Gecko [ v3.cesa.co.za ]

Name	Size	Permission	Date
reporting	[ DIR ]	drwxr-sr-x	2020-01-14 08:25
2010_team.php	23.67 KB	-rw-r--r--	2017-07-03 10:50
approvals.php	3.7 KB	-rw-r--r--	2018-08-20 08:15
approvals_uni.php	3.51 KB	-rw-r--r--	2018-08-20 08:15
areas.php	8.49 KB	-rw-r--r--	2019-08-01 13:22
com_reg.php	6.77 KB	-rw-r--r--	2019-08-01 13:23
con_area.php	2.08 KB	-rw-r--r--	2017-08-02 09:09
con_man.php	8.61 KB	-rw-r--r--	2014-07-04 12:12
countrylist.php	11.91 KB	-rw-r--r--	2014-07-04 12:12
db.php	729 B	-rw-r--r--	2019-08-31 09:37
db.php.bak	323 B	-rw-r--r--	2014-07-04 12:12
entrants.php	2.22 KB	-rw-r--r--	2014-07-04 12:12
error_log	17.92 KB	-rw-r--r--	2014-07-04 12:12
footer.php	137 B	-rw-r--r--	2014-07-04 13:40
generateXML.php	649 B	-rw-r--r--	2014-07-04 12:12
index20130626.php	4.14 KB	-rw-r--r--	2014-07-04 12:12
login.php	1.4 KB	-rw-r--r--	2018-09-03 08:01
mailer.php	1.99 KB	-rw-r--r--	2017-07-03 10:50
menu.php	5.54 KB	-rw-r--r--	2019-06-12 10:15
payments.php	6.37 KB	-rw-r--r--	2018-08-20 08:15
phpinfo.php	24 B	-rw-r--r--	2014-07-04 12:12
reg.php	567 B	-rw-r--r--	2019-08-31 09:46
reports.php	1.81 KB	-rw-r--r--	2014-07-04 12:14
sec.php	650 B	-rw-r--r--	2014-07-04 12:14
social_app.php	4.48 KB	-rw-r--r--	2018-08-20 08:15
team.php	33.2 KB	-rw-r--r--	2019-08-01 13:25
team_mail.php	2.81 KB	-rw-r--r--	2017-07-03 10:50
timing_report.php	1.57 KB	-rw-r--r--	2014-07-04 12:14
timing_report_2012.php	10.96 KB	-rw-r--r--	2015-08-19 08:40
uni_reg.php	5.5 KB	-rw-r--r--	2019-08-01 13:26
uni_team.php	33.04 KB	-rw-r--r--	2019-08-01 13:23

Rename

<?php
  if (isset($_GET['act'])) {
    if ($_GET['act']=='res') {//suspend
	
	$areaquery="SELECT comp_id FROM saace_areas WHERE id='".$_POST['area']."'";
	$areares=mysql_query($areaquery);
	$arearow=mysql_fetch_assoc($areares);
	
	if($arearow['comp_id'] != '0'){
				
		//$zErrorMsg = "Sorry, but stand ".$_POST['area']." is already been reserved. Please choose another stand.";
		echo "<h1>Error</h1>Sorry, stand ".$_POST['area']." has already been reserved. Please <a href='".$pagename."?sec=area'>Go back to areas</a> and choose another stand.\n";
		
	} else {
		
      $uquery="SELECT comp_id FROM saace_user WHERE id='".$_POST['uid']."'";
          $ures=mysql_query($uquery);
          if ($ures) {
            $urow=mysql_fetch_assoc($ures);
			
            if ($_POST['braai']=='') {
              $resquery="UPDATE saace_areas SET reserved='1',comp_id='".$urow['comp_id']."',chairs='".$_POST['chairs']."',tent='".$_POST['tent']."',braai='0',tbles='".$_POST['table']."',rubbish='".$_POST['bin']."',bath='".$_POST['bath']."' WHERE id='".$_POST['area']."'";
            } else {
              $resquery="UPDATE saace_areas SET reserved='1',comp_id='".$urow['comp_id']."',chairs='".$_POST['chairs']."',tent='".$_POST['tent']."',braai='1',tbles='".$_POST['table']."',rubbish='".$_POST['bin']."',bath='".$_POST['bath']."' WHERE id='".$_POST['area']."'";
            }
            mysql_query($resquery);
          }
          $total=4000;
                   
          $costs="Stand ".$_POST['area']."<br/>";
          $selquery="SELECT * FROM saace_company WHERE id='".$urow['comp_id']."'";
          $selres=mysql_query($selquery);
          if ($selres) {
            $selrow=mysql_fetch_assoc($selres);
            $mstr="<html><body><p>".$selrow['contact']." from ".$selrow['name']." has reserved the following stand(s)in the social area for the CESA Relay race. <br/><br/>".$costs."Total cost : R ".$total.".00<br/><br/>Please login to <a href='http://www.cesa.co.za/relay'>http://www.cesa.co.za/relay</a> to approve the reservations.<br/><br/>CESA Relay Website</p></body></html>";
            $cmstr="<html><body><p>Dear ".$selrow['contact']."<br/><br/>Thank you for reserving an area, for the CESA Relay race.  <br/><br/>You will be issued with an invoice on which you will find the banking details.<br/><br/>
Hospitality Site Bookings: Please order marquees and furniture from the hospitality coordinator.<br>
Contact Person: Zandi<br>
Tel: 067 334 1198<br>
Email: <a href='mailto:info@trxn.co.za'>info@trxn.co.za</a><br><br>
Regards,<br>
CESA RELAY Admin. <br/><br/><a href='mailto:events@cesa.co.za'>events@cesa.co.za</a><br/><img src='http://www.cesa.co.za/relay/img/eMailLogo.gif' alt='Logo'></p></body></html>";
    //mail client
        $headers = "From: ".$admin_email."\r\n"."Reply-To: ".$admin_email."\r\nMIME-Version: 1.0\r\nContent-type: text/html; charset=iso-8859-1\r\nBcc: events@cesa.co.za\r\n";
        mail($admin_email."",'CESA Social Area reserved',$mstr,$headers);
        mail($selrow['email'],'CESA Social Area reserved',$cmstr,$headers);
          }
          echo "<h1>Area reserved</h1><a href='".$pagename."?sec=area'>Go to areas</a>\n";
    }
	}
  } else {//list
    ?>
<h1>Social Area Reservations now open.
</h1>
            <p>Please select your desired location from the map below.</p>
            <p><center><img border='0' src='img/relaylayout2019.jpg'/></center></p>
            <table cellspacing="0" cellpadding="0">
              <tr>
                <td><strong>Notes:</strong></td>
              </tr>
              <tr>
                <td><p><span id="Label1">A supplier has been appointed to supply all marquees, chairs etc. </span><span id="Label2">Supplier details are as follows:<br>
Please email: <a href="mailto:info@trxn.co.za">info@trxn.co.za</a><br />
Or call
Zandi on
067 334 1198<br></span>&nbsp;<span id="Label4">Please  select your site(s) and confirm  your booking by making your payment. You will be issued with an invoice on which you will find the banking details.</span></p></td>
              </tr>
              <tr>
                <td></td>
              </tr>
              <tr>
                <td></td>
              </tr>
            </table>
            <p>&nbsp;</p>
            
            
            <?php
              $query="SELECT * FROM saace_areas WHERE reserved='0' AND booked='0' ORDER BY id ASC";
              $result=mysql_query($query);
              if (mysql_num_rows($result)) {
               ?>
               <form method='POST' action='<?php echo $pagename; ?>?sec=area&act=res'>
               <input type="hidden" name="uid" value="<?php echo $_SESSION["uid"]; ?>">
                  <table width='100%' border='0' cellpadding='0' cellspacing='0'>
                 
                  <tr>
                    <td>Area (cost R4000)</td>
                    <td>
                      <select name='area'>
                        <?php
                          while ($row=mysql_fetch_assoc($result)) {
                            echo "<option value='".$row['id']."'>Stand ".$row['name']."</option>\n";
                          }
                        ?>
                      </select>                    </td>
                  </tr>
                  
                    <td colspan='2'><input type='checkbox' name='braai' value='1'/>Would you like to make use of the communal braai area?</td>
                  </tr>
                  <tr>
                    <td colspan='2' align='center'>
                      <input type='submit' name='boo_sub' value='Book'/>                   </td>
                  </tr>
                  </table>
                  </form>
                <?php
              }else{
            ?><table><tr><td><h2>All Social Areas have been booked / reserved</h2></td></tr></table><?php };?>
            
      <table width='100%' border='0' cellpadding='0' cellspacing='0'>
        <tr>
          <th align='left'>Area</th>
          <th align='left'>Company</th>
          <th align='left'>Status</th>
        </tr>
        <?php
             $query="SELECT * FROM saace_areas WHERE reserved='1' OR booked='1' ORDER BY id ASC";
          $result=mysql_query($query);
          if ($result) {
            $bgcnt=1;
            while ($row=mysql_fetch_assoc($result)) {
              echo "<tr";
              if ($bgcnt%2==0) {
                echo " class='odd'";
              } else {
                echo " class='even'";
              }
              echo ">\n";
                echo "<td>".$row['name']."</td>\n";
                $cquery="SELECT name FROM saace_company WHERE id='".$row['comp_id']."'";
                $cres=mysql_query($cquery);
                if ($cres) {
                  $crow=mysql_fetch_assoc($cres);
                  echo "<td>".$crow['name']."</td>\n";
                } else {
                  echo "<td></td>\n";
                }
                if ($row['booked']=='1') {
                  echo "<td>Booked</td>\n";
                } elseif ($row['reserved']=='1') {
                  echo "<td>Reserved</td>\n";
                }
                
              echo "</tr>\n";
              $bgcnt++;
            } //end while
          } else {
          }
        ?>
      </table>
      <br/><br/><br/><br/><br/><br/><br/><br/><br/><br/>
    <?php
  }
?>