HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/public_html/archive/demo/directory_pf.php
<?php
session_start();

include("_functions.php");
echo dbconnect();

echo "<html><head><title>Print Friendly Directory</title></head>\n";
echo "<body style=\"font-size:10px;font-family:Verdana;\">\n";

	//$e = str_replace("*","%",$_POST["e"]);
	if (isset($_GET["tab"])) {
		if ($_GET["tab"] == "all") {
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 ORDER BY lname ASC, fname ASC";
		} else {
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND lname LIKE '".$_GET["tab"]."%' ORDER BY lname ASC, fname ASC";	
		}
	} else if ((isset($e)) && (strpos($e,"*") > 0)) {
		if (strpos($e," ") > 0) {
			$name = explode(" ",$e);
			$name[0] = str_replace("*","%",$name[0]);
			$name[1] = str_replace("*","%",$name[1]);
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '".$name[1]."' AND fname LIKE '".$name[0]."') ORDER BY lname ASC, fname ASC";
		} else {
			$e = str_replace("*","%",$_POST["e"]);
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '".$e."' OR fname LIKE '".$e."') ORDER BY lname ASC, fname ASC";
		}				
	} else if ((isset($e)) && (strpos($e," ") > 0)) {
		$name = explode(" ",$e);
		$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '%".$name[1]."%' AND fname LIKE '%".$name[0]."%') ORDER BY lname ASC, fname ASC";
	} else if (isset($e)) {
		$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '%".$e."%' OR fname LIKE '%".$e."%') ORDER BY lname ASC, fname ASC";
	} else {
		$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 ORDER BY lname ASC, fname ASC";
	}	
	$result = mysql_query($sql);
	
	if ((mysql_num_rows($result) == 1) && (!isset($_GET["tab"]))) {
		$row = mysql_fetch_array($result);
		extract($row);
		header("Location: profile.php?u=".$username);
	}

	echo "<table border=0 cellspacing=0 cellpadding=5 width=100%>\n";
	echo "<tr><td style=\"font-size:28px;font-family:Arial Black;\" align=\"center\" valign=\"middle\">".COMPANY_NAME." : Corporate Directory</td>\n";
	echo "</tr></table>\n";
	
	echo "<P><table border=0 cellspacing=0 cellpadding=0 width=100% style=\"font-size:10px;font-family:Verdana;\">\n";
	echo "<tr bgcolor=#CCCCCC><td><div style=\"margin:4px 0px 4px 0px;\"><b>Name</b></div></td>\n";
	echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Direct Dial #</b></div></td>\n";
	echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Remote Office #</b></div></td>\n";
	echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Remote Fax #</b></div></td>\n";
	echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Cell Phone</b></div></td>\n";
	echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Home Phone</b></div></td></tr>\n";
	echo "<tr><td height=1 colspan=6><img src=\"/gui/black.gif\" width=100% height=1></td></tr>\n";
	echo "<tr><td height=3 colspan=6><img src=\"/gui/clear.gif\" width=100% height=3></td></tr>\n";
	
	if (mysql_num_rows($result) > 0) {
		for ($i=0; $i < mysql_num_rows($result); $i++) {
			$row = mysql_fetch_array($result);
			extract($row);
			if (($lname == "") || ($fname == "")) $comma = "";
			else $comma = ", ";
			echo "<tr><td>".$lname.$comma.$fname."</td>";
			echo "<td>".($ph_direct!="0"?$ph_direct:"&nbsp;")."</td>";
			echo "<td>".($ph_remote_office!="0"?$ph_remote_office:"&nbsp;")."</td>";
			echo "<td>".($ph_remote_fax!="0"?$ph_remote_fax:"&nbsp;")."</td>";
			echo "<td>".($ph_cell!="0"?$ph_cell:"&nbsp;")."</td>";
			echo "<td>".($ph_home!="0"?$ph_home:"&nbsp;")."</td></tr>";
			echo "<tr><td height=3 colspan=6><img src=\"/gui/clear.gif\" width=100% height=4></td></tr>\n";
			echo "<tr><td height=1 colspan=6><img src=\"/gui/black.gif\" width=100% height=1></td></tr>\n";
			echo "<tr><td height=3 colspan=6><img src=\"/gui/clear.gif\" width=100% height=4></td></tr>\n";
			if (($i > 10) && ($i % 35 == 0)) {
				echo "<tr bgcolor=#CCCCCC><td><div style=\"margin:4px 0px 4px 0px;\"><b>Name</b></div></td>\n";
				echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Direct Dial #</b></div></td>\n";
				echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Remote Office #</b></div></td>\n";
				echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Remote Fax #</b></div></td>\n";
				echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Cell Phone</b></div></td>\n";
				echo "<td><div style=\"margin:4px 0px 4px 0px;\"><b>Home Phone</b></div></td></tr>\n";
				echo "<tr><td height=1 colspan=6><img src=\"/gui/black.gif\" width=100% height=1></td></tr>\n";
				echo "<tr><td height=3 colspan=6><img src=\"/gui/clear.gif\" width=100% height=3></td></tr>\n";
			}
		}
	} else {
		echo "<tr bgcolor=FFFFFF><td align=\"center\" colspan=6>".error("No entires matched your search. Please try again.")."<P><u>Hint</u>: Try using an asterisk (*) to broaden your search.<br><br></td></tr>\n";
	}
	echo "</table>\n";
	
echo "</body></html>\n";
?>