try {

$connection = new PDO("mysql:host=" . DB_HOST_NAME . ";dbname=" . DB_NAME . ";charset=utf8", DB_USER_NAME, DB_PASSWORD);

// Exceptions fire when occur

$connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

$deleteQuery = $connection->query('

DELETE FROM ' . EMERGENCY_CONTACTS_TABLE . '

WHERE MEMBER_ID = '. $connection->quote($memberID)

);

}

// Script halts and throws error if exception is caught

catch(PDOException $e) {

echo "

<div>

Error: " . $e->getMessage() .

"</div>";

return FALSE;

}

return TRUE;

try {

$connection = new PDO("mysql:host=" . DB_HOST_NAME . ";dbname=" . DB_NAME . ";charset=utf8", DB_USER_NAME, DB_PASSWORD);

// Exceptions fire when occur

$connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

$deleteQuery = $connection->query('

DELETE FROM ' . USER_CREDENTIAL_TABLE . '

WHERE MEMBER_ID = '. $connection->quote($memberID)

);

}

// Script halts and throws error if exception is caught

catch(PDOException $e) {

echo "

<div>

Error: " . $e->getMessage() .

"</div>";

return FALSE;

}

return TRUE;

$message;

$searchStatusString = "";

if ($status == "success") {

$message =

'<div class="alert alert-success alert-dismissable">

<button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>' .

$deleteMemberName . ' (' . $deleteMemberEmail . ') was deleted successfully.

</div>';

}

elseif ($status == "fail") {

$message =

'<div class="alert alert-danger alert-dismissable">

<button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>

There was a problem deleting ' . $deleteMemberName . ' (' . $deleteMemberEmail . '). Please try again.

</div>';

}

if ($_POST["search_status"] == "inactive") {

$searchStatusString = " AND ACTIVESTATUS = 0";

}

elseif ($_POST["search_status"] == "active") {

$searchStatusString = " AND ACTIVESTATUS = 1";

}

try {

$membersQuery;

$connection = new PDO("mysql:host=" . DB_HOST_NAME . ";dbname=" . DB_NAME . ";charset=utf8", DB_USER_NAME, DB_PASSWORD);

// Exceptions fire when occur

$connection->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

// Default view or member status search only

if (empty($_POST["search_fname"]) && empty($_POST["search_lname"]) && empty($_POST["search_email"])) {

if (empty($_POST["search_status"]) || $_POST["search_status"] == "all") {

$membersQuery = $connection->query(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE .

' ORDER BY LASTNAME');

}

elseif ($_POST["search_status"] == "inactive") {

$membersQuery = $connection->query(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE .

' WHERE ACTIVESTATUS = 0

ORDER BY LASTNAME');

}

elseif ($_POST["search_status"] == "active") {

$membersQuery = $connection->query(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE .

' WHERE ACTIVESTATUS = 1

ORDER BY LASTNAME');

}

}

// First name search

elseif (!empty($_POST["search_fname"]) && empty($_POST["search_lname"]) && empty($_POST["search_email"])) {

$membersQuery = $connection->prepare(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE . '

WHERE FIRSTNAME LIKE :searchedFirstName' . $searchStatusString);

$searchedFirstName = '%' . trim($_POST["search_fname"]) . '%';

$membersQuery->bindParam(':searchedFirstName', $searchedFirstName);

$membersQuery->execute();

}

// Last name search

elseif (empty($_POST["search_fname"]) && !empty($_POST["search_lname"]) && empty($_POST["search_email"])) {

$membersQuery = $connection->prepare(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE . '

WHERE LASTNAME LIKE :searchedLastName' . $searchStatusString .

' ORDER BY LASTNAME');

$searchedLastName = '%' . trim($_POST["search_lname"]) . '%';

$membersQuery->bindParam(':searchedLastName', $searchedLastName);

$membersQuery->execute();

}

// Email search

elseif (empty($_POST["search_fname"]) && empty($_POST["search_lname"]) && !empty($_POST["search_email"])) {

$membersQuery = $connection->prepare(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE . '

WHERE MEMBER_EMAIL LIKE :searchedEmail' . $searchStatusString .

' ORDER BY LASTNAME');

$searchedEmail = '%' . trim($_POST["search_email"]) . '%';

$membersQuery->bindParam(':searchedEmail', $searchedEmail);

$membersQuery->execute();

}

// First and last name search

elseif (!empty($_POST["search_fname"]) && !empty($_POST["search_lname"]) && empty($_POST["search_email"])) {

$membersQuery = $connection->prepare(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE . '

WHERE FIRSTNAME LIKE :searchedFirstName AND LASTNAME LIKE :searchedLastName' . $searchStatusString .

' ORDER BY LASTNAME');

$searchedFirstName = '%' . trim($_POST["search_fname"]) . '%';

$searchedLastName = '%' . trim($_POST["search_lname"]) . '%';

$membersQuery->execute(array(

':searchedFirstName' => $searchedFirstName,

':searchedLastName' => $searchedLastName

));

}

// First name and email search

elseif (!empty($_POST["search_fname"]) && empty($_POST["search_lname"]) && !empty($_POST["search_email"])) {

$membersQuery = $connection->prepare(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE . '

WHERE FIRSTNAME LIKE :searchedFirstName AND MEMBER_EMAIL LIKE :searchedEmail' . $searchStatusString .

' ORDER BY LASTNAME');

$searchedFirstName = '%' . trim($_POST["search_fname"]) . '%';

$searchedEmail = '%' . trim($_POST["search_email"]) . '%';

$membersQuery->execute(array(

':searchedFirstName' => $searchedFirstName,

':searchedEmail' => $searchedEmail

));

}

// Last name and email search

elseif (empty($_POST["search_fname"]) && !empty($_POST["search_lname"]) && !empty($_POST["search_email"])) {

$membersQuery = $connection->prepare(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE . '

WHERE LASTNAME LIKE :searchedLastName AND MEMBER_EMAIL LIKE :searchedEmail' . $searchStatusString .

' ORDER BY LASTNAME');

$searchedLastName = '%' . trim($_POST["search_lname"]) . '%';

$searchedEmail = '%' . trim($_POST["search_email"]) . '%';

$membersQuery->execute(array(

':searchedLastName' => $searchedLastName,

':searchedEmail' => $searchedEmail

));

}

// First name, last name, and email search

elseif (!empty($_POST["search_fname"]) && !empty($_POST["search_lname"]) && !empty($_POST["search_email"])) {

$membersQuery = $connection->prepare(

'SELECT FIRSTNAME, LASTNAME, MEMBER_EMAIL, PHONE, DUEDATE, ACTIVESTATUS, MEMBER_ID

FROM ' . USER_CREDENTIAL_TABLE . '

WHERE FIRSTNAME LIKE :searchedFirstName AND LASTNAME LIKE :searchedLastName AND MEMBER_EMAIL LIKE :searchedEmail' . $searchStatusString .

' ORDER BY LASTNAME');

$searchedFirstName = '%' . trim($_POST["search_fname"]) . '%';

$searchedLastName = '%' . trim($_POST["search_lname"]) . '%';

$searchedEmail = '%' . trim($_POST["search_email"]) . '%';

$membersQuery->execute(array(

':searchedFirstName' => $searchedFirstName,

':searchedLastName' => $searchedLastName,

':searchedEmail' => $searchedEmail

));

}

$members = $membersQuery->fetchAll(PDO::FETCH_ASSOC);

echo

"<br /><br />" .

$message .

"<div>Returned " . ($membersQuery->rowCount()) . " row(s)</div>

<table>

<thead>

<tr>

<th>First Name</th>

<th>Last Name</th>

<th>Email Address</th>

<th>Phone Number</th>

<th>Dues Paid Until</th>

<th>Member Status</th>

<th>Management</th>

</tr>

</thead>";

while($member = array_shift($members)){

$formattedActiveStatus = "Active";

if ($member[ACTIVESTATUS] == 0) $formattedActiveStatus = "Inactive";

echo

"<tr>

<td>" . $member[FIRSTNAME] . "</td>

<td>" . $member[LASTNAME] . "</td>

<td><a href='mailto:" . $member[MEMBER_EMAIL] . "'>" . $member[MEMBER_EMAIL] . "</a></td>

<td>" . preg_replace('/^(\d{3})(\d{3})(\d{4})$/', '$1-$2-$3', $member[PHONE]) . "</td>

<td>" . $member[DUEDATE] . "</td>

<td>" . $formattedActiveStatus . "</td>

<td>

<form action='view.php' method='post'>

<input type='text' name='buttonMemberID' value='" . $member["MEMBER_ID"] . "' hidden />

<input type='submit' class='btn btn-primary' value='View' />

</form>

<form action='edit.php' method='post'>

<input type='text' name='buttonMemberID' value='" . $member["MEMBER_ID"] . "' hidden />

<input type='submit' class='btn btn-primary' value='Edit' />

</form>

<form action='index.php' method='post'>

<input type='text' name='memberID' value='" . htmlentities($member[MEMBER_ID], ENT_QUOTES) . "' hidden />

<input type='text' name='memberName' value='" . htmlentities($member[FIRSTNAME], ENT_QUOTES) . " " . htmlentities($member[LASTNAME], ENT_QUOTES) . "' hidden />

<input type='text' name='memberEmail' value='" . htmlentities($member[MEMBER_EMAIL], ENT_QUOTES) . "' hidden />

<input type='submit' class='btn btn-warning' value='Delete' />

</form>

</td>

</tr>";

}

echo "</table>";

}

// Script halts and throws error if exception is caught

catch(PDOException $e) {

echo "

<div>

Error: " . $e->getMessage() .

"</div>";

}