<?php include('_mod_security.php'); ?>
<?php
	//header('Content-Type: application/json');
	//var_dump($_GET);
	$sql = '';
	switch ($_GET['func']):
		case 'print' :
			$sql = "SELECT COUNT(IF(placecard_".mysqli_real_escape_string($GLOBALS['con'], $_GET['venue'])." = 1,1,NULL)) AS total_count ".
							"FROM guests WHERE user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event'])." ".
							" AND invite_".mysqli_real_escape_string($GLOBALS['con'], $_GET['venue'])." = 1 AND rsvp_".mysqli_real_escape_string($GLOBALS['con'], $_GET['venue'])." = 1 AND guest_type <> 'G' ";
			break;
		case 'shortcut_children' :
			$iid = nz(mysqli_real_escape_string($GLOBALS['con'], $_GET['iid']),'-1');
			$sql = "SELECT primary_guest_id FROM guests WHERE primary_guest_id > 0 AND id = ".$iid.
						" AND user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])."  AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event'])." ";
			$result = mysqli_query($GLOBALS['con'], $sql) or die(mysqli_error($GLOBALS['con']));
			if (mysqli_num_rows($result) > 0) :
				$row = mysqli_fetch_object($result);
				$iid = $row->primary_guest_id;
			endif;
			$result_string = '';
			$venue = mysqli_real_escape_string($GLOBALS['con'], $_GET['venue']);
			$ix_row = 0;
			$sql = "SELECT first_name, last_name ".
							"FROM guests g WHERE g.primary_guest_id = ".$iid." AND g.guest_type = 'C' AND ".
							"g.invite_".$venue." = 1 AND g.rsvp_".$venue." = 1 ".
							" AND g.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND g.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event'])." ";
			$result = mysqli_query($GLOBALS['con'], $sql);
			while ($row = mysqli_fetch_object($result)) :
				$ix_row = $ix_row + 1;
				if ($ix_row > 1) :
					if ($ix_row == mysqli_num_rows($result)) :
						$result_string .= ' and ';
					else :
						$result_string .= ', ';
					endif;
				endif;
				$result_string .= $row->first_name.' '.$row->last_name;
			endwhile;
			echo json_encode(array('shortcut' => $result_string));
			return;
			break;
	endswitch;
	//echo '==='.$sql.'===';
	$result = mysqli_query($GLOBALS['con'], $sql);
	if (mysqli_num_rows($result) > 0) :
		$row = mysqli_fetch_object($result);
		echo json_encode(array('total_count' => $row->total_count));
	endif;
?>