DbLocal/ConfirmAddMemberToMembership.php at master · dranelol/DbLocal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
<?php

	include "login.php";

	if(isset($_SESSION["userType"]) == false)
	{
		echo "Not logged in!";
		echo '<br><br>';
		echo '<a href ="LoginPage.php">Go Log In</a>';

		die();
	}


?>
<html>
<head>
<title>
Add Member to Membership Confirmation
</title>
</head>

<h3>
Add Member to Membership Confirmation
</h3>
<body>

<?php

	$sessionUser = $_SESSION['userType'];

	// restrict access only to certain userTypes


	if($sessionUser != "member")
	{
		echo 'Not logged in as a member!';
		echo '<br><br>';
		echo '<a href ="LoginPage.php">Go Log In</a>';

		die();
	}


	echo "Logged in as: $sessionUser";
	if($sessionUser == "member")
	{
		echo "<br>Membership ID: " . $_SESSION['memberID'] . "<br>";
	}

	$date = $_SESSION["today"];
	echo "<br>";
	echo "Today's date: $date";

?>

<br>
<br>

<?php

	// CODE STARTS HERE

	if(isset($_POST['name']) && isset($_POST['address']) && isset($_POST['phoneNumber']) && isset($_POST['email']) && isset($_POST['age']))
	{
		$name = $_POST['name'];
		$age= $_POST['age'];
		$phoneNumber = $_POST['phoneNumber'];
		$email = $_POST['email'];
		$address = $_POST['address'];
		$memberID = '';
		$memberAcctOrder = '';

		$membershipID = $_SESSION['memberID'];

		// get count of members already in this account
		$membershipCount = "select count(*) as MemberCount from Member where MemberAcctNum='$membershipID'";
		$membershipCountResult = mysql_query($membershipCount) or die(mysql_error());
		if($row = mysql_fetch_array($membershipCountResult))
		{
			// increment member account order by 1
			$memberAcctOrder = $row['MemberCount'] + 1;
		}


		$memberAddQuery = "insert into Member (MemberAcctNum, MemberAcctOrder, Name, Address, Email, PhoneNumber, Age)
										 values ($membershipID, '$memberAcctOrder','$name', '$address', '$email', '$phoneNumber', '$age')";
		$memberResult = mysql_query($memberAddQuery) or die(mysql_error());


		echo "Member added to your account successfully!";

		echo "<br>";
		echo "<form action ='index.php'>";
		echo "<input type ='submit' value = 'Go back to index' >";
		echo "</form>";
	}

	else
	{
		echo "Got here illegally!";
		echo "<br>";
		echo "<form action ='index.php'>";
		echo "<input type ='submit' value = 'Go back to index' >";
		echo "</form>";
	}

?>

</body>
</html>