arman/science-ation
1
1
Fork 0
forked from science-ation/science-ation
Code Pull Requests Activity

sql queries

Browse Source
This commit is contained in:
Armanveer Gill 2024-12-08 02:49:02 -05:00
parent f0977fb55d
commit bab11c9228
1 changed files with 48 additions and 34 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

82
admin/fundraising_campaigns.php
View File

@ -225,8 +225,9 @@ $q->execute();
AND status='received' ORDER BY datereceived DESC"); AND status='received' ORDER BY datereceived DESC");
while($r=$q->fetch(PDO::FETCH_OBJ)) { while($r=$q->fetch(PDO::FETCH_OBJ)) {
$goal=getGoal($r->fundraising_goal); $goal=getGoal($r->fundraising_goal);
$sq=mysql_query("SELECT * FROM sponsors WHERE id='{$r->sponsors_id}'"); $sq=$pdo->prepare("SELECT * FROM sponsors WHERE id='{$r->sponsors_id}'");
$sponsor=mysql_fetch_object($sq); $sq->execute();
$sponsor=$sq->fetch(PDO::FETCH_OBJ);
echo "<tr><td>".format_date($r->datereceived)."</td>\n"; echo "<tr><td>".format_date($r->datereceived)."</td>\n";
echo " <td>".$sponsor->organization."</td>\n"; echo " <td>".$sponsor->organization."</td>\n";
echo " <td>".$goal->name."</td>\n"; echo " <td>".$goal->name."</td>\n";
@ -256,8 +257,9 @@ $q->execute();
"mentor"=>"Mentor (not implemented)", "mentor"=>"Mentor (not implemented)",
); );
$campaign_id=intval($_GET['id']); $campaign_id=intval($_GET['id']);
$q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'"); $q=$pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
$campaign=$q->fetch(PDO::FETCH_OBJ); $q->execute();
$campaign=$q->fetch(PDO::FETCH_OBJ);
if($campaign->filterparameters) { if($campaign->filterparameters) {
echo "<h4>".i18n("User List")."</h4>\n"; echo "<h4>".i18n("User List")."</h4>\n";
$params=unserialize($campaign->filterparameters); $params=unserialize($campaign->filterparameters);
@ -304,8 +306,9 @@ $q->execute();
echo "<br />"; echo "<br />";
echo "<form id=\"prospectremoveform\" onsubmit=\"return removeselectedprospects()\">\n"; echo "<form id=\"prospectremoveform\" onsubmit=\"return removeselectedprospects()\">\n";
echo "<input type=\"hidden\" name=\"fundraising_campaigns_id\" value=\"$campaign_id\" />\n"; echo "<input type=\"hidden\" name=\"fundraising_campaigns_id\" value=\"$campaign_id\" />\n";
$q=mysql_query("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaign_id'"); $q=$pdo->prepare("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaign_id'");
while($r=$q->fetch(PDO::FETCH_OBJ)) { $q->execute();
while($r=$q->fetch(PDO::FETCH_OBJ)) {
$u=user_load_by_uid($r->users_uid); $u=user_load_by_uid($r->users_uid);
//hopefully this never returns false, but who knows.. //hopefully this never returns false, but who knows..
if($u) { if($u) {
@ -355,7 +358,8 @@ $q->execute();
</td></tr> </td></tr>
<tr><td><?=i18n("Donation Level")?>:</td><td> <tr><td><?=i18n("Donation Level")?>:</td><td>
<? <?
$q=mysql_query("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY min"); $q=$pdo->prepare("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY min");
$q->execute();
while($r=$q->fetch(PDO::FETCH_OBJ)) { while($r=$q->fetch(PDO::FETCH_OBJ)) {
echo "<label><input onchange=\"return prospect_search()\" disabled=\"disabled\" type=\"checkbox\" name=\"donationlevel[]\" value=\"$r->level\" >".i18n($r->level)." (".format_money($r->min,false)." - ".format_money($r->max,false).")</label><br />\n"; echo "<label><input onchange=\"return prospect_search()\" disabled=\"disabled\" type=\"checkbox\" name=\"donationlevel[]\" value=\"$r->level\" >".i18n($r->level)." (".format_money($r->min,false)." - ".format_money($r->max,false).")</label><br />\n";
} }
@ -404,8 +408,8 @@ $q->execute();
case "manage_tab_communications": case "manage_tab_communications":
$campaign_id=intval($_GET['id']); $campaign_id=intval($_GET['id']);
$q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'"); $q=$pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
$q->execute();
if($r=$q->fetch(PDO::FETCH_OBJ)) { if($r=$q->fetch(PDO::FETCH_OBJ)) {
} }
@ -415,8 +419,9 @@ $q->execute();
foreach($communications as $key=>$name) { foreach($communications as $key=>$name) {
echo "<h4>".i18n($name)."</h4>\n"; echo "<h4>".i18n($name)."</h4>\n";
//check if they have one in the emails database //check if they have one in the emails database
$q=mysql_query("SELECT * FROM emails WHERE fundraising_campaigns_id='$campaign_id' AND val='$key'"); $q=$pdo->prepare("SELECT * FROM emails WHERE fundraising_campaigns_id='$campaign_id' AND val='$key'");
if($email=$q->fetch(PDO::FETCH_OBJ)) { $q->execute();
if($email=$q->fetch(PDO::FETCH_OBJ)) {
echo "<div style=\"float: right; margin-right: 15px;\">"; echo "<div style=\"float: right; margin-right: 15px;\">";
echo "<a title=\"Edit\" href=\"#\" onclick=\"return opencommunicationeditor(null,$email->id,$campaign_id)\"><img src=\"".$config['SFIABDIRECTORY']."/images/16/edit.".$config['icon_extension']."\" border=0></a>"; echo "<a title=\"Edit\" href=\"#\" onclick=\"return opencommunicationeditor(null,$email->id,$campaign_id)\"><img src=\"".$config['SFIABDIRECTORY']."/images/16/edit.".$config['icon_extension']."\" border=0></a>";
echo "&nbsp;&nbsp;"; echo "&nbsp;&nbsp;";
@ -465,15 +470,18 @@ $q->execute();
if(is_array($_POST['prospectremovefromlist'])) { if(is_array($_POST['prospectremovefromlist'])) {
$uidlist=implode(",",$_POST['prospectremovefromlist']); $uidlist=implode(",",$_POST['prospectremovefromlist']);
$query="DELETE FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid' AND users_uid IN ($uidlist)"; $query="DELETE FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid' AND users_uid IN ($uidlist)";
mysql_query($query); $stmt = $pdo->prepare($query);
$stmt->execute();
echo $pdo->errorInfo(); echo $pdo->errorInfo();
} }
//if theres nobody left in the list we need to reset the filter params as well //if theres nobody left in the list we need to reset the filter params as well
$q=mysql_query("SELECT COUNT(*) AS num FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'"); $q=$pdo->prepare("SELECT COUNT(*) AS num FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'");
$r=$q->fetch(PDO::FETCH_OBJ); $q->execute();
$r=$q->fetch(PDO::FETCH_OBJ);
if($r->num==0) { if($r->num==0) {
mysql_query("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'"); $stmt = $pdo->prepare("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'");
} $stmt->execute();
}
happy_("Selected users removed from list"); happy_("Selected users removed from list");
exit; exit;
@ -481,22 +489,26 @@ $q->execute();
case "prospect_removeall": case "prospect_removeall":
$campaignid=intval($_POST['fundraising_campaigns_id']); $campaignid=intval($_POST['fundraising_campaigns_id']);
mysql_query("DELETE FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'"); $stmt = $pdo->prepare("DELETE FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'");
mysql_query("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'"); $stmt->execute();
happy_("All users removed from list"); $stmt = $pdo->prepare("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'");
$stmt->execute();
happy_("All users removed from list");
exit; exit;
break; break;
case "communication_remove": case "communication_remove":
$emails_id=$_POST['id']; $emails_id=$_POST['id'];
//check if its been sent, if so, it cannot be deleted, sorry! //check if its been sent, if so, it cannot be deleted, sorry!
$q=mysql_query("SELECT * FROM emails WHERE id='$emails_id'"); $q=$pdo->prepare("SELECT * FROM emails WHERE id='$emails_id'");
$q->execute();
$e=$q->fetch(PDO::FETCH_OBJ); $e=$q->fetch(PDO::FETCH_OBJ);
if($e->lastsent) { if($e->lastsent) {
error_("Cannot remove an email that has already been sent"); error_("Cannot remove an email that has already been sent");
} }
else { else {
mysql_query("DELETE FROM emails WHERE id='$emails_id'"); $stmt = $pdo->prepare("DELETE FROM emails WHERE id='$emails_id'");
$stmt->execute();
happy_("Communicaton removed"); happy_("Communicaton removed");
} }
@ -515,22 +527,23 @@ function save_campaign_info(){
if(!$_GET['id']) { if(!$_GET['id']) {
$query = "INSERT INTO fundraising_campaigns (name,fiscalyear) VALUES ( $query = "INSERT INTO fundraising_campaigns (name,fiscalyear) VALUES (
'".mysql_real_escape_string(stripslashes($_POST['name']))."','{$config['FISCALYEAR']}')"; '".stripslashes($_POST['name'])."','{$config['FISCALYEAR']}')";
mysql_query($query); $stmt = $pdo->prepare($query);
$id = mysql_insert_id(); $stmt->execute();
$id = $pdo->lastInsertId();
happy_("Appeal Created"); happy_("Appeal Created");
}else{ }else{
$id = $_GET["id"]; $id = $_GET["id"];
happy_("Appeal Saved"); happy_("Appeal Saved");
} }
mysql_query("UPDATE fundraising_campaigns SET $stmt = $pdo->prepare("UPDATE fundraising_campaigns SET
name='".mysql_real_escape_string(stripslashes($_POST['name']))."', name='".stripslashes($_POST['name'])."',
`type`='".mysql_real_escape_string($_POST['type'])."', `type`='".$_POST['type']."',
startdate='".mysql_real_escape_string($startdate)."', startdate='".$startdate."',
followupdate='".mysql_real_escape_string($_POST['followupdate'])."', followupdate='".$_POST['followupdate']."',
enddate='".mysql_real_escape_string($_POST['enddate'])."', enddate='".$_POST['enddate']."',
target='".mysql_real_escape_string($_POST['target'])."', target='".$_POST['target']."',
fundraising_goal='".mysql_real_escape_string($_POST['fundraising_goal'])."' fundraising_goal='".$_POST['fundraising_goal']."'
WHERE id='$id'"); WHERE id='$id'");
} }
@ -771,10 +784,11 @@ function display_campaign_form($r=null) {
<td><?=i18n("Target")?></td><td>$<input type="text" id="target" name="target" size="10" value="<?=$r->target?>" /></td> <td><?=i18n("Target")?></td><td>$<input type="text" id="target" name="target" size="10" value="<?=$r->target?>" /></td>
<td><?=i18n("Default Purpose")?></td><td colspan="3"> <td><?=i18n("Default Purpose")?></td><td colspan="3">
<? <?
$fgq=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name"); $fgq=$pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
$fgq->execute();
echo "<select name=\"fundraising_goal\">"; echo "<select name=\"fundraising_goal\">";
echo "<option value=\"\">".i18n("Choose Default Purpose")."</option>\n"; echo "<option value=\"\">".i18n("Choose Default Purpose")."</option>\n";
while($fgr=mysql_fetch_object($fgq)) { while($fgr=$fgq->fetch(PDO::FETCH_OBJ)) {
if($r->fundraising_goal==$fgr->goal) $sel="selected=\"selected\""; else $sel=""; if($r->fundraising_goal==$fgr->goal) $sel="selected=\"selected\""; else $sel="";
echo "<option $sel value=\"$fgr->goal\">".i18n($fgr->name)."</option>\n"; echo "<option $sel value=\"$fgr->goal\">".i18n($fgr->name)."</option>\n";
} }