Example #1
0
     $sql .= "LEFT OUTER JOIN `" . $_SESSION['Application_host'] . "`.`J_cave_entry` ON J_cave_entry.Id_cave = J_topo_cave.Id_cave ";
     $sql .= "LEFT OUTER JOIN `" . $_SESSION['Application_host'] . "`.`T_entry` ON (T_entry.Id = J_cave_entry.Id_entry OR T_entry.Id = J_topo_cave.Id_entry) ";
     $sql .= "WHERE T_topography.Id_request = " . $onid . " ";
     $sql .= "GROUP BY T_topography.Id_request ";
     $data = getDataFromSQL($sql, __FILE__, $frame, __FUNCTION__);
     if ($data[0]['Id_entry'] != "") {
         $sql = "UPDATE `" . $_SESSION['Application_host'] . "`.`T_entry` ";
         $sql .= "SET Has_contributions = IF((SELECT COUNT(*) FROM `" . $_SESSION['Application_host'] . "`.`V_contributions` WHERE Id_entry IN (" . $data[0]['Id_entry'] . ")) = 0, 'NO', 'YES') ";
         $sql .= "WHERE Id IN (" . $data[0]['Id_entry'] . ") ";
         $req = execSQL($sql, $frame, __FILE__, __FUNCTION__);
     }
     $save_failed = false;
     $type = "menu";
     $reload = isset($_POST['save']);
     if (isset($_POST['send']) || isset($_POST['approve']) || isset($_POST['forward']) || isset($_POST['reject'])) {
         sendRequestMail($onid);
     }
 } else {
     if (isset($_GET['id'])) {
         $id = isset($_GET['id']) ? $_GET['id'] : '';
         if ($id != "") {
             $sql = "SELECT ca.Nickname, req.Name, req.Id_recipient, req.Id_status, st.Name AS Status_name, lbl." . $_SESSION['language'] . " AS Status_label, ";
             $sql .= "req.Id_author, req.Comments, topo.Is_public, topo.Remove_north, topo.Remove_scale, topo.Distort_topo, topo.Id AS Id_topography ";
             $sql .= "FROM `" . $_SESSION['Application_host'] . "`.`T_request` req ";
             $sql .= "INNER JOIN `" . $_SESSION['Application_host'] . "`.`T_topography` topo ON req.Id = topo.Id_request ";
             $sql .= "INNER JOIN `" . $_SESSION['Application_host'] . "`.`T_caver` ca ON req.Id_author = ca.Id ";
             $sql .= "INNER JOIN `" . $_SESSION['Application_host'] . "`.`T_status` st ON st.Id = req.Id_status ";
             $sql .= "INNER JOIN `" . $_SESSION['Application_host'] . "`.`T_label` lbl ON lbl.Id = st.Id_label ";
             $sql .= "WHERE req.Id = " . $id;
             $data = getDataFromSQL($sql, __FILE__, $frame, __FUNCTION__);
         }
Example #2
0
        }
        if ($bad_name != "") {
            $subject .= "; Id: " . $bad_name;
        }
        sendMessageToWM($admin_id, $contact, $real_mail, $name, $subject, nl2br($body));
        if ($category == 'topography' && $bad_name != '') {
            $sql = "SELECT Id FROM T_status WHERE Name = 'canceled'";
            $status_id = getDataFromSQL($sql, __FILE__, $frame, __FUNCTION__);
            $sql = "UPDATE `" . $_SESSION['Application_host'] . "`.`T_topography` SET Enabled = 'NO' WHERE Id_request = " . $bad_name;
            $req = execSQL($sql, $frame, __FILE__, __FUNCTION__);
            $user_login = $_SESSION['user_login'] == '' ? "guest" : $_SESSION['user_login'];
            $date_stamp = '---- <convert>#label=230<convert>: ' . $user_login . ' ' . date("Y-m-d H:i:s") . ' ----';
            $sql = "UPDATE `" . $_SESSION['Application_host'] . "`.`T_request` SET Id_status = " . returnDefault($status_id[0]['Id'], 'id') . ", Comments = " . returnDefault($date_stamp . "\n" . $body, 'text') . " WHERE Id = " . $bad_name;
            $req = execSQL($sql, $frame, __FILE__, __FUNCTION__);
            trackAction("edit_request", $bad_name, "T_request");
            sendRequestMail($bad_name);
        }
        $send_failed = false;
    }
}
function formIsValid()
{
    $string = isset($_POST['m_check']) ? $_POST['m_check'] : '';
    $check = True;
    $check = $check && (md5(getIp() . strtolower($string)) == $_SESSION['userCheck'] || USER_IS_CONNECTED);
    return $check;
}
if (!USER_IS_CONNECTED) {
    deleteImage();
}
switch ($_SESSION['home_page']) {