bmspage/includes/update_event.php

<?php
	include "db_config.php";
$conn = mysqli_connect($servername, $username, $password, $db);

$event_id = mysqli_real_escape_string($conn, $_POST['event']);
$description = mysqli_real_escape_string($conn, $_POST['description']);
$is_ongoing = mysqli_real_escape_string($conn, $_POST['is_ongoing']);
$end_date_time = mysqli_real_escape_string($conn, $_POST['end_date_time']);
$user = mysqli_real_escape_string($conn, $_POST['user']);

$description_for_email = nl2br($_POST['description']);

//Get timestamp
$timestamp = new DateTime();
$update_date_time = date_format($timestamp, 'Y/m/d H:i');

//Insert event update into event updates table
$update = "INSERT INTO event_updates (update_desc, update_date_time, update_is_ongoing, end_date_time, event_id, update_user) VALUES ('$description', '$update_date_time', '$is_ongoing', '$end_date_time', '$event_id', '$user')";

//Update value of is_ongoing in main events table
$is_ongoing_endtime_query = "UPDATE events SET is_ongoing='$is_ongoing', date_time_end='$end_date_time' WHERE event_id='$event_id'";

//Set variables for email
//MySQL queries to get Unit Name and Alert
$unitname_query = "SELECT unit_name FROM units AS units INNER JOIN events AS events ON events.unit_id=units.unit_id WHERE events.event_id=".$_POST['event']."";
$unitname_query_run = mysqli_query($conn, $unitname_query);
$unitname_array = mysqli_fetch_assoc($unitname_query_run);
$unitname = $unitname_array['unit_name'];

$alertname_query = "SELECT alert_name FROM alerts AS alerts INNER JOIN events AS events ON events.alert_id=alerts.alert_id WHERE events.event_id=".$_POST['event']."";
$alertname_query_run = mysqli_query($conn, $alertname_query);
$alertname_array = mysqli_fetch_assoc($alertname_query_run);
$alertname = $alertname_array['alert_name'];

$start_date_time_query = "SELECT date_time_start FROM events WHERE event_id=".$_POST['event']."";
$start_date_time_query_run = mysqli_query($conn, $start_date_time_query);
$start_date_time_array = mysqli_fetch_assoc($start_date_time_query_run);
$start_date_time = $start_date_time_array['date_time_start'];
//If successful, redirect back to index.php and send email, else tell user that it failed.
$event_update = mysqli_query($conn, $is_ongoing_endtime_query);
$result = mysqli_query($conn, $update);
if($result){
        echo("Event added, redirecting...");
        sleep (2);
        header('Location: ../index.php');
        //Set Email Info
        $to = "TO.ADDRES@DOMAIN.com";
        $subject = "TEST Updated BMS Alert: ".$unitname." ".$alertname."";
	$headers = "MIME-Version: 1.0" . "\r\n";
	$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";
	$headers .= "From: FROM.ADDRESS@DOMAIN.com";
	$message = "
		<html>
		<body>
		BMS Unit: ".$unitname."
		<br />
		Type of Alert: ".$alertname."
		<br />
		Start Date / Time: ".$start_date_time."
		<br />
		End Date / Time: ".$end_date_time."
		<br />
		Description: ".$description_for_email."
		<br />
		Updated by: ".$user."
		<br />
		Event Link: https://DOMAIN.com/bms/viewevent.php?eventid=$event_id
		<br /><br />
		This message generated by https://DOMAIN.com/bms
		</body>
		</html>";
	//WordWrap the message
	$message_wrapped = wordwrap($message, 70, "\n", true);
	//Send the email
        mail($to,$subject,$message_wrapped,$headers);
} else{
        echo('Error! Please <a href="javascript:history.back()">go back</a> and try again');
}
        $conn->close();
?>
Initial commit 2015-03-30 23:45:30 -04:00			`<?php`
Change how event updates are handled 2015-04-20 18:58:10 -04:00			`include "db_config.php";`
Initial commit 2015-03-30 23:45:30 -04:00			`$conn = mysqli_connect($servername, $username, $password, $db);`

			`$event_id = mysqli_real_escape_string($conn, $_POST['event']);`
Update emailing scripts to send html formatted emails. 2015-04-05 23:01:56 -04:00			`$description = mysqli_real_escape_string($conn, $_POST['description']);`
Initial commit 2015-03-30 23:45:30 -04:00			`$is_ongoing = mysqli_real_escape_string($conn, $_POST['is_ongoing']);`
			`$end_date_time = mysqli_real_escape_string($conn, $_POST['end_date_time']);`
			`$user = mysqli_real_escape_string($conn, $_POST['user']);`

Update emailing scripts to send html formatted emails. 2015-04-05 23:01:56 -04:00			`$description_for_email = nl2br($_POST['description']);`
Change how event updates are handled 2015-04-20 18:58:10 -04:00
			`//Get timestamp`
			`$timestamp = new DateTime();`
			`$update_date_time = date_format($timestamp, 'Y/m/d H:i');`

			`//Insert event update into event updates table`
Changing more update handling 2015-04-20 20:53:49 -04:00			`$update = "INSERT INTO event_updates (update_desc, update_date_time, update_is_ongoing, end_date_time, event_id, update_user) VALUES ('$description', '$update_date_time', '$is_ongoing', '$end_date_time', '$event_id', '$user')";`
Change how event updates are handled 2015-04-20 18:58:10 -04:00
			`//Update value of is_ongoing in main events table`
			`$is_ongoing_endtime_query = "UPDATE events SET is_ongoing='$is_ongoing', date_time_end='$end_date_time' WHERE event_id='$event_id'";`
Initial commit 2015-03-30 23:45:30 -04:00
Added email functionality to event insertions and updates 2015-04-05 17:56:56 -04:00			`//Set variables for email`
			`//MySQL queries to get Unit Name and Alert`
			`$unitname_query = "SELECT unit_name FROM units AS units INNER JOIN events AS events ON events.unit_id=units.unit_id WHERE events.event_id=".$_POST['event']."";`
			`$unitname_query_run = mysqli_query($conn, $unitname_query);`
			`$unitname_array = mysqli_fetch_assoc($unitname_query_run);`
			`$unitname = $unitname_array['unit_name'];`

			`$alertname_query = "SELECT alert_name FROM alerts AS alerts INNER JOIN events AS events ON events.alert_id=alerts.alert_id WHERE events.event_id=".$_POST['event']."";`
			`$alertname_query_run = mysqli_query($conn, $alertname_query);`
			`$alertname_array = mysqli_fetch_assoc($alertname_query_run);`
			`$alertname = $alertname_array['alert_name'];`

			`$start_date_time_query = "SELECT date_time_start FROM events WHERE event_id=".$_POST['event']."";`
			`$start_date_time_query_run = mysqli_query($conn, $start_date_time_query);`
			`$start_date_time_array = mysqli_fetch_assoc($start_date_time_query_run);`
			`$start_date_time = $start_date_time_array['date_time_start'];`
			`//If successful, redirect back to index.php and send email, else tell user that it failed.`
Change how event updates are handled 2015-04-20 18:58:10 -04:00			`$event_update = mysqli_query($conn, $is_ongoing_endtime_query);`
			`$result = mysqli_query($conn, $update);`
Initial commit 2015-03-30 23:45:30 -04:00			`if($result){`
Added email functionality to event insertions and updates 2015-04-05 17:56:56 -04:00			`echo("Event added, redirecting...");`
			`sleep (2);`
			`header('Location: ../index.php');`
			`//Set Email Info`
Change how event updates are handled 2015-04-20 18:58:10 -04:00			`$to = "TO.ADDRES@DOMAIN.com";`
			`$subject = "TEST Updated BMS Alert: ".$unitname." ".$alertname."";`
			`$headers = "MIME-Version: 1.0" . "\r\n";`
			`$headers .= "Content-type:text/html;charset=UTF-8" . "\r\n";`
			`$headers .= "From: FROM.ADDRESS@DOMAIN.com";`
			`$message = "`
			`<html>`
			`<body>`
			`BMS Unit: ".$unitname."`
			`<br />`
			`Type of Alert: ".$alertname."`
			`<br />`
			`Start Date / Time: ".$start_date_time."`
			`<br />`
			`End Date / Time: ".$end_date_time."`
			`<br />`
			`Description: ".$description_for_email."`
			`<br />`
			`Updated by: ".$user."`
			`<br />`
			`Event Link: https://DOMAIN.com/bms/viewevent.php?eventid=$event_id`
			`<br /><br />`
			`This message generated by https://DOMAIN.com/bms`
			`</body>`
			`</html>";`
			`//WordWrap the message`
			`$message_wrapped = wordwrap($message, 70, "\n", true);`
			`//Send the email`
Added email functionality to event insertions and updates 2015-04-05 17:56:56 -04:00			`mail($to,$subject,$message_wrapped,$headers);`
Initial commit 2015-03-30 23:45:30 -04:00			`} else{`
Added email functionality to event insertions and updates 2015-04-05 17:56:56 -04:00			`echo('Error! Please <a href="javascript:history.back()">go back</a> and try again');`
Initial commit 2015-03-30 23:45:30 -04:00			`}`
Added email functionality to event insertions and updates 2015-04-05 17:56:56 -04:00			`$conn->close();`
Initial commit 2015-03-30 23:45:30 -04:00			`?>`