document.location = 'accred_list'; ";
die();
}
if(!$isAdmin && $isEditable!=1) {
syslog(LOG_ERR, "Unauthorized access to form page aid by non editable user :$aid from : {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_USER_AGENT']})");
echo "";
die();
}
$cfg = include('accred_config.php');
$uname = $_SESSION['name'];
if($_POST['btncancel']) {
echo "";
die();
}
$prices = array(
// 'mar' => array('nor' => 60, 'vip' => 40, 'label' => 'Mardi 4 juin'),
'mer' => array('nor' => 60, 'vip' => 40, 'label' => 'Mercredi 5 juin'),
'jeu' => array('nor' => 60, 'vip' => 40, 'label' => 'Jeudi 6 juin'),
'ven' => array('nor' => 60, 'vip' => 40, 'label' => 'Vendredi 7 juin'),
'sam' => array('nor' => 60, 'vip' => 40, 'label' => 'Samedi 8 juin'),
'dim' => array('nor' => 40, 'vip' => 42, 'label' => 'Dimanche 9 juin')
);
?>
Nouvelle Demande / Edition de demande
Bienvenue
connect_errno) {
echo "Failed to connect to MySQL: (" . $mysqli->connect_errno . ") " . $mysqli->connect_error;
}
function show_results() {
global $redis;
global $mysqli;
global $aid;
global $userid;
global $isAdmin;
global $uname;
$username = $_SESSION['name'];
$status = '1';
$updateStatus = false;
if($_POST['btndelete']) {
$query = "DELETE FROM submissions WHERE id=$aid";
if(!$isAdmin) {
$query .= " AND uid=$userid";
}
syslog(LOG_INFO, "Delete entry for aid:$aid by uid: $userid / $uname from: {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_USER_AGENT']})");
if (!$mysqli->query($query) ) {
echo "Unable to delete entry: (" . $mysqli->errno . ") " . $mysqli->error;
die("Argh");
}
}
if($_POST['btnfinalise']) {
$status = '0';
$updateStatus = true;
}
if($_POST['btnunfinalise']) {
$status = '1';
$updateStatus = true;
}
if($_POST['btnprocess'] && $isAdmin) {
$status = '3';
$updateStatus = true;
}
// Escape string, mostly in case of quotes
$d = $mysqli->real_escape_string(serialize($_POST));
if(!$aid) {
// Make sure we set the demande_our value to current user if blank
// This would happen upon submission of a new record by non-admin person
if($d['demande_pour']=='') {
$d['demande_pour'] = $username;
}
$query = "INSERT INTO submissions (uid, status, name, created, formdata,modified) values('$userid',$status,'$username',null,'".$d."',NOW())";
syslog(LOG_INFO, "Create entry by uid: $userid / $uname from: {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_USER_AGENT']})");
}
else {
$query = "UPDATE submissions set modifieduid=$userid,formdata='".$d."'";
if($updateStatus) {
$query .= ",status=$status ";
}
$query .= " WHERE id=$aid";
if(!$isAdmin) {
$query .= " AND uid=$userid";
}
syslog(LOG_INFO, "Update entry aid:$aid by uid: $userid / $uname from: {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_USER_AGENT']})");
$logquery = "INSERT INTO log (uid,aid,name,isadmin,operation,new,prev) SELECT '$userid',$aid,'$username', $isAdmin, 'update','".$d."', formdata FROM submissions WHERE ID=$aid";
}
$mysqli->query($logquery);
if (!$mysqli->query($query) ) {
echo "Table creation failed: (" . $mysqli->errno . ") " . $mysqli->error;
die("Argh");
}
echo "";
die();
}
// When editing an existing form, load data
if($aid) {
$query = "SELECT * from submissions WHERE ID=$aid";
if(!$isAdmin) {
$query .= " AND UID=$userid";
}
if (!$result = $mysqli->query($query) ) {
echo "Table read failed: (" . $mysqli->errno . ") " . $mysqli->error;
die("Argh");
}
$row = $result->fetch_assoc();
if(!$row) {
syslog(LOG_ERR, "Failed to load entry aid:$aid by uid: $userid / $uname from: {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_USER_AGENT']})");
header("location: accred_list");
die();
}
syslog(LOG_INFO, "Load entry aid:$aid by uid: $userid / $uname from: {$_SERVER['REMOTE_ADDR']} ({$_SERVER['HTTP_USER_AGENT']})");
$ar = unserialize($row['formdata']);
// Return to list if we are not admin and trying to edit a finalised form. Shame on us
if(!$isAdmin && $row['status']!=1) {
header("location: accred_list");
die();
}
// Retrieve the name of the original requestor
$reqName = $row['name'];
}
// instantiate a Zebra_Form object
$form = new Zebra_Form('form');
if(!$aid) {
$ti = "Nouvelle commande";
$forWho = $_SESSION['name'];
}
else {
$ti = 'Commande par '.$reqName. ', créée le '.$row['created'];
$forWho = $ar['demande_pour'];
}
if($isAdmin) {
$form->add('label','label_demande_pour','','Demandeur');
$form->add('text', 'demande_pour', $forWho);
}
$form->add('label', 'label_titre','',$ti);
$form->add('label', 'label_salutation', 'salutation', 'Salutation:');
$obj = $form->add('select', 'salutation', $ar['salutation']);
$obj->add_options(array(
'Madame' => 'Madame',
'Monsieur' => 'Monsieur',
));
$obj->set_rule(array(
'required' => array('error', 'La salutation est obligatoire!')
));
// the label for the "name" element
$form->add('label', 'label_name', 'nom', 'Nom:');
// add the "name" element
$obj = $form->add('text', 'nom', $ar['nom']);
// set rules
$obj->set_rule(array(
// error messages will be sent to a variable called "error", usable in custom templates
'required' => array('error', 'Le champ Nom est obligatoire!')
));
// the label for the "name" element
$form->add('label', 'label_prenom', 'prenom', 'Prenom:');
// add the "name" element
$obj = $form->add('text', 'prenom', $ar['prenom']);
// set rules
$obj->set_rule(array(
// error messages will be sent to a variable called "error", usable in custom templates
'required' => array('error', 'Le champ Prénom est obligatoire!')
));
$form->add('label', 'label_soc', 'societe', 'Société:');
// add the "name" element
$obj = $form->add('text', 'societe', $ar['societe']);
// set rules
$obj->set_rule(array(
// error messages will be sent to a variable called "error", usable in custom templates
'required' => array('error', 'Le champ Société est obligatoire!')
));
// "email"
$form->add('label', 'label_email', 'email', 'Adresse e-mail:');
$obj = $form->add('text', 'email', $ar['email']);
$obj->set_rule(array(
'required' => array('error', 'Adresse email est obligatoire!'),
'email' => array('error', "L'adresse e-mail n'a pas l'air correcte..."),
));
$obj = $form->add('select', 'nature_prest', $ar['nature_prest']);
$obj->add_options(array(
'Concours' => 'Concours',
'Contrat Partenaires' => 'Contrat Partenaire',
'Echange Festival' => 'Echange Festival',
'Autre' => 'Autre'
));
$obj->set_rule(array(
'required' => array('error', 'La nature de la prestation est obligatoire!')
));
$obj = $form->add('select', 'presta_concours', $ar['presta_concours']);
$obj->add_options(array(
'Concours Caribana' => 'Concours Caribana',
'Concours Médias' => 'Concours médias',
'Autre' => 'Autre'
));
$obj->set_rule(array(
'required' => array('error', 'La type de concours est obligatoire!'),
'dependencies' => array(array(
'nature_prest' => 'Concours',
), 'mycallback, 1'),
));
$form->add('label', 'label_why', 'why', 'Précisions');
$obj = $form->add('textarea', 'why',$ar['why'], array('cols' => 60));
$obj->set_rule(array(
'required' => array('error', 'Merci de préciser la nature de la prestation!'),
));
// "digits"
$form->add('label', 'label_nor_tot', 'nor_tot', 'Total nombre entrées:');
$obj = $form->add('text', 'nor_tot',$ar['nor_tot'],array('readonly' => 'readonly', 'size' => '5'));
$obj->set_attributes(array('class'=>'num'), false);
$form->add('label', 'label_vip_tot', 'vip_tot', 'Total accès VIP:');
$obj = $form->add('text', 'vip_tot',$ar['vip_tot'],array('readonly' => 'readonly', 'size' => '5'));
$obj->set_attributes(array('class'=>'num'), false);
$form->add('label', 'label_presta_tot', 'presta_tot', 'Total Prestations CHF:');
$obj = $form->add('text', 'presta_tot',$ar['presta_tot'],array('readonly' => 'readonly', 'size' => '5'));
$obj->set_attributes(array('class'=>'num'), false);
$days = array('mer','jeu','ven','sam','dim');
foreach($days as $one) {
$form->add('label', 'label_digits', $one.'_nor', 'Digits:');
$obj = $form->add('text', $one.'_nor', $ar[$one.'_nor']);
$obj->set_rule(array(
'digits' => array('', 'error', 'Accepts only digits (0 to 9)')
));
$obj->set_attributes(array('class'=>'num_nor num_prest num'), false);
$form->add('note', 'note_digits', $one.'_nor', 'Accepts only digits (0 to 9)');
$form->add('label', 'label_digits', $one.'_vip', 'Digits:');
$obj = $form->add('text', $one.'_vip', $ar[$one.'_vip']);
$obj->set_rule(array(
'digits' => array('', 'error', 'Accepts only digits (0 to 9)')
));
$obj->set_attributes(array('class'=>'num_vip num_prest num'), false);
$form->add('note', 'note_digits', $one.'_vip', 'Accepts only digits (0 to 9)');
}
// VIP gratuit ?
$form->add('label', 'label_vip_gratuit', 'vip_gratuit', 'Gratuité des billets VIP:');
$obj = $form->add('checkbox', 'vip_gratuit', 'oui' );
if($ar['vip_gratuit']=='oui') {
$obj->set_attributes(array('checked'=>'checked'));
}
// Paiement
$form->add('label', 'label_type_paiement', 'type_paiement', 'Type de paiement:');
$obj = $form->add('select', 'type_paiement', $ar['type_paiement']);
$obj->add_options(array(
'Offert' => 'Offert',
'Payant' => 'Payant',
));
$obj->set_rule(array(
'required' => array('error', 'Veuillez choisir un type de paiement')
));
$form->add('label', 'label_choix_paiement_payant', 'choix_paiement_payant', 'Choix de paiement:');
$obj = $form->add('select', 'choix_paiement_payant', $ar['choix_paiement_payant']);
$obj->add_options(array(
'Cash' => 'Cash aux accréditations',
'Autre' => 'Autre'
));
$obj->set_rule(array(
'required' => array('error', 'Le choix de paiement payant est obligatoire!'),
'dependencies' => array(array(
'type_paiement' => 'Payant',
), 'mycallback, 3'),
));
$form->add('label', 'label_paiement_autre', 'paiement_autre', 'Autre');
$obj = $form->add('textarea', 'paiement_autre', $ar['paiement_autre'], array('cols' => 60));
$obj->set_rule(array(
'required' => array('error', 'Merci de préciser la nature du paiement!'),
'dependencies' => array(array(
'choix_paiement_payant' => 'Autre',
), 'mycallback, 4'),
));
// Distribution
$form->add('label', 'label_distribution', 'distribution', 'Distribution:');
$obj = $form->add('select', 'distribution', $ar['distribution']);
$obj->add_options(array(
'Accreditations' => 'Retirer aux accréditations',
'Poste' => 'Envoyer par la poste',
));
$obj->set_rule(array(
'required' => array('error', 'Veuillez choisir un mode de distributions')
));
$form->add('label', 'label_adresse_distrib', 'adresse_distrib', 'Adresse de distribution');
$obj = $form->add('textarea', 'adresse_distrib', $ar['adresse_distrib'], array('cols' => 60));
$obj->set_rule(array(
'required' => array('error', 'Merci de fournir une adresse de distribution'),
'dependencies' => array(array(
'distribution' => 'Poste',
), 'mycallback, 5'),
));
// "submit"
$form->add('submit', 'btnsubmit', 'Enregistrer');
if($row['status']==1) {
$form->add('submit', 'btnfinalise', 'Enregistrer et Finaliser');
}
if($row['status']==0 && $isAdmin) {
$form->add('submit', 'btnprocess', 'Marquer comme traité');
}
// Admins can un-finalise
if($isAdmin && $row['status']==0 && $aid) {
$form->add('submit', 'btnunfinalise', 'Enregistrer et rendre éditable');
}
// $form->add('submit', 'btncancel', 'Annuler');
$form->add('button', 'btncancel', 'Annuler', 'button', array('onClick' => 'self.location="accred_list"'));
// Only show Delete if existing entry is edited
if($aid) {
$form->add('submit','btndelete','Supprimer');
// $form->add('button','btndelete','Supprimer','submit');
}
// if the form is valid
if ($form->validate()) {
// show results
show_results();
// otherwise
} else
// generate output using a custom template
// $form->render('*horizontal');
$form->render('custom-template.php');
?>