HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/www/archive/demo/visitors.php
<?php
session_start();

include("_functions.php");
dbconnect();


$page_title = "My Visitors";
$GLOBALS["ext_page"] = $page_title;  // SET FAUX PAGE NAME
$_GET["p"] = 16;					 // SET FAUX PARENT ID

$lnav_mods = get_layout($_GET["p"],1);
$rnav_mods = get_layout($_GET["p"],3);

// SET BREADCRUMB
$GLOBALS[breadcrumb] = "<a href=\"/content.php?p=1\">Intranet Home</a> > <a href=\"/content.php?p=10\">My Intranet</a> > My Visitors";

if (isset($_POST["submit"])) {
	$vhr = $_POST["vhr"];
	if (substr($_POST["vhr"],0,1) == "0") $vhr = (int)substr($_POST["vhr"],1,1);
	else $vhr = (int)$vhr;	
	if (($_POST["vam"] == "pm") && ($vhr < 12)) $vhr += 12;
	if (($_POST["vam"] == "am") && ($vhr == 12)) $vhr = 0;
	if ($vhr < 10) $vhr = "0".$vhr;
	
	$vis_eta = date_tstounix($_POST["vyear"].$_POST["vmon"].$_POST["vday"].$vhr.$_POST["vmin"]."00");
	if ($_POST["edit"]==1) quickUPDATE("UPDATE tbl_visitors SET vis_name='".$_POST["vis_name"]."', vis_party=".$_POST["vis_party"].", vis_company='".$_POST["vis_company"]."', vis_visiting='".$_POST["vis_visiting"]."',vis_eta='".$vis_eta."',vis_notes='".$_POST["vis_notes"]."' WHERE vis_id=".$_POST["vis_id"]);
	else quickUPDATE("INSERT INTO tbl_visitors (vis_name,vis_party,vis_company,vis_visiting,vis_eta,username,vis_notes) VALUES ('".$_POST["vis_name"]."',".$_POST["vis_party"].",'".$_POST["vis_company"]."','".$_POST["vis_visiting"]."','".$vis_eta."','".$_POST["username"]."','".$_POST["vis_notes"]."')");
}

if (isset($_GET["del"])) quickUPDATE("UPDATE tbl_visitors SET vis_active=0 WHERE vis_id=".$_GET["del"]);

include("_pagestart.php");

	echo "<P><div class=\"headline\">".$page_title."</div>\n";
	
	$edit = FALSE;
	if (isset($_GET["edit"])) $edit = TRUE;
	if ($edit) {
		$sql = "SELECT * FROM tbl_visitors WHERE vis_id=".$_GET["edit"];
		$res = mysql_query($sql);
		$v = mysql_fetch_array($res);
		$v[vis_eta] = date_unixtots($v[vis_eta]);
	}
	
	$empsql = "SELECT username, fname, lname FROM tbl_employees WHERE is_employee=1 ORDER BY lname ASC";
	$empresult = mysql_query($empsql);
	
	echo "<div class=\"pagebody\">\n";
	echo "<P><b>Registration for your guests visiting the ".CMP_NAME_INF." offices can be completed by using this form.</b><P>Employees are responsible for registering, editing, and submitting the pertinent information. The security desk will verify the guest(s), assign a visitor badge, and direct them to the 4th floor for employee contact and escort.\n";
	echo "<br><br><div id=\"heading\" style=\"width:480px\">Register a new visitor:</div>\n";
	echo "<div id=\"box\" style=\"width:480px\">\n";
	echo "<form action=\"visitors.php\" method=\"post\">\n";
	echo "<input type=\"hidden\" name=\"username\" value=\"".$_SESSION["auth_user"]."\">\n";
	echo "<input type=\"hidden\" name=\"edit\" value=\"".($edit?1:0)."\">\n";
	if ($edit) echo "<input type=\"hidden\" name=\"vis_id\" value=\"".$v["vis_id"]."\">\n";
	echo "<br><center><table border=0 cellspacing=0 cellpadding=5>\n";
	echo "<tr><td>Guest's Name:</td><td><input type=\"text\" name=\"vis_name\" style=\"width:250px\"".($edit?" value=\"".$v["vis_name"]."\"":"")."></td></tr>\n";
	echo "<tr><td colspan=2># Additional Guests in Party: <input type=\"text\" name=\"vis_party\" style=\"width:30px\"".($edit?" value=\"".$v["vis_party"]."\"":" value=\"0\"")."></td></tr>\n";
	echo "<tr><td>Company:</td><td><input type=\"text\" name=\"vis_company\" style=\"width:250px\"".($edit?" value=\"".$v["vis_company"]."\"":"")."></td></tr>\n";
	echo "<tr><td>Is Visiting:</td><td>";
		echo "<SELECT name=\"vis_visiting\">\n";
		echo "<option value=\"".$_SESSION["auth_user"]."\">-- Please Select ---</option>\n";
		for ($j=0; $j < mysql_num_rows($empresult); $j++) {
			$user = mysql_fetch_array($empresult);
			echo "<option value=\"".$user["username"]."\"".($edit?($user["username"]==$v["vis_visiting"]?" SELECTED":""):($user["username"]==$_SESSION["auth_user"]?" SELECTED":"")).">".$user[lname].", ".$user[fname]."</option>\n";
		}
		echo "</SELECT>\n";
	echo "</td></tr>\n";
	
	echo "<tr><td colspan=2>&nbsp;</td></tr>\n";
	echo "<tr><td>Visit Date:</td><td>";
		$month = array("","January","February","March","April","May","June","July","August","September","October","November","December");
		echo "<SELECT name=\"vmon\">\n";
		echo "<option></option>\n";
		for ($i=1; $i <= 12; $i++) {
			$val = ($i<10?"0".$i:$i);
			echo "<option value=\"".$val."\"".($edit?($val==substr($v["vis_eta"],4,2)?" SELECTED":""):($val==date("m")?" SELECTED":"")).">".$month[$i]."</option>\n";
		} echo "</select>\n";
		echo "<SELECT name=\"vday\">\n";
		echo "<option></option>\n";
		for ($j=1; $j <= 31; $j++) {
			$val = ($j<10?"0".$j:$j);
			echo "<option value=\"".$val."\"".($edit?($val==substr($v["vis_eta"],6,2)?" SELECTED":""):($val==date("d")?" SELECTED":"")).">".$val."</option>\n";
		} echo "</select>,\n";
		echo "<SELECT name=\"vyear\">\n";
		echo "<option></option>\n";
		for ($k=date("Y"); $k <= (date("Y")+1); $k++) echo "<option value=\"".$k."\"".($edit?($k==substr($v["vis_eta"],0,4)?" SELECTED":""):($k==date("Y")?" SELECTED":"")).">".$k."</option>\n";
		echo "</select>\n";
	echo "</td></tr>\n";
	echo "<tr><td>Arrival Time:</td><td>";
		if (!$edit) {
			if (date("i") >= 45) $hrup = TRUE;
			else $hrup = FALSE;
		} else $hrup = FALSE;
		echo "<SELECT name=\"vhr\">\n";
		echo "<option></option>\n";
		for ($i=1; $i <= 12; $i++) {
			$val = ($i<10?"0".$i:$i);
			$tmp = (int)substr($v["vis_eta"],8,2);
			if ($tmp > 12) $tmp -= 12;
			$tmp = ($tmp<10?"0".$tmp:$tmp);
			if ($tmp == "00") $tmp = "12";
			echo "<option value=\"".$val."\"".($edit?($val==$tmp?" SELECTED":""):(($hrup?($i-1):$i)==date("g")?" SELECTED":"")).">".$i."</option>\n";
		}
		echo "</select>:";
		echo "<SELECT name=\"vmin\">\n";
		echo "<option></option>\n";
		for ($j=0; $j < 60; $j+=15) {
			$val = ($j<10?"0".$j:$j);
			$tmp = ($j==0?60:$j);
			echo "<option value=\"".$val."\"".($edit?($val==substr($v["vis_eta"],10,2)?" SELECTED":""):($tmp>date("i")&&($tmp-15)<date("i")?" SELECTED":"")).">".$val."</option>\n";
		} echo "</select>\n";
		echo "<SELECT name=\"vam\">\n";
		echo "<option value=\"am\"".($edit?((int)(substr($v["vis_eta"],8,2)<12)?" SELECTED":""):(date("A")=="AM"?" SELECTED":"")).">AM</option>\n";
		echo "<option value=\"pm\"".($edit?((int)(substr($v["vis_eta"],8,2)>=12)?" SELECTED":""):(date("A")=="PM"?" SELECTED":"")).">PM</option>\n";
		echo "</select>\n";
	echo "</td></tr>\n";
	echo "<tr><td valign=\"top\">Comments:</td><td><textarea name=\"vis_notes\" style=\"width:250px;height:50px;\" maxlength=255>".($edit?$v["vis_notes"]:"")."</textarea></td></tr>\n";
	echo "<tr><td>Registered By:</td><td><input type=\"text\" name=\"vis_employee_dummy\" style=\"width:250px\" value=\"".get_user($_SESSION["auth_user"],"fullname")." (x".get_user($_SESSION["auth_user"],"ext").")\" DISABLED></td></tr>\n";
	echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" class=\"btn\" value=\" ".($edit?"Update Visitor":"Submit Visitor")." \" name=\"submit\"></td></tr>\n";
	echo "</table></center>\n";
	echo "</form>\n";
	echo "</div>\n";

	echo "<br><br><div id=\"heading\">Visitors whom you have registered:</div>\n";	
	echo "<div id=\"box\">\n";
	
	$sql = "SELECT * FROM tbl_visitors WHERE username='".$_SESSION["auth_user"]."' AND vis_active=1 AND (vis_in=0 OR vis_out=0) ORDER BY vis_eta ASC";
	$res = mysql_query($sql);	
	if (mysql_num_rows($res) > 0) {
		echo "<table border=0 cellspacing=1 cellpadding=5 bgcolor=\"#999999\">\n";
		echo "<tr class=\"header\"><td>&nbsp;</td><td>Visitor's Name</td><td>Company</td><td align=\"center\">Add'l Guests</td><td>Visiting</td><td>Expected Arrival</td><td align=\"center\">Check-In</td><td align=\"center\">Check-Out</td><td align=\"center\">Actions</td></tr>\n";
		for ($i=0; $i < mysql_num_rows($res); $i++) {
			$r = mysql_fetch_array($res);
			echo "<tr".($i%2==0?" bgcolor=\"#FFFFFF\"":"").">";
			echo "<td><b>".($i+1)."</b></td>\n";
			echo "<td>".$r["vis_name"]."</td>\n";
			echo "<td>".$r["vis_company"]."</td>\n";
			echo "<td align=\"center\">".$r["vis_party"]."</td>\n";
			echo "<td>".get_user($r["vis_visiting"],"fullname")."</td>\n";
			echo "<td>".date("F j, Y h:i a",$r["vis_eta"])."</td>\n";
			echo "<td align=\"center\">".($r["vis_in"]==0?"No":"Yes")."</td>\n";
			echo "<td align=\"center\">".($r["vis_out"]==0?"No":"Yes")."</td>\n";
			echo "<td align=\"center\"><a href=\"visitors.php?edit=".$r["vis_id"]."\">Edit</a> | <a href=\"visitors.php?del=".$r["vis_id"]."\">Delete</a></td>\n";
			echo "</tr>\n";
			echo "<tr".($i%2==0?" bgcolor=\"#FFFFFF\"":"")."><td>&nbsp;</td><td colspan=8><b>Comments:</b> ".$r["vis_notes"]."</td></tr>\n";
		}
		echo "</table>\n";
	} else echo "<b>** You currently do not have any registered visitors.</b>\n";	
	
	echo "</div>\n";
	echo "</div>\n";
	
	echo "<br><br><div class=\"pagefoot\" style=\"border-width:1px 0px 0px 0px;\"><div style=\"float:right\">Last Updated: ".date("F j, Y")."</div></div>\n";

get_layout($_GET["p"],2);

include("_pageend.php");
?>