| Server IP : 104.21.21.239 / Your IP : 216.73.216.11 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/planner/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
if (isset($_SESSION['user_id'])) :
if (isset($_REQUEST['id']) && is_numeric($_REQUEST['id'])) :
$action = "Edit";
else :
$action = "Add New";
endif;
else :
exit();
endif;
//var_dump($_POST);
if (!empty($_REQUEST['ref'])) :
$ref = $_REQUEST['ref'];
else :
$ref = 'tables';
endif;
$active_tab = 'general';
if ($_POST['ajax_event_submitted'] == '1') :
if (isset($_POST['active_tab'])) :
$active_tab = $_POST['active_tab'];
else :
$active_tab = 'general';
endif;
$ar_err = array();
if (empty($_POST['venue'])) :
$ar_err['venue'] = 'Event is required!';
$err_flag = true;
$err_tab = 'general';
endif;
if (empty($_POST['table_no'])) :
$ar_err['table_no'] = 'Table number is required!';
$err_flag = true;
$err_tab = 'general';
else :
$sql_dup = "SELECT id from tables WHERE venue = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))."' AND table_no = ".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['table_no']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event'];
$result_dup = mysqli_query($GLOBALS['con'], $sql_dup) or die('Database Error!');
if (mysqli_num_rows($result_dup) > 0) :
$row_dup = mysqli_fetch_object($result_dup);
if ($row_dup->id != $_REQUEST['id']) :
$ar_err['table_no'] = 'Duplicate table number not allowed!';
$err_flag = true;
$err_tab = 'general';
endif;
endif;
endif;
if (empty($_POST['capacity'])) :
$ar_err['capacity'] = 'Capacity is required!';
$err_flag = true;
$err_tab = 'general';
endif;
if (!$err_flag) :
if ($action == 'Edit') :
$sql = "UPDATE tables set ".
"venue = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))."', ".
"table_no = ".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['table_no'])).", ".
"table_desc = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['table_desc']))."', ".
"capacity = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['capacity'])),'0').", ".
"comment = '".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['comment']))."' ".
"WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event'];
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
else :
if ($action == 'Add New') :
$sql = "INSERT INTO tables ".
"(user_id, event_id, venue, table_no, table_desc, capacity, comment, pos_x, pos_y) ".
"VALUES (".
$_SESSION['user_id'].", ".
$_SESSION['active_event'].", ".
"'".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))."', ".
"".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['table_no'])).", ".
"'".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['table_desc']))."', ".
"".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['capacity'])),'0').", ".
"'".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['comment']))."', ".
"".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['table_no'])),'0')." * 10, ".
"".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_POST['table_no'])),'0')." * 10 ".
")";
mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
$_REQUEST['id'] = last_id();
endif;
endif;
$form_message = "Saved sucessfully!";
if ($_POST['xsubmit'] == 'Save & Close') :
echo "<SCRIPT>";
echo "window.location.href = 'index.php?IX=".$ref."&venue=".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))."'";
echo "</SCRIPT>";
endif;
if ($_POST['xsubmit'] == 'Save & New') :
echo "<SCRIPT>";
echo "window.location.href = 'index.php?IX=table_form&ref=".$ref."&prepop_venue=".mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue']))."'";
echo "</SCRIPT>";
endif;
else :
$active_tab = $err_tab;
$form_message = "Errors found!";
endif;
else:
if ($action == 'Edit') :
$sql = "SELECT * FROM tables WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event'];
$result = mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
if (mysqli_num_rows($result) > 0) :
$row = mysqli_fetch_object($result);
$_POST['venue'] = $row->venue;
$_POST['table_no'] = $row->table_no;
$_POST['table_desc'] = $row->table_desc;
$_POST['capacity'] = $row->capacity;
$_POST['comment'] = $row->comment;
else :
echo form_fatal_error('Invalid Operation!');
return;
endif;
else :
if (!empty($_REQUEST['prepop_venue'])) :
$_POST['venue'] = $_REQUEST['prepop_venue'];
$sql_max = "SELECT MAX(table_no) as tblmax FROM tables WHERE venue = '".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['prepop_venue']))."' AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event'];
$result_max = mysqli_query($GLOBALS['con'], $sql_max);
if (mysqli_num_rows($result_max) > 0) :
$row_max = mysqli_fetch_object($result_max);
$_POST['table_no'] = $row_max->tblmax + 1;
endif;
endif;
endif;
endif;
?>
<script>
var active_page = '<?php echo $_REQUEST['IX']; ?>';
var active_tab = '';
update_header = function()
{
if ($("#table_no").val() > "" || $("#table_desc").val() > "")
{
//alert($("#category_id").val());
$("#header_repeater").text(" - " + $("#table_no option[value='" + $("#table_no").val() + "']").text() + ' ' + $("#table_desc").val());
}
}
$(document).ready(function()
{
switch_tab('<?php echo $active_tab; ?>');
update_header();
$(':input').change(function() {sheet_dirty = true;} );
}
)
</script>
<h1>Table - <?php echo $action; ?><span id="header_repeater"></span></h1>
<?php get_notes(); ?>
<?php get_help_guide('help_table_form_'.$active_tab); ?>
<?php echo form_message($form_message); ?>
<form style="" name="frm_table" id="frm_table" method="post" action="">
<input name="ajax_event_submitted" type="hidden" value="1" />
<input name="id" type="hidden" value="<?php echo $_REQUEST['id']; ?>" />
<input name="active_tab" id="active_tab" type="hidden" value="general" />
<!-- -------------------------------------------------------------------------------------------------------------- -->
<div class="form_strip">
<input type="button" value="Save" onclick="sheet_dirty = false;this.form.submit();" />
<input type="button" value="Save & Close" onclick="sheet_dirty = false; document.getElementById('xsubmit').value = this.value; this.form.submit();" />
<input type="button" value="Save & New" onclick="sheet_dirty = false; document.getElementById('xsubmit').value = this.value; this.form.submit();" />
<input type="button" value="Cancel" onclick="sheet_dirty = false; window.location.href = 'index.php?IX=<?php echo $ref; ?>&venue=<?php echo mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue'])); ?>'" />
</div>
<!-- -------------------------------------------------------------------------------------------------------------- -->
<div class="tab_strip">
<div class="tab_header" id="tab_general" onclick="switch_tab('general');">
General Information
</div>
<div class="tab_header" id="tab_assignment" onclick="switch_tab('assignment');">
Guest Assignment
</div>
</div>
<div class="cleardiv">
</div>
<div class="tab_content" id="tab_content_general">
<div class="form_header">
General Table Information
</div>
<table class="input_block">
<tr>
<td>
Event
</td>
<td>
<?php
if ($action == 'Edit') :
$disabled = ' disabled="disabled" ';
else :
$disabled = '';
endif;
?>
<input name="venue" type="radio" value="temple" <?php if ($_POST['venue'] == 'temple') : echo 'checked="checked"'; else : echo $disabled; endif; ?> /><?php echo venue_decode('temple'); ?>
<input name="venue" type="radio" value="av" <?php if ($_POST['venue'] == 'av') : echo 'checked="checked"'; else : echo $disabled; endif; ?> /><?php echo venue_decode('av'); ?>
<input name="venue" type="radio" value="kv" <?php if ($_POST['venue'] == 'kv') : echo 'checked="checked"'; else : echo $disabled; endif; ?> /><?php echo venue_decode('kv'); ?>
<input name="venue" type="radio" value="bv" <?php if ($_POST['venue'] == 'bv') : echo 'checked="checked"'; else : echo $disabled; endif; ?> /><?php echo venue_decode('bv'); ?>
<input name="venue" type="radio" value="dv" <?php if ($_POST['venue'] == 'dv') : echo 'checked="checked"'; else : echo $disabled; endif; ?> /><?php echo venue_decode('dv'); ?>
<?php show_form_error($ar_err['venue']); ?>
</td>
</tr>
<tr>
<td>
Table Number
</td>
<td>
<select name="table_no" id="table_no" onchange="update_header();" >
<option value="">Table Number...</option>
<?php
for ($i = 1; $i <= 50; $i++) :
$selected = '';
if ($_POST['table_no'] == $i) :
$selected = 'selected="selected"';
endif;
echo '<option value="'.$i.'" '.$selected.'>'.$i.'</option>';
endfor;
?>
</select>
<?php show_form_error($ar_err['table_no']); ?>
</td>
</tr>
<tr>
<td>
Description
</td>
<td>
<input name="table_desc" id="table_desc" type="text" maxlength="100" onblur="update_header();" value="<?php echo $_POST['table_desc']; ?>" />
<?php show_form_error($ar_err['table_desc']); ?>
</td>
</tr>
<tr>
<td>
Capacity
</td>
<td>
<select name="capacity" id="capacity" >
<option value="">Capacity...</option>
<?php
for ($i = 1; $i <= 20; $i++) :
$selected = '';
if ($_POST['capacity'] == $i) :
$selected = 'selected="selected"';
endif;
echo '<option value="'.$i.'" '.$selected.'>'.$i.'</option>';
endfor;
?>
</select>
<?php show_form_error($ar_err['capacity']); ?>
</td>
</tr>
<tr>
<td>
Comment
</td>
<td colspan="3">
<textarea name="comment" id="comment" cols="80" rows="5"><?php echo $_POST['comment']; ?></textarea>
<?php show_form_error($ar_err['comment']); ?>
</td>
</tr>
</table>
</div>
<!-- -------------------------------------------------------------------------------------------------------------- -->
<div class="tab_content" id="tab_content_assignment">
<div class="form_header">
Guest Assignment
</div>
<table class="input_block">
<tr>
<td width="300">
Guest Name
</td>
<td width="150">
Type
</td>
</tr>
<?php
if (!empty($_REQUEST['id'])) :
switch ($_POST['venue']) :
case "temple" :
$sql_venue = "SELECT * FROM guests WHERE invite_temple = 1 AND rsvp_temple = 1 AND table_temple = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event']." ORDER BY last_name ASC";
break;
case "av" :
$sql_venue = "SELECT * FROM guests WHERE invite_av = 1 AND rsvp_av = 1 AND table_av = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event']." ORDER BY last_name ASC";
break;
case "kv" :
$sql_venue = "SELECT * FROM guests WHERE invite_kv = 1 AND rsvp_kv = 1 AND table_kv = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event']." ORDER BY last_name ASC";
break;
case "bv" :
$sql_venue = "SELECT * FROM guests WHERE invite_bv = 1 AND rsvp_bv = 1 AND table_bv = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event']." ORDER BY last_name ASC";
break;
case "dv" :
$sql_venue = "SELECT * FROM guests WHERE invite_dv = 1 AND rsvp_dv = 1 AND table_dv = ".mysqli_real_escape_string($GLOBALS['con'], trim($_REQUEST['id']))." AND user_id = ".$_SESSION['user_id']." AND event_id = ".$_SESSION['active_event']." ORDER BY last_name ASC";
break;
endswitch;
//echo '==='.$sql_venue.'===';
$result = mysqli_query($GLOBALS['con'], $sql_venue);
//$result = mysqli_query($GLOBALS['con'], $sql_venue) or die(mysqli_error($GLOBALS['con']));
//echo mysqli_error($GLOBALS['con']);
while($row = mysqli_fetch_object($result)) :
switch ($row->guest_type) :
case "P" :
$gtype = "Primary Adult";
break;
case "S" :
$gtype = "Significant Other";
break;
case "C" :
$gtype = "Child";
break;
endswitch;
?>
<tr>
<td>
<a href="index.php?IX=guest_form&id=<?php echo $row->id; ?>" >
<?php echo $row->first_name.' '.$row->last_name; ?>
</a>
</td>
<td>
<?php echo $gtype; ?>
</td>
</tr>
<?php
endwhile;
endif;
?>
</table>
</div>
<!-- -------------------------------------------------------------------------------------------------------------- -->
<div class="form_strip">
<input type="button" value="Save" onclick="sheet_dirty = false;this.form.submit();" />
<input type="button" value="Save & Close" onclick="sheet_dirty = false; document.getElementById('xsubmit').value = this.value; this.form.submit();" />
<input type="button" value="Save & New" onclick="sheet_dirty = false; document.getElementById('xsubmit').value = this.value; this.form.submit();" />
<input type="button" value="Cancel" onclick="sheet_dirty = false; window.location.href = 'index.php?IX=<?php echo $ref; ?>&venue=<?php echo mysqli_real_escape_string($GLOBALS['con'], trim($_POST['venue'])); ?>'" />
<input type="hidden" name="xsubmit" id="xsubmit" />
</div>
</form>