[ Avaa Bypassed ]




Upload:

Command:

hmhc3928@3.145.174.57: ~ $
<?php
    include_once($_SERVER['DOCUMENT_ROOT'] . "/php/common_functions.php"); //common functions in the course registartion system
    include_once($_SERVER['DOCUMENT_ROOT'] . "/php/config.php"); //holds global config variables
	require_once($_SERVER['DOCUMENT_ROOT'] . "/phplist/config/config.php"); //phplist config values                
 	check_if_authenticated('admin');//check if user is logged in
	$db = mysqli_connect($mysql_server, $user, $pass, $database);

	if(isset($_POST['cancel']) && ($_POST['cancel'] == "No")){
		header("location:attendees.php?session_id=".$_POST['session_id']);
		exit;
	}

	$page_title = "Remove Attendee | CES Admin";
	    include_once($_SERVER['DOCUMENT_ROOT'] . "/admin/php/top-admin.php"); //get the HTML heading common to all pages in the CES admin module
	echo "<article class='ces-admin'>
    		<h2>CES Admin - Remove Attendee</h2>";
    include_once($_SERVER['DOCUMENT_ROOT'] . "/admin/php/nav-admin.php");
	

	if(isset($_POST['remove_attendee'])){
		if(remove_attendee($_POST['session_id'], $_POST['id'], $_POST['location_id'])){
			echo "\n<p class='alert alert-success'>Success - $_POST[first_name] $_POST[last_name] has been removed from the session.</p>";
			echo "\n<a class='btn btn-lg ces-green-btn' href='attendees.php?session_id=".$_POST['session_id']."'>Session Attendees List</a>";
			echo "\n<a class='btn btn-lg ces-orange-btn' href='../users/index.php?id=".$_POST['id']."'>User's Course List</a>";
		}else{
			print_sql_error('Error - could not remove attendee from the session when trying to do:', $delete_sql);
		}//else
	}
	else { //if form has not been submitted yet ask user to confirm that they really want to remove attendee from session
		echo "\n<form method='post' action='" . $_SERVER['PHP_SELF'] . "''>";
		echo "<input type='hidden' name='session_id' value='" . $_GET['session_id'] . "''>"; //so we can keep track of the session_id
		echo "<input type='hidden' name='id' value='" . $_GET['id'] . "''>"; //so we can keep track of the person
		echo "<input type='hidden' name='location_id' value='" . $_GET['location_id'] . "''>"; //so we can keep track of the location

		//get some details about the attendee we are removing
		$attendee_sql = mysqli_query($db, "SELECT first_name.value as first_name, last_name.value as last_name, user.email
		FROM phplist_user_user user
		LEFT OUTER JOIN phplist_user_user_attribute first_name ON user.id = first_name.userid AND first_name.attributeid = '1'
		LEFT OUTER JOIN phplist_user_user_attribute last_name ON user.id = last_name.userid AND last_name.attributeid = '2'
		WHERE user.id = '$_GET[id]'");
		$attendee = mysqli_fetch_row($attendee_sql);
		
		echo "<input type='hidden' name='first_name' value='" . $attendee[0] . "''>"; //so we can use the person's first name once form is submitted
		echo "<input type='hidden' name='last_name' value='" . $attendee[1] . "''>"; //so we can use the person's last name once form is submitted
		echo "<input type='hidden' name='user_type' value='" . $_GET['user_type'] . "''>"; //so we can keep track of if a user or admin is logged in
		
		//get the course details so we can show which session the attendee will be removed from for confirmation
		$session_sql = mysqli_query($db, "SELECT session.session_id, course.course_id, course.course_name, course.course_description, unix_timestamp(session.start_dt) start_dt, unix_timestamp(session.end_dt) end_dt, location.location_name, location.address_line1, location.address_line2, location.city, location.province, location.postal_code, level.level_description
		FROM ces_sessions session 
		LEFT OUTER JOIN ces_courses course ON session.course_id = course.course_id 
		LEFT OUTER JOIN ces_locations location ON location.location_id = '$_GET[location_id]'
		LEFT OUTER JOIN ces_levels level ON level.level_id = course.level_id
		WHERE session.session_id = '$_GET[session_id]'");
		
		while ($session_query = mysqli_fetch_array($session_sql)){

		echo "<p class='ces-confrim-removal'>Are you sure you want to remove <strong>". $attendee[0] . " " . $attendee[1]."</strong> from this session?</p>";
		
	?>	
			<dl class='ces-description-list'>
				<dt>Course:</dt>
				<dd><?php echo $session_query['course_name']; ?></dd>

			<dt>Date:</dt>
		<?php
			if (date('Ymd', $session_query['start_dt']) == date('Ymd', $session_query['end_dt'])){
				//starts and ends on the same day
				echo "<dd class='ces-registration-time'>". date('F j, Y g:i A', $session_query['start_dt']). " to " . date('g:i A', $session_query['end_dt']) . "</dd>";
			}
			else{
				echo "<dd class='ces-registration-time'>". date('F j, Y g:i A', $session_query['start_dt']). " to " . date('F j, Y g:i A', $session_query['end_dt']) . "</dd>";
			}
		?>

			<dt>Description:</dt>
			<dd><?php echo ($session_query['course_description']?$session_query['course_description']: 'None'); ?></dd>

			<dt>Level:</dt>
			<dd><?php echo ($session_query['level_description']? $session_query['level_description']: 'None'); ?></dd>
			<?php if(!is_session_online($session_query['session_id'])){?>
			<dt>Location:</dt>
			<dd>
				<?php 
					//2011-05-28 - wsopko - output session name as map link
					//echo $session_query['location_name'];
					echo $session_query['location_name'];
					if (strlen($session_query['address_line1']) > 0)
						echo "\n<br>" . $session_query['address_line1'];
					if (strlen($session_query['address_line2']) > 0)
						echo "\n<br>" . $session_query['address_line2'];
					if (strlen($session_query['city']) > 0)
						echo "\n<br>" . $session_query['city'];
					if (strlen($session_query['province']) > 0)
						echo ", " . $session_query['province'];
					if (strlen($session_query['postal_code']) > 0)
						echo "\n<br>" . substr($session_query['postal_code'], 0, 3). " " . substr($session_query['postal_code'], 3, 3);
				?>
			</dd>
			<?php } ?>
			</dl>
	
	<div class="ces-remove-attendee-page-btns">
		<input class="btn btn-lg btn-block ces-green-btn" type='submit' name='remove_attendee' value="Yes">
		<input class="btn btn-lg btn-block ces-red-btn" type='submit' name='cancel' value="No">
	</div>	
	<?php 
		}//while	
	?>	
			</form>
	<?php 
	}//else

?>
	

  </article>
    


  </section><!-- #middle-->

</div><!-- #wrapper --> 
 
<?php require_once $_SERVER['DOCUMENT_ROOT'].'/require/footer.php';?>


Filemanager

Name Type Size Permission Actions
files Folder 0755
add.php File 11.66 KB 0644
attendees.php File 19.54 KB 0644
edit.php File 22.29 KB 0644
email-attendees.php File 8.04 KB 0644
error_log File 9.19 KB 0644
remove-attendee.php File 6.17 KB 0644