HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/www/archive/demo/directory.php
<?php
session_start();

include("_functions.php");
echo dbconnect();

$rowjava = TRUE;
$page_title = "Employee Directory";
if (isset($_GET["tab"])) { $page_title .= " - ".ucfirst($_GET["tab"]); }
if (isset($_GET["e"])) { $page_title .= " - Search Results"; }

$lnav_mods = get_layout(DEF_LAYOUT,1);
$rnav_mods = get_layout(DEF_LAYOUT,3);

	//$e = str_replace("*","%",$_POST["e"]);
	if (isset($_GET["tab"])) {
		if ($_GET["tab"] == "all") {
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 ORDER BY lname ASC, fname ASC";
		} else {
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND lname LIKE '".$_GET["tab"]."%' ORDER BY lname ASC, fname ASC";	
		}
	} else if ((isset($e)) && (strpos($e,"*") > 0)) {
		if (strpos($e," ") > 0) {
			$name = explode(" ",$e);
			$name[0] = str_replace("*","%",$name[0]);
			$name[1] = str_replace("*","%",$name[1]);
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '".$name[1]."' AND fname LIKE '".$name[0]."') ORDER BY lname ASC, fname ASC";
		} else {
			$e = str_replace("*","%",$_POST["e"]);
			$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '".$e."' OR fname LIKE '".$e."') ORDER BY lname ASC, fname ASC";
		}				
	} else if ((isset($e)) && (strpos($e," ") > 0)) {
		$name = explode(" ",$e);
		$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '%".$name[1]."%' AND fname LIKE '%".$name[0]."%') ORDER BY lname ASC, fname ASC";
	} else if (isset($e)) {
		$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 AND (lname LIKE '%".$e."%' OR fname LIKE '%".$e."%') ORDER BY lname ASC, fname ASC";
	} else {
		$sql = "SELECT * FROM tbl_employees WHERE is_employee=1 AND acct_confirmed=1 AND dir_display=1 ORDER BY lname ASC, fname ASC";
	}	
	$result = mysql_query($sql);
	
	if ((mysql_num_rows($result) == 1) && (!isset($_GET["tab"]))) {
		$row = mysql_fetch_array($result);
		extract($row);
		header("Location: profile.php?u=".$username);
	}

include("_pagestart.php");
echo "<P><div class=\"headline\">".$page_title."</div>";
	echo "<center>\n";
	
	echo "<P><b>Jump to: &nbsp; </b>";
	for ($i="A"; $i <= "Z"; $i++) {
		if (strlen($i) == 1) echo "<a href=\"directory.php?tab=".$i."\">".$i."</a> | ";
	} echo "<a href=\"directory.php?tab=all\">All</a>";
	$self = str_replace("directory.php","directory_pf.php",self());
	echo "<P><a href=\"".$self."\" target=\"dirpf\">View a print-friendly version of this list</a> &nbsp; | &nbsp; <b>".mysql_num_rows($result)."</b> Entries Returned.\n";
	
	echo "<P><table border=0 cellspacing=1 cellpadding=5 width=95% bgcolor=\"#CCCCCC\">\n";
	echo "<tr class=\"header\"><td><b>Name</b></td>\n";
	echo "<td><b>Direct Dial #</b></td>\n";
	echo "<td><b>Remote Office #</b></td>\n";
	echo "<td><b>Remote Fax #</b></td>\n";
	echo "<td><b>Cell Phone</b></td>\n";
	echo "<td><b>Home Phone</b></td></tr>\n";

	if (mysql_num_rows($result) > 0) {
		for ($i=0; $i < mysql_num_rows($result); $i++) {
			$row = mysql_fetch_array($result);
			extract($row);
			$bg = ($i%2==0?"FFFFFF":"F0F0F0");
			//echo "<tr bgcolor=".($i%2==0?"FFFFFF":"F0F0F0")."><td><a href=\"/profile.php?u=".$username."\">".$lname.", ".$fname."</a></td>";
			echo "<tr onmouseover=\"setPointer(this,".($i).",'over','#".$bg."','#FEF3A9','#D5EFFF');\" onmouseout=\"setPointer(this,".($i).",'out','#".$bg."','#FEF3A9','#D5EFFF');\" onmousedown=\"setPointer(this,".($i).",'click','#".$bg."','#FEF3A9','#D5EFFF');\">\n";
			echo "<td bgcolor=\"#".$bg."\"><a href=\"/profile.php?u=".$username."\">".$lname.", ".$fname."</a></td>";
			echo "<td bgcolor=\"#".$bg."\">".($ph_direct!="0"?$ph_direct:"&nbsp;")."</td>";
			echo "<td bgcolor=\"#".$bg."\">".($ph_remote_office!="0"?$ph_remote_office:"&nbsp;")."</td>";
			echo "<td bgcolor=\"#".$bg."\">".($ph_remote_fax!="0"?$ph_remote_fax:"&nbsp;")."</td>";
			echo "<td bgcolor=\"#".$bg."\">".($ph_cell!="0"?$ph_cell:"&nbsp;")."</td>";
			echo "<td bgcolor=\"#".$bg."\">".($ph_home!="0"?$ph_home:"&nbsp;")."</td></tr>";
		}
	} else {
		echo "<tr bgcolor=FFFFFF><td align=\"center\" colspan=6>".error("No entires matched your search. Please try again.")."<P><u>Hint</u>: Try using an asterisk (*) to broaden your search.<br><br></td></tr>\n";
	}
	echo "</table><br><br>\n";
	
	
include("_pageend.php");
?>