<?
require_once("includes/config.php");
session_start();
$db_connection = mysql_connect ($DBHost, $DBUser, $DBPass) OR die (mysql_error());
$db_select = mysql_select_db ($DBName) or die (mysql_error());
if($use_auth)
{
if(!isset($_SESSION['admin_id']))
{
if ((!isset($_POST['USER'])) AND (!isset($_POST['PASS']))) {
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>PHPCalendar - Add Event</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="images/cal.css" rel="stylesheet" type="text/css">
</head>
<body>
<br><br>
<form name="form1" method="post" action="event_add.php">
<table border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td>Username:</td>
</tr>
<tr>
<td><input name="USER" type="text" id="USER"></td>
</tr>
<tr>
<td height="15">Password:</td>
</tr>
<tr>
<td><input name="PASS" type="password" id="PASS"></td>
</tr>
<tr>
<td height="50"><div align="center">
<input type="submit" name="Submit" value=" login ">
</div></td>
</tr>
</table>
<input type="hidden" name="day" id="day" value="<? echo $_GET['day']; ?>">
<input type="hidden" name="month" id="month" value="<? echo $_GET['month']; ?>">
<input type="hidden" name="year" id="year" value="<? echo $_GET['year']; ?>">
<input type="hidden" name="id" id="id" value="<? echo $_GET['id']; ?>">
</form>
</body>
</html>
<?
exit;
}
ELSE
{
$query = "SELECT admin_id FROM ".$TBL_PR."admins WHERE admin_username='".addslashes($_POST['USER'])."' AND admin_password='".addslashes(md5($_POST['PASS']))."' LIMIT 1";
$query_result = mysql_query ($query);
while ($info = mysql_fetch_array($query_result))
{
$admin_id = $info['admin_id'];
}
IF(isset($admin_id))
{
$_SESSION['admin_id'] = $admin_id;
}
ELSE
{
header("Location: event_add.php?day=".$_POST['day']."&month=".$_POST['month']."&year=".$_POST['year']."&id=" . $_POST['id']);
exit;
}
}
}
}
IF(isset($_POST['submit']))
{
$db_table = $TBL_PR . "events";
$_POST['description'] = substr($_POST['description'],0,500);
$_POST['title'] = substr($_POST['title'],0,30);
mysql_query("INSERT INTO $db_table ( `event_id` , `event_day` , `event_month` , `event_year` , `event_time` , `event_title` , `event_desc` ) VALUES ('', '".addslashes($_POST['day'])."', '".addslashes($_POST['month'])."', '".addslashes($_POST['year'])."', '".addslashes($_POST['hour'].":".$_POST['minute'])."', '".addslashes($_POST['title'])."', '".addslashes($_POST['description'])."')");
$_POST['month'] = $_POST['month'] + 1;
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Easy Calendar - Add Event</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script language='javascript' type="text/javascript">
<!--
function redirect_to(where, closewin)
{
opener.location= 'index.php?' + where;
if (closewin == 1)
{
self.close();
}
}
//-->
</script>
</head>
<body onLoad="javascript:redirect_to('month=<? echo $_POST['month'].'&year='.$_POST['year']; ?>',1);">
</body>
</html>
<?
}
ELSE
{
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Calendar - Add Event</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="images/cal.css" rel="stylesheet" type="text/css">
</head>
<body>
<form name="form1" method="post" action="">
<table width="480" border="0" cellspacing="0" cellpadding="0">
<tr>
<td width="200" height="40" valign="top"><span class="addevent">Event Date</span><br>
<span class="addeventextrainfo">(MM/DD/YY)</span></td>
<td height="40" valign="top"> <select name="month" id="month">
<option value="1" <? IF($_GET['month'] == "1"){ echo "selected"; } ?>>01</option>
<option value="2" <? IF($_GET['month'] == "2"){ echo "selected"; } ?>>02</option>
<option value="3" <? IF($_GET['month'] == "3"){ echo "selected"; } ?>>03</option>
<option value="4" <? IF($_GET['month'] == "4"){ echo "selected"; } ?>>04</option>
<option value="5" <? IF($_GET['month'] == "5"){ echo "selected"; } ?>>05</option>
<option value="6" <? IF($_GET['month'] == "6"){ echo "selected"; } ?>>06</option>
<option value="7" <? IF($_GET['month'] == "7"){ echo "selected"; } ?>>07</option>
<option value="8" <? IF($_GET['month'] == "8"){ echo "selected"; } ?>>08</option>
<option value="9" <? IF($_GET['month'] == "9"){ echo "selected"; } ?>>09</option>
<option value="10" <? IF($_GET['month'] == "10"){ echo "selected"; } ?>>10</option>
<option value="11" <? IF($_GET['month'] == "11"){ echo "selected"; } ?>>11</option>
<option value="12" <? IF($_GET['month'] == "12"){ echo "selected"; } ?>>12</option>
</select> <select name="day" id="day">
<option value="1" <? IF($_GET['day'] == "1"){ echo "selected"; } ?>>01</option>
<option value="2" <? IF($_GET['day'] == "2"){ echo "selected"; } ?>>02</option>
<option value="3" <? IF($_GET['day'] == "3"){ echo "selected"; } ?>>03</option>
<option value="4" <? IF($_GET['day'] == "4"){ echo "selected"; } ?>>04</option>
<option value="5" <? IF($_GET['day'] == "5"){ echo "selected"; } ?>>05</option>
<option value="6" <? IF($_GET['day'] == "6"){ echo "selected"; } ?>>06</option>
<option value="7" <? IF($_GET['day'] == "7"){ echo "selected"; } ?>>07</option>
<option value="8" <? IF($_GET['day'] == "8"){ echo "selected"; } ?>>08</option>
<option value="9" <? IF($_GET['day'] == "9"){ echo "selected"; } ?>>09</option>
<option value="10" <? IF($_GET['day'] == "10"){ echo "selected"; } ?>>10</option>
<option value="11" <? IF($_GET['day'] == "11"){ echo "selected"; } ?>>11</option>
<option value="12" <? IF($_GET['day'] == "12"){ echo "selected"; } ?>>12</option>
<option value="13" <? IF($_GET['day'] == "13"){ echo "selected"; } ?>>13</option>
<option value="14" <? IF($_GET['day'] == "14"){ echo "selected"; } ?>>14</option>
<option value="15" <? IF($_GET['day'] == "15"){ echo "selected"; } ?>>15</option>
<option value="16" <? IF($_GET['day'] == "16"){ echo "selected"; } ?>>16</option>
<option value="17" <? IF($_GET['day'] == "17"){ echo "selected"; } ?>>17</option>
<option value="18" <? IF($_GET['day'] == "18"){ echo "selected"; } ?>>18</option>
<option value="19" <? IF($_GET['day'] == "19"){ echo "selected"; } ?>>19</option>
<option value="20" <? IF($_GET['day'] == "20"){ echo "selected"; } ?>>20</option>
<option value="21" <? IF($_GET['day'] == "21"){ echo "selected"; } ?>>21</option>
<option value="22" <? IF($_GET['day'] == "22"){ echo "selected"; } ?>>22</option>
<option value="23" <? IF($_GET['day'] == "23"){ echo "selected"; } ?>>23</option>
<option value="24" <? IF($_GET['day'] == "24"){ echo "selected"; } ?>>24</option>
<option value="25" <? IF($_GET['day'] == "25"){ echo "selected"; } ?>>25</option>
<option value="26" <? IF($_GET['day'] == "26"){ echo "selected"; } ?>>26</option>
<option value="27" <? IF($_GET['day'] == "27"){ echo "selected"; } ?>>27</option>
<option value="28" <? IF($_GET['day'] == "28"){ echo "selected"; } ?>>28</option>
<option value="29" <? IF($_GET['day'] == "29"){ echo "selected"; } ?>>29</option>
<option value="30" <? IF($_GET['day'] == "30"){ echo "selected"; } ?>>30</option>
<option value="31" <? IF($_GET['day'] == "31"){ echo "selected"; } ?>>31</option>
</select> <select name="year" id="year">
<option value="2011" <? IF($_GET['year'] == "2011"){ echo "selected"; } ?>>2011</option>
<option value="2012" <? IF($_GET['year'] == "2012"){ echo "selected"; } ?>>2012</option>
<option value="2013" <? IF($_GET['year'] == "2013"){ echo "selected"; } ?>>2013</option>
<option value="2014" <? IF($_GET['year'] == "2014"){ echo "selected"; } ?>>2014</option>
<option value="2015" <? IF($_GET['year'] == "2015"){ echo "selected"; } ?>>2015</option>
</select> </td>
</tr>
<tr>
<td width="200" height="40" valign="top"><span class="addevent">Event Time</span><br>
<span class="addeventextrainfo">(24hr Format)</span></td>
<td height="40" valign="top"> <input name="hour" type="text" id="hour" value="20" size="2" maxlength="2">
:
<input name="minute" type="text" id="minute" value="00" size="2" maxlength="2">
</td>
</tr>
<tr>
<td width="200" height="40" valign="top"><span class="addevent">Event Title</span></td>
<td height="40" valign="top"> <input name="title" type="text" id="title" size="20">
</td>
</tr>
<tr>
<td width="200" height="40" valign="top"><span class="addevent">Event Description</span></td>
<td height="40" valign="top"> <textarea name="description" cols="18" rows="5" id="description"></textarea>
</td>
</tr>
<tr>
<td width="200"> </td>
<td> </td>
</tr>
<tr>
<td> </td>
<td><input name="submit" type="submit" id="submit" value="Add Event"></td>
</tr>
</table>
</form>
</body>
</html>
<?
}
?>