<?php include('_mod_security.php'); ?>
<?php
	session_start();
	//var_dump($_GET);
	switch ($_GET['func']) :
		case 'invite' :
			$sql = "UPDATE guests SET ".
					"invite_".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['type']))." = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['invited'])),'0')." ".
					" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
			mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
			break;
		case 'send' :
			$sql = "UPDATE guests SET ".
					"invitation_send = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['send'])),'0')." ".
					" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['id']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
			mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
			break;
		case 'insert' :
			if (nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['insert'])),'0') == '1') :
				$sql = "INSERT INTO guests_inserts (user_id, event_id, guest_id, insert_id) VALUES (".$_SESSION['user_id'].", ".$_SESSION['active_event'].", ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid'])).", ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['iid'])).") ";
			else :
				$sql = "DELETE FROM guests_inserts WHERE event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id']." AND guest_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND insert_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['iid']));
			endif;
			mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
			break;
		case 'format' :
			switch ($_GET['format']) :
				case '10' :
					$_GET['text'] = format_guest_name($_GET['gid']);
					$sql = "UPDATE guests SET ".
							"invitation_format = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['format'])),'0').", ".
							"invitation_text = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text']))."', ".
							"invitation_text2 = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text2']))."' ".
							" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
					break;
				case '20' :
					$_GET['text'] = format_guest_name($_GET['gid']);
					$sql = "SELECT id, salutation, first_name, last_name, suffix FROM guests WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND guest_type = 'P' AND (invite_temple = 1 OR invite_av = 1 OR invite_kv = 1 OR invite_bv = 1 OR invite_dv = 1) AND invitation_send = 1 AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
					$result_p = mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
					if (mysqli_num_rows($result_p) > 0) :
						$row_p = mysqli_fetch_object($result_p);
					endif;
					$sql = "SELECT id, salutation FROM guests WHERE primary_guest_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND guest_type = 'S' AND (invite_temple = 1 OR invite_av = 1 OR invite_kv = 1 OR invite_bv = 1 OR invite_dv = 1) AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
					$result_s = mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
					if (mysqli_num_rows($result_s) > 0) :
						$row_s = mysqli_fetch_object($result_s);
					endif;
					if (!empty($row_p->salutation) && !empty($row_s->salutation)) :
						$_GET['text'] = trim($row_p->salutation).' & '.trim($row_s->salutation).' '.trim($row_p->first_name).' '.trim($row_p->last_name).' '.trim($row_p->suffix);
						$_GET['text'] = trim($_GET['text']);
					endif;
					$sql = "UPDATE guests SET ".
							"invitation_format = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['format'])),'0').", ".
							"invitation_text = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text']))."', ".
							"invitation_text2 = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text2']))."' ".
							" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
					break;
				case '30' :
					$_GET['text'] = format_guest_name($_GET['gid']);
					$sql = "SELECT id, salutation FROM guests WHERE primary_guest_id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND guest_type = 'S' AND (invite_temple = 1 OR invite_av = 1 OR invite_kv = 1 OR invite_bv = 1 OR invite_dv = 1) AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
					$result_s = mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
					if (mysqli_num_rows($result_s) > 0) :
						$row_s = mysqli_fetch_object($result_s);
						$_GET['text'] = $_GET['text'].' & '.format_guest_name($row_s->id);
					endif;
					$sql = "UPDATE guests SET ".
							"invitation_format = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['format'])),'0').", ".
							"invitation_text = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text']))."', ".
							"invitation_text2 = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text2']))."' ".
							" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
					break;
				case '40' :
					$sql = "UPDATE guests SET ".
							"invitation_format = ".nz(mysqli_real_escape_string($GLOBALS['con'], trim($_GET['format'])),'0').", ".
							"invitation_text = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text']))."', ".
							"invitation_text2 = '".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['text2']))."' ".
							" WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], trim($_GET['gid']))." AND event_id = ".$_SESSION['active_event']." AND user_id = ".$_SESSION['user_id'];
					break;
			endswitch;
			mysqli_query($GLOBALS['con'], $sql) or die('Database Error!');
			echo $_GET['text'];
			break;
	endswitch;
	/*
	echo "<SCRIPT>";
	echo "window.location.href = 'index.php?IX=guests'";
	echo "</SCRIPT>";
	*/
?>