File: /home/awaldron/www/archive/demo/quick_change.php
<?php
session_start();
?>
<html>
<head>
<title><-Vocollect Inc.-> User Quick Change</title>
</head>
<link rel="stylesheet" type="text/css" href="default.css">
<?php
include("_functions.php");
if (!isset($_POST["submit"])) {
echo "<body style=\"margin:15px;font-size:12px;\">\n";
if ($_GET["a"] == "weather") echo "<P><b style=\"color:#009900;\">Use this form to set your default zip code to display in the weather module.</b>\n";
if ($_GET["a"] == "k2w") {
dbconnect();
echo "<P><b style=\"color:#009900;\">Use this form to add your child to this activity.</b>\n";
$sql = "SELECT * FROM tbl_courses, tbl_course_sched WHERE tbl_course_sched.sched_id=".$_GET["sid"]." AND tbl_course_sched.course_id=tbl_courses.course_id";
$result = mysql_query($sql);
extract(mysql_fetch_array($result));
echo "<P><span class=\"subhead\">".$course_name."</span>\n";
echo "<br><b>".date("h:i a",$start)." - ".date("h:i a",$end)."</b>\n";
}
if ($_GET["a"] == "coursereg") {
dbconnect();
echo "<P><b style=\"color:#009900;\">Please click the 'Register' button to confirm your registration.</b>\n";
$sql = "SELECT * FROM tbl_courses, tbl_course_sched WHERE tbl_course_sched.sched_id=".$_GET["sid"]." AND tbl_course_sched.course_id=tbl_courses.course_id";
$result = mysql_query($sql);
extract(mysql_fetch_array($result));
echo "<P><span class=\"subhead\">".$course_name."</span>\n";
echo "<br><b>".date("h:i a",$start)." - ".date("h:i a",$end)."</b>\n";
}
echo "<form action=\"quick_change.php?a=".$_GET["a"]."\" method=\"post\">\n";
echo "<input type=\"hidden\" name=\"username\" value=\"".$_SESSION["auth_user"]."\">\n";
echo "<P><center><table border=0 cellspacing=5 style=\"font-size:12px;\">\n";
echo "<tr><td>Username:</td><td><input type=\"text\" style=\"width:180;\" name=\"dummy_username\" value=\"".$_SESSION["auth_user"]."\" DISABLED></td></tr>\n";
if ($_GET["a"] == "weather") {
echo "<tr><td>New Weather Zip Code:</td><td><input type=\"text\" style=\"width:100;\" name=\"weather\"></td></tr>\n";
echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
}
if ($_GET["a"] == "k2w") {
echo "<input type=\"hidden\" name=\"sid\" value=\"".$_GET["sid"]."\">\n";
echo "<tr><td>Child's Full Name:</td><td><input type=\"text\" style=\"width:150;\" name=\"attendee\"></td></tr>\n";
echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"Register\"></td></tr>\n";
}
if ($_GET["a"] == "coursereg") {
echo "<input type=\"hidden\" name=\"sid\" value=\"".$_GET["sid"]."\">\n";
echo "<input type=\"hidden\" name=\"attendee\" value=\"".get_user($_SESSION["auth_user"],"fullname2")."\">\n";
echo "<tr><td>Full Name:</td><td><input type=\"text\" style=\"width:150;\" name=\"dummy_attendee\" value=\"".get_user($_SESSION["auth_user"],"fullname2")."\" DISABLED></td></tr>\n";
echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"Register\"></td></tr>\n";
}
echo "</table>\n";
echo "</form>\n";
} else {
dbconnect();
if ($_GET["a"] == "weather") $sql = "UPDATE tbl_employees SET weather_zip=".$_POST["weather"]." WHERE username='".$_POST["username"]."'";
if ($_GET["a"] == "k2w") $sql = "INSERT INTO tbl_course_att (sched_id,attendee,username) VALUES (".$_POST["sid"].",'".$_POST["attendee"]."','".$_POST["username"]."')";
if ($_GET["a"] == "coursereg") $sql = "INSERT INTO tbl_course_att (sched_id,attendee,username) VALUES (".$_POST["sid"].",'".$_POST["attendee"]."','".$_POST["username"]."')";
if (quickUPDATE($sql) !== FALSE) {
echo "<body style=\"margin:15px;font-size:12px;\" onLoad=\"window.opener.location.reload();window.close();\">\n";
echo "<script>document.writeln(opener.location);</script>";
} else {
echo "<body style=\"margin:15px;font-size:12px;\">\n";
echo error("There was an error when attempting to make the change.");
}
}
?>
</body>
</html>