";
echo " ";
- echo " ";
+}
- }
- echo "\n";
- echo "";
+// save the posted contact info data
+function saveData(){
+ global $conference;
+ $currentUser = user_load($_SESSION['users_id']);
+ $registrations_id = $currentUser['registrations_id'];
+ $newContacts = array();
+ foreach($_POST['ids'] as $postIndex){
+ if(substr($postIndex, 0, 4) == 'new_'){
+ // we're creating a new contact, and linking them to the user whose ID is in the contactId tag
+ $userId = intval(substr($postIndex, 4));
+ }else if(is_numeric($postIndex)){
+ // we're updating an existing contact
+ $userId = $_POST['userId'][$postIndex];
+ }else{
+ // invalid contact Id
+ continue;
+ }
+ // let's make sure this user ID is a valid one and one which we can update with this post
+ $query = "SELECT COUNT(*) AS tally FROM users WHERE id = $userId AND registrations_id='$registrations_id' AND conferences_id='{$conference['id']}'";
+ $row = mysql_fetch_assoc(mysql_query($query));
+ if($row['tally'] != 1){
+ // not a user whose contacts we're allowed to update
+ continue;
+ }
+
+ // don't add contact info from an empty form
+ $emptyFields = true;
+ foreach(array('firstname', 'lastname', 'relation', 'email', 'phone1', 'phone2', 'phone3', 'phone4') as $idx){
+ if($_POST[$idx][$postIndex] != ''){
+ $emptyFields = false;
+ break;
+ }
+ }
+ if($emptyFields) continue;
+
+ if(array_key_exists('delete', $_POST) && array_key_exists($postIndex, $_POST['delete'])){
+ if($_POST['delete'][$postIndex] == 'yes'){
+ continue;
+ }
+ }
+
+ if(!array_key_exists($userId, $newContacts)){
+ $newContacts[$userId] = array();
+ }
+
+ $newContacts[$userId][] = array(
+ 'firstname' => mysql_real_escape_string($_POST['firstname'][$postIndex]),
+ 'lastname' => mysql_real_escape_string($_POST['lastname'][$postIndex]),
+ 'relation' => mysql_real_escape_string($_POST['relation'][$postIndex]),
+ 'email' => mysql_real_escape_string($_POST['email'][$postIndex]),
+ 'phone1' => mysql_real_escape_string($_POST['phone1'][$postIndex]),
+ 'phone2' => mysql_real_escape_string($_POST['phone2'][$postIndex]),
+ 'phone3' => mysql_real_escape_string($_POST['phone3'][$postIndex]),
+ 'phone4' => mysql_real_escape_string($_POST['phone4'][$postIndex])
+ );
+ }
+ // we've scraped together the new contact info, now let's update each of the users
+ foreach($newContacts as $userId => $contactList){
+ $u = user_load($userId);
+ $u['emergencycontacts'] = $contactList;
+ user_save($u);
+ }
+}
- send_footer();
?>
diff --git a/user.inc.php b/user.inc.php
index 4569298..7178d13 100644
--- a/user.inc.php
+++ b/user.inc.php
@@ -93,6 +93,16 @@ function user_load($users_id, $accounts_id = false)
* a new role */
}
+ // not sure if this is the best place to add it, but if the user is a student, add their emergency contacts
+ if(array_key_exists('participant', $u['roles'])){
+ $u['emergencycontacts'] = array();
+ $fields = array('id', 'firstname', 'lastname', 'relation', 'phone1', 'phone2', 'phone3', 'phone4', 'email');
+ $q = mysql_query("SELECT " . implode(',', $fields) . " FROM emergencycontact WHERE users_id = $users_id");
+ while($row = mysql_fetch_assoc($q)){
+ $u['emergencycontacts'][] = $row;
+ }
+ }
+
// get a list of all fields relevant to this user
$fieldDat = user_get_fields(array_keys($u['roles']));
// we need to separate the fields that are in the users table from those in separate tables
@@ -809,6 +819,34 @@ function user_save(&$u)
}
}
+ if( // if this user has emergency contacts ...
+ // not sure if this is the best place to add it, but if the user is a student, add their emergency contacts
+ array_key_exists('emergencycontacts', $u)
+ ){
+ mysql_query("DELETE FROM emergencycontact WHERE users_id = {$u['id']}");
+ if(mysql_error() != '') return "SQLERR6: " . mysql_error();
+ if(count($u['emergencycontacts']) > 0){
+ $query = "INSERT INTO emergencycontact (users_id, firstname, lastname, relation, phone1, phone2, phone3, phone4, email, conferences_id) VALUES ";
+ $queryParts = array();
+ foreach($u['emergencycontacts'] as $contact){
+ $queryParts[] = "(". $u['id'] . ",'" .
+ $contact['firstname'] . "','" .
+ $contact['lastname'] . "','" .
+ $contact['relation'] . "','" .
+ $contact['phone1'] . "','" .
+ $contact['phone2'] . "','" .
+ $contact['phone3'] . "','" .
+ $contact['phone4'] . "','" .
+ $contact['email'] . "'," .
+ $conference['id'] . ") ";
+ }
+ $query .= implode(',', $queryParts);
+ mysql_query($query);
+ }
+ if(mysql_error() != '') return "SQLERR7: " . mysql_error();
+ }
+
+
/* Record all the data in orig that we saved so subsequent
* calls to user_save don't try to overwrite data already
* saved to the database */