HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/www/archive/demo/staff.php
<?php
session_start();
function group_select2($gid=0,$parent=0,$base=0) {
	$defgrp = "";
	$sql = "SELECT * FROM tbl_groups WHERE group_parent=".$parent." ORDER BY group_name ASC";
	$res = mysql_query($sql);
		if (mysql_num_rows($res) > 0)  {
			for ($i=0; $i < mysql_num_rows($res); $i++) {
				$row = mysql_fetch_array($res);
				if ($row["group_id"] != DEF_GROUP) {
					if (isset($GLOBALS["delgrp"]) && ($GLOBALS["delgrp"]==$row["group_id"])) ;
					else {
						if ($base == 0) echo "<option value=".$defgrp."></option>\n";
						echo "<option value=\"".$row["group_id"]."\"".($gid==$row["group_id"]?" SELECTED":"").">";
							if ($base == 2) echo "+ ";
							else { for ($j=0; $j < $base; $j++) echo "-"; echo " "; }
						echo $row["group_name"];
						echo "</option>\n";
						if ($base == 0) echo "<option value=".$defgrp.">---------------------------</option>\n";
					}
				}
				group_select2($gid,$row["group_id"],($base+2));
			}
		}
}
function group_view($parent,$pass=1) {
	if (($parent == 0) || ($pass > 1)) $sql = "SELECT * FROM tbl_groups WHERE group_parent=".$parent." ORDER BY group_name ASC";
	else {
		$sql = "SELECT * FROM tbl_groups WHERE group_id=".$parent." ORDER BY group_name ASC";
	}
	$res = mysql_query($sql);
	if (mysql_num_rows($res) > 0) {
		for ($i=0; $i < mysql_num_rows($res); $i++) {
			$row = mysql_fetch_array($res);
			if ($row["group_id"] != 52) {
				echo "<table width=98%><tr><td>\n";
				if ($row["group_parent"] == 0) echo "<div id=\"staff1\">".title($row["group_id"])."</div>";
				else echo "<div id=\"staff2\">".title($row["group_id"])."</div>";
				
				$sql2 = "SELECT * FROM tbl_employees, tbl_group_user WHERE tbl_group_user.group_id=".$row["group_id"]." AND tbl_group_user.username=tbl_employees.username AND tbl_employees.is_employee=1 AND tbl_employees.emp_type_id<4 ORDER BY tbl_employees.lname ASC";
				$res2 = mysql_query($sql2);
				for ($j=0; $j < mysql_num_rows($res2); $j++) {
					$emp = mysql_fetch_array($res2);
					if (file_exists("gui/photos/".$emp["username"]."2.jpg")) $img = "<img src=\"/gui/photos/".$emp["username"]."2.jpg\" border=0>";
					else $img = "<img src=\"/image.php?u=".$emp["username"]."&s=2&w=1\" border=0>";
					echo "<div style=\"float:left;margin:2px;text-align:center;\"><a href=\"/profile.php?u=".$emp["username"]."\" class=\"small\">".$img."<br>".$emp["fname"]."<br>".$emp["lname"]."</a></div>\n";
				}
				echo "</td></tr></table>\n";
				group_view($row["group_id"],++$pass);
			}
		}
	}
}
function title($gid) {
	$title = "";
	do {
		$res = mysql_query("SELECT group_parent, group_name FROM tbl_groups WHERE group_id=".$gid);
		extract(mysql_fetch_array($res));
		$title = " : ".$group_name . $title;
		$gid = $group_parent;
	} while ($group_parent != 0);
	return substr($title,3);
}

function contractor_view() {
	echo "<div id=\"staff2\">Vocollect Contractors, Consultants & Temps</div>";
	$sql2 = "SELECT * FROM tbl_employees WHERE is_employee=1 AND emp_type_id > 3 AND emp_type_id < 7 ORDER BY lname ASC";
	$res2 = mysql_query($sql2);
	echo "<table width=98%><tr><td>\n";
	for ($j=0; $j < mysql_num_rows($res2); $j++) {
		$emp = mysql_fetch_array($res2);
		echo "<div style=\"float:left;margin:2px;text-align:center;\"><a href=\"/profile.php?u=".$emp["username"]."\" class=\"small\"><img src=\"/image.php?u=".$emp["username"]."&s=2\" border=0><br>".$emp["fname"]."<br>".$emp["lname"]."</a></div>\n";
	}
	echo "</td></tr></table>\n";
	echo "<P>".mysql_error();
}

include("_functions.php");
dbconnect();


	$sql = "SELECT * FROM tbl_courses, tbl_course_sched WHERE tbl_courses.course_id=tbl_course_sched.course_id AND tbl_courses.set_id=1 ORDER BY tbl_course_sched.start ASC, tbl_courses.course_name ASC";
	$result = mysql_query($sql);
	//$bd = mysql_fetch_array($result);

$page_title = "Staff Guide";
$GLOBALS["ext_page"] = $page_title;  // SET FAUX PAGE NAME
$_GET["p"] = 3;					 // SET FAUX PARENT ID

$lnav_mods = get_layout($_GET["p"],1);
$rnav_mods = get_layout($_GET["p"],3);
?>

<script language="JavaScript" type="text/javascript">
<!--
function Toggle(blockname) {
	try {
        var state = document.getElementById(blockname).style.display;
     
     	if (state == "block") {
     		document.getElementById(blockname).style.display = "none";
     	} else {
            document.getElementById(blockname).style.display = "block";
        }        
     }
     catch(expError) {
        alert( expError.number + "   " + expError.description );
     }
}
-->
</script>

<?
include("_pagestart.php");
	//print_r($_GET);

	if (!isset($_GET["v"])) $v = 0;
	else if ($_GET["v"] == "") unset($_GET["v"]);
	else $v = $_GET["v"];
	
	echo "<P><div class=\"headline\">".$page_title."</div>";
	///echo "<P>Click on one of the blue bars to view that division's staff\n";
	
	echo "<br><br><form action=\"staff.php\" method=\"get\" name=\"groupselect\">\n";
	echo "<table width=100%><tr><td><b>View a specific employee subset:</b></td></tr>";
	echo "<tr><td><SELECT name=\"v\" onChange=\"document.groupselect.submit();\">";
	echo "<option value=\"\">--- PLEASE SELECT AN EMPLOYEE SUBSET ---</option>\n";
	echo "<option value=\"\"></option>\n";
	echo "<option value=\"0\">All Employees</option>\n";
	echo "<option value=\"\">---------------------------</option>\n";
	group_select2($v);
	echo "<option value=\"\"></option>\n";
	echo "<option value=\"all\">Contractors, Consultants & Temps</option>\n";
	echo "<option value=\"\"></option>\n";
	echo "</SELECT>";
	echo "</td></tr></form></table>\n";
	
	if (isset($_GET["v"])) {
		if ($v === "all") contractor_view();
		else group_view($v);
	}
	
	echo "<br><br><br><br><div class=\"pagefoot\">Last Updated: ".date("F j, Y")."</div>\n";

include("_pageend.php");
?>