	$sql="SELECT * FROM CCMMilestoneSteps WHERE UserType='".$_SESSION["UserType"]."' AND MilestoneNum=".$MilestoneNum." AND Active=1 AND Required=1 ORDER BY StepOrder";
	$recSteps2=mysql_query($sql);
	$bAllDone = true;
	while ($rowSteps2=mysql_fetch_assoc($recSteps2)) {
		$sql="SELECT * FROM CCMMilestones WHERE CCMStudentID=".$_SESSION["StudentID"]." AND MilestoneNum=".$MilestoneNum." AND StepType='".$rowSteps2["InputFieldStepName"]."'";
		$recCountSteps=mysql_query($sql);
		if ($rowCountSteps=mysql_query($sql)) {
			if (empty($rowCountSteps["StepData"])) $bAllDone=false;
		} else {
			$bAllDone=false;
		}
	}
	if ($bAllDone) {
		$TrueMilestoneNum++;
		$sql="REPLACE INTO CCMStudentProgress (CCMStudentID, CCMMilestoneNum, CCMMilestoneDate) VALUES (".$_SESSION["StudentID"].", ".$TrueMilestoneNum.", '".date("Y-m-d H:i:s")."')";
		mysql_query($sql);
	}
}
}
?>    
    <form action="milestones.php" method="post" enctype="multipart/form-data" name="form1" id="form1">
    <input type="hidden" name="go" value="1" />
    <input type="hidden" name="MilestoneNum" value="<?php echo $MilestoneNum; ?>" />
      <table width="543" border="0" cellspacing="0" cellpadding="5">
<?php
mysql_data_seek($recSteps,0);
while ($rowSteps=mysql_fetch_assoc($recSteps)) {
	if ($rowSteps["PerCandidate"]==1) {
		$sql="SELECT * FROM CCMStudents WHERE (EmployerID=".$_SESSION["StudentID"]." OR MentorID=".$_SESSION["StudentID"].") AND Archived=0 ORDER BY Surname";
//		echo $sql;
		$recSt=mysql_query($sql);
		while ($rowSt=mysql_fetch_assoc($recSt)) {
?>    
        <tr>
          <td width="170" valign="top"><strong><?php echo $rowSteps["InputFieldLabel"]; ?> for <?php echo $rowSt["FirstName"]; ?> <?php echo $rowSt["Surname"]; ?>:</strong></td>
          <td width="353" valign="top">
<?php
	ShowFields($rowSt["CCMStudentID"], $MilestoneNum, $rowSteps);
?>
          </td>
        </tr>
<?php
		}
?>        
        <tr>
          <td colspan="2" valign="top"><hr /></td>
        </tr>
<?php
	} else {
?>    
        <tr>
          <td width="170" valign="top"><strong><?php echo $rowSteps["InputFieldLabel"]; ?>:</strong></td>
          <td width="353" valign="top">
<?php
	ShowFields(0, $MilestoneNum, $rowSteps);
?>
          </td>
        </tr>
        <tr>
          <td colspan="2" valign="top"><hr /></td>
        </tr>
<?php
	}
}
?>
        <tr>
          <td colspan="2" align="center"><input type="submit" name="submit" id="submit" value="Submit" /></td>
        </tr>
      </table>
    </form>
    <p>&nbsp;</p>
  </div>
<?php include("inc_footer.php"); ?>
</div>
</body>
</html>