Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
_notes	[ DIR ]	drwxr-sr-x	2022-12-20 11:09
_vti_cnf	[ DIR ]	drwxr-sr-x	2022-12-20 11:09
certificate	[ DIR ]	drwxr-sr-x	2023-03-22 11:22
includes	[ DIR ]	drwxr-sr-x	2026-08-24 10:12
mail_interface	[ DIR ]	drwxr-sr-x	2025-06-14 09:47
security	[ DIR ]	drwxr-sr-x	2023-09-17 08:02
temp	[ DIR ]	drwxr-sr-x	2026-04-18 22:25
templates	[ DIR ]	drwxr-sr-x	2026-05-25 12:12
tests	[ DIR ]	drwxr-sr-x	2025-07-07 15:54
CaptchaSecurityImages.php	2.26 KB	-rw-r--r--	2022-12-20 11:09
Inc_calendarnew.php	8.59 KB	-rw-r--r--	2017-11-20 10:34
accredcourses.php	7.04 KB	-rw-r--r--	2023-08-22 10:55
adecquestionnaire.php	26.54 KB	-rw-r--r--	2025-08-01 10:38
advisory.php	7.21 KB	-rw-r--r--	2022-12-20 11:09
advisory_full.php	1.31 KB	-rw-r--r--	2022-12-20 11:09
annualdeclaration.php	15.28 KB	-rw-r--r--	2026-01-22 10:25
awardsentry.php	14.55 KB	-rw-r--r--	2025-08-01 10:38
awardsentry.php.bak	11.22 KB	-rw-r--r--	2016-04-13 12:45
bookdetail.php	954 B	-rw-r--r--	2022-12-20 11:09
books.php	4.4 KB	-rw-r--r--	2023-05-16 13:08
branchdocuments.php	1.14 KB	-rw-r--r--	2022-12-20 11:09
branches.php	2.82 KB	-rw-r--r--	2025-08-06 12:54
calendarpdf.php	1.75 KB	-rw-r--r--	2025-08-26 16:52
cceregister.php	55.59 KB	-rw-r--r--	2026-08-14 12:05
ccmregister.php	71.57 KB	-rw-r--r--	2022-12-20 11:09
class.phpmailer.php	44.39 KB	-rw-r--r--	2022-12-20 11:09
class.smtp.php	32.74 KB	-rw-r--r--	2022-12-20 11:09
committeedocs.php	932 B	-rw-r--r--	2022-12-20 11:09
committees.php	2.69 KB	-rw-r--r--	2025-08-06 12:58
cpdapply.php	5.73 KB	-rw-r--r--	2022-12-20 11:09
cpdapplyform.php	34.06 KB	-rw-r--r--	2025-08-01 10:38
cpdproviderapply.php	42.09 KB	-rw-r--r--	2026-02-10 10:10
cpdproviderportal.php	79.47 KB	-rw-r--r--	2025-09-08 07:23
cpdspverify.php	4.27 KB	-rw-r--r--	2025-10-10 10:45
cpdtmverify.php	4.45 KB	-rw-r--r--	2023-06-19 13:44
declineeventreg.php	3.73 KB	-rw-r--r--	2022-12-20 11:09
directorybooking.php	7.39 KB	-rw-r--r--	2022-12-20 11:09
downloadPN.php	385 B	-rw-r--r--	2025-06-26 13:02
downloadfile.php	280 B	-rw-r--r--	2025-08-01 10:38
enews.php	1.33 KB	-rw-r--r--	2022-12-20 11:09
enewsarchive.php	1.09 KB	-rw-r--r--	2022-12-20 11:09
event.php	12.39 KB	-rw-r--r--	2026-08-19 12:22
event_allvenues.php	18.93 KB	-rw-r--r--	2026-08-09 11:44
eventdecline_awards.php	11.79 KB	-rw-r--r--	2022-12-20 11:09
eventregister.php	26.85 KB	-rw-r--r--	2026-02-10 07:56
eventregister_awards.php	19.4 KB	-rw-r--r--	2025-06-20 06:38
eventregister_golf.php	28.83 KB	-rw-r--r--	2025-08-19 08:12
eventtables.php	24.13 KB	-rw-r--r--	2023-06-01 09:51
eventtables.php.bak	3.49 KB	-rw-r--r--	2022-12-20 11:09
fidicgama2018.php	1012 B	-rw-r--r--	2022-12-20 11:09
forum.php	3.25 KB	-rw-r--r--	2022-12-20 11:09
getoffices.php	799 B	-rw-r--r--	2022-12-20 11:09
hrforumsubscribe.php	2.62 KB	-rw-r--r--	2022-12-20 11:09
hrforumunsubscribe.php	1.32 KB	-rw-r--r--	2022-12-20 11:09
inc_calendarnew.php	10.56 KB	-rw-r--r--	2025-08-21 10:11
inc_captcha.php	337 B	-rw-r--r--	2022-12-20 11:09
inc_db.php	12.33 KB	-rw-r--r--	2025-06-18 12:05
inc_php7.php	6 KB	-rw-r--r--	2025-07-07 12:51
inc_practicenoteslist.php	4.1 KB	-rw-r--r--	2024-07-03 13:52
inc_scecalendar.php	8.55 KB	-rw-r--r--	2025-06-13 08:57
inc_scecalendar_backup.php	6.66 KB	-rw-r--r--	2022-12-20 11:09
inc_scecalendarnew.php	7.84 KB	-rw-r--r--	2026-05-09 09:39
jobshadowschools.php	7.26 KB	-rw-r--r--	2025-06-20 06:38
logout.php	593 B	-rw-r--r--	2025-02-25 08:19
marketingevent.php	122.75 KB	-rw-r--r--	2026-08-03 13:40
marketingeventdecline.php	15.21 KB	-rw-r--r--	2022-12-20 11:09
marketingsurvey.php	5.95 KB	-rw-r--r--	2022-12-20 11:09
matrixtemplate.htm	2.13 KB	-rw-r--r--	2022-12-20 11:09
member_portal_becs.php	2.14 KB	-rw-r--r--	2025-09-12 07:50
member_portal_transformation.php	10.45 KB	-rw-r--r--	2026-05-20 10:07
member_portal_transformation_proxy.php	538 B	-rw-r--r--	2026-05-20 09:08
memberauth.php	991 B	-rw-r--r--	2025-02-25 08:19
memberportal.php	11.79 KB	-rw-r--r--	2026-05-20 09:54
membersearch.php	22.72 KB	-rw-r--r--	2025-02-27 08:02
membersearch_smme.php	6.2 KB	-rw-r--r--	2024-11-27 11:41
memberverify.php	5.25 KB	-rw-r--r--	2022-12-20 11:09
mentors.php	21.68 KB	-rw-r--r--	2025-06-20 06:38
migratenode.php	1.26 KB	-rw-r--r--	2022-12-20 11:09
monofont.ttf	40.07 KB	-rw-r--r--	2022-12-20 11:09
nlc.php	855 B	-rw-r--r--	2022-12-20 11:09
nlcreports.php	2.51 KB	-rw-r--r--	2022-12-20 11:09
php_errors.log	1.06 KB	-rw-r--r--	2026-08-20 23:37
practicenotes.php	4.63 KB	-rw-r--r--	2022-12-20 11:09
practicenotes_full.php	1.33 KB	-rw-r--r--	2022-12-20 11:09
practicenotes_help.php	2.17 KB	-rw-r--r--	2022-12-20 11:09
practicenotes_list.php	2.03 KB	-rw-r--r--	2024-07-03 13:52
practicenotes_search.php	9.43 KB	-rw-r--r--	2022-12-20 11:09
querynlcmatrix.php	15 KB	-rw-r--r--	2022-12-20 11:09
querynlcmatrix.php4	15.38 KB	-rw-r--r--	2012-03-05 08:01
register.php	58.18 KB	-rw-r--r--	2026-05-26 14:55
relay.php	20.33 KB	-rw-r--r--	2025-06-20 06:38
relayteams.php	12.53 KB	-rw-r--r--	2022-12-20 11:09
resendcpdform.php	7.28 KB	-rw-r--r--	2025-08-01 10:38
retiredeng.php	13.45 KB	-rw-r--r--	2025-06-20 06:38
retiredeng_members.php	1.81 KB	-rw-r--r--	2022-12-20 11:09
sanitize.php	10 B	-rw-r--r--	2022-12-20 11:09
sce_survey2015.php	25.85 KB	-rw-r--r--	2022-12-20 11:09
sceallevents.php	8.13 KB	-rw-r--r--	2026-01-20 08:45
scecalendar.php	4.86 KB	-rw-r--r--	2025-06-18 11:18
scecalendar_backup.php	3.17 KB	-rw-r--r--	2025-06-18 11:18
scecalendarnew.php	5.98 KB	-rw-r--r--	2025-08-28 11:14
scecalendarnewtest.php	5.7 KB	-rw-r--r--	2022-03-04 12:37
scecalendartest.php	3.57 KB	-rw-r--r--	2022-03-04 12:38
scecategories.php	914 B	-rw-r--r--	2022-12-20 11:09
scecourses.php	7.18 KB	-rw-r--r--	2026-08-19 12:15
scelist.php	7.72 KB	-rw-r--r--	2025-08-29 07:18
scesubscribe.php	2.06 KB	-rw-r--r--	2022-12-20 11:09
sceupdate.php	1.67 KB	-rw-r--r--	2025-06-18 11:18
scevenuehire.php	6.15 KB	-rw-r--r--	2026-01-23 13:12
sendeventreg.php	19.5 KB	-rw-r--r--	2026-08-14 12:05
sendeventreg2.php	2.83 KB	-rw-r--r--	2026-07-17 14:57
sendeventreg_golf.php	20.23 KB	-rw-r--r--	2026-08-14 12:05
sendeventreg_golf.php.bak	11.69 KB	-rw-r--r--	2016-09-07 09:48
sendreg.php	35.15 KB	-rw-r--r--	2026-08-14 12:05
smsunsub.php	1.89 KB	-rw-r--r--	2025-06-18 11:18
template.php	54.36 KB	-rw-r--r--	2022-12-20 11:09
tenders.php	1.34 KB	-rw-r--r--	2022-12-20 11:09
trainerportal.php	50.27 KB	-rw-r--r--	2025-08-01 11:06
trainerportal.php.bak	2.57 KB	-rw-r--r--	2022-12-20 11:09
unempgrad_members.php	2.38 KB	-rw-r--r--	2025-06-18 11:18
unemployed.php	14.13 KB	-rw-r--r--	2025-06-20 06:38
unemployedreg.php	23.38 KB	-rw-r--r--	2025-06-20 06:38
unempreg_members.php	2.36 KB	-rw-r--r--	2025-06-18 11:18
ypfbranchcommittee.php	1.63 KB	-rw-r--r--	2022-12-20 11:09
ypfcommittees.php	1.57 KB	-rw-r--r--	2022-12-20 11:09
ypfjoin.php	30.29 KB	-rw-r--r--	2025-07-07 15:53
ypfjoin2.php	28.13 KB	-rw-r--r--	2025-06-18 11:18
ypfjoinmatches.php	9.46 KB	-rw-r--r--	2025-06-18 11:18
ypfmentees.php	20.81 KB	-rw-r--r--	2026-08-24 11:52
ypfmentees_members.php	2.42 KB	-rw-r--r--	2025-06-18 11:18

Rename

<?php
include("inc_db.php");
$EventID = 347;

$sql = "SELECT MarketingEvents.EventName, MarketingEvents.Level, MarketingEvents.City, MarketingEvents.Venue,
	MarketingEvents.AvailableSpaces, MarketingEvents.CostPerPerson, MarketingEvents.EventDescription, MarketingEvents.Hours,
	MarketingEvents.CPD, MarketingEvents.CODE, MarketingEvents.AccredNum, MarketingEvents.Province, MarketingEvents.RegDeadline,
	MarketingEvents.MemberDiscount, MarketingEvents.EarlyBirdDiscount, MarketingEvents.Cancelled, MarketingEvents.BankAccName,
	MarketingEvents.StartDate, MarketingEvents.StartTime, CourseVenues.CourseVenueCity, CourseVenues.CourseVenueArea
	FROM MarketingEvents LEFT JOIN CourseVenues ON MarketingEvents.Venue = CourseVenues.CourseVenueName
	WHERE MarketingEvents.EventID=" . $EventID;

$queryresult = mysql_query($sql) or die(mysql_error());

if ($row = mysql_fetch_array($queryresult)) {
    // check the dates
    $StartDatePlusTime = date("Y-m-d", strtotime($row["StartDate"])) . " " . date("H:i", strtotime($row["StartTime"]));
    if (strtotime($StartDatePlusTime) < time())
        $bEventInPast = true;

// check that there are still available spaces
    $iNumBooked = 0;
    $sql2 = "SELECT count(*) AS NumBooked FROM MarketingAttendees WHERE Cancelled=0 AND EventID=" . $EventID;
    $queryresult2 = mysql_query($sql2);
    if ($row2 = mysql_fetch_array($queryresult2)) {
        $iNumBooked = $row2["NumBooked"];
    }

$bNoSpace = (($row["AvailableSpaces"] > 0) && ($iNumBooked >= $row["AvailableSpaces"]));

if (($bEventInPast || $bNoSpace || ($row["Cancelled"] == 1)) && !isset($_REQUEST["override"])) {
        // No space left
        echo "<b><center>Registrations have now closed for this event, please contact CESA (<a href='mailto:events@cesa.co.za'>events@cesa.co.za</a>) for more information.</center></b>";
    } else {

if (!isset($_REQUEST["action"])) {
            ?>
            <p>Please login with the email address you used and the password provided to you when you registered for the event:</p>
            <form method="post" action="/node/524">
                <input type="hidden" name="action" value="login">
            <?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
                <table border="0" cellpadding="2">
                    <tbody>
                        <tr>
                            <td>Email address:</td>
                            <td><input type="text" name="email" size="40"></td>
                        </tr>
                        <tr>
                            <td>Password:</td>
                            <td><input type="password" name="password" size="40"></td>
                        </tr>
                        <tr>
                            <td colspan="2" align="center"><input type="submit" value="Login"></td>
                        </tr>
                    </tbody>
                </table>
            </form>
            <?php
        } else {
            if (($_POST["action"] == "login") || ($_POST["action"] == "continue")) {
                if ($_POST["action"] == "login") {
                    $sql = "SELECT * FROM MarketingAttendees WHERE Password='" . $_POST["password"] . "'";
                } else {
                    $sql = "SELECT * FROM MarketingAttendees WHERE AttendeeID='" . $_POST["attendee"] . "'";
                }
                $rec = mysql_query($sql);
                if ($row = mysql_fetch_assoc($rec)) {
                    ?>
                    <p>Welcome, <?php echo $row["ContactFirstName"] . " " . $row["ContactLastName"] . " (" . $row["CompanyName"] . ")"; ?></p>
                    <?php
                    $sql = "SELECT DISTINCT MarketingTables.EventTableID, MarketingTables.TableNum, MarketingTables.TableName
	FROM MarketingAttendeeTables, MarketingTables WHERE MarketingAttendeeTables.EventTableID=MarketingTables.EventTableID
	AND MarketingAttendeeTables.BookedBy=" . $row["AttendeeID"] . " ORDER BY TableNum";
                    $recT = mysql_query($sql);
                    if (mysql_num_rows($recT) > 0) {
                        ?>
                        <p><b>You have registered attendees for the following tables:</b></p>
                        <p>
                            <?php
                            while ($rowT = mysql_fetch_assoc($recT)) {
                                echo $rowT["TableName"] . " - <a href='/node/524?action=edittable&attendee=" . $row["AttendeeID"] . "&event=" . $row["EventID"] . "&table=" . $rowT["EventTableID"] . "'>Click here to update attendees' details for this booking</a><br>";
                            }
                            ?>
                        </p>
                        <?php
                    }

$sql = "SELECT * FROM MarketingTables WHERE EventID=" . $EventID . " AND EventTableID NOT IN (SELECT DISTINCT EventTableID FROM MarketingAttendeeTables) ORDER BY TableName";
                    $recT = mysql_query($sql);
                    if (mysql_num_rows($recT) == 0) {
                        echo "<p>No more tables are available for booking, all tables have currently been allocated.</p>";
                    } else {
                        ?>
                        <p><b>A table layout is shown at the bottom of this page for your reference.</b></p>
                        <p><b><u>NB: If your company has been pre-allocated specific tables, please select one from those. Pre-allocated tables are labelled with the company name.</u></b></p>
                        <form method="post" action="/node/524">
                            <input type="hidden" name="action" value="choosetable">
                        <?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
                            <input type="hidden" name="AttendeeID" value="<?php echo $row["AttendeeID"]; ?>">
                            <input type="hidden" name="EventID" value="<?php echo $row["EventID"]; ?>">
                            <input type="hidden" name="AttendeeEmail" value="<?php echo $row["EmailAddress"]; ?>">
                            <input type="hidden" name="AttendeeName" value="<?php echo $row["ContactFirstName"] . " " . $row["ContactLastName"] . " (" . $row["CompanyName"] . ")"; ?>">
                            <table border="0" cellpadding="2">
                                <tr><td><b>Table:</b></td><td><select name="table">
                                            <?php
                                            while ($rowT = mysql_fetch_assoc($recT)) {
                                                ?><option value="<?php echo $rowT["EventTableID"]; ?>"><?php echo $rowT["TableName"]; ?></option>
                                                <?php
                                            }
                                            ?>
                                        </select></td></tr>
                                <tr><td valign="top" colspan="2">Attendees:</td></tr>
                                <tr><td colspan="2">
                                        <table style="width: 100%">
                                            <tr>
                                                <td>First&nbsp;Name</td>
                                                <td>Surname</td>
                                                <td>Company</td>
                                                <td>Dietary&nbsp;Requirements</td>
                                            </tr>
                                            <?php
                                            for ($i = 1; $i <= 10; $i++) {
                                                ?>
                                                <tr>
                                                    <td><input type="text" name="FirstName<?php echo $i; ?>"></td>
                                                    <td><input type="text" name="Surname<?php echo $i; ?>"></td>
                                                    <td><input type="text" name="Company<?php echo $i; ?>" value="<?php echo $row["CompanyName"]; ?>"></td>
                                                    <td><input type="text" name="Dietary<?php echo $i; ?>"></td>
                                                </tr>
                                                <?php
                                            }
                                            ?>
                                        </table>
                                    </td></tr>
                                <tr><td colspan="2" align="center"><input type="submit"></td></tr>
                            </table>
                        </form>
                        <img src="/awards/images/awardstables2019.jpg?y=2019">
                        <?php
                    }
                } else {
                    echo "<div style='border:5px solid red; padding:5px'><b>Password not recognised. <a href='/node/524'>Please login again.</a></b></div>";
                }
            }
            if ($_POST["action"] == "choosetable") {
                $sql = "SELECT TableNum, TableName FROM MarketingTables WHERE EventTableID=" . $_POST["table"];
                $recT = mysql_query($sql);
                $rowT = mysql_fetch_assoc($recT);
                mysql_query("UPDATE MarketingAttendees SET TableNumber=NULL WHERE TableNumber=" . $rowT["TableNum"] . " AND EventID=" . $_POST["EventID"]);

$sAttendees = "";
                for ($i = 1; $i <= 10; $i++) {
                    $sAttendees .= $_POST["FirstName" . $i] . " " . $_POST["Surname" . $i] . "\r\n";
                    if (!empty($_POST["FirstName" . $i])) {
                        $sql = "SELECT AttendeeID FROM MarketingAttendees WHERE ContactFirstName='" . addslashes($_POST["FirstName" . $i]) . "'
				AND ContactLastName='" . addslashes($_POST["Surname" . $i]) . "'
				AND EventID=" . $_POST["EventID"];
                        //  AND CompanyName='".addslashes($_POST["Company".$i])."'
                        $recExist = mysql_query($sql);
                        if ($rowExist = mysql_fetch_assoc($recExist)) {
                            $sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
					" . $rowExist["AttendeeID"] . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
                            mysql_query($sql);
                            $sql = "UPDATE MarketingAttendees SET TableNumber=" . $rowT["TableNum"] . " WHERE AttendeeID=" . $rowExist["AttendeeID"];
                            mysql_query($sql);
                        } else {
                            $sql = "INSERT INTO MarketingAttendees (ContactFirstName, ContactLastName, CompanyName, DietaryReq, EventID, TableNumber, DateBooked)
					VALUES ('" . addslashes($_POST["FirstName" . $i]) . "', '" . addslashes($_POST["Surname" . $i]) . "', '" . addslashes($_POST["Company" . $i]) . "',
					'" . addslashes($_POST["Dietary" . $i]) . "', " . $_POST["EventID"] . ", " . $rowT["TableNum"] . ", '" . date("Y-m-d H:i:s") . "')";
                            mysql_query($sql);
                            $iNewAttendeeID = mysql_insert_id();
                            $sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
					" . $iNewAttendeeID . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
                            mysql_query($sql);
                        }
                    }
                }
                $sql = "INSERT INTO MarketingTableBookings (AttendeeID, DateBooked, NamesBooked, EventTableID) VALUES (" . $_POST["AttendeeID"] . ", '" . date("Y-m-d H:i:s") . "', '" . addslashes(stripslashes($sAttendees)) . "', " . $_POST["table"] . ")";
                mysql_query($sql);

$sMsg = $_POST["AttendeeName"] . " has booked the following table: " . $rowT["TableName"] . "\r\n" . "\r\n" . "Attendees:" . "\r\n" . "\r\n" . $sAttendees;
                mail($_POST["AttendeeEmail"], "CESA Aon Awards Table Booking", $sMsg, "CC: bonolo@cesa.co.za" . "\r\n" . "CC: events@cesa.co.za" . "\r\n" . "BCC: julia@xe.co.za");
                ?>
                <p>Thank you, your table booking has been saved as follows:</p>
                <p><?php echo nl2br($sMsg); ?></p>
                <form method="post">
                    <input type="hidden" name="action" value="continue">
                <?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
                    <input type="hidden" name="attendee" value="<?php echo $_POST["AttendeeID"]; ?>">
                    <input type="submit" value="Return to Table Bookings">

</form>
                <?php
            }
            if ($_REQUEST["action"] == "edittable") {
                $sql = "SELECT TableNum, TableName FROM MarketingTables WHERE EventTableID=" . $_GET["table"];
                $recT = mysql_query($sql);
                $rowT = mysql_fetch_assoc($recT);
                ?>
                <form method="post" action="/node/524">
                    <input type="hidden" name="action" value="savechanges">
                <?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
                    <input type="hidden" name="AttendeeID" value="<?php echo $_GET["attendee"]; ?>">
                    <input type="hidden" name="EventID" value="<?php echo $_GET["event"]; ?>">
                    <input type="hidden" name="table" value="<?php echo $_GET["table"]; ?>">
                    <table border="0" cellpadding="2">
                        <tr><td><b>Table:</b></td><td><?php echo $rowT["TableName"]; ?></td></tr>
                        <tr><td valign="top" colspan="2">Attendees:</td></tr>
                        <tr><td valign="top" colspan="2">
                                <table style="width: 100%">
                                    <tr>
                                        <td>First&nbsp;Name</td>
                                        <td>Surname</td>
                                        <td>Company</td>
                                        <td>Dietary&nbsp;Requirements</td>
                                    </tr>
                                    <?php
                                    $sql = "SELECT CompanyName FROM MarketingAttendees WHERE AttendeeID=" . $_GET["attendee"];
                                    $recC = mysql_query($sql);
                                    $rowC = mysql_fetch_assoc($recC);

$sql = "SELECT DISTINCT MarketingAttendees.AttendeeID, MarketingAttendees.ContactFirstName, MarketingAttendees.ContactLastName,
MarketingAttendees.CompanyName, MarketingAttendees.DietaryReq FROM MarketingAttendees, MarketingAttendeeTables
WHERE MarketingAttendees.AttendeeID=MarketingAttendeeTables.AttendeeID AND MarketingAttendeeTables.EventTableID=" . $_GET["table"];
//echo $sql;
                                    $recA = mysql_query($sql);
//$sql2="SELECT NamesBooked FROM MarketingTableBookings WHERE EventTableID=".$_GET["table"];
//$recA2=mysql_query($sql2);
                                    for ($i = 1; $i <= 10; $i++) {
                                        $iAttendeeID = 0;
                                        $sFirstName = "";
                                        $sSurname = "";
                                        $sCompany = $rowC["CompanyName"];
                                        $sDietary = "";
                                        if ($rowA = mysql_fetch_assoc($recA)) {
                                            $iAttendeeID = $rowA["AttendeeID"];
                                            $sFirstName = $rowA["ContactFirstName"];
                                            $sSurname = $rowA["ContactLastName"];
                                            $sCompany = $rowA["CompanyName"];
                                            $sDietary = $rowA["DietaryReq"];
                                            /* 	} else {
                                              if ($rowA2=mysql_fetch_assoc($recA2)) {
                                              $arrAttendees=split("\r\n", $rowA2["NamesBooked"]);
                                              mysql_data_seek($recA2,0);
                                              if (isset($arrAttendees[$i-1])) {
                                              $sNames=$arrAttendees[$i-1];
                                              if (!empty($sNames)) {
                                              $arrNames=split(" ",$sNames);
                                              $sFirstName=$arrNames[0];
                                              $sSurname=trim(substr($sNames,strlen($sFirstName)));
                                              }
                                              }
                                              }
                                             */
                                        }
                                        ?>
                                        <tr>
                                            <td><input type="hidden" name="AttendeeID<?php echo $i; ?>" value="<?php echo $iAttendeeID; ?>">
                                                <input type="text" name="FirstName<?php echo $i; ?>" value="<?php echo $sFirstName; ?>"></td>
                                            <td><input type="text" name="Surname<?php echo $i; ?>" value="<?php echo $sSurname; ?>"></td>
                                            <td><input type="text" name="Company<?php echo $i; ?>" value="<?php echo $sCompany; ?>"></td>
                                            <td><input type="text" name="Dietary<?php echo $i; ?>" value="<?php echo $sDietary; ?>"></td>
                                        </tr>
                                        <?php
                                    }
                                    ?>
                                </table>
                            </td></tr>
                        <tr><td colspan="2" align="center"><input type="submit"></td></tr>
                    </table>
                </form>
                <?php
            }

if ($_POST["action"] == "savechanges") {
                $sql = "SELECT TableNum, TableName FROM MarketingTables WHERE EventTableID=" . $_POST["table"];
                $recT = mysql_query($sql);
                $rowT = mysql_fetch_assoc($recT);
                $iTableNum = $rowT["TableNum"];
                mysql_query("UPDATE MarketingAttendees SET TableNumber=NULL WHERE TableNumber=" . $iTableNum . " AND EventID=" . $_POST["EventID"]);
                $sAttendees = "";
                for ($i = 1; $i <= 10; $i++) {
                    $sAttendees .= $_POST["FirstName" . $i] . " " . $_POST["Surname" . $i] . "\r\n";
                    if (empty($_POST["FirstName" . $i])) {
                        if (!empty($_POST["AttendeeID" . $i])) {
                            mysql_query("DELETE FROM MarketingAttendeeTables WHERE EventTableID=" . $_POST["table"] . " AND AttendeeID=" . $_POST["AttendeeID" . $i]);
                            mysql_query($sql);
                            $sql = "UPDATE MarketingAttendees SET Cancelled=1 WHERE TableNumber IS NULL AND AttendeeID=" . $_POST["AttendeeID" . $i];
                            mysql_query($sql);
                        }
                    } else {
                        $sql = "SELECT AttendeeID FROM MarketingAttendees WHERE ContactFirstName='" . addslashes($_POST["FirstName" . $i]) . "'
				AND ContactLastName='" . addslashes($_POST["Surname" . $i]) . "'
				AND EventID=" . $_POST["EventID"];
                        //  AND CompanyName='".addslashes($_POST["Company".$i])."'
                        $recExist = mysql_query($sql);
                        if ($rowExist = mysql_fetch_assoc($recExist)) {
                            $iNewAttendeeID = $rowExist["AttendeeID"];
                            $sql = "UPDATE MarketingAttendees SET CompanyName='" . addslashes($_POST["Company" . $i]) . "',
						DietaryReq='" . addslashes($_POST["Dietary" . $i]) . "', Cancelled=0 WHERE AttendeeID=" . $iNewAttendeeID;
//					echo $sql;
                            mysql_query($sql);
                        } else {
                            $sql = "INSERT INTO MarketingAttendees (ContactFirstName, ContactLastName, CompanyName, DietaryReq, EventID, TableNumber, DateBooked)
					VALUES ('" . addslashes($_POST["FirstName" . $i]) . "', '" . addslashes($_POST["Surname" . $i]) . "', '" . addslashes($_POST["Company" . $i]) . "',
					'" . addslashes($_POST["Dietary" . $i]) . "', " . $_POST["EventID"] . ", " . $iTableNum . ", '" . date("Y-m-d H:i:s") . "')";
//					echo $sql;
                            mysql_query($sql);
                            $iNewAttendeeID = mysql_insert_id();
                        }
                        if ($_POST["AttendeeID" . $i] == 0) {
                            $sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
					" . $iNewAttendeeID . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
//					echo $sql;
                            mysql_query($sql);
                        } else {
                            if ($_POST["AttendeeID" . $i] != $iNewAttendeeID) {
                                $sql = "SELECT * FROM MarketingAttendeeTables WHERE EventTableID=" . $_POST["table"] . " AND AttendeeID=" . $_POST["AttendeeID" . $i];
                                $recExist = mysql_query($sql);
                                if ($rowExist = mysql_fetch_assoc($recExist)) {
                                    $sql = "UPDATE MarketingAttendeeTables SET AttendeeID=" . $iNewAttendeeID . " WHERE EventTableID=" . $_POST["table"] . " AND AttendeeID=" . $_POST["AttendeeID" . $i];
//							echo $sql;
                                    mysql_query($sql);
                                } else {
                                    $sql = "INSERT INTO MarketingAttendeeTables (EventTableID, AttendeeID, BookedBy, EventID) VALUES (" . $_POST["table"] . ",
							" . $iNewAttendeeID . ", " . $_POST["AttendeeID"] . ", " . $_POST["EventID"] . ")";
//							echo $sql;
                                    mysql_query($sql);
                                }
                                $sql = "UPDATE MarketingAttendees SET Cancelled=1 WHERE TableNumber IS NULL AND AttendeeID=" . $_POST["AttendeeID" . $i];
///						echo $sql;
                                mysql_query($sql);
                            }
                        }
                    }
                }
                $sql = "UPDATE MarketingTableBookings SET NamesBooked='" . addslashes(stripslashes($sAttendees)) . "' WHERE EventTableID=" . $_POST["table"] . ")";
                mysql_query($sql);

$sql = "update MarketingAttendees join MarketingAttendeeTables using (AttendeeID) join MarketingTables using (EventTableID) set MarketingAttendees.TableNumber=MarketingTables.`TableNum` where MarketingAttendeeTables.EventTableID=" . $_POST["table"] . " AND TableNumber is null";
                mysql_query($sql);

$sql = "SELECT ContactFirstName, ContactLastName, EmailAddress FROM MarketingAttendees WHERE AttendeeID=" . $_POST["AttendeeID"];
                $rec = mysql_query($sql);
                $row = mysql_fetch_assoc($rec);

$sMsg = $row["ContactFirstName"] . " " . $row["ContactLastName"] . " has updated the booking for the following table: " . $rowT["TableName"] . "\r\n" . "\r\n" . "Attendees:" . "\r\n" . "\r\n" . $sAttendees;
                mail($row["EmailAddress"], "CESA Aon Awards Table Booking", $sMsg, "CC: bonolo@cesa.co.za" . "\r\n" . "CC: events@cesa.co.za" . "\r\n" . "BCC: julia@xe.co.za");
                ?>
                <p>Thank you, your table booking has been saved as follows:</p>
                <p><?php echo nl2br($sMsg); ?></p>
                <form method="post">
                    <input type="hidden" name="action" value="continue">
                <?php if (isset($_REQUEST["override"])) echo '<input type="hidden" name="override" value="1">'; ?>
                    <input type="hidden" name="attendee" value="<?php echo $_POST["AttendeeID"]; ?>">
                    <input type="submit" value="Return to Table Bookings">
                </form>
                <?php
            }
        }
    }
}
?>