Mini shell

Current Path : /web/htdocs/www.entinoprofit.org/home/database/
Current File : /web/htdocs/www.entinoprofit.org/home/database/schedasocio.php
<?php

session_start();
include_once("include/config.php");
include_once("include/auth.lib.php");

$id = $_GET['id'];

if ($id == "") {
header("Location: index.php"); /* Ridireziona il browser */

exit;
}


list($status, $user) = auth_get_status();

if($status == AUTH_LOGGED & auth_get_option("TRANSICTION METHOD") == AUTH_USE_LINK){
	$link = "?uid=".$_GET['uid'];
}else	$link = '';

if($status == AUTH_LOGGED){



if(isset($_POST['rinnovo']) && $_POST['tessera'] != '') {

	$tessera = $_POST['tessera'];
	$date = date('Y-m-d');
	
	if($tessera > '2760000' && $tessera < '2760500') {

		$annoAss = '1314';

	} elseif($tessera > '3020000' && $tessera < '4064000') {
		
		$annoAss = '1213';
		
	} elseif($tessera > '4064000' && $tessera < '5000000') {
		
		$annoAss = '1314';
			
	} elseif($tessera > '5000000' && $tessera < '7000000') {
	
		$annoAss = '1415';

	} elseif($tessera > '7000000' && $tessera < '8000000') {
	
		$annoAss = '1516';

	} elseif($tessera > '8000000' && $tessera < '9000000') {
	
		$annoAss = '1617';

	} elseif($tessera > '9000000') {
	
		$annoAss = '1718';

	}
	

	$delmail = "INSERT INTO tessera (idsocio,club,idclub,tessera,stagione,date) VALUES ('$id','$user[username]','$user[id]','$tessera','$annoAss','$date')";
	$delres = mysql_query($delmail) or die(mysql_error());
	
	$query ="UPDATE socio SET temp = '0' WHERE id = '$id'";
	$result = mysql_query($query) or die(mysql_error());


} 

if(isset($_POST['addsinistro'])) {

	$tessera = $_POST['tessera'];
	$descrizione = $_POST['descrizione'];
	$stato = $_POST['stato'];
	$spesa = $_POST['spesa'];
	$data_sinistro = $_POST['date'];
	$data_ins = date('Y-m-d');
	
	$addSin = "INSERT INTO sinistri (idsocio,tessera,descrizione,stato,spesa,data_sinistro,data_ins) VALUES ('$id','$tessera','$descrizione','$stato','$spesa','$data_sinistro','$data_ins')";
	$resSin = mysql_query($addSin) or die(mysql_error());
	

}

if(isset($_POST['modsinistro'])) {


$idSin = $_GET['idSin'];
$tessera = $_POST['tessera'];
$descrizione = $_POST['descrizione'];
$stato = $_POST['stato'];
$spesa = $_POST['spesa'];
$data_sinistro = $_POST['data_sinistro'];

$queryModSin ="UPDATE sinistri SET tessera = '$tessera', descrizione = '$descrizione', stato = '$stato', spesa = '$spesa', data_sinistro = '$data_sinistro' WHERE id = '$idSin'";
$resultModSin = mysql_query($queryModSin) or die (mysql_error());

}

if(isset($_GET['delTex']) && $_GET['delTex'] != '') {

	$delTex = $_GET['delTex'];

	$query ="DELETE FROM tessera WHERE idsocio = '$id' AND id = '$delTex'";
	$result = mysql_query($query) or die(mysql_error());

}

if(isset($_GET['delSin']) && $_GET['delSin'] != '') {

	$delSin = $_GET['delSin'];

	$query ="DELETE FROM sinistri WHERE idsocio = '$id' AND id = '$delSin'";
	$result = mysql_query($query) or die(mysql_error());

}

?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<title>Database ACSI Comitato Provinciale di Padova</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="style.css" rel="stylesheet" type="text/css">
</head>

<body>
<table class="table1">
  <!--DWLayoutTable-->
  <tr>
    <td height="20" colspan="9"><div align="center">Database ACSI Comitato Provinciale di Padova</div></td>
  </tr>
  <tr>
    <td height="20"></td>
  </tr>
  <tr>
    <td height="20" colspan="9"><div align="center"><?php include('in.php'); ?></div></td>
  </tr>
</table>
<p></p>
<?php
if ($user["admin"] != 1) {
$query = "SELECT * FROM socio WHERE id = '$id' AND club = '".$user["username"]."'";
} else {
$query = "SELECT * FROM socio WHERE id = '$id'";
?>
<table width="100%" class="table2">

  <tr>
    <td height="22" colspan="25">
      <div align="center">Lista Soci Globale</div></td>
  </tr>
 <tr>
    <td width="45" ><div align="center"><a href="lista.php?lettera=a">A</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=b">B</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=c">C</a></div></td>
    <td width="45" ><div align="center"><a href="lista.php?lettera=d">D</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=e">E</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=f">F</a></div></td>
    <td width="45" ><div align="center"><a href="lista.php?lettera=g">G</a></div></td>
    <td width="45" ><div align="center"><a href="lista.php?lettera=h">H</a></div></td>
    <td width="34" ><div align="center"><a href="lista.php?lettera=i">I</a></div></td>
	<td width="34" ><div align="center"><a href="lista.php?lettera=j">J</a></div></td>
	<td width="41" ><div align="center"><a href="lista.php?lettera=k">K</a></div></td>
    <td width="38" ><div align="center"><a href="lista.php?lettera=l">L</a></div></td>
    <td width="48" ><div align="center"><a href="lista.php?lettera=m">M</a></div></td>
    <td width="45" ><div align="center"><a href="lista.php?lettera=n">N</a></div></td>
    <td width="45" ><div align="center"><a href="lista.php?lettera=o">O</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=p">P</a></div></td>
    <td width="45" ><div align="center"><a href="lista.php?lettera=q">Q</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=r">R</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=s">S</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=t">T</a></div></td>
    <td width="45" ><div align="center"><a href="lista.php?lettera=u">U</a></div></td>
    <td width="41" ><div align="center"><a href="lista.php?lettera=v">V</a></div></td>
    <td width="55" ><div align="center"><a href="lista.php?lettera=w">W</a></div></td>
	<td width="41" ><div align="center"><a href="lista.php?lettera=y">Y</a></div></td>
    <td width="56" ><div align="center"><a href="lista.php?lettera=z">Z</a></div></td>

  </tr>
</table><p></p>
  <?php
}
$risultato = mysql_query($query) or die("Query 1 failed");
$array = mysql_fetch_array($risultato, MYSQL_BOTH)


?>

<div id="main">
<div id="box-1">
<table width="100%" class="table3">
  <!--DWLayoutTable-->
	<thead>
		<tr><th height="22" colspan="3"><div align="center">
<?php
echo "$array[cognome] $array[nome] - $array[club]" ;

echo "";


?>

        </div></th>
  </tr></thead>
  <tr>
    <td height="20" colspan="3" valign="top" class="desc">Dati anagrafici</td>
  </tr>
  <tr>
    <td height="26" valign="baseline" ><div align="justify" >Nome</div></td>
    <td colspan="2" class="desc"><?php echo stripslashes($array['nome']); ;?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline"><div align="justify" >Cognome</div></td>
    <td colspan="2" class="desc"><?php echo stripslashes($array['cognome']); ;?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline"><div align="justify" >Indirizzo</div></td>
    <td colspan="2" class="desc"><?php echo stripslashes($array['indirizzo'].' , '.$array['cap'].' '.$array['citta'].' ('.$array['pvres'].')'); ?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline"><span >Nato a</span></td>
    <td colspan="2" class="desc"><?php echo stripslashes($array['natoa']); echo ' ('.$array['natopv'].') 
	il '.$array['giorno'].'/'.$array['mese'].'/'.$array['anno'].'';?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline"><div align="justify"> N&deg; documento</div></td>
    <td colspan="2" class="desc"><?php echo "$array[numdoc]" ;?></td>
  </tr>
    <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline"><div align="justify"> Scadenza documento</div></td>
    <td colspan="2" class="desc"><?php echo "$array[datadoc]" ;?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline">Telefono</td>
    <td colspan="2" class="desc"><?php echo "$array[tel]" ;?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline">Cellulare</td>
    <td colspan="2" class="desc"><?php echo "$array[cel]" ;?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline">Email</td>
    <td colspan="2" class="desc"><?php echo "$array[email]" ;?></td>
  </tr>
  <tr bordercolor="#3333CC" >
    <td height="26" valign="baseline">Fax</td>
    <td colspan="2" class="desc"><?php echo "$array[fax]" ;?></a></td>
  </tr>
  <tr>
    <td height="26" valign="baseline">Note</td>
    <td colspan="2" class="desc"><?php echo "$array[note]" ;?></a></td>
  </tr>
</table>
</div>

<div id="box-2">
<table width="100%" class="table3">
	<thead>
		<tr><th height="20" colspan="5"><div align="center">Cronologia tessera</div></th>
	  </tr></thead>
	  <tr>
		<td height="26" colspan="5" valign="top"><!--DWLayoutEmptyCell-->&nbsp;</td>
		</tr>
	  <tr >
		<td width="5%" height="10" valign="top"><div align="center">ID</div></td>
		<td width="30%" valign="top"><div align="center">Tessera</div></td>
		<td width="30%" valign="top"><div align="center">Stagione</div></td>
		<td width="30%" valign="top"><div align="center">Data</div></td>
		<td width="5%" valign="top"><div align="center"></div></td>
</tr>

<?php 
$query = "SELECT * FROM tessera WHERE idsocio = '$id' ORDER BY id ASC";
$result = mysql_query($query) or die (mysql_error());
while ($array = mysql_fetch_array($result, MYSQL_BOTH)) { 

	$data = ucfirst(strftime("%a %d %b %Y",strtotime($array['date']))); 

	echo '<tr class="ticket2"><td>'.$array['id'].'</td><td>'.$array['tessera'].'</td><td>'.$array['stagione'].'</td><td>'.$data.'</td>';


	if($user['admin'] == 1) {
	
	echo '<td><a href="schedasocio.php?id='.$id.'&delTex='.$array['id'].'"><img src="http://www.entinoprofit.org/database/images/no.gif" alt="Cancella Tessera" border="0"></a></td>';
	
	} else {
		
		echo '<td>&nbsp;</td>';
	
	}
	
	echo "<tr>";
}




?>

</table>




<?php 
$query = "SELECT * FROM sinistri WHERE idsocio = '$id' ORDER BY id ASC";
$result = mysql_query($query) or die (mysql_error());
$num_rows = mysql_num_rows($result);

if($num_rows >= 1) {

		echo '<p></p><table width="100%" class="table3">
			<thead>
				<tr><th height="20" colspan="7"><div align="center">Sinistri</div></th>
			  </tr></thead>
			  <tr>
				<td height="26" colspan="7" valign="top"><!--DWLayoutEmptyCell-->&nbsp;</td>
				</tr>
			  <tr >
				<td width="5%" height="10" valign="top"><div align="center">ID</div></td>
				<td width="20%" valign="top"><div align="center">Tessera</div></td>
				<td width="20%" valign="top"><div align="center">Stato</div></td>
				<td width="15%" valign="top"><div align="center">Spesa</div></td>
				<td width="20%" valign="top"><div align="center">Data sinistro</div></td>
				<td width="20%" valign="top"><div align="center">Data inserimento</div></td>
				<td></td>
		</tr>';

		while ($array = mysql_fetch_array($result, MYSQL_BOTH)) { 
		
			$data_ins = ucfirst(strftime("%a %d %b %Y",strtotime($array['data_ins']))); 
			$data_sinistro = ucfirst(strftime("%a %d %b %Y",strtotime($array['data_sinistro']))); 
		
		
			echo '<tr class="ticket2"><td><a href="modsinistro.php?id='.$id.'&idSin='.$array['id'].'">'.$array['id'].'</a></td><td>'.$array['tessera'].'</td><td>'.$array['stato'].'</td><td>'.$array['spesa'].'</td><td>'.$data_sinistro.'</td><td>'.$data_ins.'</td>';
			
				if($user['admin'] == 1) {
	
				echo '<td><a href="schedasocio.php?id='.$id.'&delSin='.$array['id'].'"><img src="http://www.entinoprofit.org/database/images/no.gif" alt="Cancella Sinistro" border="0"></a></td>';
				
				} else {
					
					echo '<td>&nbsp;</td>';
				
				}
			
			echo '</tr>';
			
			if($array['descrizione'] != '') {
			
				echo '<tr class="ticket2"><td colspan="7">'.$array['descrizione'].'</td></tr>';
			
			}
			
		}

echo '</table>';


}

?>

<p></p>
<div><form method="post" action="schedasocio.php?id=<?php echo $id; ?>">
<input name="tessera" type="text" maxlength="10">
<input type="submit" name="rinnovo" value="Inserisci nuova tessera" >
</form>
<div class="alert"><img src='images/das.gif' border='0' alt='Visualizza domanda'> <a href='dasprint.php?id=<?php echo $id; ?>' target='_blank'>Visualizza domanda di ammissione a socio</a></div>
<div class="alert"><img src='images/edit.png' border='0' alt='Visualizza domanda'> <a href='modsocio.php?id=<?php echo $id; ?>' >Modifica dati anagrafici socio</a></div>
<div class="alert"><img src='images/sinistro.png' border='0' alt='Aggiungi Sinistro'> <a href='addsinistro.php?idsocio=<?php echo $id; ?>' >Inserisci sinistro</a></div>
</div>
</div>

</div>
</body>
</html>
<?php }else echo "Non hai i diritti per visualizzare la pagina"; ?>