Resolve issues with awards management

Ethics questions can now be asked as a required field for each project. 
To activate this feature navigate to Configuration >> Configuration Variables >> Participant Registration 
and change  “Ask if the project requires human and/or animal participants” to “Yes”. 

All projects with human and/or animal participants can be selected using the Report Editor.

Under “Input Received Signature Forms” a button called “Receive All” was created. 
Clicking this button will cause the program to assign project numbers and mark the 
signature page as received for all students who have completed the registration process. 
Confirmation emails are sent to each student that had their signature page marked as received.

"Remove Old Judge Data" and "Remove Old Emergency Contact/Parent Data" was added to
"Database Backup/Restore".  These permanently remove all information from the database 
about these two respective groups.  This means that all historical data will be lost but  
the most recent information about judges and emergency contacts remains. Cleaning the database 
this way dramatically improves the speed of the user editor.  Make sure the database has been
backed up before trying these.

The judge's name now appears on the cancellation popup window when deleting an individual judge.

.devcontainer/.gitignore

@@ -0,0 +1 @@
+data/

.devcontainer/Dockerfile

@@ -0,0 +1,15 @@
+FROM mcr.microsoft.com/devcontainers/php:1-8.2-bookworm
+# Install MariaDB client
+RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
+    && apt-get install -y mariadb-client \ 
+    && apt-get clean -y && rm -rf /var/lib/apt/lists/*
+
+# Install php-mysql driver
+RUN docker-php-ext-install pdo pdo_mysql
+
+# [Optional] Uncomment this section to install additional OS packages.
+RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
+     && apt-get -y install --no-install-recommends imagemagick
+
+# [Optional] Uncomment this line to install global node packages.
+# RUN su vscode -c "source /usr/local/share/nvm/nvm.sh && npm install -g <your-package-here>" 2>&1

.devcontainer/config.inc.php.example

@@ -0,0 +1,29 @@
+<?
+/* 
+   This file is part of the 'Science Fair In A Box' project
+   SFIAB Website: http://www.sfiab.ca
+
+   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+   Copyright (C) 2005 James Grant <james@lightbox.org>
+
+   This program is free software; you can redistribute it and/or
+   modify it under the terms of the GNU General Public
+   License as published by the Free Software Foundation, version 2.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+    General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program; see the file COPYING.  If not, write to
+   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+   Boston, MA 02111-1307, USA.
+*/
+?>
+<?
+$DBHOST=		"db";
+$DBNAME=		"mariadb";
+$DBUSER=		"mariadb";
+$DBPASS=		"mariadb";
+?>

.devcontainer/devcontainer.json

@@ -0,0 +1,29 @@
+// For format details, see https://aka.ms/devcontainer.json. For config options, see the
+// README at: https://github.com/devcontainers/templates/tree/main/src/php-mariadb
+{
+	"name": "PHP & MariaDB",
+	"dockerComposeFile": "docker-compose.yml",
+	"service": "app",
+	"workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+
+	// Features to add to the dev container. More info: https://containers.dev/features.
+	// "features": {},
+
+	// For use with PHP or Apache (e.g.php -S localhost:8080 or apache2ctl start)
+	"forwardPorts": [80, 3306],
+
+	// Use 'postCreateCommand' to run commands after the container is created.
+	// "postCreateCommand": "sudo chmod a+x \"$(pwd)\" && sudo rm -rf /var/www/html && sudo ln -s \"$(pwd)\" /var/www/html"
+
+	// Configure tool-specific properties.
+	"customizations": {
+		"vscode": {
+			"extensions": [
+				"lkrms.pretty-php"
+			]
+		}
+	},
+
+	// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
+	// "remoteUser": "root"
+}

.devcontainer/docker-compose.yml

@@ -0,0 +1,35 @@
+services: 
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    volumes:
+      - ../..:/workspaces:cached
+
+    # Overrides default command so things don't shut down after the process ends.
+    command: sleep infinity
+
+    # Runs app on the same network as the database container, allows "forwardPorts" in devcontainer.json function.
+    network_mode: service:db
+
+    # Use "forwardPorts" in **devcontainer.json** to forward an app port locally. 
+    # (Adding the "ports" property to this file will not forward from a Codespace.)
+    depends_on:
+      - db
+
+  db:
+    image: mariadb:11.6
+    restart: unless-stopped
+    volumes:
+      - mariadb-data:/var/lib/mysql
+    environment:
+      MYSQL_ROOT_PASSWORD: mariadb
+      MYSQL_DATABASE: mariadb
+      MYSQL_USER: mariadb
+      MYSQL_PASSWORD: mariadb
+
+    # Add "forwardPorts": ["3306"] to **devcontainer.json** to forward MariaDB locally.
+    # (Adding the "ports" property to this file will not forward from a Codespace.)
+  
+volumes:
+  mariadb-data:

.gitignore

@@ -0,0 +1 @@
+data/

Rmail/LICENSE.txt

@@ -1,6 +0,0 @@
- License for Rmail
- =================
-
-This software is covered by the PHPGuru License. You can read it, along with a few FAQs, here:
-
-  http://www.phpguru.org/static/license.html

Rmail/RFC822.php

@@ -1,880 +0,0 @@
-<?php
-    /**
-    * o------------------------------------------------------------------------------o
-    * | This package is licensed under the Phpguru license. A quick summary is       |
-    * | that for commercial use, there is a small one-time licensing fee to pay. For |
-    * | registered charities and educational institutes there is a reduced license   |
-    * | fee available. You can read more  at:                                        |
-    * |                                                                              |
-    * |                  http://www.phpguru.org/static/license.html                  |
-    * o------------------------------------------------------------------------------o
-    *
-    * © Copyright 2008,2009 Richard Heyes
-    */
-
-/**
-* RFC 822 Email address list validation Utility
-*
-* What is it?
-*
-* This class will take an address string, and parse it into it's consituent
-* parts, be that either addresses, groups, or combinations. Nested groups
-* are not supported. The structure it returns is pretty straight forward,
-* and is similar to that provided by the imap_rfc822_parse_adrlist(). Use
-* print_r() to view the structure.
-*
-* How do I use it?
-*
-* $address_string = 'My Group: "Richard Heyes" <richard@localhost> (A comment), ted@example.com (Ted Bloggs), Barney;';
-* $structure = Mail_RFC822::parseAddressList($address_string, 'example.com', TRUE)
-* print_r($structure);
-*/
-
-class Mail_RFC822
-{
-    /**
-     * The address being parsed by the RFC822 object.
-     * @private string $address
-     */
-    private $address = '';
-
-    /**
-     * The default domain to use for unqualified addresses.
-     * @private string $default_domain
-     */
-    private $default_domain = 'localhost';
-
-    /**
-     * Should we return a nested array showing groups, or flatten everything?
-     * @private boolean $nestGroups
-     */
-    private $nestGroups = true;
-
-    /**
-     * Whether or not to validate atoms for non-ascii characters.
-     * @private boolean $validate
-     */
-    private $validate = true;
-
-    /**
-     * The array of raw addresses built up as we parse.
-     * @private array $addresses
-     */
-    private $addresses = array();
-
-    /**
-     * The final array of parsed address information that we build up.
-     * @private array $structure
-     */
-    private $structure = array();
-
-    /**
-     * The current error message, if any.
-     * @private string $error
-     */
-    private $error = null;
-
-    /**
-     * An internal counter/pointer.
-     * @private integer $index
-     */
-    private $index = null;
-
-    /**
-     * The number of groups that have been found in the address list.
-     * @private integer $num_groups
-     * @access public
-     */
-    private $num_groups = 0;
-
-    /**
-     * A variable so that we can tell whether or not we're inside a
-     * Mail_RFC822 object.
-     * @private boolean $mailRFC822
-     */
-    private $mailRFC822 = true;
-    
-    /**
-    * A limit after which processing stops
-    * @private int $limit
-    */
-    private $limit = null;
-
-
-    /**
-     * Sets up the object. The address must either be set here or when
-     * calling parseAddressList(). One or the other.
-     *
-     * @access public
-     * @param string  $address         The address(es) to validate.
-     * @param string  $default_domain  Default domain/host etc. If not supplied, will be set to localhost.
-     * @param boolean $nest_groups     Whether to return the structure with groups nested for easier viewing.
-     * @param boolean $validate        Whether to validate atoms. Turn this off if you need to run addresses through before encoding the personal names, for instance.
-     * 
-     * @return object Mail_RFC822 A new Mail_RFC822 object.
-     */
-    function __construct($address = null, $default_domain = null, $nest_groups = null, $validate = null, $limit = null)
-    {
-        if (isset($address))        $this->address        = $address;
-        if (isset($default_domain)) $this->default_domain = $default_domain;
-        if (isset($nest_groups))    $this->nestGroups     = $nest_groups;
-        if (isset($validate))       $this->validate       = $validate;
-        if (isset($limit))          $this->limit          = $limit;
-    }
-
-
-    /**
-     * Starts the whole process. The address must either be set here
-     * or when creating the object. One or the other.
-     *
-     * @access public
-     * @param string  $address         The address(es) to validate.
-     * @param string  $default_domain  Default domain/host etc.
-     * @param boolean $nest_groups     Whether to return the structure with groups nested for easier viewing.
-     * @param boolean $validate        Whether to validate atoms. Turn this off if you need to run addresses through before encoding the personal names, for instance.
-     * 
-     * @return array A structured array of addresses.
-     */
-    function parseAddressList($address = null, $default_domain = null, $nest_groups = null, $validate = null, $limit = null)
-    {
-
-        if (!isset($this->mailRFC822)) {
-            $obj = new Mail_RFC822($address, $default_domain, $nest_groups, $validate, $limit);
-            return $obj->parseAddressList();
-        }
-
-        if (isset($address))        $this->address        = $address;
-        if (isset($default_domain)) $this->default_domain = $default_domain;
-        if (isset($nest_groups))    $this->nestGroups     = $nest_groups;
-        if (isset($validate))       $this->validate       = $validate;
-        if (isset($limit))          $this->limit          = $limit;
-
-        $this->structure  = array();
-        $this->addresses  = array();
-        $this->error      = null;
-        $this->index      = null;
-
-        while ($this->address = $this->_splitAddresses($this->address)) {
-            continue;
-        }
-        
-        if ($this->address === false || isset($this->error)) {
-            return false;
-        }
-
-        // Reset timer since large amounts of addresses can take a long time to
-        // get here
-        set_time_limit(30);
-
-        // Loop through all the addresses
-        for ($i = 0; $i < count($this->addresses); $i++){
-
-            if (($return = $this->_validateAddress($this->addresses[$i])) === false
-                || isset($this->error)) {
-                return false;
-            }
-            
-            if (!$this->nestGroups) {
-                $this->structure = array_merge($this->structure, $return);
-            } else {
-                $this->structure[] = $return;
-            }
-        }
-
-        return $this->structure;
-    }
-
-    /**
-     * Splits an address into seperate addresses.
-     * 
-     * @access private
-     * @param string $address The addresses to split.
-     * @return boolean Success or failure.
-     */
-    function _splitAddresses($address)
-    {
-
-        if (!empty($this->limit) AND count($this->addresses) == $this->limit) {
-            return '';
-        }
-
-        if ($this->_isGroup($address) && !isset($this->error)) {
-            $split_char = ';';
-            $is_group   = true;
-        } elseif (!isset($this->error)) {
-            $split_char = ',';
-            $is_group   = false;
-        } elseif (isset($this->error)) {
-            return false;
-        }
-
-        // Split the string based on the above ten or so lines.
-        $parts  = explode($split_char, $address);
-        $string = $this->_splitCheck($parts, $split_char);
-
-        // If a group...
-        if ($is_group) {
-            // If $string does not contain a colon outside of
-            // brackets/quotes etc then something's fubar.
-
-            // First check there's a colon at all:
-            if (strpos($string, ':') === false) {
-                $this->error = 'Invalid address: ' . $string;
-                return false;
-            }
-
-            // Now check it's outside of brackets/quotes:
-            if (!$this->_splitCheck(explode(':', $string), ':'))
-                return false;
-
-            // We must have a group at this point, so increase the counter:
-            $this->num_groups++;
-        }
-
-        // $string now contains the first full address/group.
-        // Add to the addresses array.
-        $this->addresses[] = array(
-                                   'address' => trim($string),
-                                   'group'   => $is_group
-                                   );
-
-        // Remove the now stored address from the initial line, the +1
-        // is to account for the explode character.
-        $address = trim(substr($address, strlen($string) + 1));
-
-        // If the next char is a comma and this was a group, then
-        // there are more addresses, otherwise, if there are any more
-        // chars, then there is another address.
-        if ($is_group && substr($address, 0, 1) == ','){
-            $address = trim(substr($address, 1));
-            return $address;
-
-        } elseif (strlen($address) > 0) {
-            return $address;
-
-        } else {
-            return '';
-        }
-
-        // If you got here then something's off
-        return false;
-    }
-
-    /**
-     * Checks for a group at the start of the string.
-     * 
-     * @access private
-     * @param string $address The address to check.
-     * @return boolean Whether or not there is a group at the start of the string.
-     */
-    function _isGroup($address)
-    {
-        // First comma not in quotes, angles or escaped:
-        $parts  = explode(',', $address);
-        $string = $this->_splitCheck($parts, ',');
-
-        // Now we have the first address, we can reliably check for a
-        // group by searching for a colon that's not escaped or in
-        // quotes or angle brackets.
-        if (count($parts = explode(':', $string)) > 1) {
-            $string2 = $this->_splitCheck($parts, ':');
-            return ($string2 !== $string);
-        } else {
-            return false;
-        }
-    }
-
-    /**
-     * A common function that will check an exploded string.
-     * 
-     * @access private
-     * @param array $parts The exloded string.
-     * @param string $char  The char that was exploded on.
-     * @return mixed False if the string contains unclosed quotes/brackets, or the string on success.
-     */
-    function _splitCheck($parts, $char)
-    {
-        $string = $parts[0];
-
-        for ($i = 0; $i < count($parts); $i++) {
-            if ($this->_hasUnclosedQuotes($string)
-                || $this->_hasUnclosedBrackets($string, '<>')
-                || $this->_hasUnclosedBrackets($string, '[]')
-                || $this->_hasUnclosedBrackets($string, '()')
-                || substr($string, -1) == '\\') {
-                if (isset($parts[$i + 1])) {
-                    $string = $string . $char . $parts[$i + 1];
-                } else {
-                    $this->error = 'Invalid address spec. Unclosed bracket or quotes';
-                    return false;
-                }
-            } else {
-                $this->index = $i;
-                break;
-            }
-        }
-
-        return $string;
-    }
-
-    /**
-     * Checks if a string has an unclosed quotes or not.
-     * 
-     * @access private
-     * @param string $string The string to check.
-     * @return boolean True if there are unclosed quotes inside the string, false otherwise.
-     */
-    function _hasUnclosedQuotes($string)
-    {
-        $string     = explode('"', $string);
-        $string_cnt = count($string);
-
-        for ($i = 0; $i < (count($string) - 1); $i++)
-            if (substr($string[$i], -1) == '\\')
-                $string_cnt--;
-
-        return ($string_cnt % 2 === 0);
-    }
-
-    /**
-     * Checks if a string has an unclosed brackets or not. IMPORTANT:
-     * This function handles both angle brackets and square brackets;
-     * 
-     * @access private
-     * @param string $string The string to check.
-     * @param string $chars  The characters to check for.
-     * @return boolean True if there are unclosed brackets inside the string, false otherwise.
-     */
-    function _hasUnclosedBrackets($string, $chars)
-    {
-        $num_angle_start = substr_count($string, $chars[0]);
-        $num_angle_end   = substr_count($string, $chars[1]);
-
-        $this->_hasUnclosedBracketsSub($string, $num_angle_start, $chars[0]);
-        $this->_hasUnclosedBracketsSub($string, $num_angle_end, $chars[1]);
-
-        if ($num_angle_start < $num_angle_end) {
-            $this->error = 'Invalid address spec. Unmatched quote or bracket (' . $chars . ')';
-            return false;
-        } else {
-            return ($num_angle_start > $num_angle_end);
-        }
-    }
-
-    /**
-     * Sub function that is used only by hasUnclosedBrackets().
-     * 
-     * @access private
-     * @param string $string The string to check.
-     * @param integer &$num    The number of occurences.
-     * @param string $char   The character to count.
-     * @return integer The number of occurences of $char in $string, adjusted for backslashes.
-     */
-    function _hasUnclosedBracketsSub($string, &$num, $char)
-    {
-        $parts = explode($char, $string);
-        for ($i = 0; $i < count($parts); $i++){
-            if (substr($parts[$i], -1) == '\\' || $this->_hasUnclosedQuotes($parts[$i]))
-                $num--;
-            if (isset($parts[$i + 1]))
-                $parts[$i + 1] = $parts[$i] . $char . $parts[$i + 1];
-        }
-        
-        return $num;
-    }
-
-    /**
-     * Function to begin checking the address.
-     *
-     * @access private
-     * @param string $address The address to validate.
-     * @return mixed False on failure, or a structured array of address information on success.
-     */
-    function _validateAddress($address)
-    {
-        $is_group = false;
-
-        if ($address['group']) {
-            $is_group = true;
-
-            // Get the group part of the name
-            $parts     = explode(':', $address['address']);
-            $groupname = $this->_splitCheck($parts, ':');
-            $structure = array();
-
-            // And validate the group part of the name.
-            if (!$this->_validatePhrase($groupname)){
-                $this->error = 'Group name did not validate.';
-                return false;
-            } else {
-                // Don't include groups if we are not nesting
-                // them. This avoids returning invalid addresses.
-                if ($this->nestGroups) {
-                    $structure = new stdClass;
-                    $structure->groupname = $groupname;
-                }
-            }
-
-            $address['address'] = ltrim(substr($address['address'], strlen($groupname . ':')));
-        }
-
-        // If a group then split on comma and put into an array.
-        // Otherwise, Just put the whole address in an array.
-        if ($is_group) {
-            while (strlen($address['address']) > 0) {
-                $parts       = explode(',', $address['address']);
-                $addresses[] = $this->_splitCheck($parts, ',');
-                $address['address'] = trim(substr($address['address'], strlen(end($addresses) . ',')));
-            }
-        } else {
-            $addresses[] = $address['address'];
-        }
-
-        // Check that $addresses is set, if address like this:
-        // Groupname:;
-        // Then errors were appearing.
-        if (!isset($addresses)){
-            $this->error = 'Empty group.';
-            return false;
-        }
-
-        for ($i = 0; $i < count($addresses); $i++) {
-            $addresses[$i] = trim($addresses[$i]);
-        }
-
-        // Validate each mailbox.
-        // Format could be one of: name <geezer@domain.com>
-        //                         geezer@domain.com
-        //                         geezer
-        // ... or any other format valid by RFC 822.
-        array_walk($addresses, array($this, 'validateMailbox'));
-
-        // Nested format
-        if ($this->nestGroups) {
-            if ($is_group) {
-                $structure->addresses = $addresses;
-            } else {
-                $structure = $addresses[0];
-            }
-
-        // Flat format
-        } else {
-            if ($is_group) {
-                $structure = array_merge($structure, $addresses);
-            } else {
-                $structure = $addresses;
-            }
-        }
-
-        return $structure;
-    }
-
-    /**
-     * Function to validate a phrase.
-     *
-     * @access private
-     * @param string $phrase The phrase to check.
-     * @return boolean Success or failure.
-     */
-    function _validatePhrase($phrase)
-    {
-        // Splits on one or more Tab or space.
-        $parts = preg_split('/[ \\x09]+/', $phrase, -1, PREG_SPLIT_NO_EMPTY);
-
-        $phrase_parts = array();
-        while (count($parts) > 0){
-            $phrase_parts[] = $this->_splitCheck($parts, ' ');
-            for ($i = 0; $i < $this->index + 1; $i++)
-                array_shift($parts);
-        }
-
-        for ($i = 0; $i < count($phrase_parts); $i++) {
-            // If quoted string:
-            if (substr($phrase_parts[$i], 0, 1) == '"') {
-                if (!$this->_validateQuotedString($phrase_parts[$i]))
-                    return false;
-                continue;
-            }
-
-            // Otherwise it's an atom:
-            if (!$this->_validateAtom($phrase_parts[$i])) return false;
-        }
-
-        return true;
-    }
-
-    /**
-     * Function to validate an atom which from rfc822 is:
-     * atom = 1*<any CHAR except specials, SPACE and CTLs>
-     * 
-     * If validation ($this->validate) has been turned off, then
-     * validateAtom() doesn't actually check anything. This is so that you
-     * can split a list of addresses up before encoding personal names
-     * (umlauts, etc.), for example.
-     * 
-     * @access private
-     * @param string $atom The string to check.
-     * @return boolean Success or failure.
-     */
-    function _validateAtom($atom)
-    {
-        if (!$this->validate) {
-            // Validation has been turned off; assume the atom is okay.
-            return true;
-        }
-
-        // Check for any char from ASCII 0 - ASCII 127
-        if (!preg_match('/^[\\x00-\\x7E]+$/i', $atom, $matches)) {
-            return false;
-        }
-
-        // Check for specials:
-        if (preg_match('/[][()<>@,;\\:". ]/', $atom)) {
-            return false;
-        }
-
-        // Check for control characters (ASCII 0-31):
-        if (preg_match('/[\\x00-\\x1F]+/', $atom)) {
-            return false;
-        }
-
-        return true;
-    }
-
-    /**
-     * Function to validate quoted string, which is:
-     * quoted-string = <"> *(qtext/quoted-pair) <">
-     * 
-     * @access private
-     * @param string $qstring The string to check
-     * @return boolean Success or failure.
-     */
-    function _validateQuotedString($qstring)
-    {
-        // Leading and trailing "
-        $qstring = substr($qstring, 1, -1);
-
-        // Perform check.
-        return !(preg_match('/(.)[\x0D\\\\"]/', $qstring, $matches) && $matches[1] != '\\');
-    }
-
-    /**
-     * Function to validate a mailbox, which is:
-     * mailbox =   addr-spec         ; simple address
-     *           / phrase route-addr ; name and route-addr
-     * 
-     * @access public
-     * @param string &$mailbox The string to check.
-     * @return boolean Success or failure.
-     */
-    function validateMailbox(&$mailbox)
-    {
-        // A couple of defaults.
-        $phrase  = '';
-        $comment = '';
-
-        // Catch any RFC822 comments and store them separately
-        $_mailbox = $mailbox;
-        while (strlen(trim($_mailbox)) > 0) {
-            $parts = explode('(', $_mailbox);
-            $before_comment = $this->_splitCheck($parts, '(');
-            if ($before_comment != $_mailbox) {
-                // First char should be a (
-                $comment    = substr(str_replace($before_comment, '', $_mailbox), 1);
-                $parts      = explode(')', $comment);
-                $comment    = $this->_splitCheck($parts, ')');
-                $comments[] = $comment;
-
-                // +1 is for the trailing )
-                $_mailbox   = substr($_mailbox, strpos($_mailbox, $comment)+strlen($comment)+1);
-            } else {
-                break;
-            }
-        }
-
-        for($i=0; $i<count(@$comments); $i++){
-            $mailbox = str_replace('('.$comments[$i].')', '', $mailbox);
-        }
-        $mailbox = trim($mailbox);
-
-        // Check for name + route-addr
-        if (substr($mailbox, -1) == '>' && substr($mailbox, 0, 1) != '<') {
-            $parts  = explode('<', $mailbox);
-            $name   = $this->_splitCheck($parts, '<');
-
-            $phrase     = trim($name);
-            $route_addr = trim(substr($mailbox, strlen($name.'<'), -1));
-
-            if ($this->_validatePhrase($phrase) === false || ($route_addr = $this->_validateRouteAddr($route_addr)) === false)
-                return false;
-
-        // Only got addr-spec
-        } else {
-            // First snip angle brackets if present.
-            if (substr($mailbox,0,1) == '<' && substr($mailbox,-1) == '>')
-                $addr_spec = substr($mailbox,1,-1);
-            else
-                $addr_spec = $mailbox;
-
-            if (($addr_spec = $this->_validateAddrSpec($addr_spec)) === false)
-                return false;
-        }
-
-        // Construct the object that will be returned.
-        $mbox = new stdClass();
-
-        // Add the phrase (even if empty) and comments
-        $mbox->personal = $phrase;
-        $mbox->comment  = isset($comments) ? $comments : array();
-
-        if (isset($route_addr)) {
-            $mbox->mailbox = $route_addr['local_part'];
-            $mbox->host    = $route_addr['domain'];
-            $route_addr['adl'] !== '' ? $mbox->adl = $route_addr['adl'] : '';
-        } else {
-            $mbox->mailbox = $addr_spec['local_part'];
-            $mbox->host    = $addr_spec['domain'];
-        }
-
-        $mailbox = $mbox;
-        return true;
-    }
-
-    /**
-     * This function validates a route-addr which is:
-     * route-addr = "<" [route] addr-spec ">"
-     *
-     * Angle brackets have already been removed at the point of
-     * getting to this function.
-     * 
-     * @access private
-     * @param string $route_addr The string to check.
-     * @return mixed False on failure, or an array containing validated address/route information on success.
-     */
-    function _validateRouteAddr($route_addr)
-    {
-        // Check for colon.
-        if (strpos($route_addr, ':') !== false) {
-            $parts = explode(':', $route_addr);
-            $route = $this->_splitCheck($parts, ':');
-        } else {
-            $route = $route_addr;
-        }
-
-        // If $route is same as $route_addr then the colon was in
-        // quotes or brackets or, of course, non existent.
-        if ($route === $route_addr){
-            unset($route);
-            $addr_spec = $route_addr;
-            if (($addr_spec = $this->_validateAddrSpec($addr_spec)) === false) {
-                return false;
-            }
-        } else {
-            // Validate route part.
-            if (($route = $this->_validateRoute($route)) === false) {
-                return false;
-            }
-
-            $addr_spec = substr($route_addr, strlen($route . ':'));
-
-            // Validate addr-spec part.
-            if (($addr_spec = $this->_validateAddrSpec($addr_spec)) === false) {
-                return false;
-            }
-        }
-
-        if (isset($route)) {
-            $return['adl'] = $route;
-        } else {
-            $return['adl'] = '';
-        }
-
-        $return = array_merge($return, $addr_spec);
-        return $return;
-    }
-
-    /**
-     * Function to validate a route, which is:
-     * route = 1#("@" domain) ":"
-     * 
-     * @access private
-     * @param string $route The string to check.
-     * @return mixed False on failure, or the validated $route on success.
-     */
-    function _validateRoute($route)
-    {
-        // Split on comma.
-        $domains = explode(',', trim($route));
-
-        for ($i = 0; $i < count($domains); $i++) {
-            $domains[$i] = str_replace('@', '', trim($domains[$i]));
-            if (!$this->_validateDomain($domains[$i])) return false;
-        }
-
-        return $route;
-    }
-
-    /**
-     * Function to validate a domain, though this is not quite what
-     * you expect of a strict internet domain.
-     *
-     * domain = sub-domain *("." sub-domain)
-     * 
-     * @access private
-     * @param string $domain The string to check.
-     * @return mixed False on failure, or the validated domain on success.
-     */
-    function _validateDomain($domain)
-    {
-        // Note the different use of $subdomains and $sub_domains                        
-        $subdomains = explode('.', $domain);
-
-        while (count($subdomains) > 0) {
-            $sub_domains[] = $this->_splitCheck($subdomains, '.');
-            for ($i = 0; $i < $this->index + 1; $i++)
-                array_shift($subdomains);
-        }
-
-        for ($i = 0; $i < count($sub_domains); $i++) {
-            if (!$this->_validateSubdomain(trim($sub_domains[$i])))
-                return false;
-        }
-
-        // Managed to get here, so return input.
-        return $domain;
-    }
-
-    /**
-     * Function to validate a subdomain:
-     *   subdomain = domain-ref / domain-literal
-     * 
-     * @access private
-     * @param string $subdomain The string to check.
-     * @return boolean Success or failure.
-     */
-    function _validateSubdomain($subdomain)
-    {
-        if (preg_match('|^\[(.*)]$|', $subdomain, $arr)){
-            if (!$this->_validateDliteral($arr[1])) return false;
-        } else {
-            if (!$this->_validateAtom($subdomain)) return false;
-        }
-
-        // Got here, so return successful.
-        return true;
-    }
-
-    /**
-     * Function to validate a domain literal:
-     *   domain-literal =  "[" *(dtext / quoted-pair) "]"
-     * 
-     * @access private
-     * @param string $dliteral The string to check.
-     * @return boolean Success or failure.
-     */
-    function _validateDliteral($dliteral)
-    {
-        return !preg_match('/(.)[][\x0D\\\\]/', $dliteral, $matches) && $matches[1] != '\\';
-    }
-
-    /**
-     * Function to validate an addr-spec.
-     *
-     * addr-spec = local-part "@" domain
-     * 
-     * @access private
-     * @param string $addr_spec The string to check.
-     * @return mixed False on failure, or the validated addr-spec on success.
-     */
-    function _validateAddrSpec($addr_spec)
-    {
-        $addr_spec = trim($addr_spec);
-
-        // Split on @ sign if there is one.
-        if (strpos($addr_spec, '@') !== false) {
-            $parts      = explode('@', $addr_spec);
-            $local_part = $this->_splitCheck($parts, '@');
-            $domain     = substr($addr_spec, strlen($local_part . '@'));
-
-        // No @ sign so assume the default domain.
-        } else {
-            $local_part = $addr_spec;
-            $domain     = $this->default_domain;
-        }
-
-        if (($local_part = $this->_validateLocalPart($local_part)) === false) return false;
-        if (($domain     = $this->_validateDomain($domain)) === false) return false;
-        
-        // Got here so return successful.
-        return array('local_part' => $local_part, 'domain' => $domain);
-    }
-
-    /**
-     * Function to validate the local part of an address:
-     *   local-part = word *("." word)
-     * 
-     * @access private
-     * @param string $local_part
-     * @return mixed False on failure, or the validated local part on success.
-     */
-    function _validateLocalPart($local_part)
-    {
-        $parts = explode('.', $local_part);
-
-        // Split the local_part into words.
-        while (count($parts) > 0){
-            $words[] = $this->_splitCheck($parts, '.');
-            for ($i = 0; $i < $this->index + 1; $i++) {
-                array_shift($parts);
-            }
-        }
-
-        // Validate each word.
-        for ($i = 0; $i < count($words); $i++) {
-            if ($this->_validatePhrase(trim($words[$i])) === false) return false;
-        }
-
-        // Managed to get here, so return the input.
-        return $local_part;
-    }
-
-    /**
-    * Returns an approximate count of how many addresses are
-    * in the given string. This is APPROXIMATE as it only splits
-    * based on a comma which has no preceding backslash. Could be
-    * useful as large amounts of addresses will end up producing
-    * *large* structures when used with parseAddressList().
-    *
-    * @param  string $data Addresses to count
-    * @return int          Approximate count
-    */
-    function approximateCount($data)
-    {
-        return count(preg_split('/(?<!\\\\),/', $data));
-    }
-    
-    /**
-    * This is a email validating function seperate to the rest
-    * of the class. It simply validates whether an email is of
-    * the common internet form: <user>@<domain>. This can be
-    * sufficient for most people. Optional stricter mode can
-    * be utilised which restricts mailbox characters allowed
-    * to alphanumeric, full stop, hyphen and underscore.
-    *
-    * @param  string  $data   Address to check
-    * @param  boolean $strict Optional stricter mode
-    * @return mixed           False if it fails, an indexed array
-    *                         username/domain if it matches
-    */
-    function isValidInetAddress($data, $strict = false)
-    {
-        $regex = $strict ? '/^([.0-9a-z_-]+)@(([0-9a-z-]+\.)+[0-9a-z]{2,4})$/i' : '/^([*+!.&#$|\'\\%\/0-9a-z^_`{}=?~:-]+)@(([0-9a-z-]+\.)+[0-9a-z]{2,4})$/i';
-        if (preg_match($regex, trim($data), $matches)) {
-            return array($matches[1], $matches[2]);
-        } else {
-            return false;
-        }
-    }
-}
-
-?>

Rmail/mimePart.php

@@ -1,313 +0,0 @@
-<?php
-    /**
-    * o------------------------------------------------------------------------------o
-    * | This package is licensed under the Phpguru license. A quick summary is       |
-    * | that for commercial use, there is a small one-time licensing fee to pay. For |
-    * | registered charities and educational institutes there is a reduced license   |
-    * | fee available. You can read more  at:                                        |
-    * |                                                                              |
-    * |                  http://www.phpguru.org/static/license.html                  |
-    * o------------------------------------------------------------------------------o
-    *
-    * © Copyright 2008,2009 Richard Heyes
-    */
-
-/**
-*
-*  Raw mime encoding class
-*
-* What is it?
-*   This class enables you to manipulate and build
-*   a mime email from the ground up.
-*
-* Why use this instead of mime.php?
-*   mime.php is a userfriendly api to this class for
-*   people who aren't interested in the internals of
-*   mime mail. This class however allows full control
-*   over the email.
-*
-* Eg.
-*
-* // Since multipart/mixed has no real body, (the body is
-* // the subpart), we set the body argument to blank.
-*
-* $params['content_type'] = 'multipart/mixed';
-* $email = new Mail_mimePart('', $params);
-*
-* // Here we add a text part to the multipart we have
-* // already. Assume $body contains plain text.
-*
-* $params['content_type'] = 'text/plain';
-* $params['encoding']     = '7bit';
-* $text = $email->addSubPart($body, $params);
-*
-* // Now add an attachment. Assume $attach is
-* the contents of the attachment
-*
-* $params['content_type'] = 'application/zip';
-* $params['encoding']     = 'base64';
-* $params['disposition']  = 'attachment';
-* $params['dfilename']    = 'example.zip';
-* $attach =& $email->addSubPart($body, $params);
-*
-* // Now build the email. Note that the encode
-* // function returns an associative array containing two
-* // elements, body and headers. You will need to add extra
-* // headers, (eg. Mime-Version) before sending.
-*
-* $email = $message->encode();
-* $email['headers'][] = 'Mime-Version: 1.0';
-*
-*
-* Further examples are available at http://www.phpguru.org
-*
-* TODO:
-*  - Set encode() to return the $obj->encoded if encode()
-*    has already been run. Unless a flag is passed to specifically
-*    re-build the message.
-*
-* @author  Richard Heyes <richard@phpguru.org>
-* @version $Revision: 1.3 $
-* @package Mail
-*/
-
-class Mail_MIMEPart
-{
-    /**
-    * The encoding type of this part
-    * @var string
-    */
-    private $encoding;
-
-    /**
-    * An array of subparts
-    * @var array
-    */
-    private $subparts;
-
-    /**
-    * The output of this part after being built
-    * @var string
-    */
-    private $encoded;
-
-    /**
-    * Headers for this part
-    * @var array
-    */
-    private $headers;
-
-    /**
-    * The body of this part (not encoded)
-    * @var string
-    */
-    private $body;
-
-    /**
-    * Constructor.
-    *
-    * Sets up the object.
-    *
-    * @param $body   - The body of the mime part if any.
-    * @param $params - An associative array of parameters:
-    *                  content_type - The content type for this part eg multipart/mixed
-    *                  encoding     - The encoding to use, 7bit, 8bit, base64, or quoted-printable
-    *                  cid          - Content ID to apply
-    *                  disposition  - Content disposition, inline or attachment
-    *                  dfilename    - Optional filename parameter for content disposition
-    *                  description  - Content description
-    *                  charset      - Character set to use
-    * @access public
-    */
-    public function __construct($body = '', $params = array())
-    {
-        if (!defined('MAIL_MIMEPART_CRLF')) {
-            define('MAIL_MIMEPART_CRLF', defined('MAIL_MIME_CRLF') ? MAIL_MIME_CRLF : "\r\n", true);
-        }
-
-        foreach ($params as $key => $value) {
-            switch ($key) {
-                case 'content_type':
-                    $headers['Content-Type'] = $value . (isset($charset) ? '; charset="' . $charset . '"' : '');
-                    break;
-
-                case 'encoding':
-                    $this->encoding = $value;
-                    $headers['Content-Transfer-Encoding'] = $value;
-                    break;
-
-                case 'cid':
-                    $headers['Content-ID'] = '<' . $value . '>';
-                    break;
-
-                case 'disposition':
-                    $headers['Content-Disposition'] = $value . (isset($dfilename) ? '; filename="' . $dfilename . '"' : '');
-                    break;
-
-                case 'dfilename':
-                    if (isset($headers['Content-Disposition'])) {
-                        $headers['Content-Disposition'] .= '; filename="' . $value . '"';
-                    } else {
-                        $dfilename = $value;
-                    }
-                    break;
-
-                case 'description':
-                    $headers['Content-Description'] = $value;
-                    break;
-
-                case 'charset':
-                    if (isset($headers['Content-Type'])) {
-                        $headers['Content-Type'] .= '; charset="' . $value . '"';
-                    } else {
-                        $charset = $value;
-                    }
-                    break;
-            }
-        }
-
-        // Default content-type
-        if (!isset($headers['Content-Type'])) {
-            $headers['Content-Type'] = 'text/plain';
-        }
-
-        // Default encoding
-        if (!isset($this->encoding)) {
-            $this->encoding = '7bit';
-        }
-
-        // Assign stuff to member variables
-        $this->encoded  = array();
-        $this->headers  = $headers;
-        $this->body     = $body;
-    }
-
-    /**
-    * Encodes and returns the email. Also stores
-    * it in the encoded member variable
-    *
-    * @return An associative array containing two elements,
-    *         body and headers. The headers element is itself
-    *         an indexed array.
-    */
-    public function encode()
-    {
-        $encoded =& $this->encoded;
-
-        if (!empty($this->subparts)) {
-            srand((double)microtime()*1000000);
-            $boundary = '=_' . md5(uniqid(rand()) . microtime());
-            $this->headers['Content-Type'] .= ';' . MAIL_MIMEPART_CRLF . "\t" . 'boundary="' . $boundary . '"';
-
-            // Add body parts to $subparts
-            for ($i = 0; $i < count($this->subparts); $i++) {
-                $headers = array();
-                $tmp = $this->subparts[$i]->encode();
-                foreach ($tmp['headers'] as $key => $value) {
-                    $headers[] = $key . ': ' . $value;
-                }
-                $subparts[] = implode(MAIL_MIMEPART_CRLF, $headers) . MAIL_MIMEPART_CRLF . MAIL_MIMEPART_CRLF . $tmp['body'];
-            }
-
-            $encoded['body'] = '--' . $boundary . MAIL_MIMEPART_CRLF .
-                               implode('--' . $boundary . MAIL_MIMEPART_CRLF, $subparts) .
-                               '--' . $boundary.'--' . MAIL_MIMEPART_CRLF;
-        } else {
-            $encoded['body'] = $this->getEncodedData($this->body, $this->encoding) . MAIL_MIMEPART_CRLF;
-        }
-
-        // Add headers to $encoded
-        $encoded['headers'] =& $this->headers;
-
-        return $encoded;
-    }
-
-    /**
-    * Adds a subpart to current mime part and returns
-    * a reference to it
-    *
-    * @param $body   The body of the subpart, if any.
-    * @param $params The parameters for the subpart, same
-    *                as the $params argument for constructor.
-    * @return A reference to the part you just added.
-    */
-    public function addSubPart($body, $params)
-    {
-        $this->subparts[] = new Mail_MIMEPart($body, $params);
-        
-        return $this->subparts[count($this->subparts) - 1];
-    }
-
-    /**
-    * Returns encoded data based upon encoding passed to it
-    *
-    * @param $data     The data to encode.
-    * @param $encoding The encoding type to use, 7bit, base64,
-    *                  or quoted-printable.
-    */
-    private function getEncodedData($data, $encoding)
-    {
-        switch ($encoding) {
-            case '8bit':
-            case '7bit':
-                return $data;
-                break;
-
-            case 'quoted-printable':
-                return $this->quotedPrintableEncode($data);
-                break;
-
-            case 'base64':
-                return rtrim(chunk_split(base64_encode($data), 76, MAIL_MIMEPART_CRLF));
-                break;
-
-            default:
-                return $data;
-        }
-    }
-
-    /**
-    * Encodes data to quoted-printable standard.
-    *
-    * @param $input    The data to encode
-    * @param $line_max Optional max line length. Should
-    *                  not be more than 76 chars
-    */
-    private function quotedPrintableEncode($input , $line_max = 76)
-    {
-        $lines  = preg_split("/\r?\n/", $input);
-        $eol    = MAIL_MIMEPART_CRLF;
-        $escape = '=';
-        $output = '';
-
-        while(list(, $line) = each($lines)){
-
-            $linlen     = strlen($line);
-            $newline = '';
-
-            for ($i = 0; $i < $linlen; $i++) {
-                $char = substr($line, $i, 1);
-                $dec  = ord($char);
-
-                if (($dec == 32) AND ($i == ($linlen - 1))){    // convert space at eol only
-                    $char = '=20';
-
-                } elseif($dec == 9) {
-                    ; // Do nothing if a tab.
-                } elseif(($dec == 61) OR ($dec < 32 ) OR ($dec > 126)) {
-                    $char = $escape . strtoupper(sprintf('%02s', dechex($dec)));
-                }
-
-                if ((strlen($newline) + strlen($char)) >= $line_max) {        // MAIL_MIMEPART_CRLF is not counted
-                    $output  .= $newline . $escape . $eol;                    // soft line break; " =\r\n" is okay
-                    $newline  = '';
-                }
-                $newline .= $char;
-            } // end of for
-            $output .= $newline . $eol;
-        }
-        $output = substr($output, 0, -1 * strlen($eol)); // Don't want last crlf
-        return $output;
-    }
-} // End of class
-?>

Rmail/smtp.php

@@ -1,371 +0,0 @@
-<?php
-    /**
-    * o------------------------------------------------------------------------------o
-    * | This package is licensed under the Phpguru license. A quick summary is       |
-    * | that for commercial use, there is a small one-time licensing fee to pay. For |
-    * | registered charities and educational institutes there is a reduced license   |
-    * | fee available. You can read more  at:                                        |
-    * |                                                                              |
-    * |                  http://www.phpguru.org/static/license.html                  |
-    * o------------------------------------------------------------------------------o
-    *
-    * © Copyright 2008,2009 Richard Heyes
-    */
-
-define('SMTP_STATUS_NOT_CONNECTED', 1, true);
-define('SMTP_STATUS_CONNECTED', 2, true);
-
-class smtp
-{
-    private $authenticated;
-    private $connection;
-    private $recipients;
-    private $headers;
-    private $timeout;
-    private $errors;
-    private $status;
-    private $body;
-    private $from;
-    private $host;
-    private $port;
-    private $helo;
-    private $auth;
-    private $user;
-    private $pass;
-
-    /**
-    * Constructor function. Arguments:
-    * $params - An assoc array of parameters:
-    *
-    *   host    - The hostname of the smtp server		Default: localhost
-    *   port    - The port the smtp server runs on		Default: 25
-    *   helo    - What to send as the HELO command		Default: localhost
-    *             (typically the hostname of the
-    *             machine this script runs on)
-    *   auth    - Whether to use basic authentication	Default: FALSE
-    *   user    - Username for authentication			Default: <blank>
-    *   pass    - Password for authentication			Default: <blank>
-    *   timeout - The timeout in seconds for the call	Default: 5
-    *             to fsockopen()
-    */
-    public function __construct($params = array())
-    {
-
-        if(!defined('CRLF'))
-            define('CRLF', "\r\n", TRUE);
-
-        $this->authenticated = FALSE;
-        $this->timeout       = 5;
-        $this->status        = SMTP_STATUS_NOT_CONNECTED;
-        $this->host          = 'localhost';
-        $this->port          = 25;
-        $this->helo          = 'localhost';
-        $this->auth          = FALSE;
-        $this->user          = '';
-        $this->pass          = '';
-        $this->errors        = array();
-
-        foreach($params as $key => $value){
-            $this->$key = $value;
-        }
-    }
-
-    /**
-    * Connect function. This will, when called
-    * statically, create a new smtp object, 
-    * call the connect function (ie this function)
-    * and return it. When not called statically,
-    * it will connect to the server and send
-    * the HELO command.
-    */
-    public function connect($params = array())
-    {
-        if (!isset($this->status)) {
-            $obj = new smtp($params);
-            if($obj->connect()){
-                $obj->status = SMTP_STATUS_CONNECTED;
-            }
-
-            return $obj;
-
-        } else {
-            $this->connection = fsockopen($this->host, $this->port, $errno, $errstr, $this->timeout);
-            if (function_exists('socket_set_timeout')) {
-                @socket_set_timeout($this->connection, 5, 0);
-            }
-
-            $greeting = $this->get_data();
-            if (is_resource($this->connection)) {
-                return $this->auth ? $this->ehlo() : $this->helo();
-            } else {
-                $this->errors[] = 'Failed to connect to server: '.$errstr;
-                return FALSE;
-            }
-        }
-    }
-
-    /**
-    * Function which handles sending the mail.
-    * Arguments:
-    * $params	- Optional assoc array of parameters.
-    *            Can contain:
-    *              recipients - Indexed array of recipients
-    *              from       - The from address. (used in MAIL FROM:),
-    *                           this will be the return path
-    *              headers    - Indexed array of headers, one header per array entry
-    *              body       - The body of the email
-    *            It can also contain any of the parameters from the connect()
-    *            function
-    */
-    public function send($params = array())
-    {
-        foreach ($params as $key => $value) {
-            $this->set($key, $value);
-        }
-
-        if ($this->is_connected()) {
-
-            // Do we auth or not? Note the distinction between the auth variable and auth() function
-            if ($this->auth AND !$this->authenticated) {
-                if(!$this->auth())
-                    return false;
-            }
-
-            $this->mail($this->from);
-            
-            if (is_array($this->recipients)) {
-                foreach ($this->recipients as $value) {
-                    $this->rcpt($value);
-                }
-            } else {
-                $this->rcpt($this->recipients);
-            }
-
-            if (!$this->data()) {
-                return false;
-            }
-
-            // Transparency
-            $headers = str_replace(CRLF.'.', CRLF.'..', trim(implode(CRLF, $this->headers)));
-            $body    = str_replace(CRLF.'.', CRLF.'..', $this->body);
-            $body    = substr($body, 0, 1) == '.' ? '.'.$body : $body;
-
-            $this->send_data($headers);
-            $this->send_data('');
-            $this->send_data($body);
-            $this->send_data('.');
-
-            $result = (substr(trim($this->get_data()), 0, 3) === '250');
-            //$this->rset();
-            return $result;
-        } else {
-            $this->errors[] = 'Not connected!';
-            return FALSE;
-        }
-    }
-    
-    /**
-    * Function to implement HELO cmd
-    */
-    private function helo()
-    {
-        if(is_resource($this->connection)
-                AND $this->send_data('HELO '.$this->helo)
-                AND substr(trim($error = $this->get_data()), 0, 3) === '250' ){
-
-            return true;
-
-        } else {
-            $this->errors[] = 'HELO command failed, output: ' . trim(substr(trim($error),3));
-            return false;
-        }
-    }
-    
-    /**
-    * Function to implement EHLO cmd
-    */
-    private function ehlo()
-    {
-        if (is_resource($this->connection)
-                AND $this->send_data('EHLO '.$this->helo)
-                AND substr(trim($error = $this->get_data()), 0, 3) === '250' ){
-
-            return true;
-
-        } else {
-            $this->errors[] = 'EHLO command failed, output: ' . trim(substr(trim($error),3));
-            return false;
-        }
-    }
-    
-    /**
-    * Function to implement RSET cmd
-    */
-    private function rset()
-    {
-        if (is_resource($this->connection)
-                AND $this->send_data('RSET')
-                AND substr(trim($error = $this->get_data()), 0, 3) === '250' ){
-
-            return true;
-
-        } else {
-            $this->errors[] = 'RSET command failed, output: ' . trim(substr(trim($error),3));
-            return false;
-        }
-    }
-
-    /**
-    * Function to implement QUIT cmd
-    */
-    private function quit()
-    {
-        if(is_resource($this->connection)
-                AND $this->send_data('QUIT')
-                AND substr(trim($error = $this->get_data()), 0, 3) === '221' ){
-
-            fclose($this->connection);
-            $this->status = SMTP_STATUS_NOT_CONNECTED;
-            return true;
-
-        } else {
-            $this->errors[] = 'QUIT command failed, output: ' . trim(substr(trim($error),3));
-            return false;
-        }
-    }
-    
-    /**
-    * Function to implement AUTH cmd
-    */
-    private function auth()
-    {
-        if (is_resource($this->connection)
-                AND $this->send_data('AUTH LOGIN')
-                AND substr(trim($error = $this->get_data()), 0, 3) === '334'
-                AND $this->send_data(base64_encode($this->user))			// Send username
-                AND substr(trim($error = $this->get_data()),0,3) === '334'
-                AND $this->send_data(base64_encode($this->pass))			// Send password
-                AND substr(trim($error = $this->get_data()),0,3) === '235' ){
-
-            $this->authenticated = true;
-            return true;
-
-        } else {
-            $this->errors[] = 'AUTH command failed: ' . trim(substr(trim($error),3));
-            return false;
-        }
-    }
-
-    /**
-    * Function that handles the MAIL FROM: cmd
-    */
-    private function mail($from)
-    {
-        if ($this->is_connected()
-            AND $this->send_data('MAIL FROM:<'.$from.'>')
-            AND substr(trim($this->get_data()), 0, 2) === '250' ) {
-
-            return true;
-
-        } else {
-            return false;
-        }
-    }
-
-    /**
-    * Function that handles the RCPT TO: cmd
-    */
-    private function rcpt($to)
-    {
-        if($this->is_connected()
-            AND $this->send_data('RCPT TO:<'.$to.'>')
-            AND substr(trim($error = $this->get_data()), 0, 2) === '25' ){
-
-            return true;
-
-        } else {
-            $this->errors[] = trim(substr(trim($error), 3));
-            return false;
-        }
-    }
-
-    /**
-    * Function that sends the DATA cmd
-    */
-    private function data()
-    {
-        if($this->is_connected()
-            AND $this->send_data('DATA')
-            AND substr(trim($error = $this->get_data()), 0, 3) === '354' ) {
-
-            return true;
-
-        } else {
-            $this->errors[] = trim(substr(trim($error), 3));
-            return false;
-        }
-    }
-
-    /**
-    * Function to determine if this object
-    * is connected to the server or not.
-    */
-    private function is_connected()
-    {
-        return (is_resource($this->connection) AND ($this->status === SMTP_STATUS_CONNECTED));
-    }
-
-    /**
-    * Function to send a bit of data
-    */
-    private function send_data($data)
-    {
-        if(is_resource($this->connection)){
-            return fwrite($this->connection, $data.CRLF, strlen($data)+2);
-            
-        } else {
-            return false;
-        }
-    }
-
-    /**
-    * Function to get data.
-    */
-    private function get_data()
-    {
-        $return = '';
-        $line   = '';
-        $loops  = 0;
-
-        if(is_resource($this->connection)){
-            while((strpos($return, CRLF) === FALSE OR substr($line,3,1) !== ' ') AND $loops < 100){
-                $line    = fgets($this->connection, 512);
-                $return .= $line;
-                $loops++;
-            }
-            return $return;
-
-        }else
-            return false;
-    }
-
-    /**
-    * Sets a variable
-    */    
-    public function set($var, $value)
-    {
-        $this->$var = $value;
-        return true;
-    }
-    
-    /**
-    * Function to return the errors array
-    */
-    public function getErrors()
-    {
-        return $this->errors;
-    }
-    
-
-} // End of class
-?>

TODO

@@ -1,10 +0,0 @@
-- Make auto-logout on email address change work properly on the FIRST submit, not on first action after the submit
-   - same for judges changing email address
-
-testing commit emails
-test two
-test three
-test four
-test five
-test six
-test seven

admin/anneal.inc.php

@@ -1,14 +1,41 @@
-<?php
+<?
 
+/*
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005-2008 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2008-2012 Youth Science Ontario <info@youthscienceontario.ca>
+ * Copyright (C) 2005-2012 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
+ */
+?>
+<?
 
-class annealer {
-
+class annealer
+{
 	var $num_buckets;
 	var $bucket;
 	var $bucket_cost;
 	var $bucket_cost_new;
 	var $cost;
-	var $start_temp, $start_moves;
+
+	var $start_temp,
+		$start_moves;
+
 	var $cost_function_callback;
 	var $pick_move_callback;
 	var $update_callback;
@@ -45,7 +72,8 @@ class annealer {
 			unset($b);
 			$b = array();
 			for ($y = 0; $y < $ipb; $y++) {
-				if($i == count($items)) break;
+				if ($i == count($items))
+					break;
 				$b[] = $items[$i];
 				$i++;
 			}
@@ -58,52 +86,57 @@ class annealer {
 			$this->bucket_cost[] = $c;
 			$this->cost += $c;
 		}
-		TRACE("Annealer setup: T={$this->start_temp}, ".
-				"M={$this->start_moves}, Bkts={$this->num_buckets}, ".
-				"Cost={$this->cost}\n");
+		TRACE("Annealer setup: T={$this->start_temp}, "
+			. "M={$this->start_moves}, Bkts={$this->num_buckets}, "
+			. "Cost={$this->cost}\n");
 	}
 
 	function set_pick_move($func)
 	{
 		$this->pick_move_callback = $func;
 	}
+
 	function set_update_callback($func)
 	{
 		$this->update_callback = $func;
 	}
+
 	function set_delta_cost_bucket_ids_callback($func)
 	{
 		$this->delta_cost_bucket_ids_callback = $func;
 	}
+
 	function set_max_items_per_bucket($num)
 	{
 		$this->max_items_per_bucket = $num;
 	}
 
-
-
 	function pick_move()
 	{
 		/* Pick a bucket and item */
 		while (1) {
 			$b1 = rand(0, $this->num_buckets - 1);
-			if(count($this->bucket[$b1]) > 0) break;
+			if (count($this->bucket[$b1]) > 0)
+				break;
 		}
 		$i1 = rand(0, count($this->bucket[$b1]) - 1);
 
 		/* Pick a second bucket that is different than the first */
 		$b2 = rand(0, $this->num_buckets - 2);
-		if($b2 >= $b1) $b2++;
-
+		if ($b2 >= $b1)
+			$b2++;
 
 		if ($this->max_items_per_bucket > 0 && count($this->bucket[$b2]) >= $this->max_items_per_bucket) {
-			/* Can't move b1 into b2, it would exceed the max items per bucket, pick an
-			 * item to swap with */
+			/*
+			 * Can't move b1 into b2, it would exceed the max items per bucket, pick an
+			 * item to swap with
+			 */
 			$i2 = rand(0, count($this->bucket[$b2]) - 1);
 		} else {
 			/* Pick an item, or a blank, in the second bucket */
 			$i2 = rand(0, count($this->bucket[$b2]));
-			if($i2 == count($this->bucket[$b2])) $i2 = -1;
+			if ($i2 == count($this->bucket[$b2]))
+				$i2 = -1;
 		}
 		//		TRACE("Move ($b1,$i1)<->($b2,$i2)\n");
 		return array($b1, $i1, $b2, $i2);
@@ -147,8 +180,10 @@ class annealer {
 			$this->bucket[$b2][] = $b1_old[$i1];
 		}
 
-		/* Get the lists of buckets we need to recompute, by default
-		 * just b1 and b2 */
+		/*
+		 * Get the lists of buckets we need to recompute, by default
+		 * just b1 and b2
+		 */
 		if (isset($this->delta_cost_bucket_ids_callback)) {
 			$cb = $this->delta_cost_bucket_ids_callback;
 			$ids = $cb($this, $b1);
@@ -160,7 +195,6 @@ class annealer {
 		//		TRACE("Recompute IDs:\n");
 		//		TRACE_R($ids);
 
-
 		/* Save that list */
 		$this->move_bucket_ids = $ids;
 
@@ -172,7 +206,6 @@ class annealer {
 			$cost += $this->bucket_cost_new[$bucket_id];
 		}
 
-
 		/* Save the new lists */
 		$b1_new = $this->bucket[$b1];
 		$b2_new = $this->bucket[$b2];
@@ -183,42 +216,43 @@ class annealer {
 
 		return array($cost, array($b1_new, $b2_new));
 	}
+
 	/*
-	function compute_delta_cost_same_bucket($move)
-	{
-		list($b1, $i1, $b2, $i2) = $move;
-
-		$cost = 0;
-
-		$b_old = $this->bucket[$b1];
-		
-		$b_new = array();
-		/* Make a new bucket list 
-		for($x=0; $x<count($b_old); $x++) {
-			if($x == $i1) {
-				/* Swap or remove this index 
-				if($i2 != -1) $b_new[] = $b_old[$i2];
-			} else if($x == $i2) {
-				$b_new[] = $b_old[$i1];
-			} else {
-				$b_new[] = $b_old[$x];
-			}
-		}
-
-		/* Assign the new item lists to the buckets 
-		$this->bucket[$b1] = $b_new;
-
-		/* Compute costs 
-		$cost -= $this->bucket_cost[$b1];
-
-		$c1 = $this->cost_function($b1);
-		$cost += $c1;
-
-		/* Return to the original bucket lists 
-		$this->bucket[$b1] = $b_old;
-	
-		return array($cost, array($c1, $b_new, 0, array()));
-	}
+	 * function compute_delta_cost_same_bucket($move)
+	 * {
+	 * 	list($b1, $i1, $b2, $i2) = $move;
+	 *
+	 * 	$cost = 0;
+	 *
+	 * 	$b_old = $this->bucket[$b1];
+	 *
+	 * 	$b_new = array();
+	 * 	/* Make a new bucket list
+	 * 	for($x=0; $x<count($b_old); $x++) {
+	 * 		if($x == $i1) {
+	 * 			/* Swap or remove this index
+	 * 			if($i2 != -1) $b_new[] = $b_old[$i2];
+	 * 		} else if($x == $i2) {
+	 * 			$b_new[] = $b_old[$i1];
+	 * 		} else {
+	 * 			$b_new[] = $b_old[$x];
+	 * 		}
+	 * 	}
+	 *
+	 * 	/* Assign the new item lists to the buckets
+	 * 	$this->bucket[$b1] = $b_new;
+	 *
+	 * 	/* Compute costs
+	 * 	$cost -= $this->bucket_cost[$b1];
+	 *
+	 * 	$c1 = $this->cost_function($b1);
+	 * 	$cost += $c1;
+	 *
+	 * 	/* Return to the original bucket lists
+	 * 	$this->bucket[$b1] = $b_old;
+	 *
+	 * 	return array($cost, array($c1, $b_new, 0, array()));
+	 * }
 	 */
 
 	function accept_move($move, $movedata)
@@ -227,7 +261,8 @@ class annealer {
 		list($b1_new, $b2_new) = $movedata;
 
 		$this->bucket[$b1] = $b1_new;
-		if($b1 != $b2) $this->bucket[$b2] = $b2_new;
+		if ($b1 != $b2)
+			$this->bucket[$b2] = $b2_new;
 
 		$this->bucket_cost = $this->bucket_cost_new;
 	}
@@ -263,7 +298,6 @@ class annealer {
 				list($delta_c, $movedata) =
 					$this->compute_delta_cost($move);
 
-
 				$r = floatval(rand()) / floatval(getrandmax());
 				/* Decide if we want to keep it */
 				$e = exp(-$delta_c / $temperature);
@@ -287,8 +321,10 @@ class annealer {
 				}
 
 				if ($this->cost == 0) {
-					/* If we manage to get to a 0 cost
-					 * solution, don't look any more */
+					/*
+					 * If we manage to get to a 0 cost
+					 * solution, don't look any more
+					 */
 					break;
 				}
 			}
@@ -298,7 +334,8 @@ class annealer {
 				$cb = $this->update_callback;
 				$cb($iterations, $estimated_iterations);
 			}
-			if($this->cost == 0) break;
+			if ($this->cost == 0)
+				break;
 
 			if ($this->cost == $last_cost) {
 				$last_cost_count++;
@@ -309,35 +346,41 @@ class annealer {
 
 			if ($temperature < 0.1 && $last_cost_count > 10)
 				break;
+
+			// if we go 1 million iterations without changing the cost, lets give up
+			if ($last_cost_count > 1000000)
+				break;
+
 			//			TRACE("Cost is {$this->cost}\n");
 			$temperature *= $this->rate;
-            /*
-FIXME: README: NOTE: TODO:
-From Kris, 2009-03-24
-Dave do you think we should consider something like this?
 
-<Kris_School_1> here's the schedule i use in my academic annealer:
-                 if( _params._useVPRTempSchedule ) {
-                         // This is VPR's temperature schedule...
-                         if( successRate > 0.96 ) {
-                                 _temp *= 0.5;
-                         } else if( successRate > 0.8 ) {
-                                 _temp *= 0.9;
-                         } else if( successRate > 0.15 || !windowsSized ) {
-                                 _temp *= 0.95;
-                         } else {
-                                 _temp *= 0.8;
-                         }
-                 } else {
-                         // This is identical to Aaarts and Van Laarhaven.
-                         real64  kappa = _params._tempReduction;         // 1.0 == slow, 10 = reasonable, 100 == fast
-                         real64  sqrvar = std::sqrt( variance );
-                         if( variance <= EPSNEG || sqrvar <= EPSNEG ) {
-                                 _temp = 0.;
-                         } else {
-                                 _temp = _temp * ( sqrvar / ( sqrvar + kappa * _temp ) );
-                         }
-                 }
+			/*
+			 * FIXME: README: NOTE: TODO:
+			 * From Kris, 2009-03-24
+			 * Dave do you think we should consider something like this?
+			 *
+			 * <Kris_School_1> here's the schedule i use in my academic annealer:
+			 *                  if( _params._useVPRTempSchedule ) {
+			 *                          // This is VPR's temperature schedule...
+			 *                          if( successRate > 0.96 ) {
+			 *                                  _temp *= 0.5;
+			 *                          } else if( successRate > 0.8 ) {
+			 *                                  _temp *= 0.9;
+			 *                          } else if( successRate > 0.15 || !windowsSized ) {
+			 *                                  _temp *= 0.95;
+			 *                          } else {
+			 *                                  _temp *= 0.8;
+			 *                          }
+			 *                  } else {
+			 *                          // This is identical to Aaarts and Van Laarhaven.
+			 *                          real64  kappa = _params._tempReduction;         // 1.0 == slow, 10 = reasonable, 100 == fast
+			 *                          real64  sqrvar = std::sqrt( variance );
+			 *                          if( variance <= EPSNEG || sqrvar <= EPSNEG ) {
+			 *                                  _temp = 0.;
+			 *                          } else {
+			 *                                  _temp = _temp * ( sqrvar / ( sqrvar + kappa * _temp ) );
+			 *                          }
+			 *                  }
 			 */
 		}
 		TRACE("Annealing complete.  {$this->iterations} iterations.  Final cost is {$this->cost}\n");
@@ -347,12 +390,13 @@ Dave do you think we should consider something like this?
 	{
 		$b = $this->bucket[$x];
 		print ("Bucket $x: (cost: {$this->bucket_cost[$x]})\n");
-		print("   ");
+		print ('   ');
 		for ($y = 0; $y < count($b); $y++) {
 			print ("{$b[$y]} ");
 		}
 		print ("\n");
 	}
+
 	function print_buckets()
 	{
 		for ($x = 0; $x < $this->num_buckets; $x++) {

admin/award_awardcreatedivisional.php

@@ -1,132 +1,136 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
 send_header('Create All Divisional Awards',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Awards Main' => 'admin/awards.php')
-		);
+		'Awards Main' => 'admin/awards.php'));
 
- if($_GET['sponsors_id']) $sponsors_id=$_GET['sponsors_id'];
- else if($_POST['sponsors_id']) $sponsors_id=$_POST['sponsors_id'];
+if (get_value_from_array($_GET, 'sponsors_id'))
+	$sponsors_id = $_GET['sponsors_id'];
+else if (get_value_from_array($_POST, 'sponsors_id'))
+	$sponsors_id = $_POST['sponsors_id'];
 
- if($_GET['award_types_id']) $award_types_id=$_GET['award_types_id'];
- else if($_POST['award_types_id']) $award_types_id=$_POST['award_types_id'];
+if (get_value_from_array($_GET, 'award_types_id'))
+	$award_types_id = $_GET['award_types_id'];
+else if (get_value_from_array($_POST, 'award_types_id'))
+	$award_types_id = $_POST['award_types_id'];
 
 // first, we can only do this if we dont have any type=divisional awards created yet
-	$q=mysql_query("SELECT COUNT(id) AS num FROM award_awards WHERE award_types_id='1' AND year='{$config['FAIRYEAR']}'");
-	$r=mysql_fetch_object($q);
-	if($r->num)
-	{
-		echo error(i18n("%1 Divisional awards already exist.  There must not be any divisional awards in order to run this wizard",array($r->num)));
-	}
-	else
-	{
 
-		$q=mysql_query("SELECT * FROM projectdivisions WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-		while($r=mysql_fetch_object($q))
+$q = $pdo->prepare("SELECT COUNT(id) AS num FROM award_awards WHERE award_types_id='1' AND year='{$config['FAIRYEAR']}'");
+$q->execute();
+$r = $q->fetch(PDO::FETCH_OBJ);
+if ($r->num) {
+	echo error(i18n('%1 Divisional awards already exist.  There must not be any divisional awards in order to run this wizard', array($r->num)));
+} else {
+	$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ))
 		$div[$r->id] = $r->division;
 
-		$q=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-		while($r=mysql_fetch_object($q))
+	$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ))
 		$cat[$r->id] = $r->category;
 
 	$dkeys = array_keys($div);
 	$ckeys = array_keys($cat);
 
-		if($config['filterdivisionbycategory']=="yes") {
-			$q=mysql_query("SELECT * FROM projectcategoriesdivisions_link WHERE year='".$config['FAIRYEAR']."' ORDER BY projectdivisions_id,projectcategories_id");
+	if ($config['filterdivisionbycategory'] == 'yes') {
+		$q = $pdo->prepare("SELECT * FROM projectcategoriesdivisions_link WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY projectdivisions_id,projectcategories_id");
+		$q->execute();
 		$divcat = array();
-			while($r=mysql_fetch_object($q)) {
-				$divcat[]=array("c"=>$r->projectcategories_id,"d"=>$r->projectdivisions_id);
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			$divcat[] = array('c' => $r->projectcategories_id, 'd' => $r->projectdivisions_id);
 		}
-
-		}
-		else {
+	} else {
 		$divcat = array();
 		foreach ($dkeys AS $d) {
 			foreach ($ckeys AS $c) {
-					$divcat[]=array("c"=>$c,"d"=>$d);
+				$divcat[] = array('c' => $c, 'd' => $d);
 			}
 		}
 	}
 
-
-		if($_GET['action']=="create" && $_GET['sponsors_id'])
-		{
-			$q=mysql_query("SELECT * FROM award_prizes WHERE year='-1' AND award_awards_id='0' ORDER BY `order`");
+	if ($_GET['action'] == 'create' && $_GET['sponsors_id']) {
+		$q = $pdo->prepare("SELECT * FROM award_prizes WHERE year='-1' AND award_awards_id='0' ORDER BY `order`");
+		$q->execute();
 		$prizes = array();
-			while($r=mysql_fetch_object($q))
-			{
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 			$prizes[] = array(
-						"cash"=>$r->cash,
-						"scholarship"=>$r->scholarship,
-						"value"=>$r->value,
-						"prize"=>$r->prize,
-						"number"=>$r->number,
-						"excludefromac"=>$r->excludefromac,
-						"trophystudentkeeper"=>$r->trophystudentkeeper,
-						"trophystudentreturn"=>$r->trophystudentreturn,
-						"trophyschoolkeeper"=>$r->trophyschoolkeeper,
-						"trophyschoolreturn"=>$r->trophyschoolreturn,
-						"order"=>$r->order);
+				'cash' => $r->cash,
+				'scholarship' => $r->scholarship,
+				'value' => $r->value,
+				'prize' => $r->prize,
+				'number' => $r->number,
+				'excludefromac' => $r->excludefromac,
+				'trophystudentkeeper' => $r->trophystudentkeeper,
+				'trophystudentreturn' => $r->trophystudentreturn,
+				'trophyschoolkeeper' => $r->trophyschoolkeeper,
+				'trophyschoolreturn' => $r->trophyschoolreturn,
+				'order' => $r->order
+			);
 		}
 
 		$ord = 1;
-			echo "<br />";
+		echo '<br />';
 		foreach ($divcat AS $dc) {
 			$d_id = $dc['d'];
 			$c_id = $dc['c'];
 			$d_division = $div[$d_id];
 			$c_category = $cat[$c_id];
 
-					echo i18n("Creating %1 - %2",array($c_category,$d_division))."<br />";
-					mysql_query("INSERT INTO award_awards (sponsors_id,award_types_id,name,criteria,`order`,year) VALUES (
+			echo i18n('Creating %1 - %2', array($c_category, $d_division)) . '<br />';
+
+			$q = $pdo->prepare("INSERT INTO award_awards (sponsors_id,award_types_id,name,criteria,`order`,year) VALUES (
 						'{$_GET['sponsors_id']}',
 						'1',
 						'$c_category - $d_division',
-						'".i18n("Best %1 projects in the %2 division",array($c_category,$d_division))."',
+						'" . i18n('Best %1 projects in the %2 division', array($c_category, $d_division)) . "',
 						'$ord',
 						'{$config['FAIRYEAR']}'
 					)");
-					echo mysql_error();
-					$award_awards_id=mysql_insert_id();
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
+			$award_awards_id = $pdo->lastInsertId();
 
+			$q = $pdo->prepare("INSERT INTO award_awards_projectcategories (award_awards_id,projectcategories_id,year) VALUES ('$award_awards_id','$c_id','{$config['FAIRYEAR']}')");
+			$q->execute();
 
-					mysql_query("INSERT INTO award_awards_projectcategories (award_awards_id,projectcategories_id,year) VALUES ('$award_awards_id','$c_id','{$config['FAIRYEAR']}')");
-					mysql_query("INSERT INTO award_awards_projectdivisions (award_awards_id,projectdivisions_id,year) VALUES ('$award_awards_id','$d_id','{$config['FAIRYEAR']}')");
-
+			$q = $pdo->prepare("INSERT INTO award_awards_projectdivisions (award_awards_id,projectdivisions_id,year) VALUES ('$award_awards_id','$d_id','{$config['FAIRYEAR']}')");
+			$q->execute();
 			$ord++;
 
-					echo "&nbsp;&nbsp;".i18n("Prizes: ");
-					foreach($prizes AS $prize)
-					{
-						mysql_query("INSERT INTO award_prizes (award_awards_id,cash,scholarship,value,prize,number,`order`,excludefromac,trophystudentkeeper,trophystudentreturn,trophyschoolkeeper,trophyschoolreturn,year) VALUES (
+			echo '&nbsp;&nbsp;' . i18n('Prizes: ');
+			foreach ($prizes AS $prize) {
+				$q = $pdo->prepare("INSERT INTO award_prizes (award_awards_id,cash,scholarship,value,prize,number,`order`,excludefromac,trophystudentkeeper,trophystudentreturn,trophyschoolkeeper,trophyschoolreturn,year) VALUES (
 							'$award_awards_id',
 							'{$prize['cash']}',
 							'{$prize['scholarship']}',
@@ -141,78 +145,83 @@
 							'{$prize['trophyschoolreturn']}',
 							'{$config['FAIRYEAR']}'
 							)");
-						echo $prize['prize'].",";
-					}
-					echo "<br />";
-			}
-			echo happy(i18n("All divisional awards and prizes successfully created"));
-			echo "<a href=\"award_awards.php\">".i18n("Go to awards manager")."</a>\n";
-		}
-		else
-		{
-			echo "<br />";
-			echo i18n("Please choose the sponsor and create the prizes that will be added to all divisional awards");
-			echo "<form method=\"get\" action=\"award_awardcreatedivisional.php\">";
 
+				$q->execute();
 
-			echo "<table>";
-			echo "<tr><td>".i18n("Sponsor").":</td><td>";
-			$sq=mysql_query("SELECT id,organization FROM sponsors ORDER BY organization");
-			echo "<select name=\"sponsors_id\">";
+				echo $prize['prize'] . ',';
+			}
+			echo '<br />';
+		}
+		echo happy(i18n('All divisional awards and prizes successfully created'));
+		echo '<a href="award_awards.php">' . i18n('Go to awards manager') . "</a>\n";
+	} else {
+		echo '<br />';
+		echo i18n('Please choose the sponsor and create the prizes that will be added to all divisional awards');
+		echo '<form method="get" action="award_awardcreatedivisional.php">';
+
+		echo '<table>';
+		echo '<tr><td>' . i18n('Sponsor') . ':</td><td>';
+
+		$sq = $pdo->prepare('SELECT id,organization FROM sponsors ORDER BY organization');
+		$sq->execute();
+		echo '<select name="sponsors_id">';
 		// only show the "choose a sponsor" option if we are adding,if we are editing, then they must have already chosen one.
 		echo $firstsponsor;
-			while($sr=mysql_fetch_object($sq))
-			{
+		while ($sr = $sq->fetch(PDO::FETCH_OBJ)) {
 			if ($sr->id == $sponsors_id)
-					$sel="selected=\"selected\"";
+				$sel = 'selected="selected"';
 			else
-					$sel="";
-				echo "<option $sel value=\"$sr->id\">".i18n($sr->organization)."</option>";
+				$sel = '';
+			echo "<option $sel value=\"$sr->id\">" . i18n($sr->organization) . '</option>';
 		}
-			echo "</select>";
-			echo "</td></tr>";
+		echo '</select>';
+		echo '</td></tr>';
 
-			echo "<tr><td>".i18n("Prizes")."</td><td><a href=\"award_prizes.php?award_awards_id=-1\">Edit prize template for divisional awards</a>";
+		echo '<tr><td>' . i18n('Prizes') . '</td><td><a href="award_prizes.php?award_awards_id=-1">Edit prize template for divisional awards</a>';
 		// the 'generic' template prizes for the awards are stored with year =-1 and award_awards_id=0
 
-			$q=mysql_query("SELECT * FROM award_prizes WHERE year='-1' AND award_awards_id='0' ORDER BY `order`");
+		$q = $pdo->prepare("SELECT * FROM award_prizes WHERE year='-1' AND award_awards_id='0' ORDER BY `order`");
+		$q->execute();
 
-			if(mysql_num_rows($q))
-			{
+		if ($q->rowCount()) {
 			/*
-				echo "<form method=\"post\" action=\"award_prizes.php\">";
-				echo "<input type=\"hidden\" name=\"action\" value=\"reorder\">";
-				echo "<input type=\"hidden\" name=\"award_awards_id\" value=\"$award_awards_id\">";
+			 * echo "<form method=\"post\" action=\"award_prizes.php\">";
+			 * echo "<input type=\"hidden\" name=\"action\" value=\"reorder\">";
+			 * echo "<input type=\"hidden\" name=\"award_awards_id\" value=\"$award_awards_id\">";
 			 */
 
-				echo "<table class=\"summarytable\">";
-				echo "<tr>";
+			echo '<table class="summarytable">';
+			echo '<tr>';
 			//	echo " <th>".i18n("Order")."</th>";
-				echo " <th>".i18n("Prize Description")."</th>";
-				echo " <th>".i18n("Cash Amount")."</th>";
-				echo " <th>".i18n("Scholarship Amount")."</th>";
-				echo " <th>".i18n("Value")."</th>";
-				echo " <th>".i18n("# of Prizes")."</th>";
+			echo ' <th>' . i18n('Prize Description') . '</th>';
+			echo ' <th>' . i18n('Cash Amount') . '</th>';
+			echo ' <th>' . i18n('Scholarship Amount') . '</th>';
+			echo ' <th>' . i18n('Value') . '</th>';
+			echo ' <th>' . i18n('# of Prizes') . '</th>';
 			//			echo " <th>Actions</th>";
 			echo "</tr>\n";
 
-
-				while($r=mysql_fetch_object($q))
-				{
+			while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 				echo "<tr>\n";
 				echo " <td>$r->prize</td>\n";
-					echo " <td align=\"right\">";
-					if($r->cash) echo "\$$r->cash";
-					else echo "&nbsp;";
-					echo " </td>";
-					echo " <td align=\"right\">";
-					if($r->scholarship) echo "\$$r->scholarship";
-					else echo "&nbsp;";
-					echo " </td>";
-					echo " <td align=\"right\">";
-					if($r->value) echo "\$$r->value";
-					else echo "&nbsp;";
-					echo " </td>";
+				echo ' <td align="right">';
+				if ($r->cash)
+					echo "\$$r->cash";
+				else
+					echo '&nbsp;';
+				echo ' </td>';
+				echo ' <td align="right">';
+				if ($r->scholarship)
+					echo "\$$r->scholarship";
+				else
+					echo '&nbsp;';
+				echo ' </td>';
+				echo ' <td align="right">';
+				if ($r->value)
+					echo "\$$r->value";
+				else
+					echo '&nbsp;';
+				echo ' </td>';
 				echo " <td align=\"center\">$r->number</td>\n";
 				echo "</tr>\n";
 			}
@@ -220,11 +229,11 @@
 			echo "</table>\n";
 		}
 
-			echo "</td></tr>";
-			echo "</table>";
+		echo '</td></tr>';
+		echo '</table>';
 
-			echo "<b>".i18n("We will create the following awards with the prizes listed above").":</b>";
-			echo "<br />";
+		echo '<b>' . i18n('We will create the following awards with the prizes listed above') . ':</b>';
+		echo '<br />';
 
 		foreach ($divcat AS $dc) {
 			$d_id = $dc['d'];
@@ -232,14 +241,13 @@
 			$d_division = $div[$d_id];
 			$c_category = $cat[$c_id];
 
-				echo i18n($c_category)." - ".i18n($d_division)."<br />";
+			echo i18n($c_category) . ' - ' . i18n($d_division) . '<br />';
 		}
 
-			echo "<input type=\"hidden\" name=\"action\" value=\"create\">";
-			echo "<input type=\"submit\" value=\"".i18n("Create all divisional awards")."\">";
-			echo "</form>";
+		echo '<input type="hidden" name="action" value="create">';
+		echo '<input type="submit" value="' . i18n('Create all divisional awards') . '">';
+		echo '</form>';
 	}
-
 }
 send_footer();
 ?>

admin/award_download.php

@@ -1,23 +1,24 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2007 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -27,28 +28,27 @@
 require_once ('curl.inc.php');
 require_once ('awards.inc.php');
 
-
-
-switch($_GET['action']) {
+switch (get_value_from_array($_GET, 'action')) {
 	case 'check':
 		$fairs_id = intval($_GET['fairs_id']);
-	$q=mysql_query("SELECT * FROM fairs WHERE id='$fairs_id'");
-	$fair=mysql_fetch_assoc($q);
+
+		$q = $pdo->prepare("SELECT * FROM fairs WHERE id=?");
+		$q->execute([$fairs_id]);
+		$fair = $q->fetch(PDO::FETCH_ASSOC);
 		if (!($fair['username'] && $fair['password'])) {
 			echo error(i18n("Username and Password are not set for source '%1'.  Please set them in the SFIAB Configuration/External Award Sources editor first", array($r->name)));
 			return;
 		}
 
-	echo i18n("Checking %1 for awards...",array($fair['name']));
-	echo "<br />";
+		echo i18n('Checking %1 for awards...', array($fair['name']));
+		echo '<br />';
 
 		if ($fair['type'] == 'ysc') {
-		$req=array("awardrequest"=>array(
-				"username"=>$fair['username'],
-				"password"=>$fair['password'],
-				"year"=>$config['FAIRYEAR'],
-				)
-			);
+			$req = array('awardrequest' => array(
+				'username' => $fair['username'],
+				'password' => $fair['password'],
+				'year' => $config['FAIRYEAR'],
+			));
 		} else {
 			$req['getawards'] = array('year' => $config['FAIRYEAR']);
 		}
@@ -65,25 +65,27 @@ case 'check':
 
 		$keys = array_keys($data);
 		if (!array_key_exists('awards', $data)) {
-		echo error(i18n("Invalid XML response.  Expecting '%1' in '%2'",array("awards",join(',',array_keys($data)))));
+			echo error(i18n("Invalid XML response.  Expecting '%1' in '%2'", array('awards', join(',', array_keys($data)))));
 			//				echo "response=".print_r($data);
 			return;
 		}
 
 		// get a list of all the existing awards for this external source
-	$aq=mysql_query("SELECT * FROM award_awards WHERE award_source_fairs_id='$fairs_id' AND year='{$config['FAIRYEAR']}'");
+
+		$aq = $pdo->prepare("SELECT * FROM award_awards WHERE award_source_fairs_id='$fairs_id' AND year='{$config['FAIRYEAR']}'");
+		$aq->execute();
 		$existingawards = array();
-	while($ar=mysql_fetch_object($aq)) {
+		while ($ar = $aq->fetch(PDO::FETCH_OBJ)) {
 			$existingawards[$ar->id] = true;
 		}
 
-	echo "<i>";
+		echo '<i>';
 		$awards = $data['awards'];
 		$postback = $data['postback'];
-	echo i18n("Postback URL: %1",array($postback))." <br />";
+		echo i18n('Postback URL: %1', array($postback)) . ' <br />';
 
 		$numawards = is_array($awards) ? count($awards) : 0;
-	echo i18n("Number of Awards: %1",array($numawards))." <br />";
+		echo i18n('Number of Awards: %1', array($numawards)) . ' <br />';
 
 		if ($numawards == 0) {
 			echo i18n('No awards to process') . '</i> <br />';
@@ -96,37 +98,43 @@ case 'check':
 		foreach ($awards as $award) {
 			$identifier = $award['identifier'];
 			$year = $award['year'];
-		echo i18n("Award Identifier: %1",array($identifier))." &nbsp; ";
-		echo i18n("Award Year: %1",array($year))."<br />";
-		echo i18n("Award Name: %1",array($award['name_en']))."<br />";
+			echo i18n('Award Identifier: %1', array($identifier)) . ' &nbsp; ';
+			echo i18n('Award Year: %1', array($year)) . '<br />';
+			echo i18n('Award Name: %1', array($award['name_en'])) . '<br />';
 
 			if ($year != $config['FAIRYEAR']) {
-			echo error(i18n("Award is not for the current fair year... skipping"));
+				echo error(i18n('Award is not for the current fair year... skipping'));
 				echo '<br />';
 				continue;
 			}
 
-		$tq=mysql_query("SELECT * FROM award_awards WHERE 
+			$tq = $pdo->prepare("SELECT * FROM award_awards WHERE 
 					external_identifier='$identifier' AND 
 					award_source_fairs_id='$fairs_id' AND 
 					year='$year'");
-		if(mysql_num_rows($tq)  == 0) {
+			$tq->execute();
+			if ($tq->rowCount() == 0) {
 				/* Award doesn't exist, create it, then update it with the common code below */
-			mysql_query("INSERT INTO award_awards (award_types_id,
+
+				$q = $pdo->prepare("INSERT INTO award_awards (award_types_id,
 						year, external_identifier,
 						award_source_fairs_id) 
 					VALUES (2,'{$year}',
-					'".mysql_escape_string($identifier)."',
+					'" . $identifier . "',
 					'$fairs_id')");
-			$award_id=mysql_insert_id();
+				$q->execute();
+				$award_id = $pdo->lastInsertId();
 				/* By default make all divs/cats eligible */
 				foreach ($divs as $id => $d)
-				mysql_query("INSERT INTO award_awards_projectdivisions(award_awards_id,projectdivisions_id,year) VALUES ('$award_id','$id','{$config['FAIRYEAR']}')");
+					$q = $pdo->prepare("INSERT INTO award_awards_projectdivisions(award_awards_id,projectdivisions_id,year) VALUES ('$award_id','$id','{$config['FAIRYEAR']}')");
+				$q->execute();
+
 				foreach ($cats as $id => $c)
-				mysql_query("INSERT INTO award_awards_projectcategories(award_awards_id,projectcategories_id,year) VALUES ('$award_id','$id','{$config['FAIRYEAR']}')");
+					$q = $pdo->prepare("INSERT INTO award_awards_projectcategories(award_awards_id,projectcategories_id,year) VALUES ('$award_id','$id','{$config['FAIRYEAR']}')");
+				$q->execute();
 			} else {
-			echo i18n("Award already exists, updating info")."<br />";
-			$awardrecord=mysql_fetch_object($tq);
+				echo i18n('Award already exists, updating info') . '<br />';
+				$awardrecord = $q->fetch(PDO::FETCH_OBJ);
 				$award_id = $awardrecord->id;
 			}
 
@@ -134,35 +142,39 @@ case 'check':
 			unset($existingawards[$award_id]);
 
 			// check if the sponsor exists, if not, add them
-		$sponsor_str = mysql_escape_string($award['sponsor']);
-		$sponsorq=mysql_query("SELECT * FROM sponsors WHERE organization='$sponsor_str'");
-		if($sponsorr=mysql_fetch_object($sponsorq)) {
+			$sponsor_str = $award['sponsor'];
+
+			$sponsorq = $pdo->prepare("SELECT * FROM sponsors WHERE organization='$sponsor_str'");
+			$sponsorq->execute();
+			if ($sponsorr = $sponsorq->fetch(PDO::FETCH_OBJ)) {
 				$sponsor_id = $sponsorr->id;
 			} else {
-			mysql_query("INSERT INTO sponsors (organization,year,notes) 
-				VALUES ('$sponsor_str','$year','".mysql_escape_string("Imported from external source: $r->name")."')");
-			echo mysql_error();
-			$sponsor_id=mysql_insert_id();
+				$q = $pdo->prepare("INSERT INTO sponsors (organization,year,notes) 
+				VALUES ('$sponsor_str','$year','" . "Imported from external source: $r->name" . "')");
+				$q->execute();
+				show_pdo_errors_if_any($pdo);
+				$sponsor_id = $pdo->lastInsertId();
 			}
 
-
 			$self_nominate = ($award['self_nominate'] == 'yes') ? 'yes' : 'no';
 			$schedule_judges = ($award['schedule_judges'] == 'yes') ? 'yes' : 'no';
-		mysql_query("UPDATE award_awards SET
+
+			$q = $pdo->prepare("UPDATE award_awards SET
 				sponsors_id='$sponsor_id',
-				name='".mysql_escape_string($award['name_en'])."',
-				criteria='".mysql_escape_string($award['criteria_en'])."',
-				external_postback='".mysql_escape_string($postback)."',
+				name='" . $award['name_en'] . "',
+				criteria='" . $award['criteria_en'] . "',
+				external_postback='" . $postback . "',
 				external_register_winners='" . (($award['external_register_winners'] == 1) ? 1 : 0) . "',
 				external_additional_materials='" . (($award['external_additional_materials'] == 1) ? 1 : 0) . "',
 				self_nominate='$self_nominate',
 				schedule_judges='$schedule_judges'
 			WHERE 
 				id='$award_id' 
-				AND external_identifier='".mysql_escape_string($identifier)."' 
+				AND external_identifier='" . $identifier . "' 
 				AND year='$year'
 		");
-		echo mysql_error();
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
 
 			// update the prizes
 			$prizes = $award['prizes'];
@@ -170,44 +182,50 @@ case 'check':
 				continue;
 			}
 
-		echo i18n("Number of prizes: %1",array(count($prizes)))."<br />";
+			echo i18n('Number of prizes: %1', array(count($prizes))) . '<br />';
 			/* Get existing prizes */
-		$pq=mysql_query("SELECT * FROM award_prizes WHERE award_awards_id='$award_id'");
-		$existingprizes=array();
-		while($pr=mysql_fetch_assoc($pq)) 
-			$existingprizes[$pr['prize']]=$pr;
 
+			$pq = $pdo->prepare("SELECT * FROM award_prizes WHERE award_awards_id='$award_id'");
+			$pq->execute();
+			$existingprizes = array();
+			while ($pr = $pq->fetch(PDO::FETCH_ASSOC))
+				$existingprizes[$pr['prize']] = $pr;
 
 			/* Iterate over the downloaded pizes */
 			foreach ($prizes AS $prize) {
 				// if it doesn't exist, add it
 				if (!array_key_exists($prize['prize_en'], $existingprizes)) {
-				/* Add a base entry, then update it below, yes it's two sql queries,
+					/*
+					 * Add a base entry, then update it below, yes it's two sql queries,
 					 * but it's much shorter code, and means changing things in only
-				 * one spot */
-				echo "&nbsp;".i18n("Adding prize %1",array($prize['prize_en']))."<br />";
-				$p = mysql_escape_string(stripslashes($prize['prize_en']));
-				mysql_query("INSERT INTO award_prizes (award_awards_id,prize,year,external_identifier)
+					 * one spot
+					 */
+					echo '&nbsp;' . i18n('Adding prize %1', array($prize['prize_en'])) . '<br />';
+					$p = stripslashes($prize['prize_en']);
+
+					$q = $pdo->prepare("INSERT INTO award_prizes (award_awards_id,prize,year,external_identifier)
 					VALUES ('$award_id','$p','$year','$p')");
-				$prize_id = mysql_insert_id();
+					$q->execute();
+					$prize_id = $pdo->lastInsertId();
 				} else {
 					$ep = $existingprizes[$prize['prize_en']];
-				echo "&nbsp;".i18n("Updating prize %1",array($ep['prize']))."<br />";
+					echo '&nbsp;' . i18n('Updating prize %1', array($ep['prize'])) . '<br />';
 					$prize_id = $ep['id'];
 					// remove it from the list
 					unset($existingprizes[$ep['prize']]);
 				}
 
-			if(!array_key_exists('identifier', $prize)) $prize['identifier'] = $prize['prize_en'];
+				if (!array_key_exists('identifier', $prize))
+					$prize['identifier'] = $prize['prize_en'];
 
-			mysql_query("UPDATE award_prizes SET 
+				$q = $pdo->prepare("UPDATE award_prizes SET 
 					cash='" . intval($prize['cash']) . "',
 					scholarship='" . intval($prize['scholarship']) . "',
 					value='" . intval($prize['value']) . "',
-					prize='".mysql_escape_string($prize['prize_en'])."',
+					prize='" . $prize['prize_en'] . "',
 					number='" . intval($prize['number']) . "',
 					`order`='" . intval($prize['ord']) . "',
-					external_identifier='".mysql_real_escape_string(stripslashes($prize['identifier']))."',
+					external_identifier='" . stripslashes($prize['identifier']) . "',
 					trophystudentkeeper='" . intval($prize['trophystudentkeeper']) . "',
 					trophystudentreturn='" . intval($prize['trophystudentreturn']) . "',
 					trophyschoolkeeper='" . intval($prize['trophyschoolkeeper ']) . "',
@@ -215,30 +233,31 @@ case 'check':
 				WHERE
 					id='$prize_id'");
 
-			echo mysql_error();
+				$q->execute();
+
+				show_pdo_errors_if_any($pdo);
 				// FIXME: update the translations
 			}
 
 			/* Delete local entries that weren't downloaded */
 			foreach ($existingprizes AS $ep) {
-			echo "&nbsp;".i18n("Removing prize %1",array($ep['prize']))."<br />";
+				echo '&nbsp;' . i18n('Removing prize %1', array($ep['prize'])) . '<br />';
 				award_prize_delete($ep['id']);
 			}
 		}
-	echo "<br />";
-
+		echo '<br />';
 
 		// remove any awards that are left in the $existingawards array, they must have been removed from the source
 		foreach ($existingawards AS $aid => $val) {
-		echo i18n("Removing award id %1 that was removed from external source",array($aid))."<br />";
+			echo i18n('Removing award id %1 that was removed from external source', array($aid)) . '<br />';
 			award_delete($aid);
 		}
 
-	echo "</i>";
+		echo '</i>';
 		exit;
 }
 
-send_header("Download Awards",
+send_header('Download Awards',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
 		'Awards Main' => 'admin/awards.php'));
@@ -255,10 +274,9 @@ function award_download(id)
 
 <?
 
-
 if (!function_exists('curl_init')) {
-	echo error(i18n("CURL Support Missing"));
-	echo notice(i18n("Your PHP installation does not support CURL.  You will need to have CURL support added by your system administrator before being able to access external award sources"));
+	echo error(i18n('CURL Support Missing'));
+	echo notice(i18n('Your PHP installation does not support CURL.  You will need to have CURL support added by your system administrator before being able to access external award sources'));
 	$links = false;
 } else {
 	$links = true;
@@ -266,29 +284,31 @@ if(!function_exists('curl_init')) {
 
 ?>
 <table class="tableview"><thead>
-<tr><th><?=i18n("Source Name")?></th>
-<th><?=i18n("Source Location URL")?></th>
-<th><?=i18n("Check")?></th>
+<tr><th><?= i18n('Source Name') ?></th>
+<th><?= i18n('Source Location URL') ?></th>
+<th><?= i18n('Check') ?></th>
 </tr></thead>
 <?
 
-$q=mysql_query("SELECT * FROM fairs WHERE enable_awards='yes' ORDER BY name");
-while($r=mysql_fetch_object($q)) {
-	echo "<tr>";
+$q = $pdo->prepare("SELECT * FROM fairs WHERE enable_awards='yes' ORDER BY name");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	echo '<tr>';
 	echo "<td>{$r->name}</td>\n";
 	echo "<td>{$r->url}</td>";
-	echo "<td align=\"center\">";
+	echo '<td align="center">';
 	if ($links)
-		echo "<a href=\"#\" onclick=\"award_download({$r->id})\">".i18n("check")."</a>";
+		echo "<a href=\"#\" onclick=\"award_download({$r->id})\">" . i18n('check') . '</a>';
 	else
-		echo "n/a";
-	echo "</td>";
-	echo "</tr>";
+		echo 'n/a';
+	echo '</td>';
+	echo '</tr>';
 	//	$checkurl.="&check[]={$r->id}";
 }
+
 /*
- if($links)
-	 echo "<a href=\"award_download.php?action=check$checkurl\">".i18n("Check all sources")."</a>";
+ * if($links)
+ * 	echo "<a href=\"award_download.php?action=check$checkurl\">".i18n("Check all sources")."</a>";
  */
 ?>
  </table>

admin/award_upload.php

@@ -1,23 +1,24 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2007 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
 require_once ('../common.inc.php');
@@ -29,7 +30,7 @@ user_auth_required('committee', 'admin');
 // function get_cwsf_award_winners()
 function get_winners($awardid, $fairs_id)
 {
- 	global $config;
+	global $config, $pdo;
 
 	/* Mappings of the name we want => to the column name returned in MYSQL */
 	$school_fields = array('schoolname' => 'school',
@@ -64,36 +65,40 @@ function get_winners($awardid, $fairs_id)
 		'teachername' => 'teachername',
 		'teacheremail' => 'teacheremail');
 
-
 	$awards = array();
 	if ($awardid == -1) {
 		/* Get all for this fair */
-	 	$q=mysql_query("SELECT * FROM award_awards WHERE award_source_fairs_id='$fairs_id' AND year='{$config['FAIRYEAR']}'");
-		if(mysql_num_rows($q) == 0) {
+
+		$q = $pdo->prepare("SELECT * FROM award_awards WHERE award_source_fairs_id='$fairs_id' AND year='{$config['FAIRYEAR']}'");
+		if ($q->rowCount() == 0) {
 			error_("Can't find award id $awardid");
 			return false;
 		}
-		while($a = mysql_fetch_assoc($q)) {
+		while ($a = $q->fetch(PDO::FETCH_ASSOC)) {
 			$awards[] = $a;
 		}
 	} else {
 		/* Get the award */
-	 	$q=mysql_query("SELECT * FROM award_awards WHERE id='$awardid' AND year='{$config['FAIRYEAR']}'");
-		if(mysql_num_rows($q)!=1) {
+
+		$q = $pdo->prepare("SELECT * FROM award_awards WHERE id='$awardid' AND year='{$config['FAIRYEAR']}'");
+		$q->execute();
+		if ($q->rowCount() != 1) {
 			error_("Can't find award id $awardid");
 			return false;
 		}
-		$award=mysql_fetch_assoc($q);
+		$award = $q->fetch(PDO::FETCH_ASSOC);
 		$awards[] = $award;
 	}
 
 	/* Get the fair for the div/cat mappings */
-	$q = mysql_query("SELECT * FROM fairs WHERE id='{$award['award_source_fairs_id']}'");
-	$fair = mysql_fetch_assoc($q);
+
+	$q = $pdo->prepare("SELECT * FROM fairs WHERE id='{$award['award_source_fairs_id']}'");
+	$q->execute();
+	$fair = $q->fetch(PDO::FETCH_ASSOC);
+
 	$catmap = unserialize($fair['catmap']);
 	$divmap = unserialize($fair['divmap']);
 
-
 	foreach ($awards as $award) {
 		$winners = array('id' => $award['id'],
 			'award_name' => $award['name'],
@@ -107,30 +112,36 @@ function get_winners($awardid, $fairs_id)
 		}
 
 		/* Get the prizes */
-		$q=mysql_query("SELECT * FROM award_prizes WHERE award_awards_id='{$award['id']}'");
-		while($prize=mysql_fetch_assoc($q)) {
+
+		$q = $pdo->prepare("SELECT * FROM award_prizes WHERE award_awards_id='{$award['id']}'");
+		$q->execute();
+		while ($prize = $q->fetch(PDO::FETCH_ASSOC)) {
 			$pid = $prize['id'];
-			$wq=mysql_query("SELECT projects.* FROM award_prizes
+
+			$wq = $pdo->prepare("SELECT projects.* FROM award_prizes
 						LEFT JOIN winners ON winners.awards_prizes_id=award_prizes.id
 						LEFT JOIN projects ON projects.id=winners.projects_id
 					WHERE 
 						awards_prizes_id='$pid' AND 
 						winners.year='{$config['FAIRYEAR']}'");
-			echo mysql_error();
+			$wq->execute();
+			show_pdo_errors_if_any($pdo);
 			/* Get all projects assigned to this prize */
 			$prizewinners = array();
-			while($project=mysql_fetch_assoc($wq)) {
-
+			while ($project = $wq->fetch(PDO::FETCH_ASSOC)) {
 				/* Get the students */
-				$sq=mysql_query("SELECT * FROM students WHERE registrations_id='{$project['registrations_id']}'
-							AND year='{$config['FAIRYEAR']}'");
-				$students=array();
-				while($s=mysql_fetch_assoc($sq)) {
 
+				$sq = $pdo->prepare("SELECT * FROM students WHERE registrations_id='{$project['registrations_id']}'
+							AND year='{$config['FAIRYEAR']}'");
+				$sq->execute();
+				$students = array();
+				while ($s = $sq->fetch(PDO::FETCH_ASSOC)) {
 					/* Get the student's school */
-					$schoolq=mysql_query("SELECT * FROM schools WHERE id='{$s['schools_id']}'");
-					$schoolr=mysql_fetch_assoc($schoolq);
-					$school = array("xml_type"=>"school");/* for ysc compatability */
+
+					$schoolq = $pdo->prepare("SELECT * FROM schools WHERE id='{$s['schools_id']}'");
+					$schoolq->execute();
+					$schoolr = $schoolq->fetch(PDO::FETCH_ASSOC);
+					$school = array('xml_type' => 'school');  /* for ysc compatability */
 					foreach ($school_fields as $k => $v)
 						$school[$k] = $schoolr[$v];
 
@@ -141,7 +152,6 @@ function get_winners($awardid, $fairs_id)
 						$student[$k] = $s[$v];
 
 					$students[] = $student;
-
 				}
 				/* Turn our load ID into a server-side cat/div id */
 				$cat_id = $catmap[$project['projectcategories_id']];
@@ -165,7 +175,8 @@ function get_winners($awardid, $fairs_id)
 				'name' => $prize['prize'],
 				'xml_type' => 'prize',  /* For ysc compatability */
 				'identifier' => $prize['external_identifier'],  /* for ysc compatability */
-					'projects'=>$prizewinners);
+				'projects' => $prizewinners
+			);
 		}
 		$all_winners[] = $winners;
 	}
@@ -174,59 +185,66 @@ function get_winners($awardid, $fairs_id)
 
 function count_winners($awardid, $fairs_id)
 {
-	global $config;
+	global $config, $pdo;
 	$count = 0;
 	$awards = array();
 	if ($awardid == -1) {
 		/* Get all for this fair */
-	 	$q=mysql_query("SELECT * FROM award_awards WHERE award_source_fairs_id='$fairs_id' AND year='{$config['FAIRYEAR']}'");
-		if(mysql_num_rows($q) == 0) {
+
+		$q = $pdo->prepare("SELECT * FROM award_awards WHERE award_source_fairs_id='$fairs_id' AND year='{$config['FAIRYEAR']}'");
+		$q->execute();
+		if ($q->rowCount() == 0) {
 			error_("Can't find award id $awardid");
 			return 0;
 		}
-		while($a = mysql_fetch_assoc($q)) {
+		while ($a = $q->fetch(PDO::FETCH_ASSOC)) {
 			$awards[] = $a;
 		}
 	} else {
 		/* Get the award */
-	 	$q=mysql_query("SELECT * FROM award_awards WHERE id='$awardid' AND year='{$config['FAIRYEAR']}'");
-		if(mysql_num_rows($q)!=1) {
+
+		$q = $pdo->prepare("SELECT * FROM award_awards WHERE id='$awardid' AND year='{$config['FAIRYEAR']}'");
+		$q->execute();
+		if ($q->rowcount() != 1) {
 			error_("Can't find award id $awardid");
 			return 0;
 		}
-		$award=mysql_fetch_assoc($q);
+		$award = $q->fetch(PDO::FETCH_ASSOC);
 		$awards[] = $award;
 	}
 
 	foreach ($awards as $award) {
 		/* Get the prizes */
-		$q=mysql_query("SELECT * FROM award_prizes WHERE award_awards_id='{$award['id']}'");
-		while($prize=mysql_fetch_assoc($q)) {
+
+		$q = $pdo->prepare("SELECT * FROM award_prizes WHERE award_awards_id='{$award['id']}'");
+		$q->execute();
+		while ($prize = $q->fetch(PDO::FETCH_ASSOC)) {
 			$pid = $prize['id'];
-			$wq=mysql_query("SELECT COUNT(projects.id) as C FROM award_prizes
+
+			$wq = $pdo->prepare("SELECT COUNT(projects.id) as C FROM award_prizes
 						LEFT JOIN winners ON winners.awards_prizes_id=award_prizes.id
 						LEFT JOIN projects ON projects.id=winners.projects_id
 					WHERE 
 						awards_prizes_id='$pid' AND 
 						winners.year='{$config['FAIRYEAR']}'");
-			$wc = mysql_fetch_assoc($wq);
+			$wq->execute();
+			$wc = $wq->fetch(PDO::FETCH_ASSOC);
 			$count += $wc['C'];
 		}
 	}
 	return $count;
-			
 }
 
-
 function load_server_cats_divs($fairs_id)
 {
-	global $config;
-	$q = mysql_query("SELECT * FROM fairs WHERE id='$fairs_id'");
-	$fair = mysql_fetch_assoc($q);
+	global $config, $pdo;
+
+	$q = $pdo->prepare("SELECT * FROM fairs WHERE id='$fairs_id'");
+	$q->execute();
+	$fair = $q->fetch(PDO::FETCH_ASSOC);
 
 	$req = array('get_categories' => array('year' => $config['FAIRYEAR']),
-			'get_divisions' => array('year' => $config['FAIRYEAR'])
-			);
+		'get_divisions' => array('year' => $config['FAIRYEAR']));
 	$data = curl_query($fair, $req);
 
 	/* If selected mappings don't exist, try to discover some */
@@ -235,8 +253,10 @@ function load_server_cats_divs($fairs_id)
 	} else {
 		$catmap = array();
 		/* Load ours */
-		$q=mysql_query("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}' ORDER BY mingrade");
-		while($r=mysql_fetch_object($q)) {
+
+		$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}' ORDER BY mingrade");
+		$q->execute();
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 			foreach ($data['categories'] as $id => $c) {
 				if ($c['mingrade'] == $r->mingrade) {
 					$catmap[$r->id] = $id;
@@ -249,8 +269,10 @@ function load_server_cats_divs($fairs_id)
 		$divmap = unserialize($fair['divmap']);
 	} else {
 		$ret['divmap'] = array();
-		$q=mysql_query("SELECT * FROM projectdivisions WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
-		while($r=mysql_fetch_object($q)) {
+
+		$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
+		$q->execute();
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 			$lowest = 999;
 			$lowest_id = 0;
 			foreach ($data['divisions'] as $id => $d) {
@@ -267,35 +289,41 @@ function load_server_cats_divs($fairs_id)
 	return array($data['categories'], $data['divisions'], $catmap, $divmap);
 }
 
-switch($_GET['action']) {
+switch (get_value_from_array($_GET, 'action')) {
 	case 'award_upload':
 		$award_awards_id = intval($_POST['award_awards_id']);
 		$fairs_id = intval($_POST['fairs_id']);
 		$divs = $_POST['div'];
 		$cats = $_POST['cat'];
 
-
 		$all_winners = get_winners($award_awards_id, $fairs_id);
 
 		/* Get the fair */
-	$q = mysql_query("SELECT * FROM fairs WHERE id='$fairs_id}'");
-	$fair = mysql_fetch_assoc($q);
+
+		$q = $pdo->prepare("SELECT * FROM fairs WHERE id='$fairs_id}'");
+		$q->execute();
+		$fair = $q->fetch(PDO::FETCH_ASSOC);
 
 		echo '<br />';
-	/* Check that we're going to upload something, and override the 
+
+		/*
+		 * Check that we're going to upload something, and override the
 		 * divisions/cats with the divisions taht were set, and the categories
-	 * that were computed */
+		 * that were computed
+		 */
 		$upload_something = false;
 		foreach ($all_winners as &$w) {
 			foreach ($w['prizes'] as &$p) {
-
 				if (count($p['projects']))
 					$upload_something = true;
 
-			/* Only update divs/cats for SFIAB fairs, the 
+				/*
+				 * Only update divs/cats for SFIAB fairs, the
 				 * YSC/STO awards system doesn't care about divisions, but YSC
-			 * registration does, but that's a different bit of code */
-			if($fair['type'] != 'sfiab') continue;
+				 * registration does, but that's a different bit of code
+				 */
+				if ($fair['type'] != 'sfiab')
+					continue;
 
 				foreach ($p['projects'] as &$pr) {
 					$div_id = intval($divs[$w['id']][$p['id']][$pr['projectid']]);
@@ -311,51 +339,51 @@ case 'award_upload':
 			exit;
 		}
 
-
 		if ($fair['type'] == 'ysc') {
 			if ($award_awards_id == -1) {
 				echo "Multiple uploads not supported for YSC targets.\n";
 				exit;
 			}
-		/* Pull the single-award out, get_winners() will never
-		 * return more than one award for YSC targets */
+
+			/*
+			 * Pull the single-award out, get_winners() will never
+			 * return more than one award for YSC targets
+			 */
 			$winners = array_shift($all_winners);
 			$w = array();
 			foreach ($winners['prizes'] as $prize_name => $prize) {
 				$w[] = $prize;
 			}
-		$req=array("awardwinners"=>array(
-				"username"=>$fair['username'],
-				"password"=>$fair['password'],
-				"identifier"=>$winners['external_identifier'],
-				"prizes"=>$w,
-				)
-			);
+			$req = array('awardwinners' => array(
+				'username' => $fair['username'],
+				'password' => $fair['password'],
+				'identifier' => $winners['external_identifier'],
+				'prizes' => $w,
+			));
 			$url = $winners['external_postback'];
 		} else {
 			$req = array();
 			$req['awards_upload'] = $all_winners;
 			$url = '';  /* url is ignored for type = sfiab */
-
 		}
-	echo i18n("Sending winners to %1...", array('<b>'.$fair['name'].'</b>'));
+		echo i18n('Sending winners to %1...', array('<b>' . $fair['name'] . '</b>'));
 		echo '<br />';
 		//		echo "<pre>"; print_r($req); echo "</pre>";
 
 		$data = curl_query($fair, $req, $url);
 
 		if ($data['error'] != 0) {
-		echo error("Server said: ".htmlspecialchars(print_r($data,true)));
+			echo error('Server said: ' . htmlspecialchars(print_r($data, true)));
 		} else {
 			if (is_array($data['notice']))
-			echo notice("{$fair['name']} server said: <pre>".join("\n", $data['notice'])."</pre>");
+				echo notice("{$fair['name']} server said: <pre>" . join("\n", $data['notice']) . '</pre>');
 			else if (is_array($data['message']))
-			echo notice("{$fair['name']} server said: <pre>".join("\n", $data['message'])."</pre>");
+				echo notice("{$fair['name']} server said: <pre>" . join("\n", $data['message']) . '</pre>');
 			else if ($data['message'])
-			echo notice("{$fair['name']} server said: <pre>".$data['message']."</pre>");
+				echo notice("{$fair['name']} server said: <pre>" . $data['message'] . '</pre>');
 			else
-			echo notice("{$fair['name']} server said: <pre>".htmlspecialchars(print_r($data,true))."</pre>");
-		echo happy(i18n("Upload completed successfully"));
+				echo notice("{$fair['name']} server said: <pre>" . htmlspecialchars(print_r($data, true)) . '</pre>');
+			echo happy(i18n('Upload completed successfully'));
 		}
 		exit;
 
@@ -365,17 +393,18 @@ case 'catdiv_load':
 		list($c, $d, $cm, $dm) = load_server_cats_divs($fairs_id);
 		$divs = projectdivisions_load();
 
-	$q = mysql_query("SELECT * FROM fairs WHERE id='$fairs_id}'");
-	$fair = mysql_fetch_assoc($q);
+		$q = $pdo->prepare("SELECT * FROM fairs WHERE id='$fairs_id}'");
+		$q->execute();
+		$fair = $q->fetch(PDO::FETCH_ASSOC);
 
-?>	<h4><?=i18n("Division Mapping")?></h4>
+?>	<h4><?= i18n('Division Mapping') ?></h4>
 	<br />
 
 	<form id="catdiv_form">
 	<input type="hidden" name="fairs_id" value="<?= $fairs_id ?>" />
 
 	<table class="editor">
-	<tr><th><?=i18n("Our Division")?></th><th><?=i18n("%1 Division", array($fair['abbrv']))?></th></tr>
+	<tr><th><?= i18n('Our Division') ?></th><th><?= i18n('%1 Division', array($fair['abbrv'])) ?></th></tr>
 <?
 
 		foreach ($divs as $div) {
@@ -407,25 +436,31 @@ case 'catdiv_save':
 			$div[intval($key)] = intval($d);
 		}
 
-	$catmap = mysql_real_escape_string(serialize($cat));
-	$divmap = mysql_real_escape_string(serialize($div));
-	mysql_query("UPDATE fairs SET catmap='$catmap',divmap='$divmap' WHERE id='$fairs_id'");
-	echo "UPDATE fairs SET catmap='$catmap',divmap='$divmap' WHERE id='$fairs_id'";
-	echo mysql_error();
+		$catmap = serialize($cat);
+		$divmap = serialize($div);
 
-	happy_("Category/Division mapping information saved");
+		$q = $pdo->prepare("UPDATE fairs SET catmap='$catmap',divmap='$divmap' WHERE id='$fairs_id'");
+
+		$q->execute();
+		show_pdo_errors_if_any($pdo);
+
+		happy_('Category/Division mapping information saved');
 		exit;
 
 	case 'additional_materials':
 		$award_awards_id = intval($_GET['award_awards_id']);
-	$q = mysql_query("SELECT award_source_fairs_id,external_identifier FROM award_awards WHERE id='$award_awards_id'");
-	$a = mysql_fetch_assoc($q);
-	$q = mysql_query("SELECT * FROM fairs WHERE id='{$a['award_source_fairs_id']}'");
-	$fair = mysql_fetch_assoc($q);
+
+		$q = $pdo->prepare("SELECT award_source_fairs_id,external_identifier FROM award_awards WHERE id='$award_awards_id'");
+		$q->execute();
+		$a = $q->fetch(PDO::FETCH_ASSOC);
+
+		$q = $pdo->prepare("SELECT * FROM fairs WHERE id='{$a['award_source_fairs_id']}'");
+		$q->execute();
+		$fair = $q->fetch(PDO::FETCH_ASSOC);
 		$req = array('award_additional_materials' => array(
 			'year' => $config['FAIRYEAR'],
-				'identifier'=>$a['external_identifier'])
-			);
+			'identifier' => $a['external_identifier']
+		));
 		$data = curl_query($fair, $req, $url);
 		foreach ($data['award_additional_materials']['pdf']['header'] as $h)
 			header($h);
@@ -439,8 +474,9 @@ case 'load':
 		$winners = get_winners($award_awards_id, $fairs_id);
 		$divs = projectdivisions_load();
 
-	$q = mysql_query("SELECT * FROM fairs WHERE id='$fairs_id}'");
-	$fair = mysql_fetch_assoc($q);
+		$q = $pdo->prepare("SELECT * FROM fairs WHERE id='$fairs_id}'");
+		$q->execute();
+		$fair = $q->fetch(PDO::FETCH_ASSOC);
 
 		echo i18n("The following list of winning projects/students will be sent to: <b>%1</b>.  Use the 'Edit Default Division Assignments' button to change the default mappings for divisions.  You can over-ride any division assignment by changing it in the list below.  Category assignments are done automatically based on grade.  When you are happy with the list below, click the 'Upload Winners' button.", array($fair['name']));
 
@@ -460,7 +496,7 @@ case 'load':
 ?>
 	<br /><br />
 	<button onClick="popup_divmap(<?= $fairs_id ?>);return false;" <?= $division_disabled ? 'disabled="disabled' : '' ?>
-			title="<?=i18n("Edit Default Division Assignments")?>"><?=i18n("Edit Default Division Assignments")?></button>
+			title="<?= i18n('Edit Default Division Assignments') ?>"><?= i18n('Edit Default Division Assignments') ?></button>
 
 	<form id="winner_divs_form">
 	<input type="hidden" name="fairs_id" value="<?= $fairs_id ?>" />
@@ -469,10 +505,10 @@ case 'load':
 <?
 
 		foreach ($winners as &$w) {
-		echo "<tr><td style=\"border: 0px;\" colspan=\"3\">";
+			echo '<tr><td style="border: 0px;" colspan="3">';
 			echo "<br /><h3>{$w['award_name']}</h3>";
 			foreach ($w['prizes'] as &$p) {
-			echo "<tr><td style=\"border: 0px;\" colspan=\"3\">";
+				echo '<tr><td style="border: 0px;" colspan="3">';
 				echo "<h4>{$p['name']}</h4>";
 				echo '</td></tr>';
 				if (count($p['projects']) == 0) {
@@ -482,18 +518,26 @@ case 'load':
 				foreach ($p['projects'] as &$pr) {
 ?>				<tr><td style="border: 0px;">&nbsp;&nbsp;&nbsp;&nbsp;</td>
 				<td><b><?= $pr['projectnumber'] ?> - <?= $pr['title'] ?></b><br/>
-<?				$highest_grade = 0;
+<?
+					$highest_grade = 0;
 					foreach ($pr['students'] as &$s) {
-					echo i18n("Name").": ";
-					echo $s['firstname']." ".$s['lastname'];
-					echo "<br />";
-					echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;";
-					echo i18n("Grade").": ".$s['grade'];
-					echo "<br />";
-					echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;";
-					echo i18n("School").": ".$s['school']['schoolname'];
+						echo i18n('Name') . ': ';
+						echo $s['firstname'] . ' ' . $s['lastname'];
 						echo '<br />';
-					if($s['grade'] > $highest_grade) $highest_grade = $s['grade'];
+						echo '&nbsp;';
+						echo '&nbsp;';
+						echo '&nbsp;';
+						echo '&nbsp;';
+						echo i18n('Grade') . ': ' . $s['grade'];
+						echo '<br />';
+						echo '&nbsp;';
+						echo '&nbsp;';
+						echo '&nbsp;';
+						echo '&nbsp;';
+						echo i18n('School') . ': ' . $s['school']['schoolname'];
+						echo '<br />';
+						if ($s['grade'] > $highest_grade)
+							$highest_grade = $s['grade'];
 					}
 					$server_cat = '';
 					foreach ($server_cats as $c) {
@@ -525,26 +569,23 @@ case 'load':
 						<tr>	<td align="right"><?= i18n('%1 Category', array($fair['abbrv'])) ?>:</td>
 							<td><b><?= $server_cats[$server_cat]['category'] ?> (<?= i18n('Grade') ?> <?= $server_cats[$server_cat]['mingrade'] ?> - <?= $server_cats[$server_cat]['maxgrade'] ?>)</td>
 						</tr>
-<?					}
+<?
+					}
 					?>					</table>
 				</td></tr>
 <?
 				}
-			
 			}
 		}
 		echo '</table></form><br />';
 		exit;
-	
 }
 
-
- send_header("Award Upload",
+send_header('Award Upload',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Awards Main' => 'admin/awards.php')
-			);
- echo "<br />";
+		'Awards Main' => 'admin/awards.php'));
+echo '<br />';
 
 ?>
 <script type="text/javascript">
@@ -649,36 +690,36 @@ $(document).ready(function() {
 
 <?
 
-
 if (!function_exists('curl_init')) {
-	echo error(i18n("CURL Support Missing"));
-	echo notice(i18n("Your PHP installation does not support CURL.  You will need to have CURL support added by your system administrator before being able to access external award sources"));
+	echo error(i18n('CURL Support Missing'));
+	echo notice(i18n('Your PHP installation does not support CURL.  You will need to have CURL support added by your system administrator before being able to access external award sources'));
 	send_footer();
 	exit;
 }
 
-
 /* Fairs first */
-$q = mysql_query("SELECT fairs.id, fairs.name, fairs.type, COUNT(award_awards.id) as AWARD_COUNT FROM fairs 
+
+$q = $pdo->prepare("SELECT fairs.id, fairs.name, fairs.type, COUNT(award_awards.id) as AWARD_COUNT FROM fairs 
 			LEFT JOIN award_awards ON award_awards.award_source_fairs_id=fairs.id
 			WHERE award_awards.award_source_fairs_id IS NOT NULL
 				AND award_awards.year='{$config['FAIRYEAR']}'
 			GROUP BY fairs.id
 			ORDER BY fairs.name ");
-echo mysql_error();
+$q->execute();
+show_pdo_errors_if_any($pdo);
 
 ?>
 <h4><?= i18n('Upload all winners to a source') ?>:</h4>
 
 <table class="tableview"><thead>
-<tr><th><?=i18n("Source Name")?></th>
-<th><?=i18n("Number of Awards")?></th>
-<th><?=i18n("Winners<br />Assigned")?></th>
-<th><?=i18n("Send All")?></th>
+<tr><th><?= i18n('Source Name') ?></th>
+<th><?= i18n('Number of Awards') ?></th>
+<th><?= i18n('Winners<br />Assigned') ?></th>
+<th><?= i18n('Send All') ?></th>
 </tr></thead>
 <?
 
-while($r=mysql_fetch_object($q)) {
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$count = count_winners(-1, $r->id);
 	?>
 	<tr><td><?= $r->name ?></td>
@@ -687,10 +728,10 @@ while($r=mysql_fetch_object($q)) {
 	<td align="center">
 <?
 	if ($r->type == 'sfiab')
-		echo "<a href=\"#\" onClick=\"popup_upload({$r->id},-1)\" >".i18n("Send All")."</a>";
+		echo "<a href=\"#\" onClick=\"popup_upload({$r->id},-1)\" >" . i18n('Send All') . '</a>';
 	else
 		echo "Not available yet, we're working on it!";
-	echo "</td></tr>";
+	echo '</td></tr>';
 }
 ?>
 </table>
@@ -700,28 +741,29 @@ while($r=mysql_fetch_object($q)) {
 
 <?
 
-$q = mysql_query("SELECT award_awards.id, award_awards.name AS awardname,
-			  fairs.name as fairname, award_source_fairs_id, 
-			  fairs.type as fairtype, award_awards.external_additional_materials
+$q = $pdo->prepare("SELECT award_awards.id, award_awards.name AS awardname,
+		\t  fairs.name as fairname, award_source_fairs_id, 
+		\t  fairs.type as fairtype, award_awards.external_additional_materials
 			FROM award_awards 
 			LEFT JOIN fairs ON fairs.id=award_awards.award_source_fairs_id 
 			WHERE award_awards.award_source_fairs_id IS NOT NULL
 				AND award_awards.year='{$config['FAIRYEAR']}'
 			ORDER BY fairs.name, award_awards.name");
-echo mysql_error();
+$q->execute();
+show_pdo_errors_if_any($pdo);
 
 ?>
 <h4><?= i18n('Upload individual winners to a source') ?>:</h4>
 
 <table class="tableview"><thead>
-<tr><th><?=i18n("Award Name")?></th>
-<th><?=i18n("Source Name")?></th>
-<th><?=i18n("Winners<br />Assigned")?></th>
-<th><?=i18n("Send")?></th>
-<th><?=i18n("Additional<br />Info")?></th>
+<tr><th><?= i18n('Award Name') ?></th>
+<th><?= i18n('Source Name') ?></th>
+<th><?= i18n('Winners<br />Assigned') ?></th>
+<th><?= i18n('Send') ?></th>
+<th><?= i18n('Additional<br />Info') ?></th>
 </tr></thead>
 <?
-while($r=mysql_fetch_object($q)) {
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$count = count_winners($r->id, $r->award_source_fairs_id);
 	?>	
 	<tr><td><?= $r->awardname ?></td>
@@ -734,11 +776,12 @@ while($r=mysql_fetch_object($q)) {
 	else
 		$onclick = "alert('" . i18n('Assign a winner first') . "');return false;";
 	?>	
-	<a href="#" onClick="<?=$onclick?>"><?=i18n("send")?></a>
+	<a href="#" onClick="<?= $onclick ?>"><?= i18n('send') ?></a>
 	</td><td>
 
-<?	if($r->external_additional_materials) {
-		echo "<a href=\"{$_SERVER['PHP_SELF']}?action=additional_materials&award_awards_id={$r->id}\" target=\"_blank\">".i18n("download")."</a>";
+<?
+	if ($r->external_additional_materials) {
+		echo "<a href=\"{$_SERVER['PHP_SELF']}?action=additional_materials&award_awards_id={$r->id}\" target=\"_blank\">" . i18n('download') . '</a>';
 	}
 	echo '</td></tr>';
 }

admin/awards.inc.php

@@ -1,49 +1,66 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2010 David Grant <dave@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2010 David Grant <dave@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
 
 function award_delete($award_awards_id)
-{
+{   global $pdo;
     /* Delete all winners attached to this award */
-	$q = mysql_query("SELECT id FROM award_prizes WHERE award_awards_id='$award_awards_id'");
-	while(($p = mysql_fetch_assoc($q))) {
-		mysql_query("DELETE FROM winners WHERE award_prizes_id='{$p['id']}'");
+    
+    $q = $pdo->prepare("SELECT id FROM award_prizes WHERE award_awards_id='$award_awards_id'");
+    $q->execute();
+
+    while (($p = $q->fetch(PDO::FETCH_ASSOC))) {
+       
+        $q = $pdo->prepare("DELETE FROM winners WHERE awards_prizes_id='{$p['id']}'");
+        $q->execute();
     }
 
     /* FIXME: maybe delte judging teams and judge
       * assignments and timeslots?
 
      /* Delete the award */
-	mysql_query("DELETE FROM award_prizes WHERE award_awards_id='$award_awards_id'");
-	mysql_query("DELETE FROM award_awards_projectcategories WHERE award_awards_id='$award_awards_id'");
-	mysql_query("DELETE FROM award_awards_projectdivisions WHERE award_awards_id='$award_awards_id'");
-	mysql_query("DELETE FROM award_awards WHERE id='$award_awards_id'");
+
+    $q = $pdo->prepare("DELETE FROM award_prizes WHERE award_awards_id='$award_awards_id'");
+    $q->execute();
+
+    $q = $pdo->prepare("DELETE FROM award_awards_projectcategories WHERE award_awards_id='$award_awards_id'");
+    $q->execute();
+
+    $q = $pdo->prepare("DELETE FROM award_awards_projectdivisions WHERE award_awards_id='$award_awards_id'");
+    $q->execute();
+
+    $q = $pdo->prepare("DELETE FROM award_awards WHERE id='$award_awards_id'");
+    $q->execute();
 }
 
 function award_prize_delete($award_prizes_id)
-{
-	mysql_query("DELETE FROM winners WHERE award_prizes_id='$award_prizes_id'");
-	mysql_query("DELETE FROM award_prizes WHERE id='$award_prizes_id'");
+{   global $pdo;
+    $q = $pdo->prepare("DELETE FROM winners WHERE awards_prizes_id='$award_prizes_id'");
+    $q->execute();
+
+    $q = $pdo->prepare("DELETE FROM award_prizes WHERE id='$award_prizes_id'");
+    $q->execute();
 }
 
 ?>

admin/awards.php

@@ -1,48 +1,49 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
- send_header("Awards", 
+send_header('Awards',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php'),
-        "awards_management" );
+    'awards_management');
 
- require_once("rerollprizes.php");
+require_once ('rerollprizes.php');
 
- echo "<br />";
- echo "<a href=\"award_awards.php\">".i18n('Awards Management')."</a><br />";
- echo "<a href=\"donors.php\">".i18n('Sponsors')."</a><br />";
- echo "<br />";
- echo "<a href=\"award_awards.php?action=edit_prize_template\">".i18n('Edit prize template for the divisional awards')."</a>";
- echo "<br />";
- echo "<a href=\"award_awardcreatedivisional.php\">".i18n('Create divisional awards for all divisions & categories')."</a><br />";
- echo "<br />";
- echo "<a href=\"award_download.php\">".i18n('Download awards from external sources')."</a><br />";
- echo "<a href=\"award_upload.php\">".i18n('Upload award winners to external sources')."</a><br />";
+echo '<br />';
+echo '<a href="award_awards.php">' . i18n('Awards Management') . '</a><br />';
+echo '<a href="donors.php">' . i18n('Sponsors') . '</a><br />';
+echo '<br />';
+echo '<a href="award_awards.php?action=edit_prize_template">' . i18n('Edit prize template for the divisional awards') . '</a>';
+echo '<br />';
+echo '<a href="award_awardcreatedivisional.php">' . i18n('Create divisional awards for all divisions & categories') . '</a><br />';
+echo '<br />';
+echo '<a href="award_download.php">' . i18n('Download awards from external sources') . '</a><br />';
+echo '<a href="award_upload.php">' . i18n('Upload award winners to external sources') . '</a><br />';
 
 send_footer();
 

admin/cms.php

@@ -1,198 +1,223 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2008 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2008 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
 // make sure storage folder exists
- if(!file_exists("../data/userfiles"))
- 	mkdir("../data/userfiles");
+if (!file_exists('../data/userfiles'))
+	mkdir('../data/userfiles');
 
-
- send_header("Website Content Manager",
+send_header('Website Content Manager',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php'),
-            "website_content_management"
-			);
+	'website_content_management');
 
- if($_POST['action']=="save")
- {
+?>
+<div class="element"></div>
+    <script type="module">
+      import { Editor } from 'https://esm.sh/@tiptap/core'
+      import StarterKit from 'https://esm.sh/@tiptap/starter-kit'
+
+new Editor({
+  element: document.querySelector('.element'),
+  extensions: [
+    StarterKit.configure({
+      heading: {
+        levels: [1, 2, 3],
+      },
+    }),
+  ],
+})
+    </script>
+<?
+
+if (get_value_from_array($_POST, 'action') == 'save') {
 	$err = false;
 	foreach ($config['languages'] AS $lang => $langname) {
-		$filename=stripslashes($_POST['filename']);
+		$filename = stripslashes(get_value_from_array($_POST, 'filename', ''));
 		//		$filename=ereg_replace("[^A-Za-z0-9\.\_\/]","_",$_POST['filename']);
 
-		if(substr($filename,-5)!=".html")
-			$filename=$filename.".html";
+		if (substr($filename, -5) != '.html')
+			$filename = $filename . '.html';
 
 		$textname = "text_$lang";
 		$titlename = "title_$lang";
 		$showlogoname = "showlogo_$lang";
 		// get the dt here to insert with ALL the languages, we cant rely on the INSERT NOW() always inserting multiple records with the same timestamp!
-		$insertdt=date("Y-m-d H:i:s");
-		$text=stripslashes($_POST[$textname]);
+		$insertdt = date('Y-m-d H:i:s');
+		$text = stripslashes(get_value_from_array($_POST, $textname, ''));
 
-		mysql_query("INSERT INTO cms (filename,dt,lang,text,title,showlogo) VALUES (
-			'".mysql_escape_string($filename)."',
+		$q = $pdo->prepare("INSERT INTO cms (filename,dt,lang,text,title,showlogo) VALUES (
+			'" . $filename . "',
 			'$insertdt',
 			'$lang',
-			'".mysql_escape_string($text)."',
-			'".mysql_escape_string($_POST[$titlename])."',
-			'".$_POST[$showlogoname]."'
+			'" . $text . "',
+			'" . get_value_from_array($_POST, $titlename, '') . "',
+			'" . get_value_from_array($_POST, $showlogoname, '') . "'
 			)");
-		if(mysql_error()) {
-			echo error(i18n("An error occurred saving %1 in %2",array($filename,$langname)));
+		$q->execute();
+		if ($pdo->errorInfo()) {
+			echo error(i18n('An error occurred saving %1 in %2', array($filename, $langname)));
 			$err = true;
 		}
 	}
 	if (!$err)
-		echo happy(i18n("%1 successfully saved",array($_POST['filename'])));
+		echo happy(i18n('%1 successfully saved', array($_POST['filename'])));
 }
 
- if($_GET['filename'] || $_GET['action']=="create")
- {
+if (get_value_from_array($_GET, 'filename', '') || get_value_from_array($_GET, 'action', 'create')) {
 	echo "<a href=\"cms.php\">&lt;&lt; Back to file list</a><br />\n";
-	echo "<form method=\"post\" action=\"cms.php\">";
+	echo '<form method="post" action="cms.php">';
 	echo "<input type=\"hidden\" name=\"action\" value=\"save\">\n";
-	if($_GET['filename'])
-		echo "<input type=\"hidden\" name=\"filename\" value=\"".htmlspecialchars($_GET['filename'])."\">\n";
+	if (get_value_from_array($_GET, 'filename', ''))
+		echo '<input type="hidden" name="filename" value="' . htmlspecialchars($_GET['filename']) . "\">\n";
 	else
-		echo "Choose filename to create: /web/<input type=\"text\" name=\"filename\" size=\"15\">.html<hr />";
+		echo 'Choose filename to create: /web/<input type="text" name="filename" size="15">.html<hr />';
 
-	echo "<table width=\"100%\" cellpadding=\"3\">";
-	echo "<tr><td valign=\"top\">";
+	echo '<table width="100%" cellpadding="3">';
+	echo '<tr><td valign="top">';
 	foreach ($config['languages'] AS $lang => $langname) {
-		echo "<table class=\"tableview\" width=\"100%\">";
-		echo "<tr><th colspan=\"2\">";
-		$q=mysql_query("SELECT * FROM cms WHERE filename='".mysql_escape_string($_GET['filename'])."' AND lang='$lang' ORDER BY dt DESC LIMIT 1");
-		if($r=mysql_fetch_object($q)) {
-			if($r->dt=="0000-00-00 00:00:00" || !$r->dt) $dt="Never";
-			else $dt=$r->dt;
-			echo "<b>".htmlspecialchars($_GET['filename'])." - $langname</b> &nbsp;&nbsp; ".i18n("Last updated").": $dt<br />";
+		echo '<table class="tableview" width="100%">';
+		echo '<tr><th colspan="2">';
+
+		$q = $pdo->prepare("SELECT * FROM cms WHERE filename='" . get_value_from_array($_GET, 'filename', '') . "' AND lang='$lang' ORDER BY dt DESC LIMIT 1");
+		$q->execute();
+		if ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			if ($r->dt == '0000-00-00 00:00:00' || !$r->dt)
+				$dt = 'Never';
+			else
+				$dt = $r->dt;
+			echo '<b>' . htmlspecialchars($_GET['filename']) . " - $langname</b> &nbsp;&nbsp; " . i18n('Last updated') . ": $dt<br />";
 			if ($_GET['dt']) {
-				$q2=mysql_query("SELECT * FROM cms WHERE filename='".mysql_escape_string($_GET['filename'])."' AND lang='$lang' AND dt<='".$_GET['dt']."' ORDER BY dt DESC LIMIT 1");
-				$r2=mysql_fetch_object($q2);
-				if($r2->dt!=$r->dt)
-				{
+				$q2 = $pdo->prepare("SELECT * FROM cms WHERE filename='" . $_GET['filename'] . "' AND lang='$lang' AND dt<='" . $_GET['dt'] . "' ORDER BY dt DESC LIMIT 1");
+				$q2->execute();
+				$r2 = $q2->fetch(PDO::FETCH_OBJ);
+				if ($r2->dt != $r->dt) {
 					echo "Displaying historical file.  Date: $r->dt";
 					$r = $r2;
 				}
-
 			}
-		}
-		else
-		{
+		} else {
 			echo "<b>$langname</b><br />";  // &nbsp;&nbsp; ".i18n("Last updated").": $dt<br />";
 		}
 		echo "</th></tr>\n";
-		echo "<tr><td width=\"100\">".i18n("Page Title").":</td><td><input type=\"text\" name=\"title_$lang\" style=\"width: 99%;\" value=\"".htmlspecialchars($r->title)."\"></td></tr>\n";
-		echo "<tr><td width=\"100\">".i18n("Show Logo").":</td><td>";
-		if($r->showlogo) $ch="checked=\"checked\""; else $ch="";
-		echo "<input $ch type=\"radio\" name=\"showlogo_$lang\" value=\"1\"> ".i18n("Yes");
-		echo "&nbsp;&nbsp;&nbsp;";
-		if(!$r->showlogo) $ch="checked=\"checked\""; else $ch="";
-		echo "<input $ch type=\"radio\" name=\"showlogo_$lang\" value=\"0\"> ".i18n("No");
+		echo '<tr><td width="100">' . i18n('Page Title') . ":</td><td><input type=\"text\" name=\"title_$lang\" style=\"width: 99%;\" value=\"" . htmlspecialchars(get_value_property_or_default($r, 'title', '')) . "\"></td></tr>\n";
+		echo '<tr><td width="100">' . i18n('Show Logo') . ':</td><td>';
+		if (get_value_property_or_default($r, 'showlogo'))
+			$ch = 'checked="checked"';
+		else
+			$ch = '';
+		echo "<input $ch type=\"radio\" name=\"showlogo_$lang\" value=\"1\"> " . i18n('Yes');
+		echo '&nbsp;&nbsp;&nbsp;';
+		if (!get_value_property_or_default($r, 'showlogo'))
+			$ch = 'checked="checked"';
+		else
+			$ch = '';
+		echo "<input $ch type=\"radio\" name=\"showlogo_$lang\" value=\"0\"> " . i18n('No');
 
 		echo "</td></tr>\n";
-		echo "<tr><td colspan=\"2\">";
-		require_once("../fckeditor/fckeditor.php");
+		echo '<tr><td colspan="2">';
+		require_once ('../fckeditor/fckeditor.php');
 
 		$oFCKeditor = new FCKeditor("text_$lang");
-		$oFCKeditor->BasePath  = "../fckeditor/";
-		$oFCKeditor->Value = $r->text;
-		$oFCKeditor->Width="100%";
+		$oFCKeditor->BasePath = '../fckeditor/';
+		$oFCKeditor->Value = get_value_property_or_default($r, 'text');
+		$oFCKeditor->Width = '100%';
 		$oFCKeditor->Height = 400;
 		$oFCKeditor->Create();
 
 		echo "</td></tr></table>\n";
 
-		echo "<br />";
+		echo '<br />';
 	}
-	echo "</td><td width=\"130\" valign=\"top\">";
-	echo "<table class=\"tableview\" width=\"130\">";
+	echo '</td><td width="130" valign="top">';
+	echo '<table class="tableview" width="130">';
 
-	if($_GET['historylimit']) $historylimit=intval($_GET['historylimit']);
-	else $historylimit=30;
+	if (get_value_from_array($_GET, 'historylimit', ''))
+		$historylimit = intval(get_value_from_array($_GET, 'historylimit', ''));
+	else
+		$historylimit = 30;
 
-	echo "<tr><th>".i18n("File History")."</th></tr>\n";
-	$q=mysql_query("SELECT DISTINCT(dt) FROM cms WHERE filename='".mysql_escape_string($_GET['filename'])."' ORDER BY dt DESC LIMIT $historylimit");
+	echo '<tr><th>' . i18n('File History') . "</th></tr>\n";
+
+	$q = $pdo->prepare("SELECT DISTINCT(dt) FROM cms WHERE filename='" . get_value_from_array($_GET, 'filename', '') . "' ORDER BY dt DESC LIMIT $historylimit");
+	$q->execute();
 	$first = true;
-	if(mysql_num_rows($q)) {
-		while($r=mysql_fetch_object($q)) 
-		{
-			if($r->dt==$_GET['dt']) $style="font-weight: bold;"; 
-			else $style="font-weight: normal;";
+	if ($q->rowCount()) {
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			if ($r->dt == $_GET['dt'])
+				$style = 'font-weight: bold;';
+			else
+				$style = 'font-weight: normal;';
 
-			if($first && !$_GET['dt']) $style="font-weight: bold;";
+			if ($first && !$_GET['dt'])
+				$style = 'font-weight: bold;';
 
-			echo "<tr><td><a href=\"cms.php?filename=".rawurlencode($_GET['filename'])."&amp;dt=".rawurlencode($r->dt)."\" style=\"font-size: 0.75em; $style\">$r->dt</a></td></tr>\n";
+			echo '<tr><td><a href="cms.php?filename=' . rawurlencode($_GET['filename']) . '&amp;dt=' . rawurlencode($r->dt) . "\" style=\"font-size: 0.75em; $style\">$r->dt</a></td></tr>\n";
 			$first = false;
 		}
-
-	}
-	else
+	} else
 		echo "<tr><td><i>No History</i></td></tr>\n";
 
 	echo "</table>\n";
 	echo "</td></tr>\n";
 
-	echo "<tr><td colspan=\"2\">";
-	echo "<table><tr><td>";
-	echo "<input type=\"submit\" value=\"".i18n("Save Page")."\" />\n";
-	echo "</form>";
-	echo "</td><td>";
-	echo "<form method=\"get\" action=\"cms.php\">";
-	echo "<input type=\"submit\" value=\"".i18n("Cancel Changes")."\" />\n";
+	echo '<tr><td colspan="2">';
+	echo '<table><tr><td>';
+	echo '<input type="submit" value="' . i18n('Save Page') . "\" />\n";
+	echo '</form>';
+	echo '</td><td>';
+	echo '<form method="get" action="cms.php">';
+	echo '<input type="submit" value="' . i18n('Cancel Changes') . "\" />\n";
 	echo "</form>\n";
 	echo "</td></tr></table>\n";
 
 	echo "</td></tr></table>\n";
+} else {
+	echo i18n('Choose a web page filename to edit');
+	echo '&nbsp;';
+	echo '<a href="cms.php?action=create">' . i18n('or click here to create a new file') . "</a><br />\n";
 
- }
+	echo '<table class="summarytable">';
+	$q = $pdo->prepare('SELECT DISTINCT(filename) AS filename FROM cms ORDER BY filename');
+
+	echo '<tr><th>' . i18n('Filename') . '</th><th>' . i18n('Last Update') . '</th></tr>';
+	while ($r = $q->fetch(PDO::FETCH_ASSOC)) {
+		echo '<tr><td><a href="cms.php?filename=' . rawurlencode($r->filename) . "\">/web/$r->filename</a></td>";
+		$q2 = $pdo->prepare("SELECT dt FROM cms WHERE filename='" . $r->filename . "' ORDER BY dt DESC LIMIT 1");
+
+		$r2 = $q2->fetch(PDO::FETCH_OBJ);
+		if ($r2->dt == '0000-00-00 00:00:00')
+			$dt = 'Never';
 		else
- {
-	 echo i18n("Choose a web page filename to edit");
-	 echo "&nbsp;";
-	 echo "<a href=\"cms.php?action=create\">".i18n("or click here to create a new file")."</a><br />\n";
-
-	 echo "<table class=\"summarytable\">";
-
-	 $q=mysql_query("SELECT DISTINCT(filename) AS filename FROM cms ORDER BY filename");
-	 echo "<tr><th>".i18n("Filename")."</th><th>".i18n("Last Update")."</th></tr>";
-	 while($r=mysql_fetch_object($q))
-	 {
-		echo "<tr><td><a href=\"cms.php?filename=".rawurlencode($r->filename)."\">/web/$r->filename</a></td>";
-		$q2=mysql_query("SELECT dt FROM cms WHERE filename='".mysql_escape_string($r->filename)."' ORDER BY dt DESC LIMIT 1");
-		$r2=mysql_fetch_object($q2);
-		if($r2->dt=="0000-00-00 00:00:00") $dt="Never";
-		else $dt=$r2->dt;
+			$dt = $r2->dt;
 		echo "<td>$dt</td>";
-		echo "</tr>";
-
-
+		echo '</tr>';
 	}
-	 echo "</table>";
+	echo '</table>';
 }
 
 send_footer();

admin/committees.php

@@ -1,43 +1,42 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require_once("../common.inc.php");
- require_once("../user.inc.php");
- require_once("../committee.inc.php");
+require_once ('../common.inc.php');
+require_once ('../user.inc.php');
+require_once ('../committee.inc.php');
 
 user_auth_required('committee', 'admin');
 
-if($_POST['users_uid'])
+if (get_value_from_array($_POST, 'users_uid'))
 	$uid = intval($_POST['users_uid']);
 
-
 /* Now, start the output for this page */
- send_header("Committee Management",
+send_header('Committee Management',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php'),
-            "committee_management");
-
+	'committee_management');
 
 $_SESSION['last_page'] = 'committee_management';
 ?>
@@ -124,15 +123,16 @@ function actionSubmit()
 //-->
 </script>
 <?
-
-if($_POST['addcommittee'])
-{
+global $uid;
+if (get_value_from_array($_POST, 'addcommittee')) {
 	// add a new committee
-	mysql_query("INSERT INTO committees (name) VALUES ('".mysql_escape_string($_POST['addcommittee'])."')");
-	echo happy(i18n("Committee successfully added"));
+	// re-order the committees
+	$q = $pdo->prepare("INSERT INTO committees (name) VALUES ('" . $_POST['addcommittee'] . "')");
+	$q->execute();
+	echo happy(i18n('Committee successfully added'));
 }
 
-if($_POST['committees_id'] && $_POST['committees_ord']) {
+if (get_value_from_array($_POST, 'committees_id') && get_value_from_array($_POST, 'committees_ord')) {
 	// re-order the committees
 	$x = 0;
 	$ids = $_POST['committees_id'];
@@ -140,172 +140,172 @@ if($_POST['committees_id'] && $_POST['committees_ord']) {
 
 	$titles = $_POST['title'];
 	$pords = $_POST['order'];
-	while($ids[$x]) {
+	while (get_value_from_array($ids, $x)) {
 		$cid = intval($ids[$x]);
-		mysql_query("UPDATE committees SET ord='".intval($ords[$x])."' WHERE id='$cid'");
+
+		$q = $pdo->prepare("UPDATE committees SET ord='" . intval($ords[$x]) . "' WHERE id='$cid'");
+		$q->execute();
 		$x++;
 
 		$ctitle = $titles[$cid];
 		$cord = $pords[$cid];
 
-		/* If the committee has no members, don't bother trying to do
-		 * anything */
-		if(!is_array($ctitle)) continue;
+		/*
+		 * If the committee has no members, don't bother trying to do
+		 * anything
+		 */
+		if (!is_array($ctitle))
+			continue;
 		//		print_r($ctitle);
 
 		foreach ($ctitle as $uid => $title) {
 			$o = intval($cord[$uid]);
-			$t = mysql_escape_string(stripslashes($title));
+			$t = stripslashes($title);
 			$u = intval($uid);
-			$q = "UPDATE committees_link SET title='$t', ord='$o'
-				WHERE committees_id='$cid' AND users_uid='$u'";
-//				echo $q;
-			mysql_query($q);
+
+			$q = $pdo->prepare("UPDATE committees_link SET title='$t', ord='$o'
+				WHERE committees_id='$cid' AND users_uid='$u'");
+			$q->execute();
+		}
+	}
+	echo happy(i18n('Committees successfully saved'));
 }
 
-	}
-	echo happy(i18n("Committees successfully saved"));
-
-}
-
-if($_POST['action']=="assign")
-{
-	if($_POST['committees_id'] && $_POST['users_uid']) {
+if (get_value_from_array($_POST, 'action') == 'assign') {
+	if (get_value_from_array($_POST, 'committees_id') && get_value_from_array($_POST, 'users_uid')) {
 		$cid = intval($_POST['committees_id']);
-		$q=mysql_query("SELECT * FROM committees_link WHERE committees_id='$cid' AND users_uid='$uid'");
+		$q = $pdo->prepare("SELECT * FROM committees_link WHERE committees_id='$cid' AND users_uid='$uid'");
+		$q->execute();
 
-		if(!mysql_num_rows($q)) {
-			mysql_query("INSERT INTO committees_link (committees_id,users_uid) VALUES ('$cid','$uid')");
-			echo happy(i18n("Successfully added member to committee"));
-		}
-		else
-			echo error(i18n("That member already exists in that committee"));
-	}
-	else
-		echo error(("You must choose both a member and a committee"));
+		if (!$q->rowCount()) {
+			$q = $pdo->prepare("INSERT INTO committees_link (committees_id,users_uid) VALUES ('$cid','$uid')");
+			$q->execute();
+			echo happy(i18n('Successfully added member to committee'));
+		} else
+			echo error(i18n('That member already exists in that committee'));
+	} else
+		echo error(('You must choose both a member and a committee'));
 }
 
-if($_GET['deletecommittee']) {
+if (get_value_from_array($_GET, 'deletecommittee')) {
 	$del = intval($_GET['deletecommittee']);
-	mysql_query("DELETE FROM committees WHERE id='$del'");
-	echo happy(i18n("Committee removed"));
+
+	$q = $pdo->prepare("DELETE FROM committees WHERE id='$del'");
+	$q->execute();
+	echo happy(i18n('Committee removed'));
 }
 
-if($_POST['action']=="remove") {
+if (get_value_from_array($_POST, 'action') == 'remove') {
 	/* user_delete takes care of unlinking the user in other tables */
 	user_delete($uid, 'committee');
-	echo happy(i18n("Committee member deleted"));
+	echo happy(i18n('Committee member deleted'));
 }
 
-if($_GET['unlinkmember'] && $_GET['unlinkcommittee']) {
+if (get_value_from_array($_GET, 'unlinkmember') && get_value_from_array($_GET, 'unlinkcommittee')) {
 	$mem = intval($_GET['unlinkmember']);
 	$com = intval($_GET['unlinkcommittee']);
 	// unlink the member from the committee
-	mysql_query("DELETE FROM committees_link WHERE users_uid='$mem' AND committees_id='$com'");
-	echo happy(i18n("Committee member unlinked from committee"));
+
+	$q = $pdo->prepare("DELETE FROM committees_link WHERE users_uid='$mem' AND committees_id='$com'");
+	$q->execute();
+	echo happy(i18n('Committee member unlinked from committee'));
 }
 
+echo '<table>';
+echo '<tr><td>';
 
-	echo "<table>";
-	echo "<tr><td>";
-
-	echo "<h4>".i18n("Add Committee")."</h4>\n";
+echo '<h4>' . i18n('Add Committee') . "</h4>\n";
 echo "<form method=\"post\" action=\"committees.php\">\n";
 echo "<table>\n";
-	echo "<tr><td>".i18n("Committee Name").": </td><td><input type=\"text\" size=\"15\" name=\"addcommittee\" /></td>";
-	echo "    <td><input type=\"submit\" value=\"".i18n("Add")."\" /></td></tr>\n";
+echo '<tr><td>' . i18n('Committee Name') . ': </td><td><input type="text" size="15" name="addcommittee" /></td>';
+echo '    <td><input type="submit" value="' . i18n('Add') . "\" /></td></tr>\n";
 echo "</table>\n";
 echo "</form>\n";
 
-	echo "</td><td width=\"40\">&nbsp;</td><td>";
+echo '</td><td width="40">&nbsp;</td><td>';
 
-	echo "<h4>".i18n("Add Committee Member")."</h4>\n";
+echo '<h4>' . i18n('Add Committee Member') . "</h4>\n";
 echo "<form method=\"post\" name=\"addmember\" action=\"committees.php\" onsubmit=\"return neweditor();\">\n";
 echo "<table>\n";
-	echo "<tr><td>".i18n("Member Email").": </td><td>";
+echo '<tr><td>' . i18n('Member Email') . ': </td><td>';
 echo "<input type=\"text\" size=\"15\" name=\"add_member\" />\n";
 echo "</td>\n";
-	echo " <td><input type=\"submit\" onclick=\"return neweditor();\" value=\"".i18n("Add")."\" /></td></tr>\n";
+echo ' <td><input type="submit" onclick="return neweditor();" value="' . i18n('Add') . "\" /></td></tr>\n";
 echo "</table>\n";
-	echo "<a href=\"committees.php\">".i18n("Reload committee list (needed after adding a new member)")."</a>\n";
+echo '<a href="committees.php">' . i18n('Reload committee list (needed after adding a new member)') . "</a>\n";
 echo "</form>\n";
 
-	echo "</td></tr>";
-	echo "</table>";
+echo '</td></tr>';
+echo '</table>';
 
-
-	echo "<hr />";
-	echo "<h4>".i18n("Committee Member Management")."</h4>\n";
+echo '<hr />';
+echo '<h4>' . i18n('Committee Member Management') . "</h4>\n";
 echo "<form name=\"memberaction\" method=\"post\" action=\"committees.php\" onsubmit=\"return actionSubmit()\">\n";
-	echo "<table>";
-	echo "<tr><td>";
-	echo "<select name=\"action\" onchange=\"javascript:actionChanged()\">";
-	echo "<option value=\"\">".i18n("Choose")."</option>\n";
-	echo "<option value=\"assign\">".i18n("Assign")."</option>\n";
-	echo "<option value=\"edit\">".i18n("Edit")."</option>\n";
-	echo "<option value=\"remove\">".i18n("Remove")."</option>\n";
-	echo "</select>";
+echo '<table>';
+echo '<tr><td>';
+echo '<select name="action" onchange="javascript:actionChanged()">';
+echo '<option value="">' . i18n('Choose') . "</option>\n";
+echo '<option value="assign">' . i18n('Assign') . "</option>\n";
+echo '<option value="edit">' . i18n('Edit') . "</option>\n";
+echo '<option value="remove">' . i18n('Remove') . "</option>\n";
+echo '</select>';
 
-	echo "</td><td>";
-	$q=mysql_query("SELECT uid,MAX(year),firstname,lastname,email,deleted FROM users WHERE types LIKE '%committee%' GROUP BY uid ORDER BY firstname");
-	echo "<select name=\"users_uid\">";
-	echo "<option value=\"\">".i18n("Select a Member")."</option>\n";
-	while($r=mysql_fetch_object($q))
-	{
-		if($r->deleted != 'no') continue;
+echo '</td><td>';
+$q = $pdo->prepare("SELECT uid,MAX(year),firstname,lastname,email,deleted FROM users WHERE types LIKE '%committee%' GROUP BY uid ORDER BY firstname");
+$q->execute();
+
+echo '<select name="users_uid">';
+echo '<option value="">' . i18n('Select a Member') . "</option>\n";
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	if ($r->deleted != 'no')
+		continue;
 	$displayname = $r->firstname . ' ' . $r->lastname;
 	echo "<option value=\"$r->uid\">$displayname ($r->email)</option>\n";
 }
-	echo "</select>";
-
-
-	echo "</td><td>";
+echo '</select>';
 
+echo '</td><td>';
 
 // The Assign Div
-	echo "<div id=\"assigndiv\">";
-	echo i18n("To Committee").": ";
-	$q=mysql_query("SELECT * FROM committees ORDER BY ord,name");
-	echo "<select name=\"committees_id\">";
-	echo "<option value=\"\">".i18n("Select a Committee")."</option>\n";
-	while($r=mysql_fetch_object($q))
-	{
+echo '<div id="assigndiv">';
+echo i18n('To Committee') . ': ';
+$q = $pdo->prepare('SELECT * FROM committees ORDER BY ord,name');
+$q->execute();
+echo '<select name="committees_id">';
+echo '<option value="">' . i18n('Select a Committee') . "</option>\n";
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	echo "<option value=\"$r->id\">$r->name</option>\n";
 }
-	echo "</select>";
-	echo "</div>";
-
+echo '</select>';
+echo '</div>';
 
 // The Edit or Remove Div
 
-	echo "</td><td><input type=\"submit\" value=\"".i18n("Go")."\" /></td></tr>";
+echo '</td><td><input type="submit" value="' . i18n('Go') . '" /></td></tr>';
 
-	echo "</table>";
-	echo "</form>";
+echo '</table>';
+echo '</form>';
 
-	echo "<script language=\"javascript\" type=\"text/javascript\">actionChanged()</script>";
-	echo "<hr />";
+echo '<script language="javascript" type="text/javascript">actionChanged()</script>';
+echo '<hr />';
 
-
-	$q=mysql_query("SELECT * FROM committees ORDER BY ord,name");
-	if(mysql_num_rows($q))
-	{
-		echo "<h4>".i18n("Committees")."</h4>";
+$q = $pdo->prepare('SELECT * FROM committees ORDER BY ord,name');
+$q->execute();
+if ($q->rowCount()) {
+	echo '<h4>' . i18n('Committees') . '</h4>';
 	echo "<form method=\"post\" action=\"committees.php\">\n";
-		echo "<table>";
-		echo "<tr><td colspan=\"2\"></td><td><b>".i18n('Title')."</b></td>";
-		echo "<td><b>".i18n('Order')."</b></td>";
-		echo "<td><b>".i18n("Public Email / Private Email")."</b></td></tr>";
-		while($r=mysql_fetch_object($q))
-		{
-			echo "<tr>";
-			echo "<td colspan=\"3\">";
+	echo '<table>';
+	echo '<tr><td colspan="2"></td><td><b>' . i18n('Title') . '</b></td>';
+	echo '<td><b>' . i18n('Order') . '</b></td>';
+	echo '<td><b>' . i18n('Public Email / Private Email') . '</b></td></tr>';
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		echo '<tr>';
+		echo '<td colspan="3">';
 		echo "<input type=\"hidden\" name=\"committees_id[]\" value=\"$r->id\" />";
 		echo "<input size=\"1\" type=\"text\" name=\"committees_ord[]\" value=\"$r->ord\" />";
-			echo "&nbsp; <b>$r->name</b>";
+		echo '&nbsp; <b>' . i18n($r->name) . '</b>';
 
-
-			$q2=mysql_query("SELECT 
+		$q2 = $pdo->prepare("SELECT 
 								committees_link.title,
 								committees_link.ord,
 								users.uid,
@@ -317,47 +317,50 @@ if($_GET['unlinkmember'] && $_GET['unlinkcommittee']) {
 								GROUP BY users.uid 
 								ORDER BY ord,
 								users.lastname ");
+		$q2->execute();
 
-			if(mysql_num_rows($q2)==0) {
-				echo "&nbsp; &nbsp;";
-				echo "<a title=\"Remove Committee\" onclick=\"return confirmClick('Are you sure you want to remove this committee?');\" href=\"committees.php?deletecommittee=$r->id\"><img src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\" border=\"0\" alt=\"Remove Committee\" /></a>";
+		if ($q2->rowCount() == 0) {
+			echo '&nbsp; &nbsp;';
+			echo "<a title=\"Remove Committee\" onclick=\"return confirmClick('Are you sure you want to remove this committee?');\" href=\"committees.php?deletecommittee=$r->id\"><img src=\"" . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '" border="0" alt="Remove Committee" /></a>';
 		}
 
 		echo "</td></tr>\n";
-			echo mysql_error();
-			while($r2=mysql_fetch_object($q2)) {
-				$u = user_load_by_uid($r2->uid);
-				echo "<tr><td align=\"right\">&nbsp;&nbsp;&nbsp;&nbsp;";
+
+		while ($r2 = $q2->fetch(PDO::FETCH_OBJ)) {
+			if ($u = user_load_by_uid($r2->uid)) {
+				echo '<tr><td align="right">&nbsp;&nbsp;&nbsp;&nbsp;';
 				echo "<a title=\"Edit Member\" href=\"#\" onclick=\"openeditor({$u['id']})\"><img src=\"{$config['SFIABDIRECTORY']}/images/16/edit.{$config['icon_extension']}\" border=\"0\" alt=\"Edit\" /></a>";
-				echo "&nbsp;";
+				echo '&nbsp;';
 				echo "<a title=\"Unlink Member from Committee\" onclick=\"return confirmClick('Are you sure you want to unlink this member from this committee?');\" href=\"committees.php?unlinkmember={$u['uid']}&amp;unlinkcommittee={$r->id}\"><img src=\"{$config['SFIABDIRECTORY']}/images/16/undo.{$config['icon_extension']}\" border=\"0\" alt=\"Unlink\" /></a>";
-				echo "</td>";
-				echo "<td valign=\"top\">";
+				echo '</td>';
+				echo '<td valign="top">';
 				echo "<b>{$u['name']}</b>";
-				echo "</td><td>";
+				echo '</td><td>';
 				echo "<input type=\"text\" value=\"{$r2->title}\" name=\"title[{$r->id}][{$u['uid']}]\" size=\"15\">";
-				echo "</td><td>";
+				echo '</td><td>';
 				echo "<input type=\"text\" value=\"{$r2->ord}\" name=\"order[{$r->id}][{$u['uid']}]\" size=\"2\">";
 
-				echo "</td><td>";
+				echo '</td><td>';
 
-				if($u['email']) {
-					list($b,$a)=split("@",$u['email']);
+				if (get_value_from_array($u, 'email')) {
+					list($b, $a) = explode('@', $u['email']);
 					echo "<script language=\"javascript\" type=\"text/javascript\">em('$b','$a')</script>";
 				}
 
-				if($u['emailprivate']) {
-					if($u['email']) echo " <b>/</b> ";
-					list($b,$a)=split("@",$u['emailprivate']);
+				if (get_value_from_array($u, 'emailprivate')) {
+					if ($u['email'])
+						echo ' <b>/</b> ';
+					list($b, $a) = explode('@', $u['emailprivate']);
 					echo "<script language=\"javascript\" type=\"text/javascript\">em('$b','$a')</script>";
 				}
 
 				echo "</td></tr>\n";
 			}
+		}
 		echo "<tr><td colspan=\"2\">&nbsp;</td></tr>\n";
 	}
-		echo "<tr><td colspan=\"2\"><input type=\"submit\" value=\"".i18n("Save Committee Orders and Titles")."\" /></td></tr>\n";
-		echo "</table>";
+	echo '<tr><td colspan="2"><input type="submit" value="' . i18n('Save Committee Orders and Titles') . "\" /></td></tr>\n";
+	echo '</table>';
 	echo "</form>\n";
 }
 

admin/communication.inc.php

@@ -1,8 +1,10 @@
 <?
-	$mailqueries=array(
-		"committee_all"=>array("name"=>"Committee members (all)","query"=>
-			"SELECT firstname, lastname, organization, email FROM users WHERE types LIKE '%committee%' AND deleted='no' GROUP BY uid"),
+// This file was modified Jan of 2014 by Richard Sin
+// A glitch that grabs old emails has been resolved.
 
+$mailqueries = array(
+	'committee_all' => array('name' => 'Committee members (all)', 'query' =>
+		"SELECT u.firstname, u.lastname, u.organization, u.email, u.deleted, q.year FROM users AS u INNER JOIN (SELECT uid, max(year) AS year FROM users GROUP BY uid) AS q ON u.uid = q.uid AND u.year = q.year WHERE u.types LIKE '%committee%' AND u.deleted='no' GROUP BY `u`.`id` ASC"),
 	/* The WHERE clause evaluates which rows to add to the GROUP
 	BY, the HAVING clase evaluates which grouped rows show up.  We
 	want to to evaluate 'deleted' AFTER the grouping, so we catch
@@ -10,42 +12,37 @@
 	deleted='no', we'll only add non-deleted rows to the group, and
 	end up picking up a user active in, say 2007 and 2008, but
 	deleted in 2009. */
-		"judges_all"=>array("name"=>"Judges from all years (except deleted judges)","query"=>
-			"SELECT firstname, lastname, email, deleted, MAX(year) 
-				FROM users WHERE types LIKE '%judge%' GROUP BY uid HAVING deleted='no' ORDER BY email"),
-
-		"judges_active_thisyear"=>array("name"=>"Judges active for this year", "query"=>
+	'judges_all' => array('name' => 'Judges from all years (except deleted judges)', 'query' =>
+		"SELECT u.firstname, u.lastname, u.email, u.deleted, q.year FROM users AS u INNER JOIN (SELECT uid, max(year) AS year FROM users GROUP BY uid ) AS q ON u.uid = q.uid AND u.year = q.year WHERE u.types LIKE '%judge%' AND u.deleted='no' ORDER BY `u`.`email` ASC"),
+	'judges_active_lastyear' => array('name' => 'Judges (all) active from last year', 'query' =>
+		"SELECT firstname, lastname, email FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id WHERE types LIKE '%judge%' AND year='" . ($config['FAIRYEAR'] - 1) . "' AND deleted='no' AND users_judge.judge_active='yes' ORDER BY email"),
+	'judges_active_thisyear' => array('name' => 'Judges (all) active for this year', 'query' =>
 		"SELECT firstname, lastname, email FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id WHERE types LIKE '%judge%' AND year='{$config['FAIRYEAR']}' AND deleted='no' AND users_judge.judge_active='yes' ORDER BY email"),
-
-		"judges_inactive"=>array("name"=>"Judges not active for this year", "query"=>
+	'judges_div_active_thisyear' => array('name' => 'Judges (regular judges only) active for this year', 'query' =>
+		"SELECT firstname, lastname, email FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id WHERE types LIKE '%judge%' AND year='{$config['FAIRYEAR']}' AND deleted='no' AND users_judge.judge_active='yes' AND (users_judge.special_award_only='no' OR users_judge.special_award_only='' OR users_judge.special_award_only IS NULL) ORDER BY email"),
+	'judges_spec_active_thisyear' => array('name' => 'Judges (special award judges only) active for this year', 'query' =>
+		"SELECT firstname, lastname, email FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id WHERE types LIKE '%judge%' AND year='{$config['FAIRYEAR']}' AND deleted='no' AND users_judge.judge_active='yes' AND users_judge.special_award_only='yes' ORDER BY email"),
+	'judges_inactive' => array('name' => 'Judges (all) not active for this year', 'query' =>
 		"SELECT firstname, lastname, email, judge_active, deleted, MAX(year) 
 				FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id 
 				WHERE types LIKE '%judge%'
 				GROUP BY uid HAVING  deleted='no' AND ((max(year)='{$config['FAIRYEAR']}' AND judge_active='no') OR max(year)<'{$config['FAIRYEAR']}')
 				ORDER BY email"),
-
-		"judges_active_complete_thisyear"=>array("name"=>"Judges active for this year and complete", "query"=>
+	'judges_active_complete_thisyear' => array('name' => 'Judges (all) active for this year and complete', 'query' =>
 		"SELECT firstname, lastname, email FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id WHERE types LIKE '%judge%' AND year='{$config['FAIRYEAR']}' AND users_judge.judge_complete='yes' AND deleted='no' AND users_judge.judge_active='yes' ORDER BY email"),
-
-		"judges_active_incomplete_thisyear"=>array("name"=>"Judges active for this year but not complete", "query"=>
-			"SELECT firstname, lastname, email FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id WHERE types LIKE '%judge%' AND year='{$config['FAIRYEAR']}' AND users_judge.judge_complete='no' AND deleted='no' AND users_judge.judge_active='yes' ORDER BY email"),
-
-		"participants_complete_thisyear"=>array("name"=>"Participants complete this year","query"=>
+	'judges_active_incomplete_thisyear' => array('name' => 'Judges (all) active for this year but not complete', 'query' =>
+		"SELECT firstname, lastname, email FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id WHERE types LIKE '%judge%' AND year='{$config['FAIRYEAR']}' AND (users_judge.judge_complete!='yes' OR users_judge.judge_complete IS NULL) AND deleted='no' AND users_judge.judge_active='yes' ORDER BY email"),
+	'participants_complete_thisyear' => array('name' => 'Participants complete this year', 'query' =>
 		"SELECT firstname, lastname, students.email FROM students,registrations WHERE students.registrations_id=registrations.id AND registrations.year='" . $config['FAIRYEAR'] . "' AND ( registrations.status='complete' OR registrations.status='paymentpending') ORDER BY students.email"),
-
-		"participants_complete_paymentpending_thisyear"=>array("name"=>"Participants complete this year but payment pending","query"=>
+	'participants_complete_paymentpending_thisyear' => array('name' => 'Participants complete this year but payment pending', 'query' =>
 		"SELECT firstname, lastname, students.email FROM students,registrations WHERE students.registrations_id=registrations.id AND registrations.year='" . $config['FAIRYEAR'] . "' AND registrations.status!='complete' AND registrations.status='paymentpending' ORDER BY students.email"),
-
-		"participants_notcomplete_thisyear"=>array("name"=>"Participants not complete this year","query"=>
+	'participants_notcomplete_thisyear' => array('name' => 'Participants not complete this year', 'query' =>
 		"SELECT firstname, lastname, students.email FROM students,registrations WHERE students.registrations_id=registrations.id AND registrations.year='" . $config['FAIRYEAR'] . "' AND registrations.status!='complete' AND registrations.status!='new' ORDER BY students.email"),
-
-		"participants_complete_lastyear"=>array("name"=>"Participants complete last year","query"=>
+	'participants_complete_lastyear' => array('name' => 'Participants complete last year', 'query' =>
 		"SELECT firstname, lastname, students.email FROM students,registrations WHERE students.registrations_id=registrations.id AND registrations.year='" . ($config['FAIRYEAR'] - 1) . "' AND ( registrations.status='complete' OR registrations.status='paymentpending') ORDER BY students.email"),
-
-		"participants_complete_allyears"=>array("name"=>"Participants complete all years","query"=>
+	'participants_complete_allyears' => array('name' => 'Participants complete all years', 'query' =>
 		"SELECT DISTINCT firstname, lastname, students.email FROM students,registrations WHERE students.registrations_id=registrations.id AND ( registrations.status='complete' OR registrations.status='paymentpending') ORDER BY students.email"),
-
-		"participants_cwsf_thisyear"=>array("name"=>"CWSF Winners for this year","query"=>"
+	'participants_cwsf_thisyear' => array('name' => 'CWSF Winners for this year', 'query' => "
 		SELECT DISTINCT students.firstname, students.lastname, students.email 
 			FROM award_awards
 			JOIN award_prizes ON award_prizes.award_awards_id=award_awards.id
@@ -55,11 +52,29 @@
 			JOIN students ON students.registrations_id=registrations.id
 			WHERE award_awards.cwsfaward='1' AND winners.year='" . $config['FAIRYEAR'] . "'
 			ORDER BY students.email"),
-
-		"sponsors"=>array("name"=>"Organization sponsors","query"=>
+	'participants_cwsf_lastyear' => array('name' => 'CWSF Winners from last year', 'query' => "
+		SELECT DISTINCT students.firstname, students.lastname, students.email 
+			FROM award_awards
+			JOIN award_prizes ON award_prizes.award_awards_id=award_awards.id
+			JOIN winners ON winners.awards_prizes_id=award_prizes.id
+			JOIN projects ON winners.projects_id=projects.id
+			JOIN registrations ON projects.registrations_id=registrations.id
+			JOIN students ON students.registrations_id=registrations.id
+			WHERE award_awards.cwsfaward='1' AND winners.year='" . ($config['FAIRYEAR'] - 1) . "'
+			ORDER BY students.email"),
+	'participants_cwsf_allyears' => array('name' => 'CWSF Winners from all years', 'query' => "
+		SELECT DISTINCT students.firstname, students.lastname, students.email 
+			FROM award_awards
+			JOIN award_prizes ON award_prizes.award_awards_id=award_awards.id
+			JOIN winners ON winners.awards_prizes_id=award_prizes.id
+			JOIN projects ON winners.projects_id=projects.id
+			JOIN registrations ON projects.registrations_id=registrations.id
+			JOIN students ON students.registrations_id=registrations.id
+			WHERE award_awards.cwsfaward='1'
+			ORDER BY students.email"),
+	'sponsors' => array('name' => 'Organization sponsors', 'query' =>
 		"SELECT id, organization, email FROM sponsors WHERE email!='' ORDER BY email"),
-
-		"sponsors_primarycontacts"=>array("name"=>"Organization sponsors (primary contacts)","query"=>
+	'sponsors_primarycontacts' => array('name' => 'Organization sponsors (primary contacts)', 'query' =>
 		"SELECT uid, MAX(users.year) AS year, sponsors.organization, users.firstname, users.lastname, users.email, deleted, users_sponsor.primary 
                 FROM sponsors, 
                         users_sponsor, 
@@ -73,8 +88,7 @@
                 HAVING deleted='no' AND users_sponsor.primary='yes'
                 ORDER BY users.email
                 "),
-
-		"sponsors_allcontacts"=>array("name"=>"Organization sponsors (all contacts)","query"=>
+	'sponsors_allcontacts' => array('name' => 'Organization sponsors (all contacts)', 'query' =>
 		"SELECT DISTINCT(users.email), sponsors.organization, users.firstname, users.lastname, users.email 
                 FROM sponsors, 
                         users_sponsor, 
@@ -87,31 +101,78 @@
                     AND users.email!=''
                 ORDER BY users.email
                 "),
+	'sponsors_specialawards' => array('name' => 'Organization sponsors for Special Awards', 'query' =>
+		"SELECT DISTINCT sponsors.id, organization, email 
+			FROM sponsors 
+			JOIN award_awards ON sponsors.id=award_awards.sponsors_id
+			WHERE 
+				email!='' 
+				AND award_awards.award_types_id=2
+			ORDER BY email"),
+	'sponsors_primarycontacts_specialawards' => array('name' => 'Organization sponsors for Special Awards (primary contacts)', 'query' =>
+		"SELECT DISTINCT uid, MAX(users.year) AS year, sponsors.organization, users.firstname, users.lastname, users.email, deleted, users_sponsor.primary 
+                FROM sponsors, 
+                        users_sponsor, 
+                        users,
+						award_awards 
+                WHERE 
+                    users.id=users_sponsor.users_id
+                    AND users_sponsor.sponsors_id=sponsors.id
+                    AND users.types LIKE '%sponsor%'
+                    AND users.email!=''
+					AND sponsors.id=award_awards.sponsors_id
+					AND award_awards.award_types_id=2
+                GROUP BY uid 
+                HAVING deleted='no' AND users_sponsor.primary='yes'
+                ORDER BY users.email
+                "),
+	'sponsors_allcontacts_specialawards' => array('name' => 'Organization sponsors for Special Awards (all contacts)', 'query' =>
+		"SELECT DISTINCT(users.email), sponsors.organization, users.firstname, users.lastname, users.email 
+                FROM sponsors, 
+                        users_sponsor, 
+                        users,
+						award_awards 
+                WHERE 
+                    users.id=users_sponsor.users_id
+                    AND users_sponsor.sponsors_id=sponsors.id
+                    AND users.types LIKE '%sponsor%'
+                    AND users.deleted='no'
+                    AND users.email!=''
+					AND sponsors.id=award_awards.sponsors_id
+					AND award_awards.award_types_id=2
+                ORDER BY users.email
+                "),
 
 	/*
-		"special_award_sponsors_unconfirmed"=>array("name"=>"Special award sponsors (unconfirmed only)","query"=>
-			"SELECT DISTINCT(award_sponsors.id), organization, firstname, lastname, award_contacts.email FROM award_sponsors, award_awards, award_contacts WHERE award_awards.sponsors_id=award_sponsors.id AND award_contacts.award_sponsors_id=award_sponsors.id AND award_sponsors.confirmed='no' AND award_awards.award_types_id='2' AND award_contacts.year='".$config['FAIRYEAR']."'"),
-
-		"special_award_sponsors_all"=>array("name"=>"Special award sponsors (all)","query"=>
-			"SELECT DISTINCT(award_sponsors.id), organization, firstname, lastname, award_contacts.email FROM award_sponsors, award_awards, award_contacts WHERE award_awards.sponsors_id=award_sponsors.id AND award_contacts.award_sponsors_id=award_sponsors.id AND award_awards.award_types_id='2' AND award_contacts.year='".$config['FAIRYEAR']."'"),
-
+	 * "special_award_sponsors_unconfirmed"=>array("name"=>"Special award sponsors (unconfirmed only)","query"=>
+	 * 	"SELECT DISTINCT(award_sponsors.id), organization, firstname, lastname, award_contacts.email FROM award_sponsors, award_awards, award_contacts WHERE award_awards.sponsors_id=award_sponsors.id AND award_contacts.award_sponsors_id=award_sponsors.id AND award_sponsors.confirmed='no' AND award_awards.award_types_id='2' AND award_contacts.year='".$config['FAIRYEAR']."'"),
+	 *
+	 * "special_award_sponsors_all"=>array("name"=>"Special award sponsors (all)","query"=>
+	 * 	"SELECT DISTINCT(award_sponsors.id), organization, firstname, lastname, award_contacts.email FROM award_sponsors, award_awards, award_contacts WHERE award_awards.sponsors_id=award_sponsors.id AND award_contacts.award_sponsors_id=award_sponsors.id AND award_awards.award_types_id='2' AND award_contacts.year='".$config['FAIRYEAR']."'"),
 	 */
-		"school_principals"=>array("name"=>"School principals","query"=>
-			"SELECT school, principal AS firstname, schoolemail AS email FROM schools WHERE schools.year='".$config['FAIRYEAR']."' AND schoolemail!=''"),
-		"school_scienceheads"=>array("name"=>"School science heads","query"=>
-			"SELECT school, sciencehead AS firstname, scienceheademail AS email FROM schools WHERE schools.year='".$config['FAIRYEAR']."' AND scienceheademail!=''"),
-		"school_teachers_thisyear"=>array("name"=>"Teachers (as entered by students) this year","query"=>
-			"SELECT DISTINCT(teacheremail) AS email, teachername AS firstname FROM students WHERE year='".$config['FAIRYEAR']."' AND teacheremail!=''"),
-		"school_teachers_lastyear"=>array("name"=>"Teachers (as entered by students) last year","query"=>
-			"SELECT DISTINCT(teacheremail) AS email, teachername AS firstname FROM students WHERE year='".($config['FAIRYEAR']-1)."' AND teacheremail!=''"),
-		"school_teachers_allyears"=>array("name"=>"Teachers (as entered by students) all years","query"=>
-			"SELECT DISTINCT(teacheremail) AS email, teachername AS firstname FROM students WHERE teacheremail!=''"),
+	'school_principals' => array('name' => 'School principals', 'query' =>
+		"SELECT schools.principal_uid AS uid, schools.school, users.firstname AS firstname, users.lastname AS lastname, users.email AS email FROM schools 
+			JOIN users ON schools.principal_uid=users.uid AND users.id=(SELECT id FROM users WHERE users.uid=schools.principal_uid ORDER BY `year` DESC LIMIT 1)
+				WHERE schools.year='" . $config['FAIRYEAR'] . "' AND users.email!=''"),
+	'school_scienceheads' => array('name' => 'School science heads', 'query' =>
+		"SELECT schools.sciencehead_uid AS uid, schools.school, users.firstname AS firstname, users.lastname AS lastname, users.email AS email FROM schools 
+			JOIN users ON schools.sciencehead_uid=users.uid AND users.id=(SELECT id FROM users WHERE users.uid=schools.sciencehead_uid ORDER BY `year` DESC LIMIT 1)
+				WHERE schools.year='" . $config['FAIRYEAR'] . "' AND users.email!=''"),
+	'school_with_project_thisyear' => array('name' => 'Schools with projects this year', 'query' =>
+		'SELECT  DISTINCT(sc.schoolemail) AS email, sc.school AS firstname FROM students AS st LEFT JOIN schools AS sc ON sc.id = st.schools_id WHERE st.year = ' . $config['FAIRYEAR'] . ' AND LENGTH( sc.schoolemail ) !=0 ORDER BY email
+'),
+	'school_thisyear' => array('name' => 'Schools this year', 'query' =>
+		"SELECT school AS firstname, schoolemail AS email FROM `schools` WHERE `year` ='" . $config['FAIRYEAR'] . "' GROUP BY schoolemail"),
+	'school_teachers_thisyear' => array('name' => 'Teachers (as entered by students) this year', 'query' =>
+		"SELECT teachername AS firstname, teacheremail AS email FROM students WHERE year = '" . $config['FAIRYEAR'] . "' GROUP BY teacheremail"),
+	'school_teachers_lastyear' => array('name' => 'Teachers (as entered by students) last year', 'query' =>
+		"SELECT teachername AS firstname, teacheremail AS email FROM students WHERE year = '" . ($config['FAIRYEAR'] - 1) . "' GROUP BY teacheremail"),
+	'school_teachers_allyears' => array('name' => 'Teachers (as entered by students) all years', 'query' =>
+		'SELECT teachername AS firstname, teacheremail AS email FROM students GROUP BY teacheremail'),
 	/* Volunteers */
-		"volunteers_active_complete_thisyear"=>array("name"=>"Volunteers active for this year and complete", "query"=>
+	'volunteers_active_complete_thisyear' => array('name' => 'Volunteers active for this year and complete', 'query' =>
 		"SELECT id, firstname, lastname, email FROM users LEFT JOIN users_volunteer ON users_volunteer.users_id=users.id WHERE users.year='{$config['FAIRYEAR']}' AND users_volunteer.volunteer_complete='yes' AND users_volunteer.volunteer_active='yes' AND users.deleted='no' AND types LIKE '%volunteer%' ORDER BY email"),
-
-		"volunteers_active_incomplete_thisyear"=>array("name"=>"Volunteers active for this year but not complete", "query"=>
+	'volunteers_active_incomplete_thisyear' => array('name' => 'Volunteers active for this year but not complete', 'query' =>
 		"SELECT id, firstname, lastname, email FROM users LEFT JOIN users_volunteer ON users_volunteer.users_id=users.id WHERE users.year='{$config['FAIRYEAR']}' AND users_volunteer.volunteer_complete='no' AND users_volunteer.volunteer_active='yes' AND users.deleted='no' AND users.types LIKE '%volunteer%' ORDER BY email"),
-
 );
 ?>

admin/communication.php

@@ -1,47 +1,54 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require_once("../common.inc.php");
- require_once("../user.inc.php");
+require_once ('../common.inc.php');
+require_once ('../user.inc.php');
+include 'communication.inc.php';
+
 user_auth_required('committee', 'admin');
 
- function launchQueue() {
-	 if(!file_exists("../data/logs")) {
-		 mkdir("../data/logs");
+function launchQueue()
+{
+	if (!file_exists('../data/logs')) {
+		mkdir('../data/logs');
 	}
-	 exec("php -q send_emailqueue.php >>../data/logs/emailqueue.log 2>&1 &");
+	exec('php -q send_emailqueue.php >>../data/logs/emailqueue.log 2>&1 &');
 }
 
-/* dialog_choose
+/*
+ * dialog_choose
  * select:  comm_dialog_choose_select(emails_id)
- * cancel:  comm_dialog_choose_cancel() */
+ * cancel:  comm_dialog_choose_cancel()
+ */
 
-switch($_GET['action']) {
+switch (get_value_from_array($_GET, 'action')) {
 	case 'dialog_choose_load':
 		$emails_id = intval($_GET['emails_id']);
-	$q = mysql_query("SELECT * FROM emails WHERE id='$emails_id'");
-	$e = mysql_fetch_assoc($q);
+		$q = $pdo->prepare("SELECT * FROM emails WHERE id='$emails_id'");
+		$q->execute();
+		$e = $q->fetch(PDO::FETCH_ASSOC);
 		?>
 	<table class="editor">
 	<tr><td class="label" style="width:15%"><?= i18n('Name') ?>:</td><td class="input"><?= $e['name'] ?></td></tr>
@@ -56,15 +63,16 @@ case 'dialog_choose_load':
 case 'dialog_choose':
 	?>
 	<div id="comm_dialog_choose" title="Select a Communication" style="display: none">
-	<h4><?=i18n("Select a Communication")?>:</h4>
+	<h4><?= i18n('Select a Communication') ?>:</h4>
 	<form id="choose" onchange="dialog_choose_change()" onkeypress="dialog_choose_change()" >
 	<table style="width:100%"><tr><td>
 	<select id="comm_dialog_choose_emails_id">
 		<option value="-1">-- <?= i18n('Choose a Communication') ?> --</option>
 	<?
-	$type = mysql_real_escape_string($_GET['type']);
-	$q = mysql_query("SELECT * FROM emails WHERE type='$type'");
-	while($e = mysql_fetch_assoc($q)) {
+	$type = $pdo->quote($_GET['type']);
+	$q = $pdo->prepare("SELECT * FROM emails WHERE type='$type'");
+	$q->execute();
+	while ($e = $q->fetch(PDO::FETCH_ASSOC)) {
 		echo "<option value=\"{$e['id']}\">{$e['name']}</option>";
 	}
 	?>
@@ -146,30 +154,31 @@ case 'email_save':
 	$bodyhtml = $_POST['bodyhtml'];
 
 	// add //TRANSLIT to approximate any characters (eg smartquotes) that it doesnt know
-	$bodyhtml=iconv("UTF-8","ISO-8859-1//TRANSLIT",$bodyhtml);
-	$name=iconv("UTF-8","ISO-8859-1//TRANSLIT",$name);
-	$description=iconv("UTF-8","ISO-8859-1//TRANSLIT",$description);
-	$from=iconv("UTF-8","ISO-8859-1//TRANSLIT",$from);
-	$subject=iconv("UTF-8","ISO-8859-1//TRANSLIT",$subject);
+	$bodyhtml = iconv('UTF-8', 'ISO-8859-1//TRANSLIT', $bodyhtml);
+	$name = iconv('UTF-8', 'ISO-8859-1//TRANSLIT', $name);
+	$description = iconv('UTF-8', 'ISO-8859-1//TRANSLIT', $description);
+	$from = iconv('UTF-8', 'ISO-8859-1//TRANSLIT', $from);
+	$subject = iconv('UTF-8', 'ISO-8859-1//TRANSLIT', $subject);
 
 	// Now its safe to escape it for the db query
-	$name = mysql_real_escape_string(stripslashes($name));
-	$description = mysql_real_escape_string(stripslashes($description));
-	$from = mysql_real_escape_string(stripslashes($from));
-	$subject = mysql_real_escape_string(stripslashes($subject));
-	$bodyhtml = mysql_real_escape_string(stripslashes($bodyhtml));
+	$name = $pdo->quote(stripslashes($name));
+	$description = $pdo->quote(stripslashes($description));
+	$from = $pdo->quote(stripslashes($from));
+	$subject = $pdo->quote(stripslashes($subject));
+	$bodyhtml = $pdo->quote(stripslashes($bodyhtml));
 
-	$type = mysql_real_escape_string($_POST['type']);
-	$key = mysql_real_escape_string($_POST['key']);
-	$fcid = mysql_real_escape_string($_POST['fcid']);
+	$type = $pdo->quote($_POST['type']);
+	$key = $pdo->quote($_POST['key']);
+	$fcid = $pdo->quote($_POST['fcid']);
 
 	if ($id == 0) {
 		if ($key && $name) {
-			mysql_query("INSERT INTO emails(type,val) VALUES('$type','$key')");
-			echo mysql_error();
-			$id = mysql_insert_id();
+			$q = $pdo->prepare("INSERT INTO emails(type,val) VALUES('$type','$key')");
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
+			$id = $pdo->lastInsertId();
 		} else {
-			error_("Email Key and Name are required");
+			error_('Email Key and Name are required');
 			exit;
 		}
 	}
@@ -178,7 +187,7 @@ case 'email_save':
 	$fcstr = ($fcid == 0) ? 'NULL' : "'$fcid'";
 
 	$body = getTextFromHtml($bodyhtml);
-	mysql_query("UPDATE emails SET 
+	$q = $pdo->prepare("UPDATE emails SET 
 								name='$name',
 								description='$description',
 								`from`='$from',
@@ -187,12 +196,12 @@ case 'email_save':
 								bodyhtml='$bodyhtml',
 								fundraising_campaigns_id=$fcstr
 						WHERE id='$id'");
-	echo mysql_error();
-	happy_("Email Saved");
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
+	happy_('Email Saved');
 	exit;
 
 case 'dialog_edit':
-
 	if (array_key_exists('id', $_GET)) {
 		$id = intval($_GET['id']);
 		$cloneid = 0;
@@ -206,26 +215,30 @@ case 'dialog_edit':
 		if (array_key_exists('fundraising_campaigns_id', $_GET)) {
 			$fcid = intval($_GET['fundraising_campaigns_id']);
 			$type = 'fundraising';
-			$q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$fcid'");
-			$fc=mysql_fetch_object($q);
-			$name=i18n("%1 communication for %2",array(ucfirst($key),$fc->name));
+			$q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$fcid'");
+			$q->execute();
+			$fc = $q->fetch(PDO::FETCH_OBJ);
+			$name = i18n('%1 communication for %2', array(ucfirst($key), $fc->name));
 		} else {
 			$fcid = 0;
 			$type = (array_key_exists('type', $_GET)) ? $_GET['type'] : 'user';
 		}
 
-		$from=$_SESSION['name']." <".$_SESSION['email'].">";
+		$from = $_SESSION['name'] . ' <' . $_SESSION['email'] . '>';
 	}
 	if ($id) {
-		$q = mysql_query("SELECT * FROM emails WHERE id='$id'");
-		if(mysql_num_rows($q) != 1) {
-			echo "Ambiguous edit";
+		$q = $pdo->prepare("SELECT * FROM emails WHERE id='$id'");
+		$q->execute();
+		if ($q->rowCount() != 1) {
+			echo 'Ambiguous edit';
 			exit;
 		}
-		$e = mysql_fetch_assoc($q);
+		$e = $q->fetch(PDO::FETCH_ASSOC);
 
-		/* If we're supposed to clone it, load it then zero out the
-		 * id so we make a new record on save, and override the key */
+		/*
+		 * If we're supposed to clone it, load it then zero out the
+		 * id so we make a new record on save, and override the key
+		 */
 		if ($clone_id) {
 			$e['id'] = 0;
 			$e['val'] = $_GET['key'];
@@ -236,15 +249,16 @@ case 'dialog_edit':
 		$key = htmlspecialchars($e['val']);
 		$description = htmlspecialchars($e['description']);
 		$from = htmlspecialchars($e['from']);
-		if(!$from && $config['fairmanageremail']) $from="Fair Manager <".$config['fairmanageremail'].">";
+		if (!$from && $config['fairmanageremail'])
+			$from = 'Fair Manager <' . $config['fairmanageremail'] . '>';
 		$subject = htmlspecialchars($e['subject']);
 		$body = $e['body'];
 		$bodyhtml = $e['bodyhtml'];
 		$fcid = intval($e['fundraising_campaigns_id']);
-		if($bodyhtml == '') $bodyhtml = nl2br($body);
+		if ($bodyhtml == '')
+			$bodyhtml = nl2br($body);
 	}
 
-
 	?>
 	<div id="comm_dialog_edit" title="Edit a Communication" style="display: none">
 	<br />
@@ -258,38 +272,37 @@ case 'dialog_edit':
 			<input type="hidden" name="emails_id" value="<?= $emails_id ?>" />
 			<input type="hidden" name="key" value="<?= $key ?>" />
 			<tr>
-				<td class="label"><?=i18n("Email Key")?>:</td>
+				<td class="label"><?= i18n('Email Key') ?>:</td>
 				<td class="input"><?= $key ?></td>
 			</tr>
 			<?
-		}
-		else if($key)  {
+	} else if ($key) {
 		echo "<input type=\"hidden\" name=\"key\" value=\"$key\" />\n";
-		}
-		else {
+	} else {
 		?>
 			<tr>
-				<td class="label"><?=i18n("Email Key")?>:</td>
+				<td class="label"><?= i18n('Email Key') ?>:</td>
 				<td class="input"><input type="text" name="key" size="60" value="" /></td>
 			</tr>
 <?
 	}
-	/* ="fcid=$fcid, key=$key, type=$type"*/ ?>
+	/* ="fcid=$fcid, key=$key, type=$type" */
+	?>
 	
 	<tr>
-		<td class="label"><?=i18n("Name")?>:</td>
+		<td class="label"><?= i18n('Name') ?>:</td>
 		<td class="input"><input type="text" name="name" size="60" value="<?= $name ?>" /></td>
 	</tr>
 	<tr>
-		<td class="label"><?=i18n("Description")?>:</td>
+		<td class="label"><?= i18n('Description') ?>:</td>
 		<td class="input"><input type="text" name="description" size="60" value="<?= $description ?>" /></td>
 	</tr><tr>
 		<tr><td colspan="2"><hr /></td>
 	</tr><tr>
-		<td class="label"><?=i18n("From Address")?>:</td>
+		<td class="label"><?= i18n('From Address') ?>:</td>
 		<td class="input"><input type="text" name="from" size="60" value="<?= $from ?>" /></td>
 	</tr><tr>
-		<td class="label"><?=i18n("Subject")?>:</td>
+		<td class="label"><?= i18n('Subject') ?>:</td>
 		<td class="input"><input type="text" name="subject" size="60" value="<?= $subject ?>" /></td>
 	</tr><tr>
 		<td colspan="2" class="input">
@@ -309,6 +322,7 @@ case 'dialog_edit':
 					<option value="REGNUM">[REGNUM]</option>
 					<option value="URLMAIN">[URLMAIN]</option>
 					<option value="URLLOGIN">[URLLOGIN]</option>
+					<option value="ACCESSCODE" title="School Access Code">[ACCESSCODE]</option>
 					</select>
 				</td></tr></table>
 		</td>
@@ -387,7 +401,6 @@ case 'dialog_edit':
 	<?
 	exit;
 
-
 case 'dialog_send':
 	?>
 	<div id="comm_dialog_send" title="Send Communication" style="display: none">
@@ -395,37 +408,39 @@ case 'dialog_send':
 	$fcid = intval($_GET['fundraising_campaigns_id']);
 	$emailid = intval($_GET['emails_id']);
 
-	$fcq=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$fcid'");
-	$fc=mysql_fetch_object($fcq);
+	$fcq = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$fcid'");
+	$fcq->execute();
+	$fc = $fcq->fetch(PDO::FETCH_OBJ);
 
-	$emailq=mysql_query("SELECT * FROM emails WHERE id='$emailid'");
-	$email=mysql_fetch_object($emailq);
+	$emailq = $pdo->prepare("SELECT * FROM emails WHERE id='$emailid'");
+	$emailq->execute();
+	$email = $email->fetch(PDO::FETCH_OBJ);
 
 	?>
 	<form id="send">
 	<table style="width:100%">
 	<?
-	$q=mysql_query("SELECT COUNT(*) AS num FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$fcid'");
-	$r=mysql_fetch_object($q);
+	$q = $pdo->prepare("SELECT COUNT(*) AS num FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$fcid'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_OBJ);
 	$numrecipients = $r->num;
 
-	echo "<tr><td>".i18n("Appeal")."</td><td>".$fc->name." - ".i18n(ucfirst($email->val))."</td></tr>\n";
-	echo "<tr><td>".i18n("From")."</td><td>".htmlspecialchars($email->from)."</td></tr>\n";
-	echo "<tr><td>".i18n("Subject")."</td><td>".htmlspecialchars($email->subject)."</td></tr>\n";
-	echo "<tr><td>".i18n("Recipients")."</td><td>".$numrecipients."</td></tr>\n";
+	echo '<tr><td>' . i18n('Appeal') . '</td><td>' . $fc->name . ' - ' . i18n(ucfirst($email->val)) . "</td></tr>\n";
+	echo '<tr><td>' . i18n('From') . '</td><td>' . htmlspecialchars($email->from) . "</td></tr>\n";
+	echo '<tr><td>' . i18n('Subject') . '</td><td>' . htmlspecialchars($email->subject) . "</td></tr>\n";
+	echo '<tr><td>' . i18n('Recipients') . '</td><td>' . $numrecipients . "</td></tr>\n";
 	?>
 	</table>
 	<hr />
 	<div id="comm_dialog_send_info">
 	<?
 	if ($numrecipients > 0) {
-		echo i18n("Please confirm you wish to send this email to %1 recipients.  Clicking the Send button below will begin sending the emails immediately.",array($numrecipients));
+		echo i18n('Please confirm you wish to send this email to %1 recipients.  Clicking the Send button below will begin sending the emails immediately.', array($numrecipients));
 		echo "<br />\n";
 		echo "<br />\n";
-		echo "<input class=\"comm_dialog_send_send_button\"  type=\"submit\" value=\"".i18n('Send')."\" />\n";
-	}
-	else {
-		echo i18n("You have not selected any recipients on the Prospects tab.  Press Cancel and click on Prospects to add recipients");
+		echo '<input class="comm_dialog_send_send_button"  type="submit" value="' . i18n('Send') . "\" />\n";
+	} else {
+		echo i18n('You have not selected any recipients on the Prospects tab.  Press Cancel and click on Prospects to add recipients');
 		echo "<br />\n";
 		echo "<br />\n";
 	}
@@ -433,12 +448,12 @@ case 'dialog_send':
 	<input class="comm_dialog_send_cancel_button" type="submit" value="<?= i18n('Cancel') ?>" >
 	</div>
 	<div id="comm_dialog_send_processing" style="display: none;">
-	<?=i18n("Please wait while the email queue is initialized...")?>
+	<?= i18n('Please wait while the email queue is initialized...') ?>
 	<br />
 	<img src="../images/ajax-loader.gif">
 	</div>
 	<div id="comm_dialog_send_status" style="display: none;">
-	<?=i18n("The email has been queued to send");?>
+	<?= i18n('The email has been queued to send'); ?>
 	<br /><br /><input class="comm_dialog_send_status_button" type="submit" value="<?= i18n('Close and view sending status') ?>" >
 	<input class="comm_dialog_send_close_button" type="submit" value="<?= i18n('Close and continue') ?>" >
 	</div>
@@ -492,20 +507,19 @@ case 'dialog_send':
 	<?
 	exit;
 
-
 // dialog_sender is used to send a one-off communication based on a given template to a given user
 // receives 'uid' and an optional 'template'
 case 'dialog_sender':
 	$u = user_load_by_uid(intval($_GET['uid']));
 
 	if ($_GET['template']) {
-		$emailq=mysql_query("SELECT * FROM emails WHERE `val`='".mysql_real_escape_string($_GET['template'])."'");
-		$e=mysql_fetch_assoc($emailq);
-	}
-	else
+		$emailq = $pdo->prepare("SELECT * FROM emails WHERE `val`='" . $_GET['template'] . "'");
+		$emailq->execute();
+		$e = $emailq->fetch(PDO::FETCH_ASSOC);
+	} else
 		$e = null;
 
-	$from=htmlspecialchars($_SESSION['name']." <".$_SESSION['email'].">");
+	$from = htmlspecialchars($_SESSION['name'] . ' <' . $_SESSION['email'] . '>');
 	$to = htmlspecialchars($u['emailrecipient']);
 	$subject = htmlspecialchars($e['subject']);
 
@@ -519,7 +533,8 @@ case 'dialog_sender':
 	$bodyhtml = communication_replace_vars($e['bodyhtml'], $u);
 
 	// if there's no html,. grab the html from the non-html version
-	if($bodyhtml == '') $bodyhtml = nl2br($body);
+	if ($bodyhtml == '')
+		$bodyhtml = nl2br($body);
 	?>
 	<div id="comm_dialog_sender" title="Send an Email" style="display: none">
 	<br />
@@ -529,18 +544,18 @@ case 'dialog_sender':
 	<table class="editor" style="width:95%">
 	<?
 	if ($e) {
-		echo "<tr><td class=\"label\">".i18n("Using Template").":</td><td class=\"input\"><a href=\"communication.php?action=edit&val=$key\">$name (".i18n("click to edit template").")</a></td></tr>\n";
+		echo '<tr><td class="label">' . i18n('Using Template') . ":</td><td class=\"input\"><a href=\"communication.php?action=edit&val=$key\">$name (" . i18n('click to edit template') . ")</a></td></tr>\n";
 		echo "<tr><td colspan=\"2\"><hr /></td></tr>\n";
 	}
 	?>
 	<tr>
-		<td class="label"><?=i18n("From")?>:</td>
+		<td class="label"><?= i18n('From') ?>:</td>
 		<td class="input"><input type="text" name="from" size="60" value="<?= $from ?>" /></td>
 	</tr><tr>
-		<td class="label"><?=i18n("To")?>:</td>
+		<td class="label"><?= i18n('To') ?>:</td>
 		<td class="input"><input type="text" name="to" size="60" value="<?= $to ?>" /></td>
 	</tr><tr>
-		<td class="label"><?=i18n("Subject")?>:</td>
+		<td class="label"><?= i18n('Subject') ?>:</td>
 		<td class="input"><input type="text" name="subject" size="60" value="<?= $subject ?>" /></td>
 	</tr><tr>
 		<td colspan="2" class="input">
@@ -598,256 +613,325 @@ case 'dialog_sender':
 	<?
 		exit;
 
-case "email_send":
+	case 'email_send':
 		$body = getTextFromHtml($_POST['bodyhtml']);
 		email_send_new(stripslashes($_POST['to']), stripslashes($_POST['from']), stripslashes($_POST['subject']), stripslashes($body), stripslashes($_POST['bodyhtml']));
-		happy_("Email Successfully Sent");
+		happy_('Email Successfully Sent');
 		exit;
 
-case "email_get_list":
+	case 'email_get_list':
+		$q = $pdo->prepare('SELECT * FROM emails ORDER BY type,name');
+		$q->execute();
+		echo '<table class="tableview">';
+		echo '<thead><tr>';
+		echo ' <th>' . i18n('Name') . '</th>';
+		echo ' <th>' . i18n('Type') . '</th>';
+		echo ' <th>' . i18n('Actions') . '</th>';
+		echo '</tr></thead>';
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			if ($r->fundraising_campaigns_id)
+				$fcid = $r->fundraising_campaigns_id;
+			else
+				$fcid = 'null';
+			if ($r->name)
+				$name = $r->name;
+			else
+				$name = i18n('no email name specified');
 
-	 $q=mysql_query("SELECT * FROM emails ORDER BY type,name");
-	 echo "<table class=\"tableview\">";
-	 echo "<thead><tr>";
-	 echo " <th>".i18n("Name")."</th>";
-	 echo " <th>".i18n("Type")."</th>";
-	 echo " <th>".i18n("Actions")."</th>";
-	 echo "</tr></thead>";
-	 while($r=mysql_fetch_object($q)) {
-		if($r->fundraising_campaigns_id) $fcid=$r->fundraising_campaigns_id;
-		else $fcid='null';
-		if($r->name) $name=$r->name;
-		else $name=i18n("no email name specified");
-
-		echo "<tr><td><a href=\"#\" onclick=\"return opencommunicationeditor('".addslashes($r->val)."',$r->id,$fcid)\">",htmlspecialchars($name)."</a></td>";
+			echo '<tr><td><a href="#" onclick="return opencommunicationeditor(\'' . addslashes($r->val) . "',$r->id,$fcid)\">", htmlspecialchars($name) . '</a></td>';
 			echo "<td>$r->type</td>";
 
-		echo " <td align=\"center\">";
+			echo ' <td align="center">';
 			// only user emails can be deleted, system ones are required and cannot be removed
-		if($r->type=="user") {
-			echo "&nbsp;";
-			echo "<a onclick=\"return confirmClick('Are you sure you want to remove email?')\" href=\"communication.php?action=delete&delete=$r->id\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
-			echo "&nbsp;";
-			echo "<a href=\"communication.php?action=send&send=$r->id\">".i18n("Send")."</a>";
+			if ($r->type == 'user') {
+				echo '&nbsp;';
+				echo "<a onclick=\"return confirmClick('Are you sure you want to remove email?')\" href=\"communication.php?action=delete&delete=$r->id\"><img border=0 src=\"" . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"></a>';
+				echo '&nbsp;';
+				echo "<a href=\"communication.php?action=send&send=$r->id\">" . i18n('Send') . '</a>';
 			}
 			echo " </td>\n";
-		echo "</tr>";
+			echo '</tr>';
 		}
-	 echo "</table>";
+		echo '</table>';
 		exit;
 
 	case 'cancel':
 		if ($_GET['cancel']) {
-		mysql_query("UPDATE emailqueue SET finished=NOW() WHERE id='".intval($_GET['cancel'])."'");
-		mysql_query("UPDATE emailqueue_recipients SET result='cancelled' WHERE emailqueue_id='".intval($_GET['cancel'])."' AND sent IS NULL AND result IS NULL");
-		echo "ok";
+			$q = $pdo->prepare("UPDATE emailqueue SET finished=NOW() WHERE id='" . intval($_GET['cancel']) . "'");
+			$q->execute();
+
+			$q = $pdo->prepare("UPDATE emailqueue_recipients SET result='cancelled' WHERE emailqueue_id='" . intval($_GET['cancel']) . "' AND sent IS NULL AND result IS NULL");
+			$q->execute();
+			echo 'ok';
 		}
 		exit;
+
+	case 'loadaddresses':
+		if ($_GET['query'] && array_key_exists($_GET['query'], $mailqueries)) {
+			$q = $pdo->prepare($mailqueries[$_GET['query']]['query']);
+			$q->execute();
+			while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+				if ($r->organization)
+					$s = "($r->organization) ";
+				else
+					$s = '';
+				echo "$r->firstname $r->lastname {$s}&lt;$r->email&gt;<br />";
+			}
+		}
+
+		exit;
 }
 
- include "communication.inc.php";
-
- if($_GET['action']=="sendqueue") {
+if (get_value_from_array($_GET, 'action') == 'sendqueue') {
 	$fcid = intval($_POST['fundraising_campaigns_id']);
 	$emailid = intval($_POST['emails_id']);
 
-	$fcq=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$fcid'");
-	$fc=mysql_fetch_object($fcq);
+	$fcq = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$fcid'");
+	$fcq->execute();
+	$fc = $fcq->fetch(PDO::FETCH_OBJ);
 
-	$emailq=mysql_query("SELECT * FROM emails WHERE id='$emailid'");
-	$email=mysql_fetch_object($emailq);
+	$emailq = $pdo->prepare("SELECT * FROM emails WHERE id='$emailid'");
+	$emailq->execute();
+	$email = $emailq->fetch(PDO::FETCH_OBJ);
 
-	$recipq=mysql_query("SELECT * FROM fundraising_campaigns_users_link
+	$recipq = $pdo->prepare("SELECT * FROM fundraising_campaigns_users_link
 						WHERE fundraising_campaigns_id='$fcid'");
-	echo mysql_error();
+	$recipq->execute();
+	show_pdo_errors_if_any($pdo);
 
-	$numtotal=mysql_num_rows($recipq);
-	mysql_query("INSERT INTO emailqueue (val,name,users_uid,`from`,subject,body,bodyhtml,`type`,fundraising_campaigns_id,started,finished,numtotal,numsent) VALUES (
-			'".mysql_real_escape_string($email->val)."',
-			'".mysql_real_escape_string($email->name)."',
+	$numtotal = $recipq->rowCount();
+
+	$q = $pdo->prepare("INSERT INTO emailqueue (val,name,users_uid,`from`,subject,body,bodyhtml,`type`,fundraising_campaigns_id,started,finished,numtotal,numsent) VALUES (
+			'" . $email->val . "',
+			'" . $email->name . "',
 			'" . $_SESSION['users_uid'] . "',
-			'".mysql_real_escape_string($email->from)."',
-			'".mysql_real_escape_string($email->subject)."',
-			'".mysql_real_escape_string($email->body)."',
-			'".mysql_real_escape_string($email->bodyhtml)."',
-			'".mysql_real_escape_string($email->type)."',
+			'" . $email->from . "',
+			'" . $email->subject . "',
+			'" . $email->body . "',
+			'" . $email->bodyhtml . "',
+			'" . $email->type . "',
 			$fcid,
 			NOW(),
 			NULL,
 			$numtotal,
 			0)");
-	$emailqueueid=mysql_insert_id();
-	echo mysql_error();
+	$q->execute();
+	$emailqueueid = $pdo->lastInsertId();
+	show_pdo_errors_if_any($pdo);
 
-	$urlproto = $_SERVER['SERVER_PORT'] == 443 ? "https://" : "http://";
+	$urlproto = $_SERVER['SERVER_PORT'] == 443 ? 'https://' : 'http://';
 	$urlmain = "$urlproto{$_SERVER['HTTP_HOST']}{$config['SFIABDIRECTORY']}";
 	$urllogin = "$urlmain/login.php";
-	while($r=mysql_fetch_object($recipq)) {
+	while ($r = $recipq->fetch(PDO::FETCH_OBJ)) {
 		$u = user_load_by_uid($r->users_uid);
+
+		// we only send school access codes to science heads or principals
+
+		$acq = $pdo->prepare("SELECT accesscode FROM schools WHERE (sciencehead_uid='{$u['uid']}' OR principal_uid='{$u['uid']}') AND `year`='{$config['FAIRYEAR']}'");
+		$acq->execute();
+		$acr = $acq->fetch(PDO::FETCH_OBJ);
+		$accesscode = $acr->accesscode;
+
 		$replacements = array(
-					"FAIRNAME"=>$config['fairname'],
-					"SALUTATION"=>$u['salutation'],
-					"FIRSTNAME"=>$u['firstname'],
-					"LASTNAME"=>$u['lastname'],
-					"NAME"=>$u['name'],
-					"EMAIL"=>$u['email'],
-					"ORGANIZATION"=>$u['sponsor']['organization'],
-					"URLMAIN"=>$urlmain,
-					"URLLOGIN"=>$urllogin,
+			'FAIRNAME' => $config['fairname'],
+			'SALUTATION' => $u['salutation'],
+			'FIRSTNAME' => $u['firstname'],
+			'LASTNAME' => $u['lastname'],
+			'NAME' => $u['name'],
+			'EMAIL' => $u['email'],
+			'ORGANIZATION' => $u['sponsor']['organization'],
+			'URLMAIN' => $urlmain,
+			'URLLOGIN' => $urllogin,
+			'ACCESSCODE' => $accesscode,
 		);
 
 		if ($u['email'] && $u['email'][0] != '*') {
-			mysql_query("INSERT INTO emailqueue_recipients (emailqueue_id,toemail,toname,replacements,sent) VALUES (
+			$q = $pdo->prepare("INSERT INTO emailqueue_recipients (emailqueue_id,toemail,toname,replacements,sent) VALUES (
 				'$emailqueueid',
-				'".mysql_real_escape_string($u['email'])."',
-				'".mysql_real_escape_string($u['name'])."',
-				'".mysql_real_escape_string(json_encode($replacements))."',
-				NULL)");
-			echo mysql_error();
+				'" . $pdo->quote($u['email']) . "',
+				'" . $pdo->quote($u['name']) . "',
+				'" . $pdo->quote(json_encode($replacements) . "',
+				NULL)"));
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
 		}
-		mysql_query("UPDATE emails SET lastsent=NOW() WHERE id='$emailid'");
+		$q = $pdo->prepare("UPDATE emails SET lastsent=NOW() WHERE id='$emailid'");
+		$q->execute();
 	}
-	echo "ok";
+	echo 'ok';
 	launchQueue();
 	exit;
-
 }
- send_header("Communication",
+send_header('Communication',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php'),
-            "communication"
-			);
- echo "<br />";
+	'communication');
+echo '<br />';
+?>
+ <script type="text/javascript">
+ function toggleAddresses() {
+	 if($("#toaddresses").is(":visible")) {
+		 $("#toaddresses").hide();
+		 $("#toaddresses-view").html("Show Recipients");
+	 } else {
+		 $("#toaddresses").show();
+		 $("#toaddresses-view").html("Hide Recipients");
+	 }
+	 return false;
+ }
+ function loadAddresses() {
+	 $("#toaddresses").load("communication.php?action=loadaddresses&query="+$("#to").val());
+ }
+ </script>
+ <?
 
- if($_GET['action']=="delete" && $_GET['delete']) {
- 	mysql_query("DELETE FROM emails WHERE id='".$_GET['delete']."' AND `type`='user'");
-	echo happy("Email successfully deleted");
+if (get_value_from_array($_GET, 'action') == 'delete' && get_value_from_array($_GET, 'delete')) {
+	$q = $pdo->prepare("DELETE FROM emails WHERE id='" . $_GET['delete'] . "' AND `type`='user'");
+	$q->execute();
+	echo happy('Email successfully deleted');
 }
 
-	if($_GET['action']=="send" && $_GET['send']) {
-		$q=mysql_query("SELECT * FROM emails WHERE id='".$_GET['send']."'");
-		$r=mysql_fetch_object($q);
+if (get_value_from_array($_GET, 'action') == 'send' && get_value_from_array($_GET, 'send')) {
+	show_pdo_errors_if_any($pdo);
 
-		echo i18n("Please confirm you would like to send the following email, and choose who to send it to");
-		echo "<br>";
-		echo "<br>";
-		echo "<form method=\"post\" action=\"communication.php\">";
-		echo "<table cellspacing=0 cellpadding=3 border=1>";
-		echo "<tr><td><b>From:</b></td><td>".htmlspecialchars($r->from)."</td></tr>";
-		echo "<tr><td><b>To:</b></td><td>";
-		echo "<select name=\"to\">";
-		echo " <option value=\"\">Choose Email Recipients</option>";
-		$str="";
+	$q = $pdo->prepare("SELECT * FROM emails WHERE id='" . $_GET['send'] . "'");
+	$q->execute();
+
+	$r = $q->fetch(PDO::FETCH_OBJ);
+
+	echo i18n('Please confirm you would like to send the following email, and choose who to send it to');
+	echo '<br>';
+	echo '<br>';
+	echo '<form method="post" action="communication.php">';
+	echo '<table cellspacing=0 cellpadding=3 border=1>';
+	echo '<tr><td><b>From:</b></td><td>' . htmlspecialchars($r->from) . '</td></tr>';
+	echo '<tr><td><b>To:</b></td><td>';
+	echo '<select name="to" id="to" onchange="loadAddresses();">';
+	echo ' <option value="">Choose Email Recipients</option>';
+	$str = '';
 	foreach ($mailqueries AS $k => $mq) {
-			$tq=mysql_query($mq['query']);
-            if(mysql_error()) {
-                echo mysql_error();
+		$tq = $pdo->prepare($mq['query']);
+
+		$tq->execute();
+		if ($pdo->errorInfo()) {
+			show_pdo_errors_if_any($pdo);
 			exit;
 		}
-			$num=mysql_num_rows($tq);
-			$str.="<h2>".$mq['name']." $num </h2>";
-			while($tr=mysql_fetch_object($tq)) {
-				$str.="[".$tr->uid."][".$tr->year."] ".$tr->firstname." ".$tr->lastname." &lt;{$tr->email}&gt;<br />";
+		$num = $tq->rowCount();
+		$str .= '<h2>' . $mq['name'] . " $num </h2>";
+		while ($tr = $tq->fetch(PDO::FETCH_OBJ)) {
+			$str .= '[' . $tr->uid . '][' . $tr->year . '] ' . $tr->firstname . ' ' . $tr->lastname . " &lt;{$tr->email}&gt;<br />";
 		}
-			echo " <option value=\"$k\">".i18n($mq['name'])." (".i18n("%1 recipients",array($num),array("number")).")</option>";
+		echo " <option value=\"$k\">" . i18n($mq['name']) . ' (' . i18n('%1 recipients', array($num), array('number')) . ')</option>';
 	}
-		echo "</select>";
-		echo "</td></tr>";
-		echo "<tr><td><b>Date:</b></td><td>".date("r")."</td></tr>";
-		echo "<tr><td><b>Subject:</b></td><td>".htmlspecialchars($r->subject)."</td></tr>";
+	echo '</select>';
+	echo '<div id="toaddresses-view-wrapper"><a href="#" onclick="return toggleAddresses()"><span id="toaddresses-view">View Recipients</span></a></div>';
+	echo '<div id="toaddresses" style="width: 100%; height: 300px; overflow: auto; border: 1px solid grey; background-color: #FFFFFF; display: none;">empty</div>';
+	echo '</td></tr>';
+	echo '<tr><td><b>Date:</b></td><td>' . date('r') . '</td></tr>';
+	echo '<tr><td><b>Subject:</b></td><td>' . htmlspecialchars($r->subject) . '</td></tr>';
 	if ($r->bodyhtml) {
 		$body = $r->bodyhtml;
-		}
-		else {
+	} else {
 		$body = nl2br(htmlspecialchars($r->body));
 	}
 
-		echo "<tr><td colspan=2>".$body."</td></tr>";
+	echo '<tr><td colspan=2>' . $body . '<br />(' . mb_detect_encoding($body) . ')</td></tr>';
 
-		echo "</table>";
+	echo '</table>';
 
-		if(!function_exists("exec")) {
+	if (!function_exists('exec')) {
 		echo "<div class=\"error\">Sending requires php's exec() function to be available</div>\n";
-		}
-		else {
-		echo "<table border=0 cellspacing=0 cellpadding=30 width=\"100%\">";
-		echo "<tr><td align=center>";
-		echo "<input type=hidden name=action value=\"reallysend\">";
-		echo "<input type=hidden name=reallysend value=\"".$_GET['send']."\">";
-		echo "<input type=submit value=\"Yes, Send Email\">";
-		echo "</form>";
-		echo "</td><td>";
-		echo "<form method=get action=\"communication.php\">";
-		echo "<input type=submit value=\"No, Do Not Send\">";
-		echo "</form>";
-		echo "</td></tr>";
-		echo "</table>";
+	} else {
+		echo '<table border=0 cellspacing=0 cellpadding=30 width="100%">';
+		echo '<tr><td align=center>';
+		echo '<input type=hidden name=action value="reallysend">';
+		echo '<input type=hidden name=reallysend value="' . $_GET['send'] . '">';
+		echo '<input type=submit value="Yes, Send Email">';
+		echo '</form>';
+		echo '</td><td>';
+		echo '<form method=get action="communication.php">';
+		echo '<input type=submit value="No, Do Not Send">';
+		echo '</form>';
+		echo '</td></tr>';
+		echo '</table>';
 	}
 	// echo $str;
-	}
-	else if($_POST['action']=="reallysend" && $_POST['reallysend'] && $_POST['to']) {
+} else if (get_value_from_array($_POST, 'action') == 'reallysend' && get_value_from_array($_POST, 'reallysend') && get_value_from_array($_POST, 'to')) {
 	$emailid = intval($_POST['reallysend']);
-		$emailq=mysql_query("SELECT * FROM emails WHERE id='$emailid'");
-		$email=mysql_fetch_object($emailq);
+	$emailq = $pdo->prepare("SELECT * FROM emails WHERE id='$emailid'");
+	$emailq->execute();
+	$email = $emailq->fetch(PDO::FETCH_OBJ);
 	$to = $_POST['to'];
 
 	if (array_key_exists($to, $mailqueries)) {
-				$recipq=mysql_query($mailqueries[$to]['query']);
+		$recipq = $pdo->prepare($mailqueries[$to]['query']);
+		$recipq->execute();
 	}
 
-		$numtotal=mysql_num_rows($recipq);
-		mysql_query("INSERT INTO emailqueue (val,name,users_uid,`from`,subject,body,bodyhtml,`type`,fundraising_campaigns_id,started,finished,numtotal,numsent) VALUES (
-				'".mysql_real_escape_string($email->val)."',
-				'".mysql_real_escape_string($email->name)."',
-				'".$_SESSION['users_uid']."',
-				'".mysql_real_escape_string($email->from)."',
-				'".mysql_real_escape_string($email->subject)."',
-				'".mysql_real_escape_string($email->body)."',
-				'".mysql_real_escape_string($email->bodyhtml)."',
-				'".mysql_real_escape_string($email->type)."',
+	$numtotal = $recipq->rowCount();
+	$q = $pdo->prepare("INSERT INTO emailqueue (val,name,users_uid,`from`,subject,body,bodyhtml,`type`,fundraising_campaigns_id,started,finished,numtotal,numsent) VALUES (
+				'" . $pdo->quote($email->val) . "',
+				'" . $pdo->quote($email->name) . "',
+				'" . $pdo->quote($_SESSION['users_uid']) . "',
+				'" . $pdo->quote($email->from) . "',
+				'" . $pdo->quote($email->subject) . "',
+				'" . $pdo->quote($email->body) . "',
+				'" . $pdo->quote($email->bodyhtml) . "',
+				'" . $pdo->quote($email->type) . "',
 				NULL,
 				NOW(),
 				NULL,
 				$numtotal,
 				0)");
-		$emailqueueid=mysql_insert_id();
-		echo mysql_error();
+	$q->execute();
+	$emailqueueid = $pdo->lastInsertId();
+	show_pdo_errors_if_any($pdo);
 
-		$urlproto = $_SERVER['SERVER_PORT'] == 443 ? "https://" : "http://";
+	$urlproto = $_SERVER['SERVER_PORT'] == 443 ? 'https://' : 'http://';
 	$urlmain = "$urlproto{$_SERVER['HTTP_HOST']}{$config['SFIABDIRECTORY']}";
 	$urllogin = "$urlmain/login.php";
 
-		while($r=mysql_fetch_object($recipq)) {
+	while ($r = $recipq->fetch(PDO::FETCH_OBJ)) {
 		if ($r->uid)
 			$u = user_load_by_uid($r->uid);
 		else if ($r->users_uid)
 			$u = user_load_by_uid($r->users_uid);
 		else {
-				$toname=$r->firstname." ".$r->lastname;
+			$toname = $r->firstname . ' ' . $r->lastname;
 			$toemail = $r->email;
 
 			$replacements = array(
-							"FAIRNAME"=>$config['fairname'],
-							"FIRSTNAME"=>$r->firstname,
-							"LASTNAME"=>$r->lastname,
-							"NAME"=>$r->firstname." ".$r->lastname,
-							"EMAIL"=>$r->email,
-							"ORGANIZATION"=>$r->organization,
-							"URLMAIN"=>$urlmain,
-							"URLLOGIN"=>$urllogin,
+				'FAIRNAME' => $config['fairname'],
+				'FIRSTNAME' => $r->firstname,
+				'LASTNAME' => $r->lastname,
+				'NAME' => $r->firstname . ' ' . $r->lastname,
+				'EMAIL' => $r->email,
+				'ORGANIZATION' => $r->organization,
+				'URLMAIN' => $urlmain,
+				'URLLOGIN' => $urllogin,
+				'ACCESSCODE' => 'unknown',
 			);
 		}
 		if ($u) {
+			// we only send school access codes to science heads or principals
+			$acq = $pdo->prepare("SELECT accesscode FROM schools WHERE (sciencehead_uid='{$u['uid']}' OR principal_uid='{$u['uid']}') AND `year`='{$config['FAIRYEAR']}'");
+			$acq->execute();
+			show_pdo_errors_if_any($pdo);
+			$acr = $acq->fetch(PDO::FETCH_OBJ);
+			$accesscode = $acr->accesscode;
+
 			$replacements = array(
-							"FAIRNAME"=>$config['fairname'],
-							"SALUTATION"=>$u['salutation'],
-							"FIRSTNAME"=>$u['firstname'],
-							"LASTNAME"=>$u['lastname'],
-							"NAME"=>$u['name'],
-							"EMAIL"=>$u['email'],
-							"ORGANIZATION"=>$u['sponsor']['organization'],
-							"URLMAIN"=>$urlmain,
-							"URLLOGIN"=>$urllogin,
+				'FAIRNAME' => $config['fairname'],
+				'SALUTATION' => $u['salutation'],
+				'FIRSTNAME' => $u['firstname'],
+				'LASTNAME' => $u['lastname'],
+				'NAME' => $u['name'],
+				'EMAIL' => $u['email'],
+				'ORGANIZATION' => $u['sponsor']['organization'],
+				'URLMAIN' => $urlmain,
+				'URLLOGIN' => $urllogin,
+				'ACCESSCODE' => $accesscode,
 			);
 
 			$toname = $u['name'];
@@ -855,40 +939,39 @@ case "email_get_list":
 		}
 
 		if ($toemail) {
-				mysql_query("INSERT INTO emailqueue_recipients (emailqueue_id,toemail,toname,replacements,sent) VALUES (
+			$q = $pdo->prepare("INSERT INTO emailqueue_recipients (emailqueue_id,toemail,toname,replacements,sent) VALUES (
 					'$emailqueueid',
-					'".mysql_real_escape_string($toemail)."',
-					'".mysql_real_escape_string($toname)."',
-					'".mysql_real_escape_string(json_encode($replacements))."',
+					'" . $toemail . "',
+					'" . $toname . "',
+					'" . json_encode($replacements) . "',
 					NULL)");
-				echo mysql_error();
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
 		}
-			mysql_query("UPDATE emails SET lastsent=NOW() WHERE id='$emailid'");
-		}
-		launchQueue();
-		echo "<br />";
-		echo happy("Email Communication sending has started!");
-		echo "<br>";
-		echo "<a href=\"communication_send_status.php\">Click here to see the sending progress</a>";
 
+		$q = $pdo->prepare("UPDATE emails SET lastsent=NOW() WHERE id='$emailid'");
+		$q->execute();
 	}
-	else if($_GET['action']=="restartqueue")
-	{
 	launchQueue();
-		echo "<br />";
-		echo happy("Email Communication sending has started!");
-		echo "<br>";
-		echo "<a href=\"communication_send_status.php\">Click here to see the sending progress</a>";
-	}
- 	else {
+	echo '<br />';
+	echo happy('Email Communication sending has started!');
+	echo '<br>';
+	echo '<a href="communication_send_status.php">Click here to see the sending progress</a>';
+} else if (get_value_from_array($_GET, 'action') == 'restartqueue') {
+	launchQueue();
+	echo '<br />';
+	echo happy('Email Communication sending has started!');
+	echo '<br>';
+	echo '<a href="communication_send_status.php">Click here to see the sending progress</a>';
+} else {
 	if (!$config['fairmanageremail'])
 		echo notice(i18n("Warning: The 'Fair Manager Email' has not been set in SFIAB Configuration / Configuration Variables / Global.  Please set it.  The 'Fair Manager Email' is the default 'From' address for all emails and without a 'From' address, no emails can be sent!"));
 
-		 echo "<a href=\"communication_send_status.php\">".i18n("Email Queue Status and History")."</a><br />";
-		 echo "<a href=\"#\" onclick=\"return opencommunicationeditor(null,null,null)\">".i18n("Add New Email")."</a>";
+	echo '<a href="communication_send_status.php">' . i18n('Email Queue Status and History') . '</a><br />';
+	echo '<a href="#" onclick="return opencommunicationeditor(null,null,null)">' . i18n('Add New Email') . '</a>';
 	echo "<br />\n";
 	echo "<br />\n";
-		 echo "<div id=\"emaillist\"></div>";
+	echo '<div id="emaillist"></div>';
 	?>
 		<script type="text/javascript">
 		function refreshEmailList() {

admin/communication_send_status.php

@@ -1,58 +1,60 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
- if($_GET['action']=="status") {
-	 $q=mysql_query("SELECT * FROM emailqueue WHERE finished IS NULL");
+if (get_value_from_array($_GET, 'action') == 'status') {
+	$q = $pdo->prepare('SELECT * FROM emailqueue WHERE finished IS NULL');
+	$q->execute();
 
-	 if($config['emailqueue_lock'] || mysql_num_rows($q)) {
-		echo "<h4>".i18n("Active Send Queues")."</h4>\n";
-		$q=mysql_query("SELECT *,UNIX_TIMESTAMP(started) AS ts FROM emailqueue WHERE finished IS NULL ORDER BY started DESC");
+	if ($config['emailqueue_lock'] || $q->rowCount()) {
+		echo '<h4>' . i18n('Active Send Queues') . "</h4>\n";
 
+		$q = $pdo->prepare('SELECT *,UNIX_TIMESTAMP(started) AS ts FROM emailqueue WHERE finished IS NULL ORDER BY started DESC');
+		$q->execute();
 		if (!$config['emailqueue_lock']) {
-			echo error(i18n("It looks like there's emails waiting to send, but the sending process isnt running.").
-			"<br />".
-			"<a href=\"communication.php?action=restartqueue\">".i18n("Click here to manually restart the process")."</a>");
+			echo error(i18n("It looks like there's emails waiting to send, but the sending process isnt running.")
+				. '<br />'
+				. '<a href="communication.php?action=restartqueue">' . i18n('Click here to manually restart the process') . '</a>');
 		}
 
-
-		echo "<table class=\"tableview\">";
-		echo "<thead><tr>";
-		echo " <th>".i18n("Name")."</th>\n";
-		echo " <th>".i18n("Subject")."</th>\n";
-		echo " <th>".i18n("Started")."</th>\n";
-		echo " <th>".i18n("Progress")."</th>\n";
-		echo " <th>".i18n("Duration")."</th>\n";
-		echo " <th>".i18n("ETA")."</th>\n";
-		echo " <th>".i18n("Cancel")."</th>\n";
+		echo '<table class="tableview">';
+		echo '<thead><tr>';
+		echo ' <th>' . i18n('Name') . "</th>\n";
+		echo ' <th>' . i18n('Subject') . "</th>\n";
+		echo ' <th>' . i18n('Started') . "</th>\n";
+		echo ' <th>' . i18n('Progress') . "</th>\n";
+		echo ' <th>' . i18n('Duration') . "</th>\n";
+		echo ' <th>' . i18n('ETA') . "</th>\n";
+		echo ' <th>' . i18n('Cancel') . "</th>\n";
 		echo "</tr></thead>\n";
 
-		while($r=mysql_fetch_object($q)) {
-			echo "<tr>";
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			echo '<tr>';
 			echo " <td>$r->name</td>\n";
 			echo " <td>$r->subject</td>\n";
 			echo " <td>$r->started</td>\n";
@@ -61,27 +63,25 @@
 			$duration = $now - $r->ts;
 			$num = $r->numsent + $r->numfailed;
 			echo " <td align=\"center\">$num  / $r->numtotal</td>\n";
-			echo "<td>";
+			echo '<td>';
 			echo format_duration($duration);
-			echo "</td>";
-			echo "<td>";
+			echo '</td>';
+			echo '<td>';
 			if ($r->numsent || $r->numfailed) {
 				$emailspersecond = ($r->numsent + $r->numfailed) / $duration;
 				$remainingduration = $remaining / $emailspersecond;
 				echo format_duration($remainingduration);
+			} else {
+				echo 'Unknown';
 			}
-			else {
-				echo "Unknown";
-			}
-			echo "</td>";
-			echo "<td><a href=\"#\" onclick=\"return cancelQueue($r->id)\">".i18n("cancel")."</td>";
+			echo '</td>';
+			echo "<td><a href=\"#\" onclick=\"return cancelQueue($r->id)\">" . i18n('cancel') . '</td>';
 			echo "</tr>\n";
 		}
-		echo "</table>";
+		echo '</table>';
 		echo "<br /><br />\n";
-	 }
-	 else {
-		echo notice("No Email Communications are currently being sent out");
+	} else {
+		echo notice('No Email Communications are currently being sent out');
 		?>
 		<script type="text/javascript">
 			stopRefreshing();
@@ -89,22 +89,23 @@
 		<?
 	}
 
-	$q=mysql_query("SELECT * FROM emailqueue WHERE finished IS NOT NULL ORDER BY started DESC LIMIT 10");
-	echo "<h4>".i18n("Completed Send Queues")."</h4>\n";
+	$q = $pdo->prepare('SELECT * FROM emailqueue WHERE finished IS NOT NULL ORDER BY started DESC LIMIT 10');
+	$q->execute();
+	echo '<h4>' . i18n('Completed Send Queues') . "</h4>\n";
 	echo "<table class=\"tableview\">\n";
-	echo "<thead><tr>";
-	echo " <th>".i18n("Name")."</th>\n";
-	echo " <th>".i18n("Subject")."</th>\n";
-	echo " <th>".i18n("Started")."</th>\n";
-	echo " <th>".i18n("Finished")."</th>\n";
-	echo " <th>".i18n("Total Emails")."</th>\n";
-	echo " <th>".i18n("Success")."</th>\n";
-	echo " <th>".i18n("Failed")."</th>\n";
+	echo '<thead><tr>';
+	echo ' <th>' . i18n('Name') . "</th>\n";
+	echo ' <th>' . i18n('Subject') . "</th>\n";
+	echo ' <th>' . i18n('Started') . "</th>\n";
+	echo ' <th>' . i18n('Finished') . "</th>\n";
+	echo ' <th>' . i18n('Total Emails') . "</th>\n";
+	echo ' <th>' . i18n('Success') . "</th>\n";
+	echo ' <th>' . i18n('Failed') . "</th>\n";
 	// FIXME: comment bounced until we implement it
 	//	echo " <th>".i18n("Bounced")."</th>\n";
 	echo "</tr></thead>\n";
-	while($r=mysql_fetch_object($q)) {
-		echo "<tr>";
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		echo '<tr>';
 		echo " <td>$r->name</td>\n";
 		echo " <td>$r->subject</td>\n";
 		echo " <td>$r->started</td>\n";
@@ -119,11 +120,10 @@
 	exit;
 }
 
- send_header("Communication Sending Status",
+send_header('Communication Sending Status',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Communication' => 'admin/communication.php')
-			);
+		'Communication' => 'admin/communication.php'));
 ?>
  <script type="text/javascript">
  	$(document).ready( function() {
@@ -151,10 +151,10 @@
 
  </script>
  <?
- echo "<br />";
- echo "<div id=\"queuestatus\" style=\"margin-left: 20px;\">";
- echo "</div>";
- echo "<br />";
+echo '<br />';
+echo '<div id="queuestatus" style="margin-left: 20px;">';
+echo '</div>';
+echo '<br />';
 
 send_footer();
 ?>

admin/curl.inc.php

@@ -1,24 +1,25 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-   Copyright (C) 2009 David Grant <dave@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2007 James Grant <james@lightbox.org>
+ * Copyright (C) 2009 David Grant <dave@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -46,7 +47,7 @@
 		}
 
 		if (count($array[$k]) != 1) {
-			echo "Unexpected multielement array, stop.";
+			echo 'Unexpected multielement array, stop.';
 			exit;
 		};
 		$array[$k] = $array[$k][0];
@@ -57,8 +58,6 @@
 	}
 }
 
-
-
 function curl_query($fair, $data, $ysc_url = '')
 {
 	global $output;
@@ -77,7 +76,7 @@
 			else
 				$url = $ysc_url;
 			$var = 'xml';
-		$output="";
+			$output = '';
 			xmlCreateRecurse($data);
 			$str = $output;
 			break;
@@ -94,7 +93,7 @@
 	curl_setopt($ch, CURLOPT_POST, 1);  // / tell it to make a POST, not a GET
 	curl_setopt($ch, CURLOPT_POSTFIELDS, "$var=" . urlencode($str));  // / put the query string here starting with "?"
 	curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);  // / This allows the output to be set into a variable $datastream
-	curl_setopt ($ch, CURLOPT_POSTFIELDSIZE, 0);
+	//	curl_setopt ($ch, CURLOPT_POSTFIELDSIZE, 0);
 	curl_setopt($ch, CURLOPT_TIMEOUT, 360);
 	curl_setopt($ch, CURLOPT_SSLVERSION, 3);
 	curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
@@ -108,7 +107,7 @@
 			$ret = json_decode(urldecode($datastream), true);
 			break;
 		case 'ysc':
-		$datastream = str_replace(" standalone=\"yes\"","",$datastream);
+			$datastream = str_replace(' standalone="yes"', '', $datastream);
 			/* Return is XML, make a return array */
 			$response = xml_parsexml($datastream);
 
@@ -141,7 +140,6 @@
 					$ret['error'] = ($response['awardwinnersresponse']['status'] == 'failed') ? 1 : 0;
 					$ret['message'] = $response['awardwinnersresponse']['statusmessage'];
 					break;
-
 			}
 			break;
 	}

admin/cwsfregister.php

@@ -1,42 +1,45 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
-include "xml.inc.php";
- require_once("../user.inc.php");
+include 'xml.inc.php';
+require_once ('../user.inc.php');
 
 function get_cwsf_award_winners()
 {
- 	global $config;
+	global $config, $pdo;
 	$winners = array();
 
- 	$q=mysql_query("SELECT * FROM award_awards WHERE cwsfaward='1' AND year='".$config['FAIRYEAR']."'");
-	if(mysql_num_rows($q)==1)
-	{
-		$award=mysql_fetch_object($q);
-		$pq=mysql_query("SELECT * FROM award_prizes WHERE award_awards_id='$award->id'");
-		while($prize=mysql_fetch_object($pq))
-		{
-			$wq=mysql_query("SELECT 
+	$q = $pdo->prepare("SELECT * FROM award_awards WHERE cwsfaward='1' AND year=?");
+	$q->execute([$config['FAIRYEAR']]);
+
+	if ($q->rowCount() == 1) {
+		$award = $q->fetch(PDO::FETCH_OBJ);
+		$pq = $pdo->prepare("SELECT * FROM award_prizes WHERE award_awards_id=?");
+		$pq->execute([$award->id]);
+
+		while ($prize = $pq->fetch(PDO::FETCH_OBJ)) {
+			$wq = $pdo->prepare("SELECT 
 						projects.id,
 						projects.projectnumber,
 						projects.title,
@@ -50,59 +53,59 @@ include "xml.inc.php";
 						projects
 					WHERE 
 						winners.projects_id=projects.id AND
-						awards_prizes_id='$prize->id' AND 
-						winners.year='".$config['FAIRYEAR']."'");
-						echo mysql_error();
-			while($project=mysql_fetch_object($wq))
-			{
-				$sq=mysql_query("SELECT * FROM students WHERE registrations_id='$project->registrations_id' AND year='".$config['FAIRYEAR']."'");
+						awards_prizes_id=? AND 
+						winners.year=?");
+			$wq->execute([$prize->id, $config['FAIRYEAR']]);
+			show_pdo_errors_if_any($pdo);
+
+			while ($project = $wq->fetch(PDO::FETCH_OBJ)) {
+				$sq = $pdo->prepare("SELECT * FROM students WHERE registrations_id=? AND year=?");
+				$sq->execute([$project->registrations_id, $config['FAIRYEAR']]);
+
 				$students = array();
 				$cwsf_agecategory = 0;
-				while($s=mysql_fetch_object($sq))
-				{
-					if($s->grade>=7 && $s->grade<=8)
-					{
+
+				while ($s = $sq->fetch(PDO::FETCH_OBJ)) {
+					if ($s->grade >= 7 && $s->grade <= 8) {
 						if ($cwsf_agecategory < 1)
 							$cwsf_agecategory = 1;
 					}
-					if($s->grade>=9 && $s->grade<=10)
-					{
+					if ($s->grade >= 9 && $s->grade <= 10) {
 						if ($cwsf_agecategory < 2)
 							$cwsf_agecategory = 2;
 					}
-					if($s->grade>=11 && $s->grade<=13)
-					{
+					if ($s->grade >= 11 && $s->grade <= 13) {
 						if ($cwsf_agecategory < 3)
 							$cwsf_agecategory = 3;
 					}
 					$students[] = array(
-								"xml_type"=>"student",
-								"firstname"=>$s->firstname,
-								"lastname"=>$s->lastname,
-								"email"=>$s->email,
-								"gender"=>$s->sex,
-								"grade"=>$s->grade,
-								"language"=>$s->lang,
-								"birthdate"=>$s->dateofbirth,
-								"address1"=>$s->address,
-								"address2"=>"",
-								"city"=>$s->city,
-								"province"=>$s->province,
-								"postalcode"=>$s->postalcode,
-								"homephone"=>$s->phone,
-								"cellphone"=>"",
+						'xml_type' => 'student',
+						'firstname' => $s->firstname,
+						'lastname' => $s->lastname,
+						'email' => $s->email,
+						'gender' => $s->sex,
+						'grade' => $s->grade,
+						'language' => $s->lang,
+						'birthdate' => $s->dateofbirth,
+						'address1' => $s->address,
+						'address2' => '',
+						'city' => $s->city,
+						'province' => $s->province,
+						'postalcode' => $s->postalcode,
+						'homephone' => $s->phone,
+						'cellphone' => '',
 					);
 				}
 				$winners[] = array(
-						"xml_type"=>"project",
-						"projectid"=>$project->id,
-						"projectnumber"=>$project->projectnumber,
-						"title"=>$project->title,
-						"abstract"=>$project->summary,
-						"category_id"=>$cwsf_agecategory,
-						"division_id"=>$project->cwsfdivisionid,
-						"projectdivisions_id"=>$project->projectdivisions_id,
-						"students"=>$students,
+					'xml_type' => 'project',
+					'projectid' => $project->id,
+					'projectnumber' => $project->projectnumber,
+					'title' => $project->title,
+					'abstract' => $project->summary,
+					'category_id' => $cwsf_agecategory,
+					'division_id' => $project->cwsfdivisionid,
+					'projectdivisions_id' => $project->projectdivisions_id,
+					'students' => $students,
 				);
 			}
 		}
@@ -111,221 +114,206 @@ include "xml.inc.php";
 	return $winners;
 }
 
-
-
 ?>
 <?
- require("../common.inc.php");
- require("../projects.inc.php");
+require ('../common.inc.php');
+require ('../projects.inc.php');
 user_auth_required('committee', 'admin');
- send_header("One-Click CWSF Registration",
+send_header('One-Click CWSF Registration',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php'),
-            "one-click_cwsf_registration"
-			);
- echo "<br />";
+	'one-click_cwsf_registration');
+echo '<br />';
 
- if(count($_POST['cwsfdivision']))
- {
- 	foreach($_POST['cwsfdivision'] AS $p=>$d)
-	{
-		mysql_query("UPDATE projects SET cwsfdivisionid='$d' WHERE id='$p'");
+if (count(get_value_from_array($_POST, 'cwsfdivision', []))) {
+	foreach ($_POST['cwsfdivision'] AS $p => $d) {
+		$q = $pdo->prepare("UPDATE projects SET cwsfdivisionid=? WHERE id=?");
+		$q->execute([$d, $p]);
 	}
-	echo happy(i18n("CWSF Project Divisions saved"));
+	echo happy(i18n('CWSF Project Divisions saved'));
 }
 
- if($_POST['action']=="register" && $_POST['xml'])
- {
- 	if(function_exists('curl_init'))
-	{
+if (get_value_from_array($_POST, 'action') == 'register' && $_POST['xml']) {
+	if (function_exists('curl_init')) {
 		$ch = curl_init();  // / initialize a cURL session
-		curl_setopt ($ch, CURLOPT_URL,"https://secure.ysf-fsj.ca/registration/xmlregister.php");
+		curl_setopt($ch, CURLOPT_URL, 'https://secure.ysf-fsj.ca/registration/xmlregister.php');
 		curl_setopt($ch, CURLOPT_HEADER, 0);  // / Header control
 		curl_setopt($ch, CURLOPT_POST, 1);  // / tell it to make a POST, not a GET
-		curl_setopt ($ch, CURLOPT_POSTFIELDS, "xml=".$_POST['xml']);  /// put the query string here starting with "?"
+		curl_setopt($ch, CURLOPT_POSTFIELDS, 'xml=' . $_POST['xml']);  // / put the query string here starting with "?"
 		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);  // / This allows the output to be set into a variable $datastream
 		curl_setopt($ch, CURLOPT_POSTFIELDSIZE, 0);
 		curl_setopt($ch, CURLOPT_TIMEOUT, 360);
 		curl_setopt($ch, CURLOPT_SSLVERSION, 3);
 		curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
 		$datastream = curl_exec($ch);  // / execute the curl session and return the output to a variable $datastream
-		$datastream = str_replace(" standalone=\"yes\"","",$datastream);
+		$datastream = str_replace(' standalone="yes"', '', $datastream);
 		// echo "curl close <br />";
 		curl_close($ch);  // / close the curl session
 
-		echo i18n("The YSC Registration Server said:")."<br />";
+		echo i18n('The YSC Registration Server said:') . '<br />';
 		echo notice($datastream);
-	}
-	else
-	{
-		echo error("CURL Support Missing");
-		echo i18n("Your PHP installation does not support CURL.  You will need to login to the YSC system as the regional coodinator and upload the XML data manually");
+	} else {
+		echo error('CURL Support Missing');
+		echo i18n('Your PHP installation does not support CURL.  You will need to login to the YSC system as the regional coodinator and upload the XML data manually');
 	}
 	send_footer();
 	exit;
 }
 
 /* Load the YSC fair */
- $q = mysql_query("SELECT * FROM fairs WHERE abbrv='YSC'");
- if(mysql_num_rows($q) < 1) {
- 	echo error(i18n("You have not defined the YSC upstream fair in the Science Fair Management area."));
+$q = $pdo->prepare("SELECT * FROM fairs WHERE abbrv='YSC'");
+$q->execute();
+if ($q->rowCount() < 1) {
+	echo error(i18n('You have not defined the YSC upstream fair in the Science Fair Management area.'));
 	$ok = false;
 } else {
-	 $f = mysql_fetch_assoc($q);
+	$f = $q->fetch(PDO::FETCH_ASSOC);
 	$ysc_region_id = $f['username'];
 	$ysc_region_password = $f['password'];
 }
 $ok = true;
 // make sure we have the ysc_region_id and ysc_region_password
 if ($ysc_region_id == '') {
- 	echo error(i18n("You have not yet specified a username for YSC (your Region ID).  Go to the <a href=\"sciencefairs.php\">Science Fair Management</a> page to set it"));
+	echo error(i18n('You have not yet specified a username for YSC (your Region ID).  Go to the <a href="sciencefairs.php">Science Fair Management</a> page to set it'));
 	$ok = false;
 }
 if ($ysc_region_password == '') {
- 	echo error(i18n("You have not yet specified a password for YSC (your Region Password).  Go to the <a href=\"sciencefairs.php\">Science Fair Management</a> page to set it"));
+	echo error(i18n('You have not yet specified a password for YSC (your Region Password).  Go to the <a href="sciencefairs.php">Science Fair Management</a> page to set it'));
 	$ok = false;
 }
 
- if($ok)
- {
- 	$q=mysql_query("SELECT * FROM award_awards WHERE cwsfaward='1' AND year='".$config['FAIRYEAR']."'");
-	if(!mysql_num_rows($q))
-	{
-		echo error(i18n("Cannot find an award that is specified as the Canada-Wide Science Fair Award"));
-		echo i18n("Please go to the awards manager and select which award identifies your CWSF students");
-	}
-	else if(mysql_num_rows($q)>1)
-	{
-		echo error(i18n("There is more than one award that is identified as your Canada-Wide Science Fair award."));
-		echo i18n("Please go to the awards manager and choose only one award that identifies your CWSF students");
-	}
-	else
-	{
-		$award=mysql_fetch_object($q);
-		echo "<b>".i18n("CWSF Award").":</b> ".$award->name."<br />";
+if ($ok) {
+	$q = $pdo->prepare("SELECT * FROM award_awards WHERE cwsfaward='1' AND year=?");
+	$q->execute([$config['FAIRYEAR']]);
+	if (!$q->rowCount()) {
+		echo error(i18n('Cannot find an award that is specified as the Canada-Wide Science Fair Award'));
+		echo i18n('Please go to the awards manager and select which award identifies your CWSF students');
+	} else if ($q->rowCount() > 1) {
+		echo error(i18n('There is more than one award that is identified as your Canada-Wide Science Fair award.'));
+		echo i18n('Please go to the awards manager and choose only one award that identifies your CWSF students');
+	} else {
+		$award = $q->fetch(PDO::FETCH_OBJ);
+		echo '<b>' . i18n('CWSF Award') . ':</b> ' . $award->name . '<br />';
 		echo i18n("Please review the list of winning projects/students below.  If it is all correct then you can click the 'Register for CWSF' button at the bottom of the page to send the information to YSC");
-		echo "<br />";
-		echo "<br />";
+		echo '<br />';
+		echo '<br />';
 		$winners = get_cwsf_award_winners();
-		echo "<b>".i18n("Found %1 CWSF prize winners",array(count($winners)))."</b>";
-		echo "<br />";
+		echo '<b>' . i18n('Found %1 CWSF prize winners', array(count($winners))) . '</b>';
+		echo '<br />';
 		$error = false;
-		echo "<form method=\"post\" action=\"cwsfregister.php\">";
-		echo "<table class=\"tableview\"><thead>";
-		echo "<tr><th>".i18n("Project Information")."</th>";
-		echo "<th>".i18n("Project Division / CWSF Project Division")."</th>";
-		echo "</tr></thead>";
+		echo '<form method="post" action="cwsfregister.php">';
+		echo '<table class="tableview"><thead>';
+		echo '<tr><th>' . i18n('Project Information') . '</th>';
+		echo '<th>' . i18n('Project Division / CWSF Project Division') . '</th>';
+		echo '</tr></thead>';
 
-		foreach($winners AS $winner)
-		{
-			echo "<tr><td>";
-			echo "<b>";
-			echo $winner['projectnumber']." - ".$winner['title'];
-			echo "</b>";
-			echo "<br />";
-			foreach($winner['students'] AS $s)
-			{
-				echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;";
-				echo i18n("Name").": ";
-				echo $s['firstname']." ".$s['lastname'];
-				echo "<br />";
+		foreach ($winners AS $winner) {
+			echo '<tr><td>';
+			echo '<b>';
+			echo $winner['projectnumber'] . ' - ' . $winner['title'];
+			echo '</b>';
+			echo '<br />';
+			foreach ($winner['students'] AS $s) {
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo i18n('Name') . ': ';
+				echo $s['firstname'] . ' ' . $s['lastname'];
+				echo '<br />';
 
-				echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;";
-				echo i18n("Email").": ".$s['email'];
-				if(!$s['email'])
-				{
-					echo error(i18n("No Email Address"),"inline");
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo i18n('Email') . ': ' . $s['email'];
+				if (!$s['email']) {
+					echo error(i18n('No Email Address'), 'inline');
 					$error = true;
 				}
-				echo "<br />";
-				echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;";
+				echo '<br />';
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo '&nbsp;';
+				echo '&nbsp;';
 
-				echo i18n("Grade").": ".$s['grade'];
-				if(!$s['grade'])
-				{
-					echo error(i18n("No Grade"),"inline");
+				echo i18n('Grade') . ': ' . $s['grade'];
+				if (!$s['grade']) {
+					echo error(i18n('No Grade'), 'inline');
 					$error = true;
 				}
 
-				echo "<br />";
+				echo '<br />';
 			}
-			if(!$winner['division_id'])
-			{
-				echo "<br />";
-				echo error(i18n("Choose a CWSF Division"),"inline");
+			if (!$winner['division_id']) {
+				echo '<br />';
+				echo error(i18n('Choose a CWSF Division'), 'inline');
 				$error = true;
 			}
 
-			echo "</td><td>";
+			echo '</td><td>';
 
-			$t=mysql_query("SELECT * FROM projectdivisions WHERE year='".$config['FAIRYEAR']."' AND id='".$winner['projectdivisions_id']."'");
-			$tr=mysql_fetch_object($t);
+			$t = $pdo->prepare("SELECT * FROM projectdivisions WHERE year=? AND id=?");
+			$t->execute([$config['FAIRYEAR'], $winner['projectdivisions_id']]);
+			$tr = $t->fetch(PDO::FETCH_OBJ);
 			echo $tr->division;
-			echo "<br />";
+			echo '<br />';
 
-			echo "<select name=\"cwsfdivision[".$winner['projectid']."]\">";
-			echo "<option value=\"\">".i18n("No corresponding CWSF division")."</option>\n";
-			foreach($CWSFDivisions AS $k=>$v)
-			{
-				if($winner['division_id'])
-				{
-					if($k==$winner['division_id']) $sel="selected=\"selected\""; else $sel="";
-				}
+			echo '<select name="cwsfdivision[' . $winner['projectid'] . ']">';
+			echo '<option value="">' . i18n('No corresponding CWSF division') . "</option>\n";
+			foreach ($CWSFDivisions AS $k => $v) {
+				if ($winner['division_id']) {
+					if ($k == $winner['division_id'])
+						$sel = 'selected="selected"';
 					else
-				{
-
-					if($k==$tr->cwsfdivisionid) $sel="selected=\"selected\""; else $sel="";
+						$sel = '';
+				} else {
+					if ($k == $tr->cwsfdivisionid)
+						$sel = 'selected="selected"';
+					else
+						$sel = '';
 				}
 
 				echo "<option $sel value=\"$k\">" . i18n($v) . "</option>\n";
 			}
 			echo "</select>\n";
 
-			echo "</td></tr>";
-
+			echo '</td></tr>';
 		}
-		echo "<tr><td></td><td>";
-		echo "<input type=\"submit\" value=\"Save CWSF Divisions\">";
-		echo "</td></tr>";
-		echo "</table>";
-		echo "</form>";
+		echo '<tr><td></td><td>';
+		echo '<input type="submit" value="Save CWSF Divisions">';
+		echo '</td></tr>';
+		echo '</table>';
+		echo '</form>';
 
-		if(!$error)
-		{
-			$reg=array("registration"=>array(
-					"ysf_region_id"=>$ysc_region_id,
-					"ysf_region_password"=>$ysc_region_password,
-					"projects"=>$winners
-					)
-				);
+		if (!$error) {
+			$reg = array('registration' => array(
+				'ysf_region_id' => $ysc_region_id,
+				'ysf_region_password' => $ysc_region_password,
+				'projects' => $winners
+			));
 
-			$output="";
+			$output = '';
 			xmlCreateRecurse($reg);
 			$xmldata = $output;
 
-			echo "<h3>".i18n("The following data will be sent to Youth Science Canada")."</h3>";
-			echo "<form method=\"post\" action=\"cwsfregister.php\">";
-			echo "<input type=\"hidden\" name=\"action\" value=\"register\">";
-			echo "<textarea rows=\"15\" cols=\"80\" name=\"xml\">";
+			echo '<h3>' . i18n('The following data will be sent to Youth Science Canada') . '</h3>';
+			echo '<form method="post" action="cwsfregister.php">';
+			echo '<input type="hidden" name="action" value="register">';
+			echo '<textarea rows="15" cols="80" name="xml">';
 			echo $xmldata;
-			echo "</textarea>";
-			echo "<br />";
-			echo "<br />";
-			echo i18n("Warning!  You can only use this feature once, and it will send whatever data is listed above.  If you try to submit this data a second time to YSC it will not work.  So please make sure everything is correct before submitting!");
-			echo "<br />";
-			echo "<br />";
-			echo "<input type=\"submit\" value=\"".i18n("Register for CWSF")."\">";
-			echo "</form>";
-		}
-		else
-		{
-			echo error(i18n("You must correct the above errors before registration can proceed"));
-
+			echo '</textarea>';
+			echo '<br />';
+			echo '<br />';
+			echo i18n('Warning!  You can only use this feature once, and it will send whatever data is listed above.  If you try to submit this data a second time to YSC it will not work.  So please make sure everything is correct before submitting!');
+			echo '<br />';
+			echo '<br />';
+			echo '<input type="submit" value="' . i18n('Register for CWSF') . '">';
+			echo '</form>';
+		} else {
+			echo error(i18n('You must correct the above errors before registration can proceed'));
 		}
 	}
-
-
-
 }
 
 send_footer();

admin/documentdownloader.php

@@ -1,35 +1,36 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2007 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- $q=mysql_query("SELECT * FROM documents WHERE id='".$_GET['id']."'");
- if($r=mysql_fetch_object($q))
- {
-	header("Content-type: ".trim(exec("file -bi ../data/documents/$r->filename")));
-	header("Content-disposition: inline; filename=\"".$r->filename."\"");
-	header("Content-length: ".filesize("../data/documents/$r->filename"));
+$q = $pdo->prepare("SELECT * FROM documents WHERE id='" . $_GET['id'] . "'");
+$q->execute();
+if ($r = $q->fetch(PDO::FETCH_OBJ)) {
+    header('Content-type: ' . trim(exec("file -bi ../data/documents/$r->filename")));
+    header('Content-disposition: inline; filename="' . $r->filename . '"');
+    header('Content-length: ' . filesize("../data/documents/$r->filename"));
     readfile("../data/documents/$r->filename");
 }
 ?>

admin/documents.php

@@ -1,57 +1,57 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2007 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require("../tableeditor.class.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require ('../tableeditor.class.php');
+require_once ('../user.inc.php');
 
 // make sure storage folder exists
- if(!file_exists("../data/documents"))
- 	mkdir("../data/documents");
- if(!file_exists("../data/documents/.htaccess"))
- 	file_put_contents("../data/documents/.htaccess","Order Deny,Allow\r\nDeny From All\r\n");
+if (!file_exists('../data/documents'))
+    mkdir('../data/documents');
+if (!file_exists('../data/documents/.htaccess'))
+    file_put_contents('../data/documents/.htaccess', "Order Deny,Allow\r\nDeny From All\r\n");
 
 user_auth_required('committee', 'admin');
- send_header("Internal Document Manager",
+send_header('Internal Document Manager',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php'),
-            "internal_document_management"
-			);
+    'internal_document_management');
 
- $editor=new TableEditor("documents",
- 			array("date"=>"Date",
-				"title"=>"Document Title",
-				"sel_category"=>"Category",
-				"filename"=>"Filename",
-			)
-			);
+$editor = new TableEditor('documents',
+    array(
+        'date' => 'Date',
+        'title' => 'Document Title',
+        'sel_category' => 'Category',
+        'filename' => 'Filename',
+    ));
 
- $editor->setPrimaryKey("id");
- $editor->setUploadPath("../data/documents");
- $editor->setDefaultSortField("sel_category,date");
- $editor->setRecordType("Document");
- $editor->setFieldDefaultValue("date",date("Y-m-d"));
- $editor->setDownloadLink("documentdownloader.php");
+$editor->setPrimaryKey('id');
+$editor->setUploadPath('../data/documents');
+$editor->setDefaultSortField('sel_category,date');
+$editor->setRecordType('Document');
+$editor->setFieldDefaultValue('date', date('Y-m-d'));
+$editor->setDownloadLink('documentdownloader.php');
 $editor->execute();
 
 send_footer();

admin/donations.php

@@ -1,42 +1,42 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2008 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2008 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require("../tableeditor.class.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require ('../tableeditor.class.php');
+require_once ('../user.inc.php');
 
 user_auth_required('committee', 'admin');
 
- include ("fundraising_sponsorship_handler.inc.php");
- include ("fundraising_goals_handler.inc.php");
- include ("fundraising_main.inc.php");
+include ('fundraising_sponsorship_handler.inc.php');
+include ('fundraising_goals_handler.inc.php');
+include ('fundraising_main.inc.php');
 
- send_header("Donations",
+send_header('Donations',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php',
         'Fundraising' => 'admin/fundraising.php'),
-            "fundraising"
-			);
+    'fundraising');
 
 ?>
 <script type="text/javascript">
@@ -50,7 +50,7 @@ $(document).ready(function() {
 
     $("#fund_editor").dialog({
         bgiframe: true, autoOpen: false,
-        modal: true, resizable: falsefundraising
+        modal: true, resizable: falsefundraising,
         draggable: false
     });
 
@@ -66,8 +66,8 @@ function popup_sponsorship_editor(url) {
     var h = (document.documentElement.clientHeight * 0.6);
     $('#sponsorship_editor').dialog('option','height',h);
     */
-    $('#sponsorship_editor').dialog('option','buttons',{ "<?=i18n("Save")?>": function() { save_sponsorship(); },
-    "<?=i18n("Cancel")?>": function(){ $(this).dialog("close");}});
+    $('#sponsorship_editor').dialog('option','buttons',{ "<?= i18n('Save') ?>": function() { save_sponsorship(); },
+    "<?= i18n('Cancel') ?>": function(){ $(this).dialog("close");}});
     $('#sponsorship_editor').dialog('open');
 
     $('#sponsorship_editor_content').load(url);
@@ -93,8 +93,8 @@ function popup_fund_editor(url) {
     var h = (document.documentElement.clientHeight * 0.6);
     $('#fund_editor').dialog('option','height',h);
     */
-    $('#fund_editor').dialog('option','buttons',{ "<?=i18n("Save")?>": function() { save_fund(); },
-    "<?=i18n("Cancel")?>": function(){ $(this).dialog("close");}});
+    $('#fund_editor').dialog('option','buttons',{ "<?= i18n('Save') ?>": function() { save_fund(); },
+    "<?= i18n('Cancel') ?>": function(){ $(this).dialog("close");}});
     $('#fund_editor').dialog('open');
 
     $('#fund_editor_content').load(url);
@@ -143,16 +143,20 @@ function refresh_fundraising_table() {
 <?
 
 // first, insert any defaults
- $q=mysql_query("SELECT * FROM fundraising WHERE year='".$config['FAIRYEAR']."'");
- if(!mysql_num_rows($q)) {
-	 $q=mysql_query("SELECT * FROM fundraising WHERE year='-1'");
-	 while($r=mysql_fetch_object($q)) {
-		 mysql_query("INSERT INTO fundraising (`type`,`name`,`description`,`system`,`goal`,`year`) VALUES ('$r->type','".mysql_real_escape_string($r->name)."','".mysql_real_escape_string($r->description)."','$r->system','$r->goal','".$config['FAIRYEAR']."')");
+$q = $pdo->prepare("SELECT * FROM fundraising WHERE year='" . $config['FAIRYEAR'] . "'");
+$q->execute();
+if (!$q->rowCount()) {
+    $q = $pdo->prepare("SELECT * FROM fundraising WHERE year='-1'");
+
+    $q->execute();
+    while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+        $q = $pdo->prepare("INSERT INTO fundraising (`type`,`name`,`description`,`system`,`goal`,`year`) VALUES ('$r->type','" . $r->name . "','" . $r->description . "','$r->system','$r->goal','" . $config['FAIRYEAR'] . "')");
+        $q->execute();
     }
 }
 
-echo "<div id=\"fundraisingmain\">";
-echo "</div>";
+echo '<div id="fundraisingmain">';
+echo '</div>';
 
 echo "<br />\n";
 echo "<br />\n";
@@ -162,11 +166,11 @@ echo "</div>";
 echo "<br />\n";
 
 ?>
-<div style="display: none" title="<?=i18n("Donation Editor")?>" id="sponsorship_editor">
+<div style="display: none" title="<?= i18n('Donation Editor') ?>" id="sponsorship_editor">
 <div id="sponsorship_editor_content">
 </div>
 </div>
-<div style="display: none" title="<?=i18n("Fund Editor")?>" id="fund_editor">
+<div style="display: none" title="<?= i18n('Fund Editor') ?>" id="fund_editor">
 <div id="fund_editor_content">
 </div>
 </div>

admin/donors_search.php

@@ -1,67 +1,73 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2008 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2008 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 echo "<br />\n";
 
 // $q=mysql_query("SELECT * FROM award_sponsors WHERE year='".$config['FAIRYEAR']."' ORDER BY organization");
 // we want to show all years, infact that year field probably shouldnt even be there.
-		$sql="";
-		if($_POST['search']) $sql.=" AND organization LIKE '%".mysql_real_escape_string($_POST['search'])."%' ";
-		if(count($_POST['donortype'])) {
-			$sql.=" AND (0 ";
+$sql = '';
+if (get_value_from_array($_POST, 'search'))
+	$sql .= " AND organization LIKE '%" . $_POST['search'] . "%' ";
+
+// NEEDS AN ARRAY AS AN ARGUMENT INSTEAD OF A STRING
+if (count(get_value_from_array($_POST, 'donortype', []))) {
+	$sql .= ' AND (0 ';
 	foreach ($_POST['donortype'] AS $d) {
 		$sql .= " OR donortype='$d'";
 	}
-			$sql.=") ";
+	$sql .= ') ';
 }
 $query = "SELECT * FROM sponsors WHERE 1 $sql ORDER BY organization";
 //		echo "query=$query";
-		$q=mysql_query($query);
-
+$q = $pdo->prepare($query);
+$q->execute();
+get_value_from_array($_POST, 'donortype');
 $thisyear = $config['FISCALYEAR'];
 $lastyear = $config['FISCALYEAR'] - 1;
 $rows = array();
 
-		while($r=mysql_fetch_object($q))
-		{
-			$cq=mysql_query("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='$r->id' AND status='received' AND fiscalyear='$thisyear'");
-			$cr=mysql_fetch_object($cq);
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	$cq = $pdo->prepare("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='$r->id' AND status='received' AND fiscalyear='$thisyear'");
+	$cq->execute();
+	$cr = $cq->fetch(PDO::FETCH_OBJ);
 	$thisyeartotal = $cr->total;
-			$cq=mysql_query("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='$r->id' AND status='received' AND fiscalyear='$lastyear'");
-			$cr=mysql_fetch_object($cq);
+	$cq = $pdo->prepare("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='$r->id' AND status='received' AND fiscalyear='$lastyear'");
+	$cq->execute();
+	$cr = $cq->fetch(PDO::FETCH_OBJ);
 	$lastyeartotal = $cr->total;
 	if ($lastyeartotal)
 		$change = round(($thisyeartotal - $lastyeartotal) / $lastyeartotal * 100);
 	else
-				$change="N/A";
-			$rows[]=array("id"=>$r->id, "name"=>$r->organization, "thisyeartotal"=>$thisyeartotal, "lastyeartotal"=>$lastyeartotal, "change"=>$change);
+		$change = 'N/A';
+	$rows[] = array('id' => $r->id, 'name' => $r->organization, 'thisyeartotal' => $thisyeartotal, 'lastyeartotal' => $lastyeartotal, 'change' => $change);
 }
 $thisyearsort = array();
-		if(!$_POST['order']) {
+if (!get_value_from_array($_POST, 'order')) {
 	// if order is not given, lets order by donation amount this year
 	foreach ($rows AS $key => $val) {
 		$thisyearsort[$key] = $val['thisyeartotal'];
@@ -69,45 +75,46 @@
 	array_multisort($thisyearsort, SORT_DESC, $rows);
 }
 
-		if($_POST['limit']) {
+if (get_value_from_array($_POST, 'limit')) {
 	$limit = $_POST['limit'];
-		}
-		else {
+} else {
 	$limit = 10;
-			echo  "<h4>".i18n("Top 10 donors this year")."</h4>";
+	echo '<h4>' . i18n('Top 10 donors this year') . '</h4>';
 }
 
-		echo "<table class=\"tableview\">";
-		echo "<thead>";
-		echo "<tr>";
-		echo " <th>".i18n("Donor/Sponsor")."</th>";
-		echo " <th>".i18n("Total $ this year")."</th>";
-		echo " <th>".i18n("Total $ last year")."</th>";
-		echo " <th>".i18n("% change")."</th>";
-		echo "</tr>";
+echo '<table class="tableview">';
+echo '<thead>';
+echo '<tr>';
+echo ' <th>' . i18n('Donor/Sponsor') . '</th>';
+echo ' <th>' . i18n('Total $ this year') . '</th>';
+echo ' <th>' . i18n('Total $ last year') . '</th>';
+echo ' <th>' . i18n('% change') . '</th>';
+echo '</tr>';
 echo "</thead>\n";
 
-
 $x = 0;
 foreach ($rows AS $r) {
 	echo "<tr>\n";
 	$eh = "style=\"cursor:pointer;\" onclick=\"open_editor({$r['id']});\"";
 	echo " <td $eh>{$r['name']}</td>\n";
-			echo " <td style=\"text-align: right;\">";
+	echo ' <td style="text-align: right;">';
 	echo format_money($r['thisyeartotal']);
 	echo "</td>\n";
-			echo " <td style=\"text-align: right;\">";
+	echo ' <td style="text-align: right;">';
 	echo format_money($r['lastyeartotal']);
 	echo "</td>\n";
 	if (is_numeric($r['change'])) {
 		$n = $r['change'] / 2 + 50;
-				if($n<0) $n=0;
-				if($n>100) $n=100;
-				$col="color: ".colour_to_percent($n);
-				$sign="%";
+		if ($n < 0)
+			$n = 0;
+		if ($n > 100)
+			$n = 100;
+		$col = 'color: ' . colour_to_percent($n);
+		$sign = '%';
+	} else {
+		$col = '';
+		$sign = '';
 	}
-			else{
-				 $col=""; $sign=""; }
 	echo " <td style=\"text-align: center; $col\">";
 	echo $r['change'] . $sign;
 	echo "</td>\n";
@@ -120,5 +127,4 @@
 
 echo "</table>\n";
 
-		
 ?>

admin/exhibithall_sa.php

@@ -1,23 +1,24 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2010 David Grant <dave@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2010 David Grant <dave@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -26,7 +27,7 @@ require_once('judges.inc.php'); /* for getJudgingEligibilityCode() */
 require_once ('anneal.inc.php');
 
 if ($_SERVER['SERVER_ADDR']) {
-	echo "This script must be run from the command line";
+	echo 'This script must be run from the command line';
 	exit;
 }
 
@@ -42,9 +43,15 @@ case '--pn':
 
 // function TRACE() { }
 // function TRACE_R() { }
-function TRACE($str) { print($str); }
-function TRACE_R($array) { print_r($array); }
+function TRACE($str)
+{
+	print ($str);
+}
 
+function TRACE_R($array)
+{
+	print_r($array);
+}
 
 function point_rotate($x, $y, $deg)
 {
@@ -75,11 +82,11 @@ function queue_new()
 	return array('head' => NULL, 'tail' => NULL);
 }
 
-
 function grid_path_cmp($a, $b)
 {
 	/* This must return an integer! Strange-things(tm) happen if it doesn't */
-	if($a['distance'] == $b['distance']) return 0;
+	if ($a['distance'] == $b['distance'])
+		return 0;
 	return ($a['distance'] < $b['distance']) ? -1 : 1;
 }
 
@@ -101,8 +108,6 @@ function grid_path_check(&$i_eh, &$queue, &$loc, &$end, $ix, $iy)
 		return false;
 	}
 
-		
-
 	$next_loc['distance'] = distance($next_loc['x'], $next_loc['y'], $end['x'], $end['y']);
 	$next_loc['path_length'] = $loc['path_length'] + 1;
 	//	TRACE("   distance={$next_loc['distance']}, path_length={$next_loc['path_length']}\n");
@@ -137,14 +142,16 @@ function grid_path($src, $dst)
 	array_push($queue, $start);
 
 	while (1) {
-		if(count($queue) == 0) break;
+		if (count($queue) == 0)
+			break;
 
 		//		print_r($queue);
 		/* Dequeue head */
 		$loc = array_shift($queue);
 
 		/* Cut it off after a long walk */
-		if($loc['path_length'] > 25) break;
+		if ($loc['path_length'] > 25)
+			break;
 
 		//		TRACE("Dequeue: ({$loc['x']},{$loc['y']})\n");
 
@@ -155,26 +162,29 @@ function grid_path($src, $dst)
 		}
 
 		/* All 4 directions */
-		if($loc['ix'] > 0) grid_path_check($i_eh, $queue,$loc, $end, $loc['ix']-1, $loc['iy']);
-		if($loc['ix'] < $i_eh['grid_w']-1) grid_path_check($i_eh, $queue, $loc, $end, $loc['ix']+1, $loc['iy']);
-		if($loc['iy'] > 0) grid_path_check($i_eh, $queue, $loc, $end, $loc['ix'], $loc['iy']-1);
-		if($loc['iy'] < $i_eh['grid_h']-1) grid_path_check($i_eh, $queue, $loc, $end, $loc['ix'], $loc['iy']+1);
+		if ($loc['ix'] > 0)
+			grid_path_check($i_eh, $queue, $loc, $end, $loc['ix'] - 1, $loc['iy']);
+		if ($loc['ix'] < $i_eh['grid_w'] - 1)
+			grid_path_check($i_eh, $queue, $loc, $end, $loc['ix'] + 1, $loc['iy']);
+		if ($loc['iy'] > 0)
+			grid_path_check($i_eh, $queue, $loc, $end, $loc['ix'], $loc['iy'] - 1);
+		if ($loc['iy'] < $i_eh['grid_h'] - 1)
+			grid_path_check($i_eh, $queue, $loc, $end, $loc['ix'], $loc['iy'] + 1);
 		usort($queue, 'grid_path_cmp');
 	}
 	//	TRACE("No path found\n");
 	//	exit;
 	return 100;
-
 }
 
-
 TRACE("<pre>\n");
 
 /* Load exhibit halls */
 $exhibithall = array();
-$q = mysql_query("SELECT * FROM exhibithall WHERE type='exhibithall'");
+$q = $pdo->prepare("SELECT * FROM exhibithall WHERE type='exhibithall'");
+$q->execute();
 TRACE("Loading exhibit halls...\n");
-while(($r = mysql_fetch_assoc($q))) {
+while (($r = $q->fetch(PDO::FETCH_ASSOC))) {
 	$r['divs'] = unserialize($r['divs']);
 	$r['cats'] = unserialize($r['cats']);
 	$exhibithall[$r['id']] = $r;
@@ -183,9 +193,10 @@ while(($r = mysql_fetch_assoc($q))) {
 
 /* Load objects */
 $objects = array();
-$q = mysql_query("SELECT * FROM exhibithall WHERE type='wall' OR type='project'");
+$q = $pdo->prepare("SELECT * FROM exhibithall WHERE type='wall' OR type='project'");
+$q->execute();
 TRACE("Loading objects...\n");
-while(($r = mysql_fetch_assoc($q))) {
+while (($r = $q->fetch([PDO::FETCH_ASSOC]))) {
 	$r['divs'] = unserialize($r['divs']);
 	$r['cats'] = unserialize($r['cats']);
 	$objects[$r['id']] = $r;
@@ -201,23 +212,23 @@ foreach($objects as $oid=>$o) {
 /* The grid size is the smallest object dimension */
 $grid_size = 100;
 foreach ($objects as $oid => $o) {
-	if($grid_size > $o['w']) $grid_size = $o['w'];
-	if($grid_size > $o['h']) $grid_size = $o['h'];
+	if ($grid_size > $o['w'])
+		$grid_size = $o['w'];
+	if ($grid_size > $o['h'])
+		$grid_size = $o['h'];
 }
 $grid_size /= 2;
 
 TRACE("Grid size: {$grid_size}m\n");
 
-
 // print_r($exhibithall);
 
 // print_r($objects);
 
 $div = array();
 TRACE("Loading Project Divisions...\n");
-$q=mysql_query("SELECT * FROM projectdivisions WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
-while($r=mysql_fetch_object($q))
-{
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$divshort[$r->id] = $r->division_shortform;
 	$div[$r->id] = $r->division;
 	TRACE("   {$r->id} - {$div[$r->id]}\n");
@@ -225,8 +236,9 @@ while($r=mysql_fetch_object($q))
 
 TRACE("Loading Project Age Categories...\n");
 $cat = array();
-$q=mysql_query("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
-while($r=mysql_fetch_object($q)) {
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$catshort[$r->id] = $r->category_shortform;
 	$cat[$r->id] = $r->category;
 	TRACE("   {$r->id} - {$r->category}\n");
@@ -234,17 +246,19 @@ while($r=mysql_fetch_object($q)) {
 
 TRACE("Loading Projects...\n");
 $projects = array();
-$q = mysql_query("SELECT projects.* FROM projects, registrations 
+$q = $pdo->prepare("SELECT projects.* FROM projects, registrations 
 				WHERE
 					projects.year='{$config['FAIRYEAR']}' 
 					AND registrations.id = projects.registrations_id
 				" . getJudgingEligibilityCode());
-while($p = mysql_fetch_object($q)) {
-	$qq = mysql_query("SELECT grade,schools_id FROM students WHERE registrations_id='{$p->registrations_id}'");
-	$num_students = mysql_num_rows($qq);
+$q->execute();
+while ($p = $q->fetch(PDO::FETCH_OBJ)) {
+	$qq = $pdo->prepare("SELECT grade,schools_id FROM students WHERE registrations_id='{$p->registrations_id}'");
+	$qq->execute();
+	$num_students = $qq->rowCouunt();
 	$grade = 0;
 	$schools_id = 0;
-	while($s = mysql_fetch_assoc($qq)) {
+	while ($s = $qq->fetch(PDO::FETCH_ASSOC)) {
 		if ($s['grade'] > $grade) {
 			$grade = $s['grade'];
 			$schools_id = $s['schools_id'];
@@ -259,7 +273,8 @@ while($p = mysql_fetch_object($q)) {
 		'req_electricity' => $p->req_electricity,
 		'projectnumber' => $p->projectnumber,
 		'floornumber' => $p->floornumber,
-			'num_students' => $num_students);
+		'num_students' => $num_students
+	);
 }
 TRACE(count($projects) . " projects loaded.\n");
 
@@ -268,16 +283,16 @@ if($action == 'pn') {
 	foreach ($projects as $p) {
 		$c = $catshort[$p['cat']];
 		$d = $divshort[$p['div']];
-		$n = sprintf("%03d", $p['floornumber']);
+		$n = sprintf('%03d', $p['floornumber']);
 		$pn = "$c $n $d";
 		TRACE("Project {$p['projects_id']} at loc {$p['floornumber']}: $pn\n");
-		mysql_query("UPDATE projects SET projectnumber='$pn' WHERE id='{$p['projects_id']}'");
+		$q = $pdo->prepare("UPDATE projects SET projectnumber='$pn' WHERE id='{$p['projects_id']}'");
+		$q->execute();
 	}
 	TRACE("Done.\n");
 	exit;
 }
 
-
 /* Assign objects to grid locations */
 foreach ($exhibithall as &$i_eh) {
 	TRACE("Assigning objects to grid locations for {$i_eh['name']}...\n");
@@ -285,10 +300,12 @@ foreach($exhibithall as &$i_eh) {
 	$i_eh['grid_w'] = 0;
 	$i_eh['grid_h'] = 0;
 	for ($x = 0; $x <= $i_eh['w']; $x += $grid_size, $ix++) {
-		if($ix <= $i_eh['grid_w']) $i_eh['grid_w'] = $ix+1;
+		if ($ix <= $i_eh['grid_w'])
+			$i_eh['grid_w'] = $ix + 1;
 		$iy = 0;
 		for ($y = 0; $y <= $i_eh['h']; $y += $grid_size, $iy++) {
-			if($iy <= $i_eh['grid_h']) $i_eh['grid_h'] = $iy+1;
+			if ($iy <= $i_eh['grid_h'])
+				$i_eh['grid_h'] = $iy + 1;
 			/* Initialize element if required */
 			if (!is_array($i_eh[$ix][$iy])) {
 				$i_eh[$ix][$iy] = array('x' => $x, 'ix' => $ix,
@@ -299,7 +316,8 @@ foreach($exhibithall as &$i_eh) {
 
 			/* Scan all objects */
 			foreach ($objects as $oid => $o) {
-				if($o['exhibithall_id'] != $i_eh['id']) continue;
+				if ($o['exhibithall_id'] != $i_eh['id'])
+					continue;
 				if (is_point_in_object($x, $y, $o)) {
 					$i_eh[$ix][$iy]['ids'][] = $oid;
 				}
@@ -317,7 +335,8 @@ function distance($x1,$y1,$x2,$y2)
 
 TRACE("Computing gridlocation of front of projects...\n");
 foreach ($objects as $oid => $o) {
-	if($o['type'] != 'project') continue;
+	if ($o['type'] != 'project')
+		continue;
 
 	/* Get a pointer to the exhibit hall */
 	$i_eh = &$exhibithall[$o['exhibithall_id']];
@@ -339,8 +358,11 @@ foreach($objects as $oid=>$o) {
 	$gy = intval($fy / $grid_size);  // * $grid_size;
 
 	//	TRACE("Search grid around $gx, $gy\n");
-	/* Search around that grid for a free spot, closest to $fx,$fy,
-	 * with no objects and no object_front */
+
+	/*
+	 * Search around that grid for a free spot, closest to $fx,$fy,
+	 * with no objects and no object_front
+	 */
 	$smallest_d = $i_eh['w'];
 	$smallest_ix = 0;
 	$smallest_iy = 0;
@@ -349,8 +371,10 @@ foreach($objects as $oid=>$o) {
 		for ($y = $gy - 1; $y <= $gy + 1; $y++) {
 			//			TRACE("At ($x, $y) :\n");
 			//			print_r($i_eh[$x][$y]);
-			if(count($i_eh[$x][$y]['ids'])) continue;
-			if($i_eh[$x][$y]['project_front'] > 0) continue;
+			if (count($i_eh[$x][$y]['ids']))
+				continue;
+			if ($i_eh[$x][$y]['project_front'] > 0)
+				continue;
 
 			/* Check distance */
 			$d = distance($i_eh[$x][$y]['x'], $i_eh[$x][$y]['y'], $fx, $fy);
@@ -386,7 +410,8 @@ case 'images':
 /* Compute closest projects to each project */
 $project_distance = 100 / $grid_size;
 foreach ($objects as $oid => $o) {
-	if($o['type'] != 'project') continue;
+	if ($o['type'] != 'project')
+		continue;
 
 	TRACE("Computing paths for {$o['name']}...\n");
 
@@ -398,12 +423,15 @@ foreach($objects as $oid=>$o) {
 
 	/* Path to all other objects in the same exhibit hall */
 	foreach ($objects as $d_oid => $d_o) {
-		if($d_oid == $oid) continue;
-		if($o['exhibithall_id'] != $d_o['exhibithall_id']) continue;
+		if ($d_oid == $oid)
+			continue;
+		if ($o['exhibithall_id'] != $d_o['exhibithall_id'])
+			continue;
 
 		$d = grid_path($o, $d_o);
 		$objects[$oid]['nearby_projects'][] = array('distance' => $d, 'id' => $d_oid);
-		if($d < $project_distance) $project_distance = $d;
+		if ($d < $project_distance)
+			$project_distance = $d;
 	}
 	/* Use the grid_path_cmp to sort the projects based on 'distance' */
 	usort($objects[$oid]['nearby_projects'], 'grid_path_cmp');
@@ -412,25 +440,25 @@ TRACE("Project Distance: {$project_distance} hops\n");
 
 /* Compute project distances */
 foreach ($objects as $oid => $o) {
-	if($o['type'] != 'project') continue;
+	if ($o['type'] != 'project')
+		continue;
 	foreach ($objects[$oid]['nearby_projects'] as &$nearby_project) {
 		$nearby_project['project_distance'] = $nearby_project['distance'] / $project_distance;
 	}
 }
 
-
-
 /* Build a list of floor objects for the annealer */
 $floor_objects = array();
 $x = 0;
 foreach ($objects as $oid => $o) {
-	if($o['type'] != 'project') continue;
+	if ($o['type'] != 'project')
+		continue;
 	$objects[$oid]['floor_object_offset'] = $x;  /* The same as the annealer bucket id */
 	$floor_objects[$x++] = &$objects[$oid];
 }
 
-
-/* Project floor location cost:
+/*
+ * Project floor location cost:
  * - Keep divisions together
  * - keep grades together
  * - a project should have one of the same school nearby or adjacent, but not a lot nearby
@@ -467,7 +495,6 @@ function project_cost(&$annealer, $bucket_id, $ids)
 	$min = $p['grade'];
 	$max = $p['grade'];
 	foreach ($o['nearby_projects'] as &$n) {
-		
 		/* Get the nearby project object */
 		$nearby_o = &$objects[$n['id']];
 
@@ -478,27 +505,33 @@ function project_cost(&$annealer, $bucket_id, $ids)
 		$nearby_bkt = &$annealer->bucket[$nearby_bucket_id];
 
 		//		TRACE("      Bucket id: {$nearby_bucket_id} with  ".count($nearby_bkt)." items\n");
-		if(count($nearby_bkt) == 0) continue;
+		if (count($nearby_bkt) == 0)
+			continue;
 
 		$nearby_p = &$projects[$nearby_bkt[0]];
 
 		/* Only consider closest 5 projects for school */
 		if ($nearby_p['schools_id'] == $p['schools_id']) {
-			if($x < 5) $school_match++;
+			if ($x < 5)
+				$school_match++;
 		}
 
 		/* Closest 5 projects for divs */
 		if ($nearby_p['div'] == $p['div']) {
-			if($x < 5) $div_match++;
+			if ($x < 5)
+				$div_match++;
 		}
 
 		/* Closest 10 for grade variance */
 		if ($x < 10) {
-			if($nearby_p['grade'] < $min) $min = $nearby_p['grade'];
-			if($nearby_p['grade'] > $max) $max = $nearby_p['grade'];
+			if ($nearby_p['grade'] < $min)
+				$min = $nearby_p['grade'];
+			if ($nearby_p['grade'] > $max)
+				$max = $nearby_p['grade'];
 		}
 		$x++;
-		if($x == 10) break;
+		if ($x == 10)
+			break;
 	}
 
 	if ($school_match == 0) {
@@ -544,7 +577,6 @@ function project_cost(&$annealer, $bucket_id, $ids)
 
 	//	TRACE("Cost for bucket $bucket_id = $cost\n");
 	return $cost;
-
 }
 
 function project_bucket_ids($annealer, $bucket_id)
@@ -561,13 +593,12 @@ function project_bucket_ids($annealer, $bucket_id)
 		$nearby_o = &$objects[$n['id']];
 		$recompute_ids[] = $nearby_o['floor_object_offset'];
 		$x++;
-		if($x == 15) break;
+		if ($x == 15)
+			break;
 	}
 	return $recompute_ids;
 }
 
- 
-
 $e = 10 * ($config['effort'] / 1000) * pow(count($projects), 1.3333);
 $project_ids = array_keys($projects);
 
@@ -585,7 +616,8 @@ for($x=0;$x<$a->num_buckets; $x++) {
 		TRACE("Assigned more than one project to bucket $x\n");
 		exit;
 	}
-	if(count($bkt) == 0) continue;
+	if (count($bkt) == 0)
+		continue;
 
 	/* Get the project id in this bucket */
 	$projects_id = array_shift($bkt);
@@ -597,16 +629,16 @@ for($x=0;$x<$a->num_buckets; $x++) {
 print_r($projects);
 
 /* Assign floor numbers */
-mysql_query("UPDATE projects SET floornumber=0 WHERE year='{$config['FAIRYEAR']}'");
+$q = $pdo->prepare("UPDATE projects SET floornumber=0 WHERE year='{$config['FAIRYEAR']}'");
+$q->execute();
 
 foreach ($projects as $pid => $p) {
-	mysql_query("UPDATE projects SET floornumber='{$p['floornumber']}' WHERE id='$pid'");
+	$q = $pdo->prepare("UPDATE projects SET floornumber='{$p['floornumber']}' WHERE id='$pid'");
+	$q->execute();
 	TRACE("Project $pid => Floor number {$p['floornumber']}\n");
 }
 
-TRACE("</pre>");
-
-
+TRACE('</pre>');
 
 function exhibithall_images()
 {
@@ -623,7 +655,6 @@ function exhibithall_images()
 	}
 
 	foreach ($exhibithall as &$i_eh) {
-
 		$i = imagecreatetruecolor($i_eh['w'] * 100, $i_eh['h'] * 100);
 		$c_grey = imagecolorallocate($i, 128, 128, 128);
 		$c_white = imagecolorallocate($i, 255, 255, 255);
@@ -644,7 +675,8 @@ function exhibithall_images()
 			}
 		}
 		foreach ($objects as $oid => $o) {
-			if($o['exhibithall_id'] != $i_eh['id']) continue;
+			if ($o['exhibithall_id'] != $i_eh['id'])
+				continue;
 
 			list($x1, $y1) = point_rotate(-$o['w2'], -$o['h2'], $o['orientation']);
 			list($x2, $y2) = point_rotate($o['w2'], $o['h2'], $o['orientation']);
@@ -657,16 +689,10 @@ function exhibithall_images()
 			imagestring($i, 4, $o['x'] * 100 - 30, $o['y'] * 100 - 5, "d:$d ({$p['div']})", $c_black);
 			imagestring($i, 4, $o['x'] * 100 - 30, $o['y'] * 100 + 10, "s:{$p['schools_id']}", $c_black);
 			imagestring($i, 4, $o['x'] * 100 - 30, $o['y'] * 100 + 25, "e:{$p['req_electricity']}", $c_black);
-
-		
 		}
 
-
 		imagepng($i, "./eh-{$i_eh['id']}.png");
-
 	}
 }
 
-
-
 ?>

admin/export_checkin.php

@@ -1,44 +1,43 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
-
-$catq=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' AND id='".$_GET['cat']."'");
-if($catr=mysql_fetch_object($catq))
-{
+require ('../lpdf.php');
 
+$catq = $pdo->prepare("SELECT * FROM projectcategories WHERE year='" . $config['FAIRYEAR'] . "' AND id='" . $_GET['cat'] . "'");
+$catq->execute();
+if ($catr = $catq->fetch(PDO::FETCH_OBJ)) {
 	$pdf = new lpdf(i18n($config['fairname']),
-			i18n("Checkin List")." - ".i18n($catr->category),
-			$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-			);
+		i18n('Checkin List') . ' - ' . i18n($catr->category),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
 	$pdf->newPage();
 	$pdf->setFontSize(11);
-	$q=mysql_query("SELECT  registrations.id AS reg_id,
+	$q = $pdo->prepare("SELECT  registrations.id AS reg_id,
 				registrations.num AS reg_num,
 				registrations.status,
 				projects.title,
@@ -54,61 +53,59 @@ if($catr=mysql_fetch_object($catq))
 			ORDER BY
 				projects.title
 			");
-		echo mysql_error();
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
 
 	$table = array();
 
 	// only show the 'paid' column if the regfee > 0.  if registration is fee, then we dont care about the 'paid' column!
-	if($config['regfee']>0)
-	{
-		$table['header']=array(i18n("Paid?"),i18n("Proj #"),i18n("Project Title"),i18n("Student(s)"),i18n("Div"));
+	if ($config['regfee'] > 0) {
+		$table['header'] = array(i18n('Paid?'), i18n('Proj #'), i18n('Project Title'), i18n('Student(s)'), i18n('Div'));
 		$table['widths'] = array(0.5, 0.6, 3.5, 2.4, 0.5);
-		$table['dataalign']=array("center","left","left","left","center");
-	}
-	else
-	{
-		$table['header']=array(i18n("Proj #"),i18n("Project Title"),i18n("Student(s)"),i18n("Div"));
+		$table['dataalign'] = array('center', 'left', 'left', 'left', 'center');
+	} else {
+		$table['header'] = array(i18n('Proj #'), i18n('Project Title'), i18n('Student(s)'), i18n('Div'));
 		$table['widths'] = array(0.6, 3.7, 2.7, 0.5);
-		$table['dataalign']=array("left","left","left","center");
-
+		$table['dataalign'] = array('left', 'left', 'left', 'center');
 	}
-	while($r=mysql_fetch_object($q))
-	{
-		$divq=mysql_query("SELECT division,division_shortform FROM projectdivisions WHERE year='".$config['FAIRYEAR']."' AND id='".$r->projectdivisions_id."'");
-		$divr=mysql_fetch_object($divq);
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		$divq = $pdo->prepare("SELECT division,division_shortform FROM projectdivisions WHERE year='" . $config['FAIRYEAR'] . "' AND id='" . $r->projectdivisions_id . "'");
+		$divq->execute();
+		$divr = $divq->fetch(PDO::FETCH_OBJ);
 
-		$sq=mysql_query("SELECT students.firstname,
+		$sq = $pdo->prepare("SELECT students.firstname,
 					students.lastname
 				FROM
 					students
 				WHERE
 					students.registrations_id='$r->reg_id'
 				");
+		$sq->execute();
 
-		$students="";
+		$students = '';
 		$studnum = 0;
-		while($studentinfo=mysql_fetch_object($sq))
-		{
-			if($studnum>0) $students.=", ";
+		while ($studentinfo = $sq->fetch(PDO::FETCH_OBJ)) {
+			if ($studnum > 0)
+				$students .= ', ';
 			$students .= "$studentinfo->firstname $studentinfo->lastname";
 			$studnum++;
 		}
 
 		// only show the paid column if regfee >0
-		if($config['regfee']>0)
-		{
-			switch($r->status)
-			{
-				case "paymentpending": $status_text="No"; break;
-				case "complete": $status_text=""; break;
+		if ($config['regfee'] > 0) {
+			switch ($r->status) {
+				case 'paymentpending':
+					$status_text = 'No';
+					break;
+				case 'complete':
+					$status_text = '';
+					break;
 			}
 			$status_text = i18n($status_text);
 
 			$table['data'][] = array($status_text, $r->proj_num, $r->title, $students, i18n($divr->division_shortform));
-		}
-		else
+		} else
 			$table['data'][] = array($r->projectnumber, $r->title, $students, i18n($divr->division_shortform));
-
 	}
 
 	$pdf->addTable($table);

admin/fair_stats.php

@@ -1,24 +1,25 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-   Copyright (C) 2009 David Grant <dave@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2007 James Grant <james@lightbox.org>
+ * Copyright (C) 2009 David Grant <dave@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -30,47 +31,45 @@
 require_once ('curl.inc.php');
 
 /* Hack so we can jump right to YSC stats */
- if($_GET['abbrv'] == 'YSC') {
- 	$q = mysql_query("SELECT id FROM fairs WHERE abbrv='YSC'");
-	$r = mysql_fetch_assoc($q);
+if (get_value_from_array($_GET, 'abbrv') == 'YSC') {
+	$q = $pdo->prepare("SELECT id FROM fairs WHERE abbrv='YSC'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_ASSOC);
 	$_GET['id'] = $r['id'];
 }
 
-
 function stats_to_ysc($fair, $stats)
 {
 	if ($fair['type'] == 'ysc') {
 		/* Map data into YSC tags */
 		$y = array();
-		$y["numschoolstotal"]=$stats['schools_total'];
-		$y["numschoolsactive"]=$stats['schools_active'];
-		$y["numstudents"]=$stats['students_total'];
-		$y["numk6m"]=$stats['male_1'] + $stats['male_4'];
-		$y["numk6f"]=$stats['female_1'] + $stats['female_4'];
-		$y["num78m"]=$stats['male_7'];
-		$y["num78f"]=$stats['female_7'];
-		$y["num910m"]=$stats['male_9'];
-		$y["num910f"]=$stats['female_9'];
-		$y["num11upm"]=$stats['male_11'];
-		$y["num11upf"]=$stats['female_11'];
-		$y["projk6"]=$stats['projects_1'] + $stats['projects_4'];
-		$y["proj78"]=$stats['projects_7'];
-		$y["proj910"]=$stats['projects_9'];
-		$y["proj11up"]=$stats['projects_11'];
-		$y["committee"]=$stats['committee_members'];
-		$y["judges"]=$stats['judges'];
+		$y['numschoolstotal'] = $stats['schools_total'];
+		$y['numschoolsactive'] = $stats['schools_active'];
+		$y['numstudents'] = $stats['students_total'];
+		$y['numk6m'] = $stats['male_1'] + $stats['male_4'];
+		$y['numk6f'] = $stats['female_1'] + $stats['female_4'];
+		$y['num78m'] = $stats['male_7'];
+		$y['num78f'] = $stats['female_7'];
+		$y['num910m'] = $stats['male_9'];
+		$y['num910f'] = $stats['female_9'];
+		$y['num11upm'] = $stats['male_11'];
+		$y['num11upf'] = $stats['female_11'];
+		$y['projk6'] = $stats['projects_1'] + $stats['projects_4'];
+		$y['proj78'] = $stats['projects_7'];
+		$y['proj910'] = $stats['projects_9'];
+		$y['proj11up'] = $stats['projects_11'];
+		$y['committee'] = $stats['committee_members'];
+		$y['judges'] = $stats['judges'];
 		return $y;
 	}
 	return $stats;
 }
 
-
- send_header("Upload Fair Statistics and Information",
+send_header('Upload Fair Statistics and Information',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php'),
-            "fair_stats"
-			);
- echo "<br />";
+	'fair_stats');
+echo '<br />';
 
 /* SFIAB config options server side */
 $server_config = array();
@@ -84,33 +83,39 @@
 $server_config['scholarships'] = false;
 $server_config['delegates'] = false;
 
- if($_GET['year']) $year=intval($_GET['year']);
- else $year=$config['FAIRYEAR'];
+if (get_value_from_array($_GET, 'year'))
+	$year = intval(get_value_from_array($_GET, 'year'));
+else
+	$year = $config['FAIRYEAR'];
 
- if($_GET['id']) $fairs_id=intval($_GET['id']);
- else if($_POST['id']) $fairs_id=intval($_POST['id']);
- else $fairs_id = -1;
+if (get_value_from_array($_GET, 'id'))
+	$fairs_id = intval($_GET['id']);
+else if (get_value_from_array($_POST, 'id'))
+	$fairs_id = intval($_POST['id']);
+else
+	$fairs_id = -1;
 
 if ($fairs_id != -1) {
- 	$q = mysql_query("SELECT * FROM fairs WHERE id='$fairs_id'");
-	$fair = mysql_fetch_assoc($q);
+	$q = $pdo->prepare("SELECT * FROM fairs WHERE id='$fairs_id'");
+	$q->execute();
+	$fair = $q->fetch(PDO::FETCH_ASSOC);
 }
 
- $action = $_POST['action'];
+$action = get_value_from_array($_POST, 'action');
 
 if ($action == 'sendstats') {
 	foreach (array_keys($stats_data) as $k) {
-		$stats[$k] = $_POST[$k];
+		$stats[$k] = get_value_from_array($_POST, $k);
 	}
 	$stats['year'] = $year;
 	if ($fair['type'] == 'ysc') {
 		$st = stats_to_ysc($fair, $stats);
 		$req = array('affiliation' => array(
-				"ysf_region_id"=>$fair['username'],
-				"ysf_region_password"=>$fair['password'],
-				"year"=>$year,
-				'stats'=>$st)
-			);
+			'ysf_region_id' => $fair['username'],
+			'ysf_region_password' => $fair['password'],
+			'year' => $year,
+			'stats' => $st
+		));
 	} else {
 		$req = array('stats' => $stats);
 	}
@@ -119,42 +124,50 @@
 		$r = curl_query($fair, $req,
 			'https://secure.ysf-fsj.ca/registration/xmlaffiliation.php');
 		if ($r['error'] == 0)
-			echo happy(i18n("The %1 Server said:", array($fair['name'])).' '.$r['message']);
+			echo happy(i18n('The %1 Server said:', array($fair['name'])) . ' ' . $r['message']);
 		else
-			echo error(i18n("The %1 Server said:", array($fair['name'])).' '.$r['message']);
+			echo error(i18n('The %1 Server said:', array($fair['name'])) . ' ' . $r['message']);
 		//		$fairs_id = -1;
 		//		$year = $config['FAIRYEAR'];
 	} else {
-		echo error("CURL Support Missing");
-		echo i18n("Your PHP installation does not support CURL.  You will need to login to the YSC system as the regional coodinator and upload the XML data manually");
+		echo error('CURL Support Missing');
+		echo i18n('Your PHP installation does not support CURL.  You will need to login to the YSC system as the regional coodinator and upload the XML data manually');
 		send_footer();
 		exit;
 	}
 }
 
-
+global $PHPSELF;
 echo "<form name=\"fairselect\" action=\"$PHPSELF\" method=\"get\">";
- $q=mysql_query("SELECT * FROM fairs WHERE `type`='sfiab' OR `type`='ysc' AND enable_stats='yes'");
- echo "<select name=\"id\">";
- echo "<option value=\"\">".i18n("Choose a destination")."</option>\n";
- while($r=mysql_fetch_object($q)) {
- 	if($fairs_id==$r->id) $sel="selected=\"selected\""; else $sel="";
+$q = $pdo->prepare("SELECT * FROM fairs WHERE `type`='sfiab' OR `type`='ysc' AND enable_stats='yes'");
+$q->execute();
+echo '<select name="id">';
+echo '<option value="">' . i18n('Choose a destination') . "</option>\n";
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	if ($fairs_id == $r->id)
+		$sel = 'selected="selected"';
+	else
+		$sel = '';
 	echo "<option $sel value=\"{$r->id}\">{$r->name} ({$r->abbrv})</option>\n";
 }
 echo "</select>\n";
 
- $q=mysql_query("SELECT DISTINCT(year) AS year FROM config WHERE year>0 ORDER BY year");
- echo "<select name=\"year\">";
- echo "<option value=\"\">".i18n("Choose a year")."</option>\n";
- while($r=mysql_fetch_object($q)) {
- 	if($year==$r->year) $sel="selected=\"selected\""; else $sel="";
+$q = $pdo->prepare('SELECT DISTINCT(year) AS year FROM config WHERE year>0 ORDER BY year');
+$q->execute();
+echo '<select name="year">';
+echo '<option value="">' . i18n('Choose a year') . "</option>\n";
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	if ($year == $r->year)
+		$sel = 'selected="selected"';
+	else
+		$sel = '';
 	echo "<option $sel value=\"$r->year\">$r->year</option>\n";
 }
 echo "</select>\n";
- echo "<input type=\"submit\" name=\"submit\" value=\"".i18n('Prepare Stats')."\" />";
- echo "</form>";
- echo "<br />";
- echo "<hr />";
+echo '<input type="submit" name="submit" value="' . i18n('Prepare Stats') . '" />';
+echo '</form>';
+echo '<br />';
+echo '<hr />';
 
 if ($fairs_id == -1) {
 	echo i18n('Statistics will be shown below this line before being sent.  Please select a destination and year first.');
@@ -165,15 +178,14 @@
 
 $ok = true;
 if (trim($fair['username']) == '') {
- 	echo error(i18n("You have not yet specified a username for this server.  Go to the <a href=\"sciencefairs.php\">Science Fair Management</a> page to set it"));
+	echo error(i18n('You have not yet specified a username for this server.  Go to the <a href="sciencefairs.php">Science Fair Management</a> page to set it'));
 	$ok = false;
 }
 if (trim($fair['password']) == '') {
- 	echo error(i18n("You have not yet specified a password for this server.  Go to the <a href=\"sciencefairs.php\">Science Fair Management</a> page to set it"));
+	echo error(i18n('You have not yet specified a password for this server.  Go to the <a href="sciencefairs.php">Science Fair Management</a> page to set it'));
 	$ok = false;
 }
 
-
 if ($fair['type'] == 'ysc') {
 	$data['statconfig'] = array('participation');
 } else {
@@ -203,7 +215,7 @@
 $stats['year'] = $year;
 
 /* Now, overwrite all the stats with what we pulled down from the server */
- if(is_array($data['stats'])) {
+if (is_array(get_value_from_array($data, 'stats'))) {
 	foreach ($data['stats'] as $k => $v) {
 		$stats[$k] = $v;
 	}
@@ -213,24 +225,26 @@
 /* And now, overwrite all the stuff we pulled down with stats we can compute */
 
 // number of schools
- $q=mysql_query("SELECT COUNT(id) AS num FROM schools WHERE year='$year'");
- $r=mysql_fetch_object($q);
+$q = $pdo->prepare("SELECT COUNT(id) AS num FROM schools WHERE year='$year'");
+$q->execute();
+$r = $q->fetch(PDO::FETCH_OBJ);
 $stats['schools_total'] = $r->num;
 
 // number of schools participating
- $q=mysql_query("SELECT DISTINCT(students.schools_id) AS sid, schools.*
- 		 	FROM students 
+$q = $pdo->prepare("SELECT DISTINCT(students.schools_id) AS sid, schools.*
+ \t\t \tFROM students 
 				LEFT JOIN registrations ON students.registrations_id=registrations.id 
 				LEFT JOIN schools ON students.schools_id=schools.id
 			WHERE students.year='$year' 
 				AND registrations.year='$year' 
 				AND (registrations.status='complete' OR registrations.status='paymentpending')");
- $stats['schools_active']=mysql_num_rows($q);
+$q->execute();
+$stats['schools_active'] = $q->rowCount();
 $stats['schools_public'] = 0;
 $stats['schools_private'] = 0;
 $stats['schools_atrisk'] = 0;
 $districts = array();
- while($si=mysql_fetch_assoc($q)) {
+while ($si = $q->fetch(PDO::FETCH_ASSOC)) {
 	if ($si['designate'] == 'public')
 		$stats['schools_public']++;
 	if ($si['designate'] == 'independent')
@@ -238,20 +252,22 @@
 	if ($si['atrisk'] == 'yes')
 		$stats['schools_atrisk']++;
 	$bd = $si['board'] . '~' . $si['district'];
-	if(!in_array($bd, $districts)) $districts[] =$bd;
+	if (!in_array($bd, $districts))
+		$districts[] = $bd;
 }
 $stats['schools_districts'] = count($districts);
 
 // numbers of students:
- $q=mysql_query("SELECT students.*,schools.* 
-	 		FROM students
+$q = $pdo->prepare("SELECT students.*,schools.* 
+\t \t\tFROM students
 				LEFT JOIN registrations ON students.registrations_id=registrations.id 
 				LEFT JOIN schools on students.schools_id=schools.id
 			WHERE students.year='$year' 
 				AND registrations.year='$year' 
 				AND (registrations.status='complete' OR registrations.status='paymentpending')");
- echo mysql_error();
- $stats['students_total'] = mysql_num_rows($q);
+$q->execute();
+show_pdo_errors_if_any($pdo);
+$stats['students_total'] = $q->rowCount();
 $stats['students_public'] = 0;
 $stats['students_private'] = 0;
 $stats['students_atrisk'] = 0;
@@ -263,7 +279,7 @@
 	$stats["projects_$g"] = 0;
 }
 $unknown = array();
- while($s=mysql_fetch_assoc($q)) {
+while ($s = $q->fetch(PDO::FETCH_ASSOC)) {
 	if (!in_array($s['sex'], array('male', 'female')))
 		$unknown[$grademap[$s['grade']]]++;
 	else
@@ -285,45 +301,45 @@
 }
 
 // projects
- $q=mysql_query("SELECT MAX(students.grade) AS grade FROM students
-	 		LEFT JOIN registrations ON students.registrations_id=registrations.id 
+$q = $pdo->prepare("SELECT MAX(students.grade) AS grade FROM students
+\t \t\tLEFT JOIN registrations ON students.registrations_id=registrations.id 
 			LEFT JOIN projects ON projects.registrations_id=registrations.id 
 		WHERE  students.year='$year' 
 			AND registrations.year='$year' 
 			AND projects.year='$year' 
 			AND (registrations.status='complete' OR registrations.status='paymentpending') 
 			GROUP BY projects.id");
- echo mysql_error();
- while($r=mysql_fetch_assoc($q)) {
+$q->execute();
+show_pdo_errors_if_any($pdo);
+while ($r = $q->fetch(PDO::FETCH_ASSOC)) {
 	$stats["projects_{$grademap[$r['grade']]}"]++;
 }
 
-
- $q=mysql_query("SELECT COUNT(id) AS num FROM users 
- 				LEFT JOIN users_committee ON users_committee.users_id=users.id
-	 		WHERE types LIKE '%committee%' 
+$q = $pdo->prepare("SELECT COUNT(id) AS num FROM users 
+ \t\t\t\tLEFT JOIN users_committee ON users_committee.users_id=users.id
+\t \t\tWHERE types LIKE '%committee%' 
 				AND year='$year' 
 				AND users_committee.committee_active='yes'
 				AND deleted='no'");
- $r = mysql_fetch_object($q);
+$q->execute();
+$r = $q->fetch(PDO::FETCH_OBJ);
 $stats['committee_members'] = $r->num;
 
- $q=mysql_query("SELECT COUNT(id) AS num FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id 
- 					WHERE users.year='$year' 
+$q = $pdo->prepare("SELECT COUNT(id) AS num FROM users LEFT JOIN users_judge ON users_judge.users_id=users.id 
+ \t\t\t\t\tWHERE users.year='$year' 
 						AND users.types LIKE '%judge%'
 						AND users.deleted='no'
 						AND users_judge.judge_complete='yes' 
 						AND users_judge.judge_active='yes'");
- $r=mysql_fetch_object($q);
+$q->execute();
+$r = $q->fetch(PDO::FETCH_OBJ);
 $stats['judges'] = $r->num;
 
-
 /* All stats have been gathered, print them */
 
-
 /* Print all blocks the server requests */
 echo "<form method=\"POST\" action=\"$PHPSELF\">";
- echo "<input type=\"hidden\" name=\"action\" value=\"sendstats\" />";
+echo '<input type="hidden" name="action" value="sendstats" />';
 
 if ($server_config['info']) {
 	echo '<h3>' . i18n('%1 Fair information', array($year)) . '</h3>';
@@ -335,7 +351,7 @@
 	echo '<tr><td>' . i18n('Fair Location/Address') . ':</td>';
 	echo '<td><textarea name="address" rows="4" cols="60">' . htmlspecialchars($stats['address']) . '</textarea></td>';
 	echo '<tr><td>' . i18n('Fair Budget') . ':</td>';
-	echo "<td>$<input type=text name=\"budget\" value=\"{$stats['budget']}\"></td></tr>";
+	echo "<td>\$<input type=text name=\"budget\" value=\"{$stats['budget']}\"></td></tr>";
 	echo '<tr><td>' . i18n('Youth Science Canada Affiliation Complete') . '?</td>';
 	echo '<td><select name="ysf_affiliation_complete">';
 	$sel = $stats['ysf_affiliation_complete'] == 'N' ? 'selected="selected"' : '';
@@ -350,7 +366,6 @@
 	echo '<br />';
 }
 
-	
 if ($server_config['next_chair']) {
 	echo '<h3>' . i18n('%1 - %2 Chairperson (if known)', array($year, $year + 1)) . '</h3>';
 	echo '<table>';
@@ -402,30 +417,34 @@
 	$rangemap = array(1 => '1-3', 4 => '4-6', 7 => '7-8', 9 => '9-10', 11 => '11-12');
 	echo '<h3>' . i18n('%1 Fair participation', array($year)) . '</h3>';
 	echo '<br />';
-	echo i18n("Number of students").": <b>{$stats['students_total']}</b>";
+	echo i18n('Number of students') . ": <b>{$stats['students_total']}</b>";
 	echo '<table><tr><td></td><td></td><td></td><td align=\"center\">' . i18n('Grade') . '</td><td></td><td></td></tr>';
 	echo '<tr><td></td>';
-	foreach($rangemap as $k=>$v) echo "<td align=\"center\" width=\"50px\" >$v</td>";
+	foreach ($rangemap as $k => $v)
+		echo "<td align=\"center\" width=\"50px\" >$v</td>";
 	echo '</tr><tr>';
 	echo '<td>' . i18n('Male') . '</td>';
-	foreach($rangemap as $k=>$v) echo "<td align=\"right\"><b>{$stats["male_$k"]}</b></td>";
+	foreach ($rangemap as $k => $v)
+		echo "<td align=\"right\"><b>{$stats["male_$k"]}</b></td>";
 	echo '</tr><tr>';
 	echo '<td>' . i18n('Female') . '</td>';
-	foreach($rangemap as $k=>$v) echo "<td align=\"right\"><b>{$stats["female_$k"]}</b></td>";
+	foreach ($rangemap as $k => $v)
+		echo "<td align=\"right\"><b>{$stats["female_$k"]}</b></td>";
 	echo '</tr><tr>';
 	echo '<td>' . i18n('Projects') . '</td>';
-	foreach($rangemap as $k=>$v) echo "<td align=\"right\"><b>{$stats["projects_$k"]}</b></td>";
+	foreach ($rangemap as $k => $v)
+		echo "<td align=\"right\"><b>{$stats["projects_$k"]}</b></td>";
 	echo '</tr>';
 	echo '</table>';
 	echo '<br />';
-	echo i18n("Number of schools").": <b>{$stats['schools_total']}</b>";
+	echo i18n('Number of schools') . ": <b>{$stats['schools_total']}</b>";
 	echo '<br />';
-	echo i18n("Number of active schools").": <b>{$stats['schools_active']}</b>";
+	echo i18n('Number of active schools') . ": <b>{$stats['schools_active']}</b>";
 	echo '<br />';
 	echo '<br />';
 	echo i18n("Number of committee members: <b>%1</b> (note: this is number of committee members who logged in to SFIAB for the year, anyone who was active but didn't log in to SFIAB will NOT be counted)", array($stats['committee_members']));
 	echo '<br />';
-	echo i18n("Number of judges").": <b>{$stats['judges']}</b>";
+	echo i18n('Number of judges') . ": <b>{$stats['judges']}</b>";
 	echo '<br />';
 	echo '<br />';
 	echo '<br />';
@@ -435,16 +454,20 @@
 	echo '<h3>' . i18n('%1 Extended School/Participant data', array($year)) . '</h3>';
 	echo '<br />';
 	echo i18n('Public schools: <b>%1</b> (<b>%2</b> students).', array(
-				$stats['schools_public'], $stats['students_public']));
+		$stats['schools_public'], $stats['students_public']
+	));
 	echo '<br />';
 	echo i18n('Private/Independent schools: <b>%1</b> (<b>%2</b> students).', array(
-				$stats['schools_private'], $stats['students_private']));
+		$stats['schools_private'], $stats['students_private']
+	));
 	echo '<br />';
 	echo i18n('At-risk/inner city schools: <b>%1</b> (<b>%2</b> students).', array(
-				$stats['schools_atrisk'], $stats['students_atrisk']));
+		$stats['schools_atrisk'], $stats['students_atrisk']
+	));
 	echo '<br />';
 	echo i18n('Number of school boards/distrcits: <b>%1</b>', array(
-				$stats['schools_districts']));
+		$stats['schools_districts']
+	));
 	echo '<br />';
 	echo '<br />';
 	echo '<br />';
@@ -494,19 +517,20 @@
 }
 $keys = array_keys($stats_data);
 foreach ($keys as $k) {
- 	if($stats_data[$k]['manual'] == true) continue;
+	if (isset($stats_data[$k]['manual']) && $stats_data[$k]['manual'] == true)
+		continue;
 	echo "<input type=\"hidden\" name=\"$k\" value=\"{$stats[$k]}\" />";
 }
 
 $d = ($ok == true) ? '' : 'disabled="disabled"';
- echo "<input type=\"submit\" value=\"".i18n('Send stats to')." {$fair['name']}\" $d />";
+echo '<input type="submit" value="' . i18n('Send stats to') . " {$fair['name']}\" $d />";
 echo '</form>';
- echo "<br />";
- echo "<br />";
+echo '<br />';
+echo '<br />';
 
-debug_("Fair Info: ".print_r($fair, true));
-debug_("Server Config: ".print_r($server_config, true));
-debug_("Stats: ".print_r($stats, true));
+debug_('Fair Info: ' . print_r($fair, true));
+debug_('Server Config: ' . print_r($server_config, true));
+debug_('Stats: ' . print_r($stats, true));
 
 send_footer();
 ?>

admin/fair_stats_select.php

@@ -52,8 +52,9 @@
 		}
 	}
 	$s = join(',', $_POST['stats']);
-	$q = mysql_query("UPDATE fairs SET gather_stats='$s' WHERE id='$id'");
-	echo mysql_error();
+	$q = $pdo->prepare("UPDATE fairs SET gather_stats='$s' WHERE id='$id'");
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
 	echo "UPDATE fairs SET gather_stats='$s' WHERE id='$id'";
 	happy_("Saved");
 	exit;
@@ -62,8 +63,9 @@
  /* Load the user we're editting */
  $u = user_load($_SESSION['embed_edit_id']);
  /* Load the fair attached to the user */
- $q = mysql_query("SELECT * FROM fairs WHERE id={$u['fairs_id']}");
- $f = mysql_fetch_assoc($q);
+ $q = $pdo->prepare("SELECT * FROM fairs WHERE id={$u['fairs_id']}");
+ $q->execute();
+ $f = $q->fetch(PDO::FETCH_ASSOC);
 
 ?>
 

admin/fix_judges_autocomplete.php

@@ -1,22 +1,26 @@
 <?
 
-require_once("../common.inc.php");
-require_once("../user.inc.php");
+require_once ('../common.inc.php');
+require_once ('../user.inc.php');
 
 user_auth_required('committee', 'admin');
 
-$q = mysql_query("SELECT * FROM judges WHERE passwordexpiry IS NULL");
-while($i = mysql_fetch_object($q)) {
+$q = $pdo->prepare('SELECT * FROM judges WHERE passwordexpiry IS NULL');
+$q->execute();
+while ($i = $q->fetch(PDO::FETCH_OBJ)) {
 	echo "Autocompleting Judge {$i->email}<br />";
 	$id = $i->id;
 
-	$p = generatePassword(12);
-	mysql_query("UPDATE judges SET password='$p',complete='yes'");
-	echo mysql_error();
-	mysql_query("DELETE FROM judges_years WHERE judges_id='$id'");
-	echo mysql_error();
-	mysql_query("INSERT INTO judges_years (`judges_id`,`year`) VALUES ('$id','{$config['FAIRYEAR']}')");
-	echo mysql_error();
+	$p = password_hash(generatePassword(), PASSWORD_BCRYPT);
+	$stmt = $pdo->prepare("UPDATE judges SET password=?,complete=?");
+	$stmt->execute([$p, 'yes']);
+	show_pdo_errors_if_any($pdo);
+	$stmt = $pdo->prepare("DELETE FROM judges_years WHERE judges_id=?");
+	$stmt->execute([$id]);
+	show_pdo_errors_if_any($pdo);
+	$stmt = $pdo->prepare("INSERT INTO judges_years (`judges_id`,`year`) VALUES (?, ?)");
+	$stmt->execute([$id, $config['FAIRYEAR']]);
+	show_pdo_errors_if_any($pdo);
 }
 
 ?>

admin/fundraising.php

@@ -1,55 +1,57 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2009 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2009 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 
 user_auth_required('committee', 'admin');
 
-if($_GET['action']=="refresh") {
+if (get_value_from_array($_GET, 'action') == 'refresh') {
 ?>
 
-<h3><?=i18n("Fundraising Purposes and Progress Year to Date")?></h3>
+<h3><?= i18n('Fundraising Purposes and Progress Year to Date') ?></h3>
 <?
-$q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY deadline");
-
+    $q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY deadline");
+    $q->execute();
 ?>
 <table class="tableview">
  <thead>
  <tr>
-	<th><?=i18n("Purpose")?></th>
-	<th><?=i18n("Goal")?></th>
-	<th><?=i18n("Amount Received")?></th>
-	<th><?=i18n("% to Budget")?></th>
-	<th><?=i18n("Deadline")?></th>
+	<th><?= i18n('Purpose') ?></th>
+	<th><?= i18n('Goal') ?></th>
+	<th><?= i18n('Amount Received') ?></th>
+	<th><?= i18n('% to Budget') ?></th>
+	<th><?= i18n('Deadline') ?></th>
  </tr>
  </thead>
  <?
- while($r=mysql_fetch_object($q)) {
+    while ($r = $q->fetch(PDO::FETCH_OBJ)) {
         // lookup all donations made towards this goal
-     $recq=mysql_query("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_goal='$r->goal' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
-     echo mysql_error();
-     $recr=mysql_fetch_object($recq);
+        $recq = $pdo->prepare("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_goal='$r->goal' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
+        $recq->execute();
+        show_pdo_errors_if_any($pdo);
+        $recr = $recq->fetch(PDO::FETCH_OBJ);
         $received = $recr->received;
         if ($r->budget)
             $percent = round($received / $r->budget * 100, 1);
@@ -57,40 +59,42 @@ $q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISC
             $percent = 0;
 
         echo "<tr><td>$r->name</td>";
-     echo "<td style=\"text-align: right;\">".format_money($r->budget,false)."</td>";
-     echo "<td style=\"text-align: right;\">".format_money($received,false)."</td>";
+        echo '<td style="text-align: right;">' . format_money($r->budget, false) . '</td>';
+        echo '<td style="text-align: right;">' . format_money($received, false) . '</td>';
         $col = colour_to_percent($percent);
         echo "<td style=\"text-align: center; background-color: $col;\">{$percent}%</td>";
-     echo "<td>".format_date($r->deadline)."</td></tr>\n";
+        echo '<td>' . format_date($r->deadline) . "</td></tr>\n";
     }
 ?>
 </table>
 <br />
 
-<h3><?=i18n("Current Appeals")?></h3>
+<h3><?= i18n('Current Appeals') ?></h3>
 <table class="tableview">
  <thead>
  <tr>
-	<th><?=i18n("Name")?></th>
-	<th><?=i18n("Type")?></th>
-	<th><?=i18n("Start Date")?></th>
-	<th><?=i18n("End Date")?></th>
-	<th><?=i18n("Target($)")?></th>
-	<th><?=i18n("Received")?></th>
-	<th><?=i18n("% to Budget")?></th>
-	<th><?=i18n("Purpose")?></th>
+	<th><?= i18n('Name') ?></th>
+	<th><?= i18n('Type') ?></th>
+	<th><?= i18n('Start Date') ?></th>
+	<th><?= i18n('End Date') ?></th>
+	<th><?= i18n('Target($)') ?></th>
+	<th><?= i18n('Received') ?></th>
+	<th><?= i18n('% to Budget') ?></th>
+	<th><?= i18n('Purpose') ?></th>
  </tr>
  </thead>
 <?
- $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}'");
+    $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}'");
+    $q->execute();
 
- while($r=mysql_fetch_object($q)) {
-
-    $goalq=mysql_query("SELECT * FROM fundraising_goals WHERE goal='{$r->fundraising_goal}' AND fiscalyear='{$config['FISCALYEAR']}'");
-    $goalr=mysql_fetch_object($goalq);
-    $recq=mysql_query("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_campaigns_id='$r->id' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
-    echo mysql_error();
-    $recr=mysql_fetch_object($recq);
+    while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+        $goalq = $pdo->prepare("SELECT * FROM fundraising_goals WHERE goal='{$r->fundraising_goal}' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $goalq->execute();
+        $goalr = $goalq->fetch(PDO::FETCH_OBJ);
+        $recq = $pdo->prepare("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_campaigns_id='$r->id' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
+        $recq->execute();
+        show_pdo_errors_if_any($pdo);
+        $recr = $recq->fetch(PDO::FETCH_OBJ);
         $received = $recr->received;
         if ($r->target)
             $percent = round($received / $r->target * 100, 1);
@@ -98,13 +102,18 @@ $q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISC
             $percent = 0;
         $col = colour_to_percent($percent);
 
+        if (!$goalr) {
+            $goalr = new stdClass();
+            $goalr->name = '';
+        }
+
         echo "<tr style=\"cursor:pointer;\" onclick=\"window.location.href='fundraising_campaigns.php?manage_campaign=$r->id'\">\n";
         echo "  <td>$r->name</td>\n";
         echo "  <td>$r->type</td>\n";
-    echo "  <td>".format_date($r->startdate)."</td>\n";
-    echo "  <td>".format_date($r->enddate)."</td>";
-    echo "  <td style=\"text-align: right;\">".format_money($r->target,false)."</td>\n";
-    echo "  <td style=\"text-align: right;\">".format_money($received,false)."</td>\n";
+        echo '  <td>' . format_date($r->startdate) . "</td>\n";
+        echo '  <td>' . format_date($r->enddate) . '</td>';
+        echo '  <td style="text-align: right;">' . format_money($r->target, false) . "</td>\n";
+        echo '  <td style="text-align: right;">' . format_money($received, false) . "</td>\n";
         echo "  <td style=\"text-align: center; background-color: $col;\">{$percent}%</td>\n";
         echo "  <td>$goalr->name</td>";
         echo "</tr>\n";
@@ -116,46 +125,51 @@ $q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISC
 <br />
 
 <form id="thankyouform" method="post" action="fundraising.php">
-<h3><?=i18n("To Do List")?></h3>
+<h3><?= i18n('To Do List') ?></h3>
 <h4><?= i18n("Thank You's") ?></h4>
 <?
-$q=mysql_query("SELECT id,value, thanked, status, sponsors_id, datereceived,
-	DATE_ADD(datereceived, INTERVAL 1 MONTH) < NOW() AS onemonth,
-	DATE_ADD(datereceived, INTERVAL 2 MONTH) < NOW() AS twomonth
+    $q = $pdo->prepare("SELECT id,value, thanked, status, sponsors_id, datereceived,
+\tDATE_ADD(datereceived, INTERVAL 1 MONTH) < NOW() AS onemonth,
+\tDATE_ADD(datereceived, INTERVAL 2 MONTH) < NOW() AS twomonth
     FROM fundraising_donations
     WHERE thanked='no' AND status='received'
     AND fiscalyear='{$config['FISCALYEAR']}' 
     ORDER BY datereceived
     ");
-echo mysql_error();
+    $q->execute();
+    show_pdo_errors_if_any($pdo);
 
-if(mysql_num_rows($q)) {
-    echo "<table class=\"tableview\">";
-    echo "<thead><tr><th>".i18n("Name")."</th>\n";
-    echo "<th>".i18n("Date Received")."</th>\n";
-    echo "<th>".i18n("Amount")."</th>\n";
-    echo "<th>".i18n("Generate Thank You")."</th>\n";
-    echo "<th>".i18n("Thanked")."</th>\n";
+    if ($q->rowCount()) {
+        echo '<table class="tableview">';
+        echo '<thead><tr><th>' . i18n('Name') . "</th>\n";
+        echo '<th>' . i18n('Date Received') . "</th>\n";
+        echo '<th>' . i18n('Amount') . "</th>\n";
+        echo '<th>' . i18n('Generate Thank You') . "</th>\n";
+        echo '<th>' . i18n('Thanked') . "</th>\n";
         echo "</tr></thead>\n";
 
-    while($r=mysql_fetch_object($q)) {
-        $dq=mysql_query("SELECT organization AS name FROM sponsors WHERE id='$r->sponsors_id'");
-        $dr=mysql_fetch_object($dq);
-		if($r->twomonth) $s="style=\"background-color: ".colour_to_percent(0).";\"";
-		else if($r->onemonth) $s="style=\"background-color: ".colour_to_percent(50).";\"";
-		else $s="";
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+            $dq = $pdo->prepare("SELECT organization AS name FROM sponsors WHERE id='$r->sponsors_id'");
+            $dq->execute();
+            $dr = $dq->fetch(PDO::FETCH_OBJ);
+            if ($r->twomonth)
+                $s = 'style="background-color: ' . colour_to_percent(0) . ';"';
+            else if ($r->onemonth)
+                $s = 'style="background-color: ' . colour_to_percent(50) . ';"';
+            else
+                $s = '';
 
             $u = getUserForSponsor($r->sponsors_id);
 
             echo "<tr $s>";
             echo " <td>$dr->name</td>";
-        echo " <td>".format_date($r->datereceived)."</td>";
-        echo " <td style=\"text-align: right;\">".format_money($r->value)."</td>";
-        echo " <td style=\"text-align: center;\">";
+            echo ' <td>' . format_date($r->datereceived) . '</td>';
+            echo ' <td style="text-align: right;">' . format_money($r->value) . '</td>';
+            echo ' <td style="text-align: center;">';
             if ($u) {
-			echo "<a href=\"#\" onclick=\"return opencommunicationsender('{$u['uid']}','fundraising_thankyou_template');\">".i18n("Generate Thank You")."</a></td>";
+                echo "<a href=\"#\" onclick=\"return opencommunicationsender('{$u['uid']}','fundraising_thankyou_template');\">" . i18n('Generate Thank You') . '</a></td>';
             } else {
-			echo i18n("No contact");
+                echo i18n('No contact');
             }
             echo "<td align=\"center\"><input style=\"padding: 0px; margin: 0px;\" type=\"checkbox\" name=\"thanked[]\" value=\"$r->id\" onclick=\"return thanked($r->id)\"></td>\n";
             echo "</tr>\n";
@@ -169,65 +183,71 @@ if(mysql_num_rows($q)) {
 </form>
 
 <br />
-<h4><?=i18n("Receipts to Issue")?></h4>
+<h4><?= i18n('Receipts to Issue') ?></h4>
 <?
-$q=mysql_query("SELECT value, receiptrequired, receiptsent, status, sponsors_id, datereceived,
-	DATE_ADD(datereceived, INTERVAL 1 MONTH) < NOW() AS onemonth,
-	DATE_ADD(datereceived, INTERVAL 2 MONTH) < NOW() AS twomonth
+    $q = $pdo->prepare("SELECT value, receiptrequired, receiptsent, status, sponsors_id, datereceived,
+\tDATE_ADD(datereceived, INTERVAL 1 MONTH) < NOW() AS onemonth,
+\tDATE_ADD(datereceived, INTERVAL 2 MONTH) < NOW() AS twomonth
     FROM fundraising_donations
     WHERE (receiptrequired='yes' AND receiptsent='no') AND status='received'
     AND fiscalyear='{$config['FISCALYEAR']}' 
     ORDER BY datereceived
     ");
-echo mysql_error();
-if(mysql_num_rows($q)) {
-    echo "<table class=\"tableview\">";
-    echo "<tr><th>".i18n("Name")."</th>\n";
-    echo "<th>".i18n("Date Received")."</th>\n";
-    echo "<th>".i18n("Amount")."</th>\n";
-    echo "<th>".i18n("Generate Receipt")."</th>\n";
+    $q->execute();
+    show_pdo_errors_if_any($pdo);
+    if ($q->rowCount()) {
+        echo '<table class="tableview">';
+        echo '<tr><th>' . i18n('Name') . "</th>\n";
+        echo '<th>' . i18n('Date Received') . "</th>\n";
+        echo '<th>' . i18n('Amount') . "</th>\n";
+        echo '<th>' . i18n('Generate Receipt') . "</th>\n";
         echo "</tr>\n";
 
-    while($r=mysql_fetch_object($q)) {
-        $dq=mysql_query("SELECT organization AS name FROM sponsors WHERE id='$r->sponsors_id'");
-        $dr=mysql_fetch_object($dq);
-		if($r->twomonth) $s="style=\"background-color: ".colour_to_percent(0).";\"";
-		else if($r->onemonth) $s="style=\"background-color: ".colour_to_percent(50).";\"";
-		else $s="";
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+            $dq = $pdo->prepare("SELECT organization AS name FROM sponsors WHERE id='$r->sponsors_id'");
+            $dq->execute();
+            $dr = $dq->fetch(PDO::FETCH_OBJ);
+            if ($r->twomonth)
+                $s = 'style="background-color: ' . colour_to_percent(0) . ';"';
+            else if ($r->onemonth)
+                $s = 'style="background-color: ' . colour_to_percent(50) . ';"';
+            else
+                $s = '';
 
             echo "<tr $s>";
             echo " <td>$dr->name</td>";
-        echo " <td>".format_date($r->datereceived)."</td>";
-        echo " <td style=\"text-align: right;\">".format_money($r->value)."</td>";
-        echo " <td style=\"text-align: center;\">";
-        echo "<a href=\"#\" onclick=\"return false;\">".i18n("Generate Receipt")."</a></td>";
+            echo ' <td>' . format_date($r->datereceived) . '</td>';
+            echo ' <td style="text-align: right;">' . format_money($r->value) . '</td>';
+            echo ' <td style="text-align: center;">';
+            echo '<a href="#" onclick="return false;">' . i18n('Generate Receipt') . '</a></td>';
             echo "</tr>\n";
         }
         echo "</table>\n";
     } else {
-     echo i18n("No Receipts pending");
+        echo i18n('No Receipts pending');
         echo "<br />\n";
     }
 ?>
 
 <br />
-<h4><?=i18n("Appeal Follow-Ups")?></h4>
+<h4><?= i18n('Appeal Follow-Ups') ?></h4>
 <?
-$q=mysql_query("SELECT * FROM fundraising_campaigns WHERE followupdate>=NOW() ORDER BY followupdate LIMIT 5");
-echo mysql_error();
-if(mysql_num_rows($q)) {
-    echo "<table class=\"tableview\">";
-    echo "<thead><tr>";
-    echo " <th>".i18n("Appeal")."</th>\n";
-    echo " <th>".i18n("Start Date")."</th>\n";
-    echo " <th>".i18n("Follow-Up Date")."</th>\n";
+    $q = $pdo->prepare('SELECT * FROM fundraising_campaigns WHERE followupdate>=NOW() ORDER BY followupdate LIMIT 5');
+    $q->execute();
+    show_pdo_errors_if_any($pdo);
+    if ($q->rowCount()) {
+        echo '<table class="tableview">';
+        echo '<thead><tr>';
+        echo ' <th>' . i18n('Appeal') . "</th>\n";
+        echo ' <th>' . i18n('Start Date') . "</th>\n";
+        echo ' <th>' . i18n('Follow-Up Date') . "</th>\n";
         echo "</tr></thead>\n";
-    while($r=mysql_fetch_object($q)) {
-        echo "<tr><td>$r->name</td><td>".format_date($r->startdate)."</td><td>".format_date($r->followupdate)."</td></tr>\n";
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+            echo "<tr><td>$r->name</td><td>" . format_date($r->startdate) . '</td><td>' . format_date($r->followupdate) . "</td></tr>\n";
         }
         echo "</table>\n";
     } else {
-    echo i18n("No appeal follow-ups");
+        echo i18n('No appeal follow-ups');
         echo "<br />\n";
     }
 
@@ -235,40 +255,41 @@ if(mysql_num_rows($q)) {
 <br />
 <h4>Upcoming Proposals</h4>
 <?
-$q=mysql_query("SELECT * FROM sponsors WHERE fundingselectiondate>=NOW() OR proposalsubmissiondate>=NOW() ORDER BY fundingselectiondate LIMIT 5");
-echo mysql_error();
-if(mysql_num_rows($q)) {
-    echo "<table class=\"tableview\">";
-    echo "<tr>";
-    echo " <th>".i18n("Name")."</th>\n";
-    echo " <th>".i18n("Proposal Submission Date")."</th>\n";
-    echo " <th>".i18n("Funding Selection Date")."</th>\n";
+    $q = $pdo->prepare('SELECT * FROM sponsors WHERE fundingselectiondate>=NOW() OR proposalsubmissiondate>=NOW() ORDER BY fundingselectiondate LIMIT 5');
+    $q->execute();
+    show_pdo_errors_if_any($pdo);
+
+    if ($q->rowCount()) {
+        echo '<table class="tableview">';
+        echo '<tr>';
+        echo ' <th>' . i18n('Name') . "</th>\n";
+        echo ' <th>' . i18n('Proposal Submission Date') . "</th>\n";
+        echo ' <th>' . i18n('Funding Selection Date') . "</th>\n";
         echo "</tr>\n";
-    while($r=mysql_fetch_object($q)) {
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
             echo "<tr><td>$r->organization</td>";
-        echo "<td>".format_date($r->proposalsubmissiondate)."</td>";
-        echo "<td>".format_date($r->fundingselectiondate)."</td>";
+            echo '<td>' . format_date($r->proposalsubmissiondate) . '</td>';
+            echo '<td>' . format_date($r->fundingselectiondate) . '</td>';
             echo "</tr>\n";
         }
         echo "</table>\n";
     } else {
-    echo i18n("No proposals upcoming");
+        echo i18n('No proposals upcoming');
     }
 
     exit;
-}
-else if (count($_POST['thanked'])) {
+} else if (get_value_from_array($_POST, 'thanked')) {
     foreach ($_POST['thanked'] AS $t) {
-		mysql_query("UPDATE fundraising_donations SET thanked='yes' WHERE id='$t'");
+        $stmt = $pdo->prepare("UPDATE fundraising_donations SET thanked='yes' WHERE id='$t'");
+        $stmt->execute();
     }
 }
 
-send_header("Fundraising",
+send_header('Fundraising',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php',
         'Fundraising' => 'admin/fundraising.php'),
-            "fundraising"
-			);
+    'fundraising');
 ?>
 <script type="text/javascript">
 $(document).ready(function() {

admin/fundraising_campaigns.php

@@ -1,42 +1,44 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2009 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2009 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("fundraising_common.inc.php");
+require ('fundraising_common.inc.php');
 
-switch($_GET['action']){
-	case "campaigninfo_save":
+switch (get_value_from_array($_GET, 'action')) {
+    case 'campaigninfo_save':
         save_campaign_info();
         exit;
         break;
 
-   case "modify":
+    case 'modify':
         echo "<div id=\"campaignaccordion\" style=\"width: 780px;\">\n";
-    $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
-    while($r=mysql_fetch_object($q)) {
-        echo "<h3><a href=\"#\">".htmlspecialchars($r->name)."</a></h3>\n";
+        $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
+        $q->execute();
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+            echo '<h3><a href="#">' . htmlspecialchars($r->name) . "</a></h3>\n";
             echo "<div id=\"campaign_{$r->id}\">\n";
             echo "<form id=\"campaigninfo_{$r->id}\" method=\"post\" action=\"{$_SERVER['PHP_SELF']}\" onsubmit=\"return campaigninfo_save($r->id)\">\n";
             echo "<input type=\"hidden\" name=\"campaign_id\" value=\"{$r->id}\" />\n";
@@ -45,7 +47,7 @@ switch($_GET['action']){
             ?>
         <tr><td colspan="6" style="text-align: center;">
         <br />
-        <input type="submit" value="<?=i18n("Save Appeal")?>"></td>
+        <input type="submit" value="<?= i18n('Save Appeal') ?>"></td>
         </tr>
         </table>
         </form>
@@ -53,7 +55,7 @@ switch($_GET['action']){
     <?
         }
         ?>
-	<h3><a href="#"><?=i18n("Create New Appeal")?></a></h3>
+	<h3><a href="#"><?= i18n('Create New Appeal') ?></a></h3>
 	<div id="campaign_new">
 	<form id="campaigninfo_new" method="post" action="<?= $_SERVER['PHP_SELF'] ?>" onsubmit="return campaigninfo_save(-1)">
 	<input type="hidden" name="campaign_id" value="-1" />
@@ -63,7 +65,7 @@ switch($_GET['action']){
 ?>
     <tr><td colspan="6" style="text-align: center;">
     <br />
-    <input type="submit" value="<?=i18n("Create Appeal")?>"></td>
+    <input type="submit" value="<?= i18n('Create Appeal') ?>"></td>
     </tr>
     </table>
     </form>
@@ -73,33 +75,33 @@ switch($_GET['action']){
     exit;
     break;
 
-
-   case "managelist":
-   echo i18n("Select an appeal");
+case 'managelist':
+    echo i18n('Select an appeal');
     ?>
 <table class="tableview">
  <thead>
  <tr>
-	<th><?=i18n("Name")?></th>
-	<th><?=i18n("Type")?></th>
-	<th><?=i18n("Start Date")?></th>
-	<th><?=i18n("End Date")?></th>
-	<th><?=i18n("Target($)")?></th>
-	<th><?=i18n("Received")?></th>
-	<th><?=i18n("% to Budget")?></th>
-	<th><?=i18n("Purpose")?></th>
+	<th><?= i18n('Name') ?></th>
+	<th><?= i18n('Type') ?></th>
+	<th><?= i18n('Start Date') ?></th>
+	<th><?= i18n('End Date') ?></th>
+	<th><?= i18n('Target($)') ?></th>
+	<th><?= i18n('Received') ?></th>
+	<th><?= i18n('% to Budget') ?></th>
+	<th><?= i18n('Purpose') ?></th>
  </tr>
  </thead>
 <?
- $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}'");
-
- while($r=mysql_fetch_object($q)) {
-
-    $goalq=mysql_query("SELECT * FROM fundraising_goals WHERE goal='{$r->fundraising_goal}' AND fiscalyear='{$config['FISCALYEAR']}'");
-    $goalr=mysql_fetch_object($goalq);
-    $recq=mysql_query("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_campaigns_id='$r->id' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
-    echo mysql_error();
-    $recr=mysql_fetch_object($recq);
+        $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}'");
+        $q->execute();
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+            $goalq = $pdo->prepare("SELECT * FROM fundraising_goals WHERE goal='{$r->fundraising_goal}' AND fiscalyear='{$config['FISCALYEAR']}'");
+            $goalq->execute();
+            $goalr = $goalq->fetch(PDO::FETCH_OBJ);
+            $recq = $pdo->prepare("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_campaigns_id='$r->id' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
+            $recq->execute();
+            show_pdo_errors_if_any($pdo);
+            $recr = $recq->fetch(PDO::FETCH_OBJ);
             $received = $recr->received;
             if ($r->target)
                 $percent = round($received / $r->target * 100, 1);
@@ -107,13 +109,18 @@ switch($_GET['action']){
                 $percent = 0;
             $col = colour_to_percent($percent);
 
+            if (!$goalr) {
+                $goalr = new stdClass();
+                $goalr->name = '';
+            }
+
             echo "<tr style=\"cursor:pointer;\" onclick=\"return managecampaign($r->id)\">\n";
             echo "  <td>$r->name</td>\n";
             echo "  <td>$r->type</td>\n";
-    echo "  <td>".format_date($r->startdate)."</td>\n";
-    echo "  <td>".format_date($r->enddate)."</td>";
-    echo "  <td style=\"text-align: right;\">".format_money($r->target,false)."</td>\n";
-    echo "  <td style=\"text-align: right;\">".format_money($received,false)."</td>\n";
+            echo '  <td>' . format_date($r->startdate) . "</td>\n";
+            echo '  <td>' . format_date($r->enddate) . '</td>';
+            echo '  <td style="text-align: right;">' . format_money($r->target, false) . "</td>\n";
+            echo '  <td style="text-align: right;">' . format_money($received, false) . "</td>\n";
             echo "  <td style=\"text-align: center; background-color: $col;\">{$percent}%</td>\n";
             echo "  <td>$goalr->name</td>";
             echo "</tr>\n";
@@ -126,15 +133,15 @@ switch($_GET['action']){
         exit;
         break;
 
-
-   case "manage":
+    case 'manage':
         if (!$_GET['id']) {
-        error_("Missing campaign to manage");
+            error_('Missing campaign to manage');
             exit;
         }
         $id = intval($_GET['id']);
-    $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$id'");
-    $campaign=mysql_fetch_object($q);
+        $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$id'");
+        $q->execute();
+        $campaign = $q->fetch(PDO::FETCH_OBJ);
         echo "<h3>$campaign->name</h3>\n";
 ?>
     <div id="campaign_tabs">
@@ -162,70 +169,72 @@ switch($_GET['action']){
         exit;
         break;
 
-   case "manage_tab_overview":
+    case 'manage_tab_overview':
         $campaign_id = intval($_GET['id']);
-         $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
-
-         if($r=mysql_fetch_object($q)) {
-
+        $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $q->execute();
+        if ($r = $q->fetch(PDO::FETCH_OBJ)) {
             $goalr = getGoal($r->fundraising_goal);
-            $recq=mysql_query("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_campaigns_id='$r->id' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
-            echo mysql_error();
-            $recr=mysql_fetch_object($recq);
+            $recq = $pdo->prepare("SELECT SUM(value) AS received FROM fundraising_donations WHERE fundraising_campaigns_id='$r->id' AND fiscalyear='{$config['FISCALYEAR']}' AND status='received'");
+            $recq->execute();
+            show_pdo_errors_if_any($pdo);
+            $recr = $recq->fetch(PDO::FETCH_OBJ);
             $received = $recr->received;
             if ($r->target)
                 $percent = round($received / $r->target * 100, 1);
             else
                 $percent = 0;
             $col = colour_to_percent($percent);
-            echo "<table cellspacing=\"3\" cellpadding=\"3\">";
+            echo '<table cellspacing="3" cellpadding="3">';
             echo "<tr>\n";
-            echo "  <td>".i18n("Type")."</td><td>$r->type</td></tr>\n";
-            echo "  <td>".i18n("Start Date")."</td><td>".format_date($r->startdate)."</td>\n";
+            echo '  <td>' . i18n('Type') . "</td><td>$r->type</td></tr>\n";
+            echo '  <td>' . i18n('Start Date') . '</td><td>' . format_date($r->startdate) . "</td>\n";
             echo "</tr>\n";
-            echo "  <td>".i18n("Follow-Up Date")."</td><td>".format_date($r->followupdate)."</td>";
+            echo '  <td>' . i18n('Follow-Up Date') . '</td><td>' . format_date($r->followupdate) . '</td>';
             echo "</tr>\n";
-            echo "  <td>".i18n("End Date")."</td><td>".format_date($r->enddate)."</td>";
+            echo '  <td>' . i18n('End Date') . '</td><td>' . format_date($r->enddate) . '</td>';
             echo "</tr>\n";
-            echo "  <td>".i18n("Default Purpose")."</td><td>$goalr->name</td>";
+            echo '  <td>' . i18n('Default Purpose') . "</td><td>$goalr->name</td>";
             echo "</tr>\n";
-            echo "  <td>".i18n("Target")."</td><td>".format_money($r->target,false)."</td>\n";
+            echo '  <td>' . i18n('Target') . '</td><td>' . format_money($r->target, false) . "</td>\n";
             echo "</tr>\n";
-            echo "  <td>".i18n("Received")."</td><td>".format_money($received,false)."</td>\n";
+            echo '  <td>' . i18n('Received') . '</td><td>' . format_money($received, false) . "</td>\n";
             echo "</tr>\n";
-            echo "  <td>".i18n("% to Budget")."</td><td style=\"color: $col;\">{$percent}%</td>\n";
+            echo '  <td>' . i18n('% to Budget') . "</td><td style=\"color: $col;\">{$percent}%</td>\n";
             echo "</tr>\n";
             echo "</table>\n";
         }
         exit;
         break;
 
-   case "manage_tab_donations":
+    case 'manage_tab_donations':
         $campaign_id = intval($_GET['id']);
-         $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
-         if($campaign=mysql_fetch_object($q)) {
-			echo "<table class=\"tableview\">";
-			echo "<thead>";
-			echo "<tr>";
-			echo " <th>".i18n("Date")."</th>\n";
-			echo " <th>".i18n("Donor/Sponsor")."</th>\n";
-			echo " <th>".i18n("Purpose")."</th>\n";
-			echo " <th>".i18n("Amount")."</th>\n";
-			echo " <th>".i18n("Type of Support")."</th>\n";
-			echo "</tr>";
+        $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $q->execute();
+        if ($campaign = $q->fetch(PDO::FETCH_OBJ)) {
+            echo '<table class="tableview">';
+            echo '<thead>';
+            echo '<tr>';
+            echo ' <th>' . i18n('Date') . "</th>\n";
+            echo ' <th>' . i18n('Donor/Sponsor') . "</th>\n";
+            echo ' <th>' . i18n('Purpose') . "</th>\n";
+            echo ' <th>' . i18n('Amount') . "</th>\n";
+            echo ' <th>' . i18n('Type of Support') . "</th>\n";
+            echo '</tr>';
             echo "</thead>\n";
 
-			$q=mysql_query("SELECT * FROM fundraising_donations WHERE fundraising_campaigns_id='$campaign_id'
-			AND status='received' ORDER BY datereceived DESC");
-			while($r=mysql_fetch_object($q)) {
+            $q = $pdo->prepare("SELECT * FROM fundraising_donations WHERE fundraising_campaigns_id='$campaign_id' AND status='received' ORDER BY datereceived DESC");
+            $q->execute();
+            while ($r = $q->fetch(PDO::FETCH_OBJ)) {
                 $goal = getGoal($r->fundraising_goal);
-				$sq=mysql_query("SELECT * FROM sponsors WHERE id='{$r->sponsors_id}'");
-				$sponsor=mysql_fetch_object($sq);
-				echo "<tr><td>".format_date($r->datereceived)."</td>\n";
-				echo "    <td>".$sponsor->organization."</td>\n";
-				echo "    <td>".$goal->name."</td>\n";
-				echo "    <td>".format_money($r->value)."</td>\n";
-				echo "    <td>".i18n($r->supporttype)."</td>\n";
+                $sq = $pdo->prepare("SELECT * FROM sponsors WHERE id='{$r->sponsors_id}'");
+                $sq->execute();
+                $sponsor = $sq->fetch(PDO::FETCH_OBJ);
+                echo '<tr><td>' . format_date($r->datereceived) . "</td>\n";
+                echo '    <td>' . $sponsor->organization . "</td>\n";
+                echo '    <td>' . $goal->name . "</td>\n";
+                echo '    <td>' . format_money($r->value) . "</td>\n";
+                echo '    <td>' . i18n($r->supporttype) . "</td>\n";
                 echo "</tr>\n";
             }
             echo "</table>\n";
@@ -233,32 +242,32 @@ switch($_GET['action']){
         exit;
         break;
 
-
-   case "manage_tab_prospects":
-		$donationhistorylist=array("never"=>"Never donated/sponsored", "past"=>"Donated/sponsored in the past", "lastyear"=>"Donated/sponsored last year", "thisyear"=>"Donated/sponsored this year");
-		$emailaddresslist=array("available"=>"Available", "notavaialble"=>"Not Available");
+    case 'manage_tab_prospects':
+        $donationhistorylist = array('never' => 'Never donated/sponsored', 'past' => 'Donated/sponsored in the past', 'lastyear' => 'Donated/sponsored last year', 'thisyear' => 'Donated/sponsored this year');
+        $emailaddresslist = array('available' => 'Available', 'notavaialble' => 'Not Available');
 
         $rolelist = array(
-				"judge"=>"Judge",
-				"teacher"=>"Teacher",
-				"sciencehead"=>"School Science Head",
-				"principal"=>"School Principal",
-				"parent"=>"Parent",
-				"committee"=>"Committee",
-				"volunteer"=>"Volunteer",
-				"alumni"=>"Alumni (not implemented)",
-				"mentor"=>"Mentor (not implemented)",
+            'judge' => 'Judge',
+            'teacher' => 'Teacher',
+            'sciencehead' => 'School Science Head',
+            'principal' => 'School Principal',
+            'parent' => 'Parent',
+            'committee' => 'Committee',
+            'volunteer' => 'Volunteer',
+            'alumni' => 'Alumni (not implemented)',
+            'mentor' => 'Mentor (not implemented)',
         );
         $campaign_id = intval($_GET['id']);
-         $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
-		 $campaign=mysql_fetch_object($q);
+        $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $q->execute();
+        $campaign = $q->fetch(PDO::FETCH_OBJ);
         if ($campaign->filterparameters) {
-			echo "<h4>".i18n("User List")."</h4>\n";
+            echo '<h4>' . i18n('User List') . "</h4>\n";
             $params = unserialize($campaign->filterparameters);
-			echo "<table class=\"tableedit\">";
-			echo "<tr><td>".i18n("Donor Type")."</td><td>".i18n(ucfirst($params['donortype']))."</td></tr>\n";
+            echo '<table class="tableedit">';
+            echo '<tr><td>' . i18n('Donor Type') . '</td><td>' . i18n(ucfirst($params['donortype'])) . "</td></tr>\n";
             if (is_array($params['donationhistory'])) {
-				echo "<tr><td>".i18n("Donation History")."</td><td>";
+                echo '<tr><td>' . i18n('Donation History') . '</td><td>';
                 foreach ($params['donationhistory'] AS $d) {
                     echo i18n($donationhistorylist[$d]) . "<br />\n";
                 }
@@ -267,22 +276,22 @@ switch($_GET['action']){
             //			echo "<tr><td>".i18n("Donation Level")."</td><td>";
             //			echo "</td></tr>\n";
             if (is_array($params['emailaddress'])) {
-				echo "<tr><td>".i18n("Email Address")."</td><td>";
+                echo '<tr><td>' . i18n('Email Address') . '</td><td>';
                 foreach ($params['emailaddress'] AS $e) {
                     echo i18n($emailaddresslist[$e]) . "<br />\n";
                 }
                 echo "</td></tr>\n";
             }
-			if($params['donortype']=="individual" && is_array($params['individual_type'])) {
-				echo "<tr><td>".i18n("Role")."</td><td>";
+            if ($params['donortype'] == 'individual' && is_array($params['individual_type'])) {
+                echo '<tr><td>' . i18n('Role') . '</td><td>';
                 foreach ($params['individual_type'] AS $e) {
                     echo i18n($rolelist[$e]) . "<br />\n";
                 }
                 echo "</td></tr>\n";
             } else if (is_array($params['contacttype'])) {
-				echo "<tr><td>".i18n("Role")."</td><td>";
+                echo '<tr><td>' . i18n('Role') . '</td><td>';
                 foreach ($params['contacttype'] AS $e) {
-					echo i18n(ucfirst($e))."<br />";
+                    echo i18n(ucfirst($e)) . '<br />';
                 }
                 echo "</td></tr>\n";
             }
@@ -295,68 +304,70 @@ switch($_GET['action']){
             //		role ind
             //		role org
 
-			echo "<br />";
+            echo '<br />';
             echo "<form id=\"prospectremoveform\" onsubmit=\"return removeselectedprospects()\">\n";
             echo "<input type=\"hidden\" name=\"fundraising_campaigns_id\" value=\"$campaign_id\" />\n";
-			 $q=mysql_query("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaign_id'");
-			 while($r=mysql_fetch_object($q)) {
+            $q = $pdo->prepare("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaign_id'");
+            $q->execute();
+            while ($r = $q->fetch(PDO::FETCH_OBJ)) {
                 $u = user_load_by_uid($r->users_uid);
                 // hopefully this never returns false, but who knows..
                 if ($u) {
-					 echo "<label>";
+                    echo '<label>';
                     echo "<input type=\"checkbox\" name=\"prospectremovefromlist[]\" value=\"{$u['uid']}\" />";
-					 if($u['sponsor']['donortype']=="organization") {
-						 echo $u['sponsor']['organization']." - ";
+                    if ($u['sponsor']['donortype'] == 'organization') {
+                        echo $u['sponsor']['organization'] . ' - ';
                     }
 
-					 echo $u['firstname']." " .$u['lastname'];
-					 if($u['email']) echo " &lt;{$u['email']}&gt;";
+                    echo $u['firstname'] . ' ' . $u['lastname'];
+                    if ($u['email'])
+                        echo " &lt;{$u['email']}&gt;";
                     echo "</label>\n";
-					 echo "<br />";
+                    echo '<br />';
                 }
             }
-			echo "<br />";
-			echo "<br />";
+            echo '<br />';
+            echo '<br />';
 
-			echo "<table><tr><td>";	
-			echo "<input onclick=\"return prospect_removeselected()\" type=\"button\" value=\"".i18n("Remove selected prospects from list")."\">\n";
-			echo "</td><td>";
-			echo "<input onclick=\"return prospect_removeall()\" type=\"button\" value=\"".i18n("Remove all prospects from list")."\">\n";
+            echo '<table><tr><td>';
+            echo '<input onclick="return prospect_removeselected()" type="button" value="' . i18n('Remove selected prospects from list') . "\">\n";
+            echo '</td><td>';
+            echo '<input onclick="return prospect_removeall()" type="button" value="' . i18n('Remove all prospects from list') . "\">\n";
             //		echo "</td><td>";
             //		echo "<input type=\"button\" value=\"".i18n("Finalize prospect list")."\">\n";
             echo "</td></tr></table>\n";
-		 }
-		 else {
+        } else {
             ?>
-         <h4><?=i18n("Choose Prospects")?></h4>
+         <h4><?= i18n('Choose Prospects') ?></h4>
          <form id="prospectform" onsubmit="return prospect_generatelist()">
 		 <input type="hidden" name="fundraising_campaigns_id" value="<?= $campaign_id ?>" />
         <table>
-        <tr><td style="width: 130px;"><?=i18n("Type")?>:</td><td>
-         <label><input type="radio" name="donortype" value="organization" onchange="donortypechange()" ><?=i18n("Organization")?></label><br />
-         <label><input type="radio" name="donortype" value="individual" onchange="donortypechange()" ><?=i18n("Individual")?></label><br />
+        <tr><td style="width: 130px;"><?= i18n('Type') ?>:</td><td>
+         <label><input type="radio" name="donortype" value="organization" onchange="donortypechange()" ><?= i18n('Organization') ?></label><br />
+         <label><input type="radio" name="donortype" value="individual" onchange="donortypechange()" ><?= i18n('Individual') ?></label><br />
          </td></tr>
         </table>
         <div id="prospect_common" style="display: none;">
         <hr />
         <table>
-        <tr><td style="width: 130px;"><?=i18n("Donation History")?>:</td><td>
+        <tr><td style="width: 130px;"><?= i18n('Donation History') ?>:</td><td>
 		<?
         foreach ($donationhistorylist AS $k => $v) {
             echo "<label><input onchange=\"return prospect_search()\" type=\"checkbox\" name=\"donationhistory[]\" value=\"$k\">" . i18n($v) . "</label><br />\n";
         }
         ?>
         </td></tr>
-        <tr><td><?=i18n("Donation Level")?>:</td><td>
+        <tr><td><?= i18n('Donation Level') ?>:</td><td>
             <?
-            $q=mysql_query("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY min");
-            while($r=mysql_fetch_object($q)) {
-                echo "<label><input onchange=\"return prospect_search()\" disabled=\"disabled\" type=\"checkbox\" name=\"donationlevel[]\" value=\"$r->level\" >".i18n($r->level)." (".format_money($r->min,false)." - ".format_money($r->max,false).")</label><br />\n";
+            $q = $pdo->prepare("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY min");
+            $q->execute();
+            while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+                echo "<label><input onchange=\"return prospect_search()\" disabled=\"disabled\" type=\"checkbox\" name=\"donationlevel[]\" value=\"$r->level\" >" . i18n($r->level) . ' (' . format_money($r->min, false) . ' - ' . format_money($r->max, false) . ")</label><br />\n";
             }
-			echo "(disabled until the logic requirements can be established)";
+            echo '(disabled until the logic requirements can be established)';
             ?>
         </td></tr>
-        <tr><td><?=i18n("Email Address")?>:</td><td>
+        <tr><td><?= i18n('Email Address') ?>:</td><td>
 			<?
             foreach ($emailaddresslist AS $k => $v) {
                 echo "<label><input onchange=\"return prospect_search()\" type=\"checkbox\" name=\"emailaddress[]\" value=\"$k\">" . i18n($v) . "</label><br />\n";
@@ -368,7 +379,7 @@ switch($_GET['action']){
 
         <div id="prospect_individual" style="display: none;">
         <table>
-        <tr><td style="width: 130px;"><?=i18n("Role")?>:</td><td>
+        <tr><td style="width: 130px;"><?= i18n('Role') ?>:</td><td>
 			<?
             foreach ($rolelist AS $k => $v) {
                 echo "<label><input onchange=\"return prospect_search()\" type=\"checkbox\" name=\"individual_type[]\" value=\"$k\">" . i18n($v) . "</label><br />\n";
@@ -380,9 +391,9 @@ switch($_GET['action']){
 
         <div id="prospect_organization" style="display: none;">
             <table>
-            <tr><td style="width: 130px;"><?=i18n("Role")?>:</td><td>
-                <label><input onchange="return prospect_search()" type="checkbox" name="contacttype[]" value="primary"><?=i18n("Primary contacts")?></label><br />
-                <label><input onchange="return prospect_search()" type="checkbox" name="contacttype[]" value="secondary"><?=i18n("Secondary contacts")?></label><br />
+            <tr><td style="width: 130px;"><?= i18n('Role') ?>:</td><td>
+                <label><input onchange="return prospect_search()" type="checkbox" name="contacttype[]" value="primary"><?= i18n('Primary contacts') ?></label><br />
+                <label><input onchange="return prospect_search()" type="checkbox" name="contacttype[]" value="secondary"><?= i18n('Secondary contacts') ?></label><br />
             </td></tr></table>
                 
         </div>
@@ -395,154 +406,158 @@ switch($_GET['action']){
         exit;
         break;
 
-
-   case "manage_tab_communications":
+    case 'manage_tab_communications':
         $campaign_id = intval($_GET['id']);
-         $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
-
-         if($r=mysql_fetch_object($q)) {
-
+        $q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE id='$campaign_id' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $q->execute();
+        if ($r = $q->fetch(PDO::FETCH_OBJ)) {
         }
-		 $communications=array("initial"=>"Initial Communication",
-		 				"followup"=>"Follow-Up Communication");
+        $communications = array('initial' => 'Initial Communication',
+            'followup' => 'Follow-Up Communication');
 
         foreach ($communications as $key => $name) {
-					echo "<h4>".i18n($name)."</h4>\n";
+            echo '<h4>' . i18n($name) . "</h4>\n";
             // check if they have one in the emails database
-			$q=mysql_query("SELECT * FROM emails WHERE fundraising_campaigns_id='$campaign_id' AND val='$key'");
-			if($email=mysql_fetch_object($q)) {
-				echo "<div style=\"float: right; margin-right: 15px;\">";
-				echo "<a title=\"Edit\" href=\"#\" onclick=\"return opencommunicationeditor(null,$email->id,$campaign_id)\"><img src=\"".$config['SFIABDIRECTORY']."/images/16/edit.".$config['icon_extension']."\" border=0></a>";
-				echo "&nbsp;&nbsp;";
-				echo "<a title=\"Remove\" onClick=\"return removecommunication($email->id);\" href=\"\"><img src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\" border=0></a>";
-				echo "</div>";
+            $q = $pdo->prepare("SELECT * FROM emails WHERE fundraising_campaigns_id='$campaign_id' AND val='$key'");
+            $q->execute();
+            if ($email = $q->fetch(PDO::FETCH_OBJ)) {
+                echo '<div style="float: right; margin-right: 15px;">';
+                echo "<a title=\"Edit\" href=\"#\" onclick=\"return opencommunicationeditor(null,$email->id,$campaign_id)\"><img src=\"" . $config['SFIABDIRECTORY'] . '/images/16/edit.' . $config['icon_extension'] . '" border=0></a>';
+                echo '&nbsp;&nbsp;';
+                echo "<a title=\"Remove\" onClick=\"return removecommunication($email->id);\" href=\"\"><img src=\"" . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '" border=0></a>';
+                echo '</div>';
 
-
-				echo "<table cellspacing=0 cellpadding=3 border=1 style=\"margin-left: 30px; margin-right: 30px; width: 700px;\">";
-				echo "<tr><td>".i18n("Subject")."</td><td>".htmlspecialchars($email->subject)."</td></tr>\n";
-				echo "<tr><td>".i18n("From")."</td><td>".htmlspecialchars($email->from)."</td></tr>\n";
-				echo "<tr><td colspan=\"2\">".$email->bodyhtml."</td></tr>\n";
-				echo "<tr><td colspan=\"2\">";
-				echo "<table style=\"width: 100%;\"><tr>";
-					echo "<td style=\"text-align: center;\">";
+                echo '<table cellspacing=0 cellpadding=3 border=1 style="margin-left: 30px; margin-right: 30px; width: 700px;">';
+                echo '<tr><td>' . i18n('Subject') . '</td><td>' . htmlspecialchars($email->subject) . "</td></tr>\n";
+                echo '<tr><td>' . i18n('From') . '</td><td>' . htmlspecialchars($email->from) . "</td></tr>\n";
+                echo '<tr><td colspan="2">' . $email->bodyhtml . "</td></tr>\n";
+                echo '<tr><td colspan="2">';
+                echo '<table style="width: 100%;"><tr>';
+                echo '<td style="text-align: center;">';
                 // we let them always send it again for now... might change this back later, but i think just notifying them of when it was last sent is enough and keeps teh form more consistent
-					echo "<input type=\"button\" onclick=\"return opensendemaildialog($campaign_id,$email->id)\" value=\"".i18n("Send as email")."\" />";
+                echo "<input type=\"button\" onclick=\"return opensendemaildialog($campaign_id,$email->id)\" value=\"" . i18n('Send as email') . '" />';
                 echo "<br />\n";
                 if ($email->lastsent) {
-						list($date,$time)=split(" ",$email->lastsent);
-						echo i18n("Last Sent");
-						echo "<br />".format_date($date);
-						echo "<br />".format_time($time);
+                    list($date, $time) = explode(' ', $email->lastsent);
+                    echo i18n('Last Sent');
+                    echo '<br />' . format_date($date);
+                    echo '<br />' . format_time($time);
                 }
                 echo "</td>\n";
-					echo "<td style=\"text-align: center;\"><input type=\"button\" onclick=\"return opensendmaildialog($campaign_id,'$key')\" value=\"".i18n("Generate PDF for mailing")."\" /></td>\n";
-					echo "<td style=\"text-align: center;\"><input type=\"button\" onclick=\"return opensendlabelsdialog(47,$campaign_id)\" value=\"".i18n("Generate mailing labels")."\" /></td>\n";
+                echo "<td style=\"text-align: center;\"><input type=\"button\" onclick=\"return opensendmaildialog($campaign_id,'$key')\" value=\"" . i18n('Generate PDF for mailing') . "\" /></td>\n";
+                echo "<td style=\"text-align: center;\"><input type=\"button\" onclick=\"return opensendlabelsdialog(47,$campaign_id)\" value=\"" . i18n('Generate mailing labels') . "\" /></td>\n";
                 echo "</tr></table>\n";
                 echo "</td></tr>\n";
                 echo "</table>\n";
-
-			}
-			else {
+            } else {
                 echo "<ul>\n";
-			 echo " <li><a href=\"#\" onclick=\"return opencommunicationchooser('$key');\">".i18n("Start from an existing communication")."</a></li>\n";
-			 echo " <li><a href=\"#\" onclick=\"return opencommunicationeditor('$key',null,$campaign_id);\">".i18n("Create a new communication")."</a></li>\n";
+                echo " <li><a href=\"#\" onclick=\"return opencommunicationchooser('$key');\">" . i18n('Start from an existing communication') . "</a></li>\n";
+                echo " <li><a href=\"#\" onclick=\"return opencommunicationeditor('$key',null,$campaign_id);\">" . i18n('Create a new communication') . "</a></li>\n";
                 echo "</ul>\n";
             }
-			echo "<br />";
+            echo '<br />';
         }
         exit;
         break;
 
-	case "prospect_removeselected":
+    case 'prospect_removeselected':
         $campaignid = intval($_POST['fundraising_campaigns_id']);
         print_r($_POST);
         if (is_array($_POST['prospectremovefromlist'])) {
-			$uidlist=implode(",",$_POST['prospectremovefromlist']);
+            $uidlist = implode(',', $_POST['prospectremovefromlist']);
             $query = "DELETE FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid' AND users_uid IN ($uidlist)";
-			mysql_query($query);
-			echo mysql_error();
+            $stmt = $pdo->prepare($query);
+            $stmt->execute();
+            show_pdo_errors_if_any($pdo);
         }
         // if theres nobody left in the list we need to reset the filter params as well
-		$q=mysql_query("SELECT COUNT(*) AS num FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'");
-		$r=mysql_fetch_object($q);
+        $q = $pdo->prepare("SELECT COUNT(*) AS num FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'");
+        $q->execute();
+        $r = $q->fetch(PDO::FETCH_OBJ);
         if ($r->num == 0) {
-			mysql_query("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'");
+            $stmt = $pdo->prepare("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'");
+            $stmt->execute();
         }
 
-		happy_("Selected users removed from list");
+        happy_('Selected users removed from list');
         exit;
         break;
 
-	case "prospect_removeall":
+    case 'prospect_removeall':
         $campaignid = intval($_POST['fundraising_campaigns_id']);
-		mysql_query("DELETE FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'");
-		mysql_query("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'");
-		happy_("All users removed from list");
+        $stmt = $pdo->prepare("DELETE FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$campaignid'");
+        $stmt->execute();
+        $stmt = $pdo->prepare("UPDATE fundraising_campaigns SET filterparameters=NULL WHERE id='$campaignid'");
+        $stmt->execute();
+        happy_('All users removed from list');
         exit;
         break;
 
-	case "communication_remove":
+    case 'communication_remove':
         $emails_id = $_POST['id'];
         // check if its been sent, if so, it cannot be deleted, sorry!
-		$q=mysql_query("SELECT * FROM emails WHERE id='$emails_id'");
-		$e=mysql_fetch_object($q);
+        $q = $pdo->prepare("SELECT * FROM emails WHERE id='$emails_id'");
+        $q->execute();
+        $e = $q->fetch(PDO::FETCH_OBJ);
         if ($e->lastsent) {
-			error_("Cannot remove an email that has already been sent");
+            error_('Cannot remove an email that has already been sent');
+        } else {
+            $stmt = $pdo->prepare("DELETE FROM emails WHERE id='$emails_id'");
+            $stmt->execute();
+            happy_('Communicaton removed');
         }
-		else {
-			mysql_query("DELETE FROM emails WHERE id='$emails_id'");
-			happy_("Communicaton removed");
-		}
-
 
         break;
-
 }
 
-function save_campaign_info(){
-    global $config;
+function save_campaign_info()
+{
+    global $config, $pdo;
     if (!$_POST['name']) {
-         error_("Appeal Name is required");
+        error_('Appeal Name is required');
         return;
     }
-    if(!$_POST['startdate']) $startdate=date("Y-m-d"); else $startdate=$_POST['startdate'];
+    if (!$_POST['startdate'])
+        $startdate = date('Y-m-d');
+    else
+        $startdate = $_POST['startdate'];
 
     if (!$_GET['id']) {
-		$query = "INSERT INTO fundraising_campaigns (name,fiscalyear) VALUES (
-            '".mysql_real_escape_string(stripslashes($_POST['name']))."','{$config['FISCALYEAR']}')";
-        mysql_query($query);
-		$id = mysql_insert_id();
-        happy_("Appeal Created");
+        $query = "INSERT INTO fundraising_campaigns (name, fiscalyear) VALUES ('" . stripslashes($_POST['name']) . "','{$config['FISCALYEAR']}')";
+        echo $query;
+        $stmt = $pdo->prepare($query);
+        $stmt->execute();
+        $id = $pdo->lastInsertId();
+        happy_('Appeal Created');
     } else {
-		$id = $_GET["id"];
-        happy_("Appeal Saved");
+        $id = $_GET['id'];
+        happy_('Appeal Saved');
     }
-    mysql_query("UPDATE fundraising_campaigns SET 
-       name='".mysql_real_escape_string(stripslashes($_POST['name']))."',
-       `type`='".mysql_real_escape_string($_POST['type'])."',
-       startdate='".mysql_real_escape_string($startdate)."',
-       followupdate='".mysql_real_escape_string($_POST['followupdate'])."',
-       enddate='".mysql_real_escape_string($_POST['enddate'])."',
-       target='".mysql_real_escape_string($_POST['target'])."',
-       fundraising_goal='".mysql_real_escape_string($_POST['fundraising_goal'])."'
+    $stmt = $pdo->prepare("UPDATE fundraising_campaigns SET 
+       name='" . stripslashes($_POST['name']) . "',
+       `type`='" . $_POST['type'] . "',
+       startdate='" . $startdate . "',
+       followupdate='" . $_POST['followupdate'] . "',
+       enddate='" . $_POST['enddate'] . "',
+       target='" . $_POST['target'] . "',
+       fundraising_goal='" . $_POST['fundraising_goal'] . "'
        WHERE id='$id'");
+    $stmt->execute();
 }
 
-send_header("Appeal Management",
+send_header('Appeal Management',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php',
         'Fundraising' => 'admin/fundraising.php'),
-            "fundraising"
-			);
+    'fundraising');
 ?>
 
 <script type="text/javascript">
 $(document).ready(function() {
     <?
-    if($_GET['manage_campaign']) {
-        echo "managecampaign(".intval($_GET['manage_campaign']).");\n";
-    }
-    else {
+    if (get_value_from_array($_GET, 'manage_campaign')) {
+        echo 'managecampaign(' . intval(get_value_from_array($_GET, 'manage_campaign')) . ");\n";
+    } else {
         echo "managecampaigns();\n";
     }
     ?>
@@ -575,32 +590,46 @@ function modifycampaignsfinish(){
 	});
 }
 
-function managecampaignsfinish() {
-
-}
-
 function managecampaignfinish() {
     $("#campaign_tabs").tabs({
-    show: function(event, ui) {
-        switch(ui.panel.id) {
-            case 'campaign_tab_overview':
+        create: function(event, ui) {
+            update_tab_overview();
+			update_tab_donations();
+            update_tab_prospects();
+			update_tab_communications();
+        },
+		activate: function( event, ui ) {
 			update_tab_overview();
-            break;
-            case 'campaign_tab_donations':
 			update_tab_donations();
-            break;
-            case 'campaign_tab_prospects':
             update_tab_prospects();
-            break;
-            case 'campaign_tab_communications':
 			update_tab_communications();
-            break;
-        }
 		},
-    selected: 0
-    });
 		
-}
+		selected: 0
+	});}
+
+// function managecampaignfinish() {
+//     $("#campaign_tabs").tabs({
+//     show: function(event, ui) {
+//         switch(ui.panel.id) {
+//             case 'campaign_tab_overview':
+//             update_tab_overview();
+//             break;
+//             case 'campaign_tab_donations':
+//             update_tab_donations();
+//             break;
+//             case 'campaign_tab_prospects':
+//             update_tab_prospects();
+//             break;
+//             case 'campaign_tab_communications':
+//             update_tab_communications();
+//             break;
+//         }
+//     },
+//     selected: 0
+//     });}
+
+
 
 function campaigninfo_save(id) {
 	//if we're creating we need to do the post, and get the id it returns, so we can re-open the popup window with that id
@@ -733,19 +762,25 @@ function opensendemaildialog(fcid,emails_id) {
 </script>
 
 <?
-function display_campaign_form($r=null) {
+function display_campaign_form($r = null)
+{
     global $config;
     global $campaign_types;
+    global $pdo;
+
     ?>    
 		<tr>
-			<td><?=i18n("Name")?></td>
-			<td colspan="3"><input size="40" type="text" name="name" value="<?=$r->name?>"></td>
-            <td><?=i18n("Type")?></td><td>
+			<td><?= i18n('Name') ?></td>
+			<td colspan="3"><input size="40" type="text" name="name" value="<?= get_value_property_or_default($r, 'name') ?>"></td>
+            <td><?= i18n('Type') ?></td><td>
             <select name="type">
-            <option value=""><?=i18n("Choose")?></option>
+            <option value=""><?= i18n('Choose') ?></option>
             <?
             foreach ($campaign_types AS $ct) {
-                if($r->type==$ct) $sel="selected=\"selected\""; else $sel="";
+                if ($r->type == $ct)
+                    $sel = 'selected="selected"';
+                else
+                    $sel = '';
                 echo "<option $sel value=\"$ct\">" . i18n($ct) . "</option>\n";
             }
             ?>
@@ -753,23 +788,29 @@ function display_campaign_form($r=null) {
             </td>
         </tr>
         <?
-        if($r->startdate) $sd=$r->startdate;
-        else $sd=date("Y-m-d");
+        if (get_value_property_or_default($r, 'startdate'))
+            $sd = $r->startdate;
+        else
+            $sd = date('Y-m-d');
         ?>
         <tr>
-			<td><?=i18n("Start Date")?></td><td><input type="text" name="startdate" class="date" value="<?=$sd?>" /></td>
-			<td><?=i18n("Follow-Up Date")?></td><td><input type="text" name="followupdate" class="date" value="<?=$r->followupdate?>" /></td>
-			<td><?=i18n("End Date")?></td><td><input type="text" name="enddate" class="date" value="<?=$r->enddate?>" /></td>
+			<td><?= i18n('Start Date') ?></td><td><input type="text" name="startdate" class="date" value="<?= $sd ?>" /></td>
+			<td><?= i18n('Follow-Up Date') ?></td><td><input type="text" name="followupdate" class="date" value="<?= get_value_property_or_default($r, 'followupdate') ?>" /></td>
+			<td><?= i18n('End Date') ?></td><td><input type="text" name="enddate" class="date" value="<?= get_value_property_or_default($r, 'enddate') ?>" /></td>
         </tr>
         <tr>
-			<td><?=i18n("Target")?></td><td>$<input type="text" id="target" name="target" size="10" value="<?=$r->target?>" /></td>
-			<td><?=i18n("Default Purpose")?></td><td colspan="3">
+			<td><?= i18n('Target') ?></td><td>$<input type="text" id="target" name="target" size="10" value="<?= get_value_property_or_default($r, 'target') ?>" /></td>
+			<td><?= i18n('Default Purpose') ?></td><td colspan="3">
             <?
-            $fgq=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
-            echo "<select name=\"fundraising_goal\">";
-            echo "<option value=\"\">".i18n("Choose Default Purpose")."</option>\n";
-            while($fgr=mysql_fetch_object($fgq)) {
-                if($r->fundraising_goal==$fgr->goal) $sel="selected=\"selected\""; else $sel="";
+            $fgq = $pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
+            $fgq->execute();
+            echo '<select name="fundraising_goal">';
+            echo '<option value="">' . i18n('Choose Default Purpose') . "</option>\n";
+            while ($fgr = $fgq->fetch(PDO::FETCH_OBJ)) {
+                if ($r->fundraising_goal == $fgr->goal)
+                    $sel = 'selected="selected"';
+                else
+                    $sel = '';
                 echo "<option $sel value=\"$fgr->goal\">" . i18n($fgr->name) . "</option>\n";
             }
             echo "</select>\n";

admin/fundraising_campaigns_prospecting.php

@@ -1,55 +1,58 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2009 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2009 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("fundraising_common.inc.php");
+require ('fundraising_common.inc.php');
 
 $userslist = array();
 $otherlist = array();
 
-if($_POST['donortype']=="organization") {
-    $q=mysql_query("SELECT id, organization AS name, address, address2, city, province_code, postalcode FROM sponsors ORDER BY name");
-    echo mysql_error();
+if ($_POST['donortype'] == 'organization') {
+	$q = $pdo->prepare('SELECT id, organization AS name, address, address2, city, province_code, postalcode FROM sponsors ORDER BY name');
+
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
 
 	if (!$_POST['contacttype'])
-        $contacttype=array("primary","secondary");
+		$contacttype = array('primary', 'secondary');
 	else
 		$contacttype = $_POST['contacttype'];
 
-    $primary="";
-    while($r=mysql_fetch_object($q)) {
+	$primary = '';
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		foreach ($contacttype AS $ct) {
 			switch ($ct) {
-                case "primary":
-                    $primary="yes";
+				case 'primary':
+					$primary = 'yes';
 					break;
-                case "secondary":
-                    $primary="no";
+				case 'secondary':
+					$primary = 'no';
 					break;
 			}
-			$cq = mysql_query("SELECT *,MAX(year) FROM users LEFT JOIN users_sponsor ON users_sponsor.users_id=users.id
+			$cq = $pdo->prepare("SELECT *,MAX(year) FROM users LEFT JOIN users_sponsor ON users_sponsor.users_id=users.id
 			WHERE 
 			sponsors_id='" . $r->id . "' 
 			AND `primary`='$primary' 
@@ -58,27 +61,27 @@ if($_POST['donortype']=="organization") {
 			HAVING deleted='no' 
 			ORDER BY users_sponsor.primary DESC,lastname,firstname
 			");
+			$cq->execute();
 
-            echo mysql_error();
-            while($cr=mysql_fetch_object($cq)) {
+			show_pdo_errors_if_any($pdo);
+			while ($cr = $cq->fetch(PDO::FETCH_OBJ)) {
 				if (!$userslist[$cr->uid])
 					$userslist[$cr->uid] = user_load($cr->users_id);
 			}
 		}
 	}
-}
-else if($_POST['donortype']=="individual") {
-
+} else if ($_POST['donortype'] == 'individual') {
 	if (!$_POST['individual_type'])
-        $individual_type=array("judge","teacher","sciencehead","principal","parent","mentor","committee","volunteer","students");
+		$individual_type = array('judge', 'teacher', 'sciencehead', 'principal', 'parent', 'mentor', 'committee', 'volunteer', 'students');
 	else
 		$individual_type = $_POST['individual_type'];
 
 	foreach ($individual_type AS $t) {
 		$query = "SELECT *,MAX(year) FROM users WHERE types LIKE '%$t%' GROUP BY uid HAVING deleted='no' ORDER BY lastname,firstname";
-		$q=mysql_query($query);
-		echo mysql_error();
-		while($r=mysql_fetch_object($q)) {
+		$q = $pdo->prepare($query);
+		$q->execute();
+		show_pdo_errors_if_any($pdo);
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 			if (!$userslist[$r->uid])
 				$userslist[$r->uid] = user_load_by_uid($r->uid);
 		}
@@ -88,9 +91,8 @@ else if($_POST['donortype']=="individual") {
 // okie dokie, now we need to filter ou the list on the other criteria
 if ($_POST['emailaddress']) {
 	$emailaddress = $_POST['emailaddress'];
-}
-else {
-	$emailaddress=array("available","not available");
+} else {
+	$emailaddress = array('available', 'not available');
 }
 
 if (count($emailaddress) == 1) {
@@ -104,29 +106,27 @@ if(count($emailaddress)==1) {
 			$emailnotavailablelist[$uid] = $u;
 	}
 
-	if($emailaddress[0]=="available") {
+	if ($emailaddress[0] == 'available') {
 		$userslist = $emailavailablelist;
 	} else {
 		$userslist = $emailnotavailablelist;
 	}
 }
 
-
 if ($_POST['donationhistory']) {
 	$donationhistory = $_POST['donationhistory'];
-}
-else {
-	$donationhistory=array("never","past","lastyear","thisyear");
+} else {
+	$donationhistory = array('never', 'past', 'lastyear', 'thisyear');
 }
 
 /*
-FIXME: put this back in as it would eliminate a lot of processing
-
-if(in_array('never',$donationhistory) && in_array('past',$donationhistory)) {
-	//these cancel eachother out basically, so include everyone
-	unset($donationhistory[array_search("never",$donationhistory)]);
-	unset($donationhistory[array_search("past",$donationhistory)]);
-}
+ * FIXME: put this back in as it would eliminate a lot of processing
+ *
+ * if(in_array('never',$donationhistory) && in_array('past',$donationhistory)) {
+ * 	//these cancel eachother out basically, so include everyone
+ * 	unset($donationhistory[array_search("never",$donationhistory)]);
+ * 	unset($donationhistory[array_search("past",$donationhistory)]);
+ * }
  */
 
 $neverlist = $userslist;
@@ -140,8 +140,9 @@ $thisyearlist=$userslist;
 
 foreach ($neverlist AS $uid => $u) {
 	if ($u['sponsors_id']) {
-			$q=mysql_query("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}'");
-			if(mysql_num_rows($q)) {
+		$q = $pdo->prepare("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}'");
+		$q->execute();
+		if ($q->rowCount()) {
 			//		echo "removing $uid because they have donated in the past <br />";
 			unset($neverlist[$uid]);
 		}
@@ -154,16 +155,15 @@ $thisyearlist=$userslist;
 
 foreach ($pastlist AS $uid => $u) {
 	if ($u['sponsors_id']) {
-			$q=mysql_query("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}'");
-			if(!mysql_num_rows($q)) {
+		$q = $pdo->prepare("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}'");
+		$q->execute();
+		if (!$q->rowCount()) {
 			//		echo "removing $uid because they have NOT donated in the past <br />";
 			unset($pastlist[$uid]);
 		}
-		}
-		else {
+	} else {
 		//		echo "removing $uid because they have NOT donated in the past <br />";
 		unset($pastlist[$uid]);
-
 	}
 }
 
@@ -171,44 +171,42 @@ $thisyearlist=$userslist;
 
 foreach ($lastyearlist AS $uid => $u) {
 	if ($u['sponsors_id']) {
-			$q=mysql_query("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}' AND fiscalyear='$lastyear'");
-			if(!mysql_num_rows($q)) {
+		$q = $pdo->prepare("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}' AND fiscalyear='$lastyear'");
+		$q->execute();
+		if (!$q->rowCount()) {
 			//		echo "removing $uid because they have NOT donated last year <br />";
 			unset($lastyearlist[$uid]);
 		}
-		}
-		else {
+	} else {
 		//		echo "removing $uid because they have NOT donated last year <br />";
 		unset($lastyearlist[$uid]);
-
 	}
 }
 
 foreach ($thisyearlist AS $uid => $u) {
 	if ($u['sponsors_id']) {
-			$q=mysql_query("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}' AND fiscalyear='{$config['FISCALYEAR']}'");
-			if(!mysql_num_rows($q)) {
+		$q = $pdo->prepare("SELECT * FROM fundraising_donations WHERE status='received' AND sponsors_id='{$u['sponsors_id']}' AND fiscalyear='{$config['FISCALYEAR']}'");
+		$q->execcute();
+		if (!$q->rowCount()) {
 			//		echo "removing $uid because they have NOT donated this year <br />";
 			unset($thisyearlist[$uid]);
 		}
-		}
-		else {
+	} else {
 		//		echo "removing $uid because they have NOT donated this year <br />";
 		unset($thisyearlist[$uid]);
-
 	}
 }
 
 /*
-echo "neverlist:".count($neverlist)."<br />";
-echo "pastlist:".count($pastlist)."<br />";
-echo "lastyearlist:".count($lastyearlist)."<br />";
-echo "thisyearlist:".count($thisyearlist)."<br />";
+ * echo "neverlist:".count($neverlist)."<br />";
+ * echo "pastlist:".count($pastlist)."<br />";
+ * echo "lastyearlist:".count($lastyearlist)."<br />";
+ * echo "thisyearlist:".count($thisyearlist)."<br />";
  */
 
 $userslist = array();
 foreach ($donationhistory AS $dh) {
-	$arr=$dh."list";
+	$arr = $dh . 'list';
 	foreach ($$arr AS $uid => $u) {
 		$userslist[$uid] = $u;
 	}
@@ -218,25 +216,25 @@ if($_GET['generatelist']) {
 	$campaignid = $_POST['fundraising_campaigns_id'];
 	$params = serialize($_POST);
 	echo "params=$params";
-	mysql_query("UPDATE fundraising_campaigns SET filterparameters='{$params}' WHERE id='$campaignid'");
+	$stmt = $pdo->prepare("UPDATE fundraising_campaigns SET filterparameters='{$params}' WHERE id='$campaignid'");
+	$stmt->execute();
 	$uids = array_keys($userslist);
 	foreach ($uids AS $u) {
-		mysql_query("INSERT INTO fundraising_campaigns_users_link (fundraising_campaigns_id, users_uid) VALUES ('$campaignid','$u')");
+		$stmt = $pdo->prepare("INSERT INTO fundraising_campaigns_users_link (fundraising_campaigns_id, users_uid) VALUES ('$campaignid','$u')");
+		$stmt->execute();
 	}
-	echo "List created";
-}
-else {
+
+	echo 'List created';
+} else {
 	// just show the results
 	$usersnum = count($userslist);
-	echo i18n("%1 users match the given criteria",array($usersnum))." <br />";
-	echo "<input type=\"submit\" value=\"".i18n("Generate List")."\">\n";
+	echo i18n('%1 users match the given criteria', array($usersnum)) . ' <br />';
+	echo '<input type="submit" value="' . i18n('Generate List') . "\">\n";
 	// print_r($userslist);
 	// print_r($otherlist);
 }
 
-
-	echo "<br /><br />";
+echo '<br /><br />';
 echo nl2br(print_r($_POST, true));
 
-
 ?>

admin/fundraising_common.inc.php

@@ -1,11 +1,13 @@
 <?
-$campaign_types=array("Mail","Email","Phone","Personal Visit","Event","Other");
-$salutations=array("Mr.","Mrs.","Ms","Dr.","Professor");
+$campaign_types = array('Mail', 'Email', 'Phone', 'Personal Visit', 'Event', 'Other');
+$salutations = array('Mr.', 'Mrs.', 'Ms', 'Dr.', 'Professor');
 
-function getGoal($goal) {
-	global $config;
-	$q=mysql_query("SELECT * FROM fundraising_goals WHERE goal='$goal' AND fiscalyear='{$config['FISCALYEAR']}' LIMIT 1");
-	return mysql_fetch_object($q);
+function getGoal($goal)
+{
+	global $config, $pdo;
+	$q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE goal='$goal' AND fiscalyear='{$config['FISCALYEAR']}' LIMIT 1");
+	$q->execute();
+	return $q->fetch(PDO::FETCH_OBJ);
 }
 
 ?>

admin/fundraising_goals_handler.inc.php

@@ -1,64 +1,67 @@
 <?
-if($_POST['action']=="funddelete" && $_POST['delete']) {
+if ($_POST['action'] == 'funddelete' && $_POST['delete']) {
 	// first lookup all the sponsorships inside the fund
 	$id = intval($_POST['delete']);
-	$q=mysql_query("SELECT * FROM fundraising_goals WHERE id='$id' AND year='".$config['FISCALYEAR']."'");
-	$f=mysql_fetch_object($q);
+	$q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE id='$id' AND year='" . $config['FISCALYEAR'] . "'");
+	$q->execute();
+	$f = $q->fetch(PDO::FETCH_OBJ);
 	// hold yer horses, no deleting system funds!
 	if ($f) {
-		if($f->system=="no") {
-			mysql_query("DELETE FROM fundraising_donations WHERE fundraising_goal='".mysql_real_escape_string($f->type)."' AND fiscalyear='".$config['FISCALYEAR']."'");
-			mysql_query("DELETE FROM fundraising_goals WHERE id='$id'");
-			if(mysql_affected_rows())
-				happy_("Successfully removed fund %1",array($f->name));
-		}
-		else {
-			error_("Cannot remove system fund");
+		if ($f->system == 'no') {
+			$stmt = $pdo->prepare("DELETE FROM fundraising_donations WHERE fundraising_goal='" . $f->type . "' AND fiscalyear='" . $config['FISCALYEAR'] . "'");
+			$stmt->execute();
+			$stmt = $pdo->prepare("DELETE FROM fundraising_goals WHERE id='$id'");
+			$stmt->execute();
+			if ($pdo->rowCount())
+				happy_('Successfully removed fund %1', array($f->name));
+		} else {
+			error_('Cannot remove system fund');
 		}
 	}
 	exit;
 }
-if($_POST['action']=="fundedit" || $_POST['action']=="fundadd") {
+if ($_POST['action'] == 'fundedit' || $_POST['action'] == 'fundadd') {
 	$fundraising_id = intval($_POST['fundraising_id']);
 	if ($fundraising_id) {
-		$q=mysql_query("SELECT * FROM fundraising_goals WHERE id='$fundraising_id'");
-		$f=mysql_fetch_object($q);
+		$q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE id='$fundraising_id'");
+		$q->execute();
+		$f = $q->fetch(PDO::FETCH_OBJ);
 		$system = $f->system;
 	}
-	$name=mysql_real_escape_string($_POST['name']);
-	$goal=mysql_real_escape_string($_POST['goal']);
-	$description=mysql_real_escape_string($_POST['description']);
+	$name = $_POST['name'];
+	$goal = $_POST['goal'];
+	$description = $_POST['description'];
 	$budget = intval($_POST['budget']);
 }
 
-if($_POST['action']=="fundedit") {
-	if( ($system=="yes" && $budget) || ($system=="no" && $budget && $goal && $name) ) {
-		if($system=="yes") {
-			mysql_query("UPDATE fundraising SET budget='$budget', description='$description' WHERE id='$fundraising_id'");
+if ($_POST['action'] == 'fundedit') {
+	if (($system == 'yes' && $budget) || ($system == 'no' && $budget && $goal && $name)) {
+		if ($system == 'yes') {
+			$stmt = $pdo->prepare("UPDATE fundraising SET budget='$budget', description='$description' WHERE id='$fundraising_id'");
+			$stmt->execute();
+		} else {
+			$stmt = $pdo->prepare("UPDATE fundraising SET budget='$budget', description='$description', goal='$goal', name='$name' WHERE id='$fundraising_id'");
+			$stmt->execute();
 		}
-		else {
-			mysql_query("UPDATE fundraising SET budget='$budget', description='$description', goal='$goal', name='$name' WHERE id='$fundraising_id'");
-		}
-		if(mysql_error())
-			error_("MySQL Error: %1",array(mysql_error()));
+
+		if ($pdo->errorInfo())
+			error_('MySQL Error: %1', array($pdo->errorInfo()));
 		else
-			happy_("Saved fund changes");
-	}
-	else {
-		error_("Required fields were missing, please try again");
+			happy_('Saved fund changes');
+	} else {
+		error_('Required fields were missing, please try again');
 	}
 	exit;
-	
 }
-if($_POST['action']=="fundadd") {
+if ($_POST['action'] == 'fundadd') {
 	if ($goal && $type && $name) {
-		mysql_query("INSERT INTO fundraising_goals (goal,name,description,system,budget,fiscalyear) VALUES ('$goal','$name','$description','no','$budget','{$config['FISCALYEAR']}')");
-		happy_("Added new fund");
-	}
-	else
-		error_("Required fields were missing, please try again");
-	if(mysql_error())
-		error_("MySQL Error: %1",array(mysql_error()));
+		$stmt = $pdo->prepare("INSERT INTO fundraising_goals (goal,name,description,system,budget,fiscalyear) VALUES ('$goal','$name','$description','no','$budget','{$config['FISCALYEAR']}')");
+		$stmt->execute();
+		happy_('Added new fund');
+	} else
+		error_('Required fields were missing, please try again');
+	if ($pdo->errorInfo())
+		error_('MySQL Error: %1', array($pdo->errorInfo()));
 	exit;
 }
 

admin/fundraising_main.inc.php

@@ -1,88 +1,87 @@
 <?
-if($_GET['action']=="fundraisingmain") {
-
+if ($_GET['action'] == 'fundraisingmain') {
 	// this table is eventually going to be massive, and probably not in a tableview format, it'll show goals as well as all ongoing fund pledges, probabilities, etc as well as over/under, etc, all prettily colour coded.. basically a good overview of the total fundraising status of the fair.
- $q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY system DESC,goal");
- echo "<table class=\"fundraisingtable\">";
+	$q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY system DESC,goal");
+	$q->execute();
+	echo '<table class="fundraisingtable">';
 
- while($r=mysql_fetch_object($q)) {
-	 echo "<tr>";
-	 echo "<th><a title=\"".i18n("Edit fund details")."\" onclick=\"return popup_fund_editor('fundraising_types.php?id=$r->id')\" href=\"#\"><img border=\"0\" src=\"".$config['SFIABDIRECTORY']."/images/16/edit.".$config['icon_extension']."\"></a>";
-	 if($r->system=="no") {
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		echo '<tr>';
+		echo '<th><a title="' . i18n('Edit fund details') . "\" onclick=\"return popup_fund_editor('fundraising_types.php?id=$r->id')\" href=\"#\"><img border=\"0\" src=\"" . $config['SFIABDIRECTORY'] . '/images/16/edit.' . $config['icon_extension'] . '"></a>';
+		if ($r->system == 'no') {
 			// echo "<a title=\"".i18n("Remove Fund")."\" onclick=\"return confirmClick('Are you sure you want to remove this fund and all sponsorships inside it?')\" href=\"fundraising.php?action=funddelete&delete=$r->id\">";
-        echo "<img style=\"cursor:pointer\" onclick=\"return delete_fund($r->id)\" border=\"0\" src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\">";
+			echo "<img style=\"cursor:pointer\" onclick=\"return delete_fund($r->id)\" border=\"0\" src=\"" . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '">';
 			// echo "</a>";
 		}
 
 		echo "</th>\n";
-	 echo "<th colspan=\"5\">".i18n($r->name)."</th>\n";
-	 echo "<th style=\"text-align: right\"><nobr>".format_money($r->budget)."</nobr></th>\n";
+		echo '<th colspan="5">' . i18n($r->name) . "</th>\n";
+		echo '<th style="text-align: right"><nobr>' . format_money($r->budget) . "</nobr></th>\n";
 		echo "</tr>\n";
 
-	if($r->type=="general") 
-		$orsql.="OR fundraising_type IS NULL";
+		if ($r->type == 'general')
+			$orsql .= 'OR fundraising_type IS NULL';
 
 		$typetotal = 0;
 		$typeprobtotal = 0;
-	$sq=mysql_query("
+		$sq = $pdo->prepare("
             SELECT fundraising_donations.id, sponsors.organization AS name, fundraising_donations.value, fundraising_donations.status, fundraising_donations.probability
-		 FROM fundraising_donations
-		 JOIN sponsors ON fundraising_donations.sponsors_id=sponsors.id
-		  WHERE (fundraising_donations.fundraising_goal='$r->goal' $orsql) 
-		  AND fundraising_donations.fiscalyear='{$config['FISCALYEAR']}'
+	\t FROM fundraising_donations
+	\t JOIN sponsors ON fundraising_donations.sponsors_id=sponsors.id
+	\t  WHERE (fundraising_donations.fundraising_goal='$r->goal' $orsql) 
+	\t  AND fundraising_donations.fiscalyear='{$config['FISCALYEAR']}'
 
           UNION
 
         SELECT fundraising_donations.id, CONCAT(users.firstname,' ',users.lastname) AS name, fundraising_donations.value, fundraising_donations.status, fundraising_donations.probability
-		 FROM fundraising_donations
-		 JOIN users ON fundraising_donations.users_uid=users.uid
-		  WHERE (fundraising_donations.fundraising_goal='$r->goal' $orsql) 
-		  AND fundraising_donations.fiscalyear='{$config['FISCALYEAR']}'
+	\t FROM fundraising_donations
+	\t JOIN users ON fundraising_donations.users_uid=users.uid
+	\t  WHERE (fundraising_donations.fundraising_goal='$r->goal' $orsql) 
+	\t  AND fundraising_donations.fiscalyear='{$config['FISCALYEAR']}'
 
-		  ORDER BY status DESC, probability DESC, name
+	\t  ORDER BY status DESC, probability DESC, name
             ");
-    echo mysql_error();
-	while($sr=mysql_fetch_object($sq)) {
+		$sq->execute();
+		show_pdo_errors_if_any($pdo);
+		while ($sr = $sq->fetch(PDO::FETCH_OBJ)) {
 			echo "<tr id=\"sponsorships_$sr->id\" class=\"fundraising{$sr->status}\">";
-		echo "<td>";
-        echo "<img style=\"cursor:pointer;\" onclick=\"delete_sponsorship($sr->id)\" border=\"0\" src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\">";
-		echo "</td>";
+			echo '<td>';
+			echo "<img style=\"cursor:pointer;\" onclick=\"delete_sponsorship($sr->id)\" border=\"0\" src=\"" . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '">';
+			echo '</td>';
 			echo "<td style=\"cursor: pointer;\" onclick=\"popup_sponsorship_editor('fundraising_sponsorship.php?id=$sr->id&fundraising_type=$r->type')\">";
 			echo "$sr->name</td>\n";
 			echo "<td>$sr->status</td>";
-		echo "<td>";
-		if($sr->status=="pending") {
+			echo '<td>';
+			if ($sr->status == 'pending') {
 				echo "$sr->probability%";
-			echo "</td>";
-			echo "<td><nobr>".format_money($sr->value)."</nobr></td>";
-		}
-		else
+				echo '</td>';
+				echo '<td><nobr>' . format_money($sr->value) . '</nobr></td>';
+			} else
 				echo "</td><td></td>\n";
 
 			$probval = $sr->probability / 100 * $sr->value;
-		echo "<td style=\"text-align: right\"><nobr>".format_money($probval)."</nobr></td>";
+			echo '<td style="text-align: right"><nobr>' . format_money($probval) . '</nobr></td>';
 			echo "<td></td>\n";
 			echo "</tr>\n";
 			$typeprobtotal += $probval;
 			$typetotal += $sr->value;
 		}
-	 echo "<tr>";
+		echo '<tr>';
 		echo "<td><a onclick=\"return popup_sponsorship_editor('fundraising_sponsorship.php?fundraising_type=$r->type')\" href=\"#\">add</a></td>";
-	 echo "<td colspan=\"3\" style=\"text-align: right; font-weight: bold;\">".i18n("%1 Total",array($r->name),array("Fundraising type total, eg) Award Sponsorship Total"))."</td>\n";
-	 echo "<td style=\"font-weight: bold; text-align: right;\"><nobr>".format_money($typetotal)."</nobr></td>\n";
-	 echo "<td style=\"font-weight: bold; text-align: right;\"><nobr>".format_money($typeprobtotal)."</nobr></td>\n";
+		echo '<td colspan="3" style="text-align: right; font-weight: bold;">' . i18n('%1 Total', array($r->name), array('Fundraising type total, eg) Award Sponsorship Total')) . "</td>\n";
+		echo '<td style="font-weight: bold; text-align: right;"><nobr>' . format_money($typetotal) . "</nobr></td>\n";
+		echo '<td style="font-weight: bold; text-align: right;"><nobr>' . format_money($typeprobtotal) . "</nobr></td>\n";
 		$typediff = $typeprobtotal - $r->goal;
-	 echo "<td style=\"font-weight: bold; text-align: right;\"><nobr>".format_money($typediff)."</nobr></td>\n";
+		echo '<td style="font-weight: bold; text-align: right;"><nobr>' . format_money($typediff) . "</nobr></td>\n";
 		echo "</tr>\n";
 
 		$totalgoal += $r->goal;
 		$totaldiff += $typediff;
 		echo "<tr><td colspan=\"7\">&nbsp;</td></tr>\n";
 	}
- echo "<tr>";
- echo "<td colspan=\"2\"><a onclick=\"return popup_fund_editor('fundraising_types.php')\" href=\"#\">add fund type</a></td>";
- echo "<td colspan=\"4\" style=\"font-weight: bold; text-align: right;\">".i18n("Total Net Position")."</td><td style=\"text-align: right; font-weight: bold;\">".format_money($totaldiff)."</td></tr>\n";
+	echo '<tr>';
+	echo '<td colspan="2"><a onclick="return popup_fund_editor(\'fundraising_types.php\')" href="#">add fund type</a></td>';
+	echo '<td colspan="4" style="font-weight: bold; text-align: right;">' . i18n('Total Net Position') . '</td><td style="text-align: right; font-weight: bold;">' . format_money($totaldiff) . "</td></tr>\n";
 	echo "</table>\n";
 	exit;
 }
-

admin/fundraising_reports.php

@@ -1,37 +1,37 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2009 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2009 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("fundraising_common.inc.php");
+require ('fundraising_common.inc.php');
 
-send_header("Fundraising Reports",
+send_header('Fundraising Reports',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php',
         'Fundraising' => 'admin/fundraising.php'),
-            "fundraising"
-			);
+    'fundraising');
 ?>
 <script type="text/javascript">
 $(document).ready( function(){
@@ -52,8 +52,9 @@ $(document).ready( function(){
   <select name="fundraising_campaigns_id">
    <option value="">All appeals</option>
    <?
-   $q=mysql_query("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
-   while($r=mysql_fetch_object($q)) {
+$q = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
     echo "<option value=\"$r->id\">$r->name</option>\n";
 }
 ?>
@@ -63,7 +64,8 @@ $(document).ready( function(){
   Report Type:
   </td><td>
   <select name="type">
-   <option value="pdf">PDF</option>
+    <!-- FIXME -->
+   <!--<option value="pdf">PDF</option>-->
    <option value="csv">CSV</option>
   </select>
   </td></tr>
@@ -82,8 +84,9 @@ $(document).ready( function(){
   <select name="goal">
    <option value="">All purposes</option>
    <?
-   $q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
-   while($r=mysql_fetch_object($q)) {
+$q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
     echo "<option value=\"$r->goal\">$r->name</option>\n";
 }
 ?>
@@ -93,7 +96,8 @@ $(document).ready( function(){
   Report Type:
   </td><td>
   <select name="type">
-   <option value="pdf">PDF</option>
+    <!-- FIXME -->
+   <!--<option value="pdf">PDF</option>-->
    <option value="csv">CSV</option>
   </select>
   </td></tr>

admin/fundraising_reports_std.php

@@ -1,48 +1,46 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2009 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2009 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("fundraising_common.inc.php");
- require_once("../lpdf.php");
- require_once("../lcsv.php");
+require ('fundraising_common.inc.php');
+require_once ('../lpdf.php');
+require_once ('../lcsv.php');
 
 $id = intval($_GET['id']);
 $type = $_GET['type'];
 
-
 if ($id && $type) {
 	switch ($id) {
 		case 1:
-			 if($type=="csv") {
+			if ($type == 'csv') {
 				$rep = new lcsv($config['FAIRNAME']);
-
-			 } else if($type=="pdf") {
+			} else if ($type == 'pdf') {
 				$rep = new lpdf(i18n($config['fairname']),
-						i18n("List of Prospects By Appeal"),
-						$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-						);
+					i18n('List of Prospects By Appeal'),
+					$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 				$rep->newPage();
 				$rep->setFontSize(8);
 			}
@@ -50,21 +48,23 @@
 			if ($_GET['fundraising_campaigns_id']) {
 				$sql .= " AND id='" . intval($_GET['fundraising_campaigns_id']) . "'";
 			}
-			 $sql.=" ORDER BY name";
-			 $q=mysql_query($sql);
-			 echo mysql_error();
-			 while($r=mysql_fetch_object($q)) {
+			$sql .= ' ORDER BY name';
+			$q = $pdo->prepare($sql);
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
+			while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 				$rep->heading($r->name);
 				$table = array();
-				 $table['header']=array("Name","Contact","Phone","Address","$ appeal","$ this year","$ last year","%chg");
+				$table['header'] = array('Name', 'Contact', 'Phone', 'Address', '$ appeal', '$ this year', '$ last year', '%chg');
 				$table['widths'] = array(1.5, 1, 1, 1, 0.9, 0.9, 0.9, 0.5);
-				 $table['dataalign']=array("left","left","left","left","right","right","right","center");
+				$table['dataalign'] = array('left', 'left', 'left', 'left', 'right', 'right', 'right', 'center');
 
 				$thisyear = $config['FISCALYEAR'];
 				$lastyear = $config['FISCALYEAR'] - 1;
 
-				 $pq=mysql_query("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$r->id'");
-				 while($pr=mysql_fetch_object($pq)) {
+				$pq = $pdo->prepare("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$r->id'");
+				$pq->execute();
+				while ($pr = $pq->fetch(PDO::FETCH_OBJ)) {
 					$u = user_load_by_uid($pr->users_uid);
 					// hopefully this never returns false, but who knows..
 					if ($u) {
@@ -75,79 +75,77 @@
 						// gah i dont know what the heck to do here
 
 						if ($u['sponsors_id']) {
-							$cq=mysql_query("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='{$u['sponsors_id']}' AND fundraising_campaigns_id='$r->id' AND status='received' AND fiscalyear='$thisyear'");
-							$cr=mysql_fetch_object($cq);
+							$cq = $pdo->prepare("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='{$u['sponsors_id']}' AND fundraising_campaigns_id='$r->id' AND status='received' AND fiscalyear='$thisyear'");
+							$cq->execute();
+							$cr = $cq->fetch(PDO::FETCH_OBJ);
 							$thisappeal = $cr->total;
-							$cq=mysql_query("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='{$u['sponsors_id']}' AND status='received' AND fiscalyear='$thisyear'");
-							$cr=mysql_fetch_object($cq);
+							$cq = $pdo->prepare("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='{$u['sponsors_id']}' AND status='received' AND fiscalyear='$thisyear'");
+							$cq->execute();
+							$cr = $cq->fetch(PDO::FETCH_OBJ);
 							$thisyeartotal = $cr->total;
-							$cq=mysql_query("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='{$u['sponsors_id']}' AND status='received' AND fiscalyear='$lastyear'");
-							$cr=mysql_fetch_object($cq);
+							$cq = $pdo->prepare("SELECT SUM(value) AS total FROM fundraising_donations WHERE sponsors_id='{$u['sponsors_id']}' AND status='received' AND fiscalyear='$lastyear'");
+							$cq->execute();
+							$cr = $cq->fetch(PDO::FETCH_OBJ);
 							$lastyeartotal = $cr->total;
 							if ($lastyeartotal)
 								$change = round(($thisyeartotal - $lastyeartotal) / $lastyeartotal * 100);
 							else
-								$change="N/A";
+								$change = 'N/A';
 							$name = $u['sponsor']['organization'];
-
-						}
-						else {
-							$name=$u['firstname']." " .$u['lastname'];
+						} else {
+							$name = $u['firstname'] . ' ' . $u['lastname'];
 							$thisappeal = 0;
 							$thisyeartotal = 0;
 							$lastyeartotal = 0;
 							$change = 0;
-
 						}
 						$table['data'][] = array(
 							$name,
-						$u['firstname']." " .$u['lastname'],
+							$u['firstname'] . ' ' . $u['lastname'],
 							$u['phonework'],
-						$u['address']." ".$u['address2'],
+							$u['address'] . ' ' . $u['address2'],
 							$thisappeal,
 							$thisyeartotal,
 							$lastyeartotal,
 							$change
 						);
-
 					}
 				}
 				$rep->addTable($table);
-
 			}
 
 			break;
 
 		case 2:
-			 if($type=="csv") {
-				 $rep=new lcsv($config['FAIRNAME'],'Results of Appeal by Purpose',"");
-
-			 } else if($type=="pdf") {
+			if ($type == 'csv') {
+				$rep = new lcsv($config['FAIRNAME'], 'Results of Appeal by Purpose', '');
+			} else if ($type == 'pdf') {
 				$rep = new lpdf(i18n($config['fairname']),
-						i18n("Results of Appeal by Purpose"),
-						$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-						);
+					i18n('Results of Appeal by Purpose'),
+					$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 				$rep->newPage();
 				$rep->setFontSize(8);
 			}
 			$sql = "SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ";
 			if ($_GET['goal']) {
-				 $sql.=" AND goal='".mysql_real_escape_string($_GET['goal'])."'";
+				$sql .= " AND goal='" . $_GET['goal'] . "'";
 			}
-			 $sql.=" ORDER BY name";
-			 $q=mysql_query($sql);
-			 echo mysql_error();
+			$sql .= ' ORDER BY name';
+			$q = $pdo->prepare($sql);
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
 
-			 while($r=mysql_fetch_object($q)) {
-				 $rep->heading($r->name)." (".$r->budget.")";
+			while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+				$rep->heading($r->name) . ' (' . $r->budget . ')';
 
 				$table = array();
-				 $table['header']=array("Appeal Name","Target","Received","% to Budget","# of Prospects","# of Donors/Sponsors","Rate of Response","Average Amount Given");
+				$table['header'] = array('Appeal Name', 'Target', 'Received', '% to Budget', '# of Prospects', '# of Donors/Sponsors', 'Rate of Response', 'Average Amount Given');
 				$table['widths'] = array(1.5, 0.5, 0.5, 0.75, 0.9, 0.9, 0.9, 0.5);
-				 $table['dataalign']=array("left","right","right","center","center","center","center","right");
+				$table['dataalign'] = array('left', 'right', 'right', 'center', 'center', 'center', 'center', 'right');
 
-				 $cq=mysql_query("SELECT * FROM fundraising_campaigns WHERE fundraising_goal='$r->goal' AND fiscalyear='{$config['FISCALYEAR']}'");
-				 while($cr=mysql_fetch_object($cq)) {
+				$cq = $pdo->prepare("SELECT * FROM fundraising_campaigns WHERE fundraising_goal='$r->goal' AND fiscalyear='{$config['FISCALYEAR']}'");
+				$cq->execute();
+				while ($cr = $cq->fetch(PDO::FETCH_OBJ)) {
 					$table['data'][] = array(
 						$cr->name,
 						$cr->target,
@@ -156,19 +154,18 @@
 						$numprospects,
 						$numdonors,
 						$rate,
-						$avgamount);
+						$avgamount
+					);
 				}
 
 				$rep->addTable($table);
 			}
 
-
 			break;
 	}
 
 	$rep->output();
- }
- else
-	 header("Location: fundraising_reports.php");
+} else
+	header('Location: fundraising_reports.php');
 
 ?>

admin/fundraising_setup.php

@@ -1,86 +1,94 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2009 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2009 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 
 user_auth_required('committee', 'admin');
 
 // first, insert any default fundraising donor levels
- $q=mysql_query("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='".$config['FISCALYEAR']."'");
- if(!mysql_num_rows($q)) {
-     $q=mysql_query("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='-1'");
-     while($r=mysql_fetch_object($q)) {
-         mysql_query("INSERT INTO fundraising_donor_levels (`level`,`min`,`max`,`description`,`fiscalyear`) VALUES (
-            '".mysql_real_escape_string($r->level)."',
-            '".mysql_real_escape_string($r->min)."',
-            '".mysql_real_escape_string($r->max)."',
-            '".mysql_real_escape_string($r->description)."',
-            '".$config['FISCALYEAR']."')");
+$q = $pdo->prepare("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='" . $config['FISCALYEAR'] . "'");
+$q->execute();
+if (!$q->rowCount()) {
+    $q = $pdo->prepare("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='-1'");
+    $q->execute();
+    while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+        $stmt = $pdo->prepare("INSERT INTO fundraising_donor_levels (`level`,`min`,`max`,`description`,`fiscalyear`) VALUES (
+            '" . $r->level . "',
+            '" . $r->min . "',
+            '" . $r->max . "',
+            '" . $r->description . "',
+            '" . $config['FISCALYEAR'] . ")')");
+
+        $stmt->execute();
     }
 }
 
 // first, insert any default fundraising goals
- $q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='".$config['FISCALYEAR']."'");
- if(!mysql_num_rows($q)) {
-     $q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='-1'");
-     while($r=mysql_fetch_object($q)) {
-         mysql_query("INSERT INTO fundraising_goals (`goal`,`name`,`description`,`system`,`budget`,`fiscalyear`) VALUES (
-            '".mysql_real_escape_string(stripslashes($r->goal))."',
-            '".mysql_real_escape_string(stripslashes($r->name))."',
-            '".mysql_real_escape_string(stripslashes($r->description))."',
-            '".mysql_real_escape_string($r->system)."',
-            '".mysql_real_escape_string($r->budget)."',
+$q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='" . $config['FISCALYEAR'] . "'");
+$q->execute();
+if (!$q->rowCount()) {
+    $q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='-1'");
+    $q->execute();
+    while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+        $stmt = $pdo->prepare("INSERT INTO fundraising_goals (`goal`,`name`,`description`,`system`,`budget`,`fiscalyear`) VALUES (
+            '" . stripslashes($r->goal) . "',
+            '" . stripslashes($r->name) . "',
+            '" . stripslashes($r->description) . "',
+            '" . $r->system . "',
+            '" . $r->budget . "',
             '" . $config['FISCALYEAR'] . "')");
+        $stmt->execute();
     }
 }
 
-
- switch($_GET['gettab']) {
-	case "levels": 
-		$q=mysql_query("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY max");
+switch (get_value_from_array($_GET, 'gettab')) {
+    case 'levels':
+        $q = $pdo->prepare("SELECT * FROM fundraising_donor_levels WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY max");
+        $q->execute();
         echo "<div id=\"levelaccordion\" style=\"width: 75%;\">\n";
-		while($r=mysql_fetch_object($q)) {
-			echo "<h3><a href=\"#\">$r->level (".format_money($r->min,false)." to ".format_money($r->max,false).")</a></h3>\n";
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+            echo "<h3><a href=\"#\">$r->level (" . format_money($r->min, false) . ' to ' . format_money($r->max, false) . ")</a></h3>\n";
             echo "<div id=\"level_$r->id\">\n";
             echo "<form id=\"level_form_$r->id\" onsubmit=\"return level_save($r->id)\">\n";
             echo "<input type=\"hidden\" name=\"id\" value=\"$r->id\">\n";
-            echo "<table style=\"width: 100%;\">";
-            echo "<tr><td>";
-            echo i18n("Level Name").":</td><td><input type=\"text\" size=\"40\" name=\"level\" value=\"".htmlspecialchars($r->level)."\"></td></tr>\n";
-            echo "<tr><td>";
-            echo i18n("Value Range").":</td><td>\$<input size=\"5\" type=\"text\" name=\"min\" value=\"$r->min\"> to \$<input size=\"5\" type=\"text\" name=\"max\" value=\"$r->max\"><br />\n";
+            echo '<table style="width: 100%;">';
+            echo '<tr><td>';
+            echo i18n('Level Name') . ':</td><td><input type="text" size="40" name="level" value="' . htmlspecialchars($r->level) . "\"></td></tr>\n";
+            echo '<tr><td>';
+            echo i18n('Value Range') . ":</td><td>\$<input size=\"5\" type=\"text\" name=\"min\" value=\"$r->min\"> to \$<input size=\"5\" type=\"text\" name=\"max\" value=\"$r->max\"><br />\n";
             echo "</td></tr>\n";
-            echo "<tr><td colspan=\"2\">";
-            echo i18n("Description/Benefits").":<br /><textarea name=\"description\" rows=\"4\" style=\"width: 100%;\">".htmlspecialchars($r->description)."</textarea>";
+            echo '<tr><td colspan="2">';
+            echo i18n('Description/Benefits') . ':<br /><textarea name="description" rows="4" style="width: 100%;">' . htmlspecialchars($r->description) . '</textarea>';
             echo "</td></tr>\n";
             echo "</table>\n";
-            echo "<table style=\"width: 100%;\"><tr><td style=\"width: 50%; text-align: center;\">";
-            echo "<input type=\"submit\" value=\"".i18n("Save Level")."\" >";
-            echo "</td><td style=\"width: 50%; text-align: right;\">";
-            echo "<input type=\"button\" value=\"".i18n("Delete Level")."\" onclick=\"return level_delete($r->id)\" >";
+            echo '<table style="width: 100%;"><tr><td style="width: 50%; text-align: center;">';
+            echo '<input type="submit" value="' . i18n('Save Level') . '" >';
+            echo '</td><td style="width: 50%; text-align: right;">';
+            echo '<input type="button" value="' . i18n('Delete Level') . "\" onclick=\"return level_delete($r->id)\" >";
             echo "</td></tr></table>\n";
-            echo "</form>";
+            echo '</form>';
             echo "</div>\n";
         }
 
@@ -88,20 +96,20 @@
         echo "<div id=\"level_new\">\n";
         echo "<form id=\"level_form\" onsubmit=\"return level_save()\">\n";
 
-            echo "<table style=\"width: 100%;\">";
-            echo "<tr><td>";
-            echo i18n("Level Name").":</td><td><input type=\"text\" size=\"40\" name=\"level\"></td></tr>\n";
-            echo "<tr><td>";
-            echo i18n("Value Range").":</td><td>\$<input size=\"5\" type=\"text\" name=\"min\"> to \$<input size=\"5\" type=\"text\" name=\"max\"><br />\n";
+        echo '<table style="width: 100%;">';
+        echo '<tr><td>';
+        echo i18n('Level Name') . ":</td><td><input type=\"text\" size=\"40\" name=\"level\"></td></tr>\n";
+        echo '<tr><td>';
+        echo i18n('Value Range') . ":</td><td>\$<input size=\"5\" type=\"text\" name=\"min\"> to \$<input size=\"5\" type=\"text\" name=\"max\"><br />\n";
         echo "</td></tr>\n";
-            echo "<tr><td colspan=\"2\">";
-            echo i18n("Description/Benefits").":<br /><textarea name=\"description\" rows=\"4\" style=\"width: 100%;\"></textarea>";
+        echo '<tr><td colspan="2">';
+        echo i18n('Description/Benefits') . ':<br /><textarea name="description" rows="4" style="width: 100%;"></textarea>';
         echo "</td></tr>\n";
         echo "</table>\n";
 
-            echo "<table style=\"width: 100%;\"><tr><td style=\"width: 50%; text-align: center;\">";
-            echo "<input type=\"submit\" value=\"".i18n("Create Level")."\">";
-            echo "</td><td style=\"width: 50%; text-align: right;\">";
+        echo '<table style="width: 100%;"><tr><td style="width: 50%; text-align: center;">';
+        echo '<input type="submit" value="' . i18n('Create Level') . '">';
+        echo '</td><td style="width: 50%; text-align: right;">';
         echo "</td></tr></table>\n";
         echo "</form>\n";
         echo "</div>\n";
@@ -111,208 +119,226 @@
         exit;
         break;
 
-	case "goals": 
-		$q=mysql_query("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
+    case 'goals':
+        $q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE fiscalyear='{$config['FISCALYEAR']}' ORDER BY name");
+        $q->execute();
         echo "<div id=\"goalaccordion\" style=\"width: 75%;\">\n";
-		while($r=mysql_fetch_object($q)) {
-			echo "<h3><a href=\"#\">$r->name (".format_money($r->budget,false).") Deadline: ".format_date($r->deadline)."</a></h3>\n";
+        while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+            echo "<h3><a href=\"#\">$r->name (" . format_money($r->budget, false) . ') Deadline: ' . format_date($r->deadline) . "</a></h3>\n";
             echo "<div id=\"goal_$r->id\">\n";
             echo "<form id=\"goal_form_$r->id\" onsubmit=\"return goal_save($r->id)\">\n";
             echo "<input type=\"hidden\" name=\"id\" value=\"$r->id\">\n";
 
-            echo "<table style=\"width: 100%;\">";
-            echo "<tr><td>";
-            echo i18n("Purpose").":</td><td><input type=\"text\" size=\"40\" name=\"name\" value=\"".htmlspecialchars($r->name)."\"></td></tr>\n";
-            echo "<tr><td>";
-            echo i18n("Budget Amount").":</td><td>\$<input size=\"5\" type=\"text\" name=\"budget\" value=\"$r->budget\"></td></tr>";
-            echo "<tr><td>";
-            echo i18n("Deadline").":</td><td><input size=\"9\" type=\"text\" name=\"deadline\" value=\"$r->deadline\"></td></tr>";
-            echo "<tr><td colspan=\"2\">";
-            echo i18n("Description").":<br /><textarea name=\"description\" rows=\"4\" style=\"width: 100%;\">".htmlspecialchars($r->description)."</textarea>";
+            echo '<table style="width: 100%;">';
+            echo '<tr><td>';
+            echo i18n('Purpose') . ':</td><td><input type="text" size="40" name="name" value="' . htmlspecialchars($r->name) . "\"></td></tr>\n";
+            echo '<tr><td>';
+            echo i18n('Budget Amount') . ":</td><td>\$<input size=\"5\" type=\"text\" name=\"budget\" value=\"$r->budget\"></td></tr>";
+            echo '<tr><td>';
+            echo i18n('Deadline') . ":</td><td><input size=\"9\" type=\"text\" name=\"deadline\" value=\"$r->deadline\"></td></tr>";
+            echo '<tr><td colspan="2">';
+            echo i18n('Description') . ':<br /><textarea name="description" rows="4" style="width: 100%;">' . htmlspecialchars($r->description) . '</textarea>';
             echo "</td></tr>\n";
             echo "</table>\n";
-            echo "<table style=\"width: 100%;\"><tr><td style=\"width: 50%; text-align: center;\">";
-            echo "<input type=\"submit\" value=\"".i18n("Save Purpose")."\" >";
-            echo "</td><td style=\"width: 50%; text-align: right;\">";
-            echo "<input type=\"button\" value=\"".i18n("Delete Purpose")."\" onclick=\"return goal_delete($r->id)\" >";
+            echo '<table style="width: 100%;"><tr><td style="width: 50%; text-align: center;">';
+            echo '<input type="submit" value="' . i18n('Save Purpose') . '" >';
+            echo '</td><td style="width: 50%; text-align: right;">';
+            echo '<input type="button" value="' . i18n('Delete Purpose') . "\" onclick=\"return goal_delete($r->id)\" >";
             echo "</td></tr></table>\n";
-            echo "</form>";
+            echo '</form>';
             echo "</div>\n";
         }
 
         echo "<h3><a href=\"#\">Create New Purpose</a></h3>\n";
         echo "<div id=\"goal_new\">\n";
         echo "<form id=\"goal_form\" onsubmit=\"return goal_save()\">\n";
-            echo "<table style=\"width: 100%;\">";
-            echo "<tr><td>";
-            echo i18n("Purpose Name").":</td><td><input type=\"text\" size=\"40\" name=\"name\"></td></tr>\n";
-            echo "<tr><td>";
-            echo i18n("Budget Amount").":</td><td>\$<input size=\"5\" type=\"text\" name=\"budget\"></td></tr>";
-            echo "<tr><td>";
-            echo i18n("Deadline").":</td><td><input size=\"9\" type=\"text\" name=\"deadline\"></td></tr>";
-            echo "<tr><td colspan=\"2\">";
-            echo i18n("Description").":<br /><textarea name=\"description\" rows=\"4\" style=\"width: 100%;\"></textarea>";
+        echo '<table style="width: 100%;">';
+        echo '<tr><td>';
+        echo i18n('Purpose Name') . ":</td><td><input type=\"text\" size=\"40\" name=\"name\"></td></tr>\n";
+        echo '<tr><td>';
+        echo i18n('Budget Amount') . ':</td><td>$<input size="5" type="text" name="budget"></td></tr>';
+        echo '<tr><td>';
+        echo i18n('Deadline') . ':</td><td><input size="9" type="text" name="deadline"></td></tr>';
+        echo '<tr><td colspan="2">';
+        echo i18n('Description') . ':<br /><textarea name="description" rows="4" style="width: 100%;"></textarea>';
         echo "</td></tr>\n";
         echo "</table>\n";
 
-            echo "<table style=\"width: 100%;\"><tr><td style=\"width: 50%; text-align: center;\">";
-            echo "<input type=\"submit\" value=\"".i18n("Create Purpose")."\">";
-            echo "</td><td style=\"width: 50%; text-align: right;\">";
+        echo '<table style="width: 100%;"><tr><td style="width: 50%; text-align: center;">';
+        echo '<input type="submit" value="' . i18n('Create Purpose') . '">';
+        echo '</td><td style="width: 50%; text-align: right;">';
         echo "</td></tr></table>\n";
         echo "</form>\n";
         echo "</div>\n";
 
         echo "</div>\n";
 
-
         exit;
         break;
 
-	case "setup": 
-        echo "<form id=\"setup_form\" onsubmit=\"return setup_save()\">";
-        echo "<table cellspacing=3 cellpadding=3>";
-        echo "<tr><td>".i18n("Current Fiscal Year")."</td><td>";
+    case 'setup':
+        echo '<form id="setup_form" onsubmit="return setup_save()">';
+        echo '<table cellspacing=3 cellpadding=3>';
+        echo '<tr><td>' . i18n('Current Fiscal Year') . '</td><td>';
         echo $config['FISCALYEAR'];
         echo "</td></tr>\n";
-        echo "<tr><td>".i18n("Fiscal Year End")."</td><td>";
-        list($month,$day)=split("-",$config['fiscal_yearend']);
-        emit_month_selector("fiscalendmonth",$month);
-        emit_day_selector("fiscalendday",$day);
+        echo '<tr><td>' . i18n('Fiscal Year End') . '</td><td>';
+        list($month, $day) = explode('-', $config['fiscal_yearend']);
+        emit_month_selector('fiscalendmonth', $month);
+        emit_day_selector('fiscalendday', $day);
         echo "</td></tr>\n";
-        echo "<tr><td>".i18n("Is your organization a registered charity?")."</td>";
-        echo "<td>";
-        if($config['registered_charity']=="yes") $ch="checked=\"checked\""; else $ch="";
-        echo "<label><input $ch type=\"radio\" name=\"registeredcharity\" value=\"yes\" id=\"registeredcharity_yes\" onchange=\"charitychange()\">".i18n("Yes")."</label>";
-        echo "&nbsp;&nbsp;&nbsp;";
-        if($config['registered_charity']=="no") $ch="checked=\"checked\""; else $ch="";
-        echo "<label><input $ch type=\"radio\" name=\"registeredcharity\" value=\"no\" id=\"registeredcharity_no\" onchange=\"charitychange()\">".i18n("No")."</label>";
+        echo '<tr><td>' . i18n('Is your organization a registered charity?') . '</td>';
+        echo '<td>';
+        if ($config['registered_charity'] == 'yes')
+            $ch = 'checked="checked"';
+        else
+            $ch = '';
+        echo "<label><input $ch type=\"radio\" name=\"registeredcharity\" value=\"yes\" id=\"registeredcharity_yes\" onchange=\"charitychange()\">" . i18n('Yes') . '</label>';
+        echo '&nbsp;&nbsp;&nbsp;';
+        if ($config['registered_charity'] == 'no')
+            $ch = 'checked="checked"';
+        else
+            $ch = '';
+        echo "<label><input $ch type=\"radio\" name=\"registeredcharity\" value=\"no\" id=\"registeredcharity_no\" onchange=\"charitychange()\">" . i18n('No') . '</label>';
         echo "</td></tr>\n";
-        echo "<tr>";
-        echo "<td>".i18n("Charity Registration Number")."</td><td><input type=\"text\" name=\"charitynumber\" id=\"charitynumber\" value=\"{$config['charity_number']}\"></td>";
-        echo "</tr>";
-        echo "<tr><td colspan=\"2\" style=\"text-align: center;\"><input type=\"submit\" value=\"".i18n("Save")."\"></td></tr>\n";
+        echo '<tr>';
+        echo '<td>' . i18n('Charity Registration Number') . "</td><td><input type=\"text\" name=\"charitynumber\" id=\"charitynumber\" value=\"{$config['charity_number']}\"></td>";
+        echo '</tr>';
+        echo '<tr><td colspan="2" style="text-align: center;"><input type="submit" value="' . i18n('Save') . "\"></td></tr>\n";
         echo "</table>\n";
         echo "</form>\n";
         exit;
         break;
 }
 
- switch($_GET['action']) {
-        case "level_save":
+switch (get_value_from_array($_GET, 'action')) {
+    case 'level_save':
         $id = $_POST['id'];
         if (!($_POST['level'] && $_POST['min'] && $_POST['max'])) {
-                error_("Level name, minimum and maximum value range are required");
+            error_('Level name, minimum and maximum value range are required');
             exit;
         }
         if ($_POST['min'] >= $_POST['max']) {
-                error_("Value range minimum must be smaller than range maximum");
+            error_('Value range minimum must be smaller than range maximum');
             exit;
         }
 
         if ($id) {
-                mysql_query("UPDATE fundraising_donor_levels SET
-                    min='".mysql_real_escape_string($_POST['min'])."',
-                    max='".mysql_real_escape_string($_POST['max'])."',
-                    level='".mysql_real_escape_string(stripslashes($_POST['level']))."',
-                    description='".mysql_real_escape_string(stripslashes($_POST['description']))."'
+            $stmt = $pdo->prepare("UPDATE fundraising_donor_levels SET
+                    min='" . $_POST['min'] . "',
+                    max='" . $_POST['max'] . "',
+                    level='" . stripslashes($_POST['level']) . "',
+                    description='" . stripslashes($_POST['description']) . "'
                     WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'
                     ");
-                happy_("Level Saved");
-            }
-            else {
-                mysql_query("INSERT INTO fundraising_donor_levels (`level`,`min`,`max`,`description`,`fiscalyear`) VALUES (
-                '".mysql_real_escape_string($_POST['level'])."',
-                '".mysql_real_escape_string($_POST['min'])."',
-                '".mysql_real_escape_string($_POST['max'])."',
-                '".mysql_real_escape_string($_POST['description'])."',
+            $stmt->execute();
+            happy_('Level Saved');
+        } else {
+            $stmt = $pdo->prepare("INSERT INTO fundraising_donor_levels (`level`,`min`,`max`,`description`,`fiscalyear`) VALUES (
+                '" . $_POST['level'] . "',
+                '" . $_POST['min'] . "',
+                '" . $_POST['max'] . "',
+                '" . $_POST['description'] . "',
                 '{$config['FISCALYEAR']}')");
-                happy_("Level Created");
+            $stmt->execute();
+            happy_('Level Created');
         }
         exit;
         break;
-        case "level_delete":
+    case 'level_delete':
         $id = $_POST['id'];
-           mysql_query("DELETE FROM fundraising_donor_levels WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'");
-           happy_("Level Deleted");
+        $stmt = $pdo->prepare("DELETE FROM fundraising_donor_levels WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $stmt->execute();
+        happy_('Level Deleted');
         exit;
         break;
 
-        case "goal_save":
+    case 'goal_save':
         $id = $_POST['id'];
         if (!($_POST['name'] && $_POST['budget'])) {
-                error_("Purpose name and budget are required");
+            error_('Purpose name and budget are required');
             exit;
         }
         if ($id) {
-                mysql_query("UPDATE fundraising_goals SET
-                    budget='".mysql_real_escape_string($_POST['budget'])."',
-                    deadline='".mysql_real_escape_string($_POST['deadline'])."',
-                    name='".mysql_real_escape_string(stripslashes($_POST['name']))."',
-                    description='".mysql_real_escape_string(stripslashes($_POST['description']))."'
+            $stmt = $pdo->prepare("UPDATE fundraising_goals SET
+                    budget='" . $_POST['budget'] . "',
+                    deadline='" . $_POST['deadline'] . "',
+                    name='" . stripslashes($_POST['name']) . "',
+                    description='" . stripslashes($_POST['description']) . "'
                     WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'
                     ");
-                happy_("Purpose Saved");
-            }
-            else {
+            $stmt->execute();
+            happy_('Purpose Saved');
+        } else {
             $goal = strtolower($_POST['name']);
-                $goal=ereg_replace("[^a-z]","",$goal);
-                $q=mysql_query("SELECT * FROM fundraising_goals WHERE goal='$goal' AND fiscalyear='{$config['FISCALYEAR']}'");
-                echo mysql_error();
-                if(mysql_num_rows($q)) {
-                    error_("The automatically generated purpose key (%1) generated from (%2) is not unique.  Please try a different Purpose Name",array($goal,$_POST['name']));
+            $goal = preg_replace('[^a-z]', '', $goal);
+            echo "SELECT * FROM fundraising_goals WHERE goal='$goal' AND fiscalyear='{$config['FISCALYEAR']}'";
+            $q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE goal='$goal' AND fiscalyear='{$config['FISCALYEAR']}'");
+            $q->execute();
+            show_pdo_errors_if_any($pdo);
+            if ($q->rowCount()) {
+                error_('The automatically generated purpose key (%1) generated from (%2) is not unique.  Please try a different Purpose Name', array($goal, $_POST['name']));
                 exit;
             }
 
-                mysql_query("INSERT INTO fundraising_goals (`goal`,`name`,`budget`,`deadline`,`description`,`fiscalyear`) VALUES (
-                '".mysql_real_escape_string($goal)."',
-                '".mysql_real_escape_string($_POST['name'])."',
-                '".mysql_real_escape_string($_POST['budget'])."',
-                '".mysql_real_escape_string($_POST['deadline'])."',
-                '".mysql_real_escape_string($_POST['description'])."',
+            $stmt = $pdo->prepare("INSERT INTO fundraising_goals (`goal`,`name`,`budget`,`deadline`,`description`,`fiscalyear`) VALUES (
+                '" . $goal . "',
+                '" . $_POST['name'] . "',
+                '" . $_POST['budget'] . "',
+                '" . $_POST['deadline'] . "',
+                '" . $_POST['description'] . "',
                 '{$config['FISCALYEAR']}')");
-                happy_("Purpose Created");
+            $stmt->execute();
+            happy_('Purpose Created');
         }
         exit;
         break;
-        case "goal_delete":
+    case 'goal_delete':
         $id = $_POST['id'];
         // they cant delete system ones
-           $q=mysql_query("SELECT * FROM fundraising_goals WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'");
-           if(!$r=mysql_fetch_object($q)) {
-               error_("Invalid goal to delete");
+        $q = $pdo->prepare("SELECT * FROM fundraising_goals WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $q->execute();
+        if (!$r = $q->fetch(PDO::FETCH_OBJ)) {
+            error_('Invalid goal to delete');
             exit;
         }
-           if($r->system=="yes") {
-               error_("Fundraising goals created automatically and used by the system cannot be deleted");
+        if ($r->system == 'yes') {
+            error_('Fundraising goals created automatically and used by the system cannot be deleted');
             exit;
         }
-           $q=mysql_query("SELECT * FROM fundraising_donations WHERE fundraising_goal='$r->goal' AND fiscalyear='{$config['FISCALYEAR']}'");
-           if(mysql_num_rows($q)) {
-               error_("This goal already has donations assigned to it, it cannot be deleted");
+        $q = $pdo->prepare("SELECT * FROM fundraising_donations WHERE fundraising_goal='$r->goal' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $q->execute();
+        if ($q->rowCount()) {
+            error_('This goal already has donations assigned to it, it cannot be deleted');
             exit;
         }
 
-           mysql_query("DELETE FROM fundraising_goals WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'");
-           happy_("Purpose Deleted");
+        $stmt = $pdo->prepare("DELETE FROM fundraising_goals WHERE id='$id' AND fiscalyear='{$config['FISCALYEAR']}'");
+        $stmt->execute();
+        happy_('Purpose Deleted');
         exit;
         break;
 
-       case "setup_save":
-       $fye=sprintf("%02d-%02d",intval($_POST['fiscalendmonth']),intval($_POST['fiscalendday']));
-       mysql_query("UPDATE config SET val='$fye' WHERE var='fiscal_yearend' AND year='{$config['FAIRYEAR']}'");
-       mysql_query("UPDATE config SET val='".mysql_real_escape_string($_POST['registeredcharity'])."' WHERE var='registered_charity' AND year='{$config['FAIRYEAR']}'");
-       mysql_query("UPDATE config SET val='".mysql_real_escape_string($_POST['charitynumber'])."' WHERE var='charity_number' AND year='{$config['FAIRYEAR']}'");
-       happy_("Fundraising module setup saved");
+    case 'setup_save':
+        $fye = sprintf('%02d-%02d', intval($_POST['fiscalendmonth']), intval($_POST['fiscalendday']));
+
+        $stmt = $pdo->prepare("UPDATE config SET val='$fye' WHERE var='fiscal_yearend' AND year='{$config['FAIRYEAR']}'");
+        $stmt->execute();
+
+        $stmt = $pdo->prepare("UPDATE config SET val='" . $_POST['registeredcharity'] . "' WHERE var='registered_charity' AND year='{$config['FAIRYEAR']}'");
+        $stmt->execute();
+
+        $stmt = $pdo->prepare("UPDATE config SET val='" . $_POST['charitynumber'] . "' WHERE var='charity_number' AND year='{$config['FAIRYEAR']}'");
+        $stmt->execute();
+        happy_('Fundraising module setup saved');
         exit;
         break;
-
 }
 
- send_header("Fundraising Setup",
+send_header('Fundraising Setup',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php',
-			'Fundraising' => 'admin/fundraising.php')
-		);
+        'Fundraising' => 'admin/fundraising.php'));
 
 ?>
 <script type="text/javascript">
@@ -320,32 +346,48 @@
 $(document).ready(function() {
 
     $("#editor_tabs").tabs({
-        show: function(event, ui) {
-            switch(ui.panel.id) {
-                case 'editor_tab_levels':
+        create: function(event, ui) {
             update_levels();
-                    break;
-                case 'editor_tab_goals':
 			update_goals();
-                    break;
-                break;
-                case 'editor_tab_setup':
             update_setup();
-                    break;
-                break;
-            }
         },
-        selected: 0
+		activate: function( event, ui ) {
+			update_levels();
+			update_goals();
+            update_setup();
+		},
+		selected: 1
 	});
 
-//    $("#organizationinfo_fundingselectiondate").datepicker({ dateFormat: 'yy-mm-dd', showOn: 'button', buttonText: "<?=i18n("calendar")?>" });
+    // $("#editor_tabs").tabs({
+    //     show: function(event, ui) {
+    //         switch(ui.panel.id) {
+    //             case 'editor_tab_levels':
+    //                 update_levels();
+    //                 break;
+    //             case 'editor_tab_goals':
+    //                 update_goals();
+    //                 break;
+    //             break;
+    //             case 'editor_tab_setup':
+    //                 update_setup();
+    //                 break;
+    //             break;
+    //         }
+    //     },
+    //     selected: 0
+    // });
+
+//    $("#organizationinfo_fundingselectiondate").datepicker({ dateFormat: 'yy-mm-dd', showOn: 'button', buttonText: "<?= i18n('calendar') ?>" });
 
 });
 
 function update_levels() {
 	$("#editor_tab_levels").load("fundraising_setup.php?gettab=levels",null,
 			function() {
-					$("#levelaccordion").accordion();
+					$("#levelaccordion").accordion({
+                        heightStyle: "content"
+                    });
 			}
     );
 }
@@ -369,7 +411,9 @@ function level_delete(id) {
 function update_goals() {
 	$("#editor_tab_goals").load("fundraising_setup.php?gettab=goals",null,
 			function() {
-					$("#goalaccordion").accordion();
+					$("#goalaccordion").accordion({
+                        heightStyle: "content"
+                    });
                     $("[name=deadline]").datepicker({ dateFormat: 'yy-mm-dd'});
 			}
     );
@@ -400,7 +444,7 @@ function goal_delete(id) {
 }
 
 function charitychange() {
-    if($("input[@name='registeredcharity']:checked").val()=="yes") {
+    if($("input[name='registeredcharity']:checked").val()=="yes") {
         $("#charitynumber").attr("disabled","");
     }
     else {

admin/fundraising_sponsorship.php

@@ -1,40 +1,40 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2008 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2008 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 
 user_auth_required('committee', 'admin');
 
 if ($_GET['id']) {
 	$id = intval($_GET['id']);
-	 $q=mysql_query("SELECT fundraising_donations.*, sponsors.organization FROM fundraising_donations,sponsors WHERE fundraising_donations.id='$id' AND fundraising_donations.sponsors_id=sponsors.id");
-	 $sponsorship=mysql_fetch_object($q);
-	 $formaction="sponsorshipedit";
- }
- else
- {
-	 $formaction="sponsorshipadd";
+	$q = $pdo->prepare("SELECT fundraising_donations.*, sponsors.organization FROM fundraising_donations,sponsors WHERE fundraising_donations.id='$id' AND fundraising_donations.sponsors_id=sponsors.id");
+	$q->execute();
+	$sponsorship = $q->fetch(PDO::FETCH_OBJ);
+	$formaction = 'sponsorshipedit';
+} else {
+	$formaction = 'sponsorshipadd';
 	$fundraising_type = $_GET['fundraising_type'];
 }
 ?>
@@ -53,95 +53,112 @@ function typechange() {
 }
 </script>
 <?
-    echo "<form id=\"fundraisingsponsorship\">";
+echo '<form id="fundraisingsponsorship">';
 echo "<input type=\"hidden\" name=\"action\" value=\"$formaction\">";
 echo "<input type=\"hidden\" name=\"fundraising_donations_id\" value=\"$id\">";
-	 echo "<table cellspacing=0 cellpadding=0 class=\"tableedit\">";
+echo '<table cellspacing=0 cellpadding=0 class="tableedit">';
 
-	if($formaction=="sponsorshipadd") {
-        echo "<tr><th>".i18n("Donor Type")."</th>";
-        echo "<td>";
-         echo "<input onchange=\"typechange()\" type=\"radio\" name=\"sponsortype\" value=\"organization\"> ".i18n("Organization");
-         echo "&nbsp;"; echo "&nbsp;"; echo "&nbsp;";
-         echo "<input onchange=\"typechange()\" type=\"radio\" name=\"sponsortype\" value=\"individual\"> ".i18n("Individual");
+if ($formaction == 'sponsorshipadd') {
+	echo '<tr><th>' . i18n('Donor Type') . '</th>';
+	echo '<td>';
+	echo '<input onchange="typechange()" type="radio" name="sponsortype" value="organization"> ' . i18n('Organization');
+	echo '&nbsp;';
+	echo '&nbsp;';
+	echo '&nbsp;';
+	echo '<input onchange="typechange()" type="radio" name="sponsortype" value="individual"> ' . i18n('Individual');
 	echo "</td></tr>\n";
 
-         echo "<tr><th>".i18n("Donor")."</th>";
-         echo "<td>";
+	echo '<tr><th>' . i18n('Donor') . '</th>';
+	echo '<td>';
 
-	 $q=mysql_query("SELECT * FROM sponsors ORDER BY organization");
-	 echo mysql_error();
-     echo "<span id=\"sponsor_type_organization\" style=\"display: none;\">";
-	 echo "<select name=\"sponsors_id\">";
-	 echo "<option value=\"\">".i18n("Choose")."</option>\n";
-	 while($r=mysql_fetch_object($q)) {
-		 if($r->id==$sponsorship->sponsors_id) $sel="selected=\"selected\""; else $sel="";
+	$q = $pdo->prepare('SELECT * FROM sponsors ORDER BY organization');
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
+	echo '<span id="sponsor_type_organization" style="display: none;">';
+	echo '<select name="sponsors_id">';
+	echo '<option value="">' . i18n('Choose') . "</option>\n";
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		if ($r->id == $sponsorship->sponsors_id)
+			$sel = 'selected="selected"';
+		else
+			$sel = '';
 		echo "<option $sel value=\"$r->id\">$r->organization</option>\n";
 	}
-	 echo "</select>&nbsp;<a href=\"donors.php?action=add\">".i18n("Add")."</a>\n";
-     echo "</span>";
+	echo '</select>&nbsp;<a href="donors.php?action=add">' . i18n('Add') . "</a>\n";
+	echo '</span>';
 
-
-	 $q=mysql_query("SELECT users.*, MAX(year) AS year FROM users WHERE (firstname!='' AND lastname!='') GROUP BY uid HAVING deleted='no' ORDER BY lastname,firstname");
-	 echo mysql_error();
-     echo "<span id=\"sponsor_type_individual\" style=\"display: none;\">";
-	 echo "<select name=\"users_uid\">";
-	 echo "<option value=\"\">".i18n("Choose")."</option>\n";
-	 while($r=mysql_fetch_object($q)) {
-		 if($r->uid==$sponsorship->users_uid) $sel="selected=\"selected\""; else $sel="";
+	$q = $pdo->prepare("SELECT users.*, MAX(year) AS year FROM users WHERE (firstname!='' AND lastname!='') GROUP BY uid HAVING deleted='no' ORDER BY lastname,firstname");
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
+	echo '<span id="sponsor_type_individual" style="display: none;">';
+	echo '<select name="users_uid">';
+	echo '<option value="">' . i18n('Choose') . "</option>\n";
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		if ($r->uid == $sponsorship->users_uid)
+			$sel = 'selected="selected"';
+		else
+			$sel = '';
 		echo "<option $sel value=\"$r->uid\">[$r->year][$r->uid] $r->lastname, $r->firstname ($r->email)</option>\n";
 	}
-     echo "</span>";
-
-
-
-	}
-	else {
-        echo "<tr><th>".i18n("Donor Type")."</th>";
-        echo "<td>";
-        if($sponsorship->sponsors_id) echo i18n("Organization");
-        else echo i18n("Individual");
+	echo '</span>';
+} else {
+	echo '<tr><th>' . i18n('Donor Type') . '</th>';
+	echo '<td>';
+	if ($sponsorship->sponsors_id)
+		echo i18n('Organization');
+	else
+		echo i18n('Individual');
 	echo "</td></tr>\n";
 
-        echo "<tr><th>".i18n("Donor")."</th>";
-        echo "<td>";
+	echo '<tr><th>' . i18n('Donor') . '</th>';
+	echo '<td>';
 	echo $sponsorship->organization;
 }
 echo "</td></tr>\n";
 
-	 echo "<tr><th>".i18n("Donation Allocation")."</th>";
-	 echo "<td>";
-	 $q=mysql_query("SELECT * FROM fundraising WHERE year='{$config['FAIRYEAR']}' ORDER BY name");
-	 echo mysql_error();
-	 echo "<select name=\"fundraising_type\">";
-	 echo "<option value=\"\">".i18n("Choose")."</option>\n";
-	 while($r=mysql_fetch_object($q)) {
-		 if($r->type==$sponsorship->fundraising_type || $r->type==$fundraising_type) $sel="selected=\"selected\""; else $sel="";
+echo '<tr><th>' . i18n('Donation Allocation') . '</th>';
+echo '<td>';
+$q = $pdo->prepare("SELECT * FROM fundraising WHERE year='{$config['FAIRYEAR']}' ORDER BY name");
+$q->execute();
+show_pdo_errors_if_any($pdo);
+echo '<select name="fundraising_type">';
+echo '<option value="">' . i18n('Choose') . "</option>\n";
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	if ($r->type == $sponsorship->fundraising_type || $r->type == $fundraising_type)
+		$sel = 'selected="selected"';
+	else
+		$sel = '';
 	echo "<option $sel value=\"$r->type\">$r->name</option>\n";
 }
 echo "</select>\n";
 echo "</td></tr>\n";
-	 echo "<tr><th>".i18n("Amount")."</th><td><input type=\"text\" name=\"value\" value=\"$sponsorship->value\"></td></tr>\n";
+echo '<tr><th>' . i18n('Amount') . "</th><td><input type=\"text\" name=\"value\" value=\"$sponsorship->value\"></td></tr>\n";
 
-	 echo "<tr><th>".i18n("Status")."</th>";
-	 echo "<td>";
-	 echo "<select name=\"status\">";
-	 echo "<option value=\"\">".i18n("Choose")."</option>\n";
-	 $statuses=array("pending","confirmed","received");
+echo '<tr><th>' . i18n('Status') . '</th>';
+echo '<td>';
+echo '<select name="status">';
+echo '<option value="">' . i18n('Choose') . "</option>\n";
+$statuses = array('pending', 'confirmed', 'received');
 foreach ($statuses AS $status) {
-		 if($sponsorship->status==$status) $sel="selected=\"selected\""; else $sel="";
+	if ($sponsorship->status == $status)
+		$sel = 'selected="selected"';
+	else
+		$sel = '';
 	echo "<option $sel value=\"$status\">" . i18n(ucfirst($status)) . "</option>\n";
 }
 echo "</select>\n";
 echo "</td></tr>\n";
 
-	 echo "<tr><th>".i18n("Probability")."</th>";
-	 echo "<td>";
-	 echo "<select name=\"probability\">";
-	 echo "<option value=\"\">".i18n("Choose")."</option>\n";
-	 $probs=array("25","50","75","90","95","99","100");
+echo '<tr><th>' . i18n('Probability') . '</th>';
+echo '<td>';
+echo '<select name="probability">';
+echo '<option value="">' . i18n('Choose') . "</option>\n";
+$probs = array('25', '50', '75', '90', '95', '99', '100');
 foreach ($probs AS $prob) {
-		 if($sponsorship->probability==$prob) $sel="selected=\"selected\""; else $sel="";
+	if ($sponsorship->probability == $prob)
+		$sel = 'selected="selected"';
+	else
+		$sel = '';
 	echo "<option $sel value=\"$prob\">$prob%</option>\n";
 }
 echo "</select>\n";

admin/fundraising_sponsorship_handler.inc.php

@@ -1,29 +1,32 @@
 <?
-if($_POST['action']=="sponsorshipdelete") {
-	mysql_query("DELETE FROM fundraising_donations WHERE id='".intval($_POST['delete'])."'");
-	if(mysql_affected_rows())
-		happy_("Successfully removed sponsorship");
+if ($_POST['action'] == 'sponsorshipdelete') {
+	$stmt = $pdo->prepare("DELETE FROM fundraising_donations WHERE id='" . intval($_POST['delete']) . "'");
+	$stmt->execute();
+	if ($pdo->rowCount())
+		happy_('Successfully removed sponsorship');
 	exit;
 }
 
-if($_POST['action']=="sponsorshipedit" || $_POST['action']=="sponsorshipadd") {
+if ($_POST['action'] == 'sponsorshipedit' || $_POST['action'] == 'sponsorshipadd') {
 	$sponsors_id = intval($_POST['sponsors_id']);
 	$fundraising_donations_id = intval($_POST['fundraising_donations_id']);
-	$fundraising_type=mysql_real_escape_string($_POST['fundraising_type']);
+	$fundraising_type = $_POST['fundraising_type'];
 
-	$value=mysql_real_escape_string($_POST['value']);
-	$status=mysql_real_escape_string($_POST['status']);
-	$probability=mysql_real_escape_string($_POST['probability']);
+	$value = $_POST['value'];
+	$status = $_POST['status'];
+	$probability = $_POST['probability'];
 
-	if($status=="confirmed" || $status=="received") $probability="100";
-	if($probability==100 && $status=="pending") $status="confirmed";
+	if ($status == 'confirmed' || $status == 'received')
+		$probability = '100';
+	if ($probability == 100 && $status == 'pending')
+		$status = 'confirmed';
 }
 
-if($_POST['action']=="sponsorshipedit") {
-
+if ($_POST['action'] == 'sponsorshipedit') {
 	if ($fundraising_donations_id && $fundraising_type && $value) {
-		$q=mysql_query("SELECT * FROM fundraising_donations WHERE id='$fundraising_donations_id'");
-		$current=mysql_fetch_object($q);
+		$q = $pdo->prepare("SELECT * FROM fundraising_donations WHERE id='$fundraising_donations_id'");
+		$q->execute();
+		$current = $q->fetch(PDO::FETCH_OBJ);
 
 		unset($log);
 		$log = array();
@@ -40,43 +43,43 @@ if($_POST['action']=="sponsorshipedit") {
 			$log[] = "Changed sponsorship probability from $current->probability to $probability";
 
 		if (count($log)) {
-			mysql_query("UPDATE fundraising_donations SET fundraising_type='$fundraising_type', value='$value', status='$status', probability='$probability' WHERE id='$fundraising_donations_id'");
-
+			$stmt = $pdo->prepare("UPDATE fundraising_donations SET fundraising_type='$fundraising_type', value='$value', status='$status', probability='$probability' WHERE id='$fundraising_donations_id'");
+			$stmt->execute();
 			foreach ($log AS $l) {
-					mysql_query("INSERT INTO fundraising_donor_logs (sponsors_id,dt,users_id,log) VALUES (
+				$stmt = $pdo->prepare("INSERT INTO fundraising_donor_logs (sponsors_id,dt,users_id,log) VALUES (
 						'$current->sponsors_id',
 						NOW(),
 						'" . $_SESSION['users_id'] . "',
-						'".mysql_real_escape_string($l)."')");
-
+						'" . $l . "')");
+				$stmt->execute();
 			}
-			if(mysql_error())
-				echo error_(mysql_error());
+			if ($pdo->errorInfo())
+				echo error_($pdo->errorInfo());
 			else
-                echo happy_("Saved sponsorship changes");
-		}
-		else
-			echo error_("No changes were made");
-	}
-	else {
-		echo error_("Required fields were missing, please try again".print_r($_POST,true));
+				echo happy_('Saved sponsorship changes');
+		} else
+			echo error_('No changes were made');
+	} else {
+		echo error_('Required fields were missing, please try again' . print_r($_POST, true));
 	}
 	exit;
 }
-if($_POST['action']=="sponsorshipadd") {
+if ($_POST['action'] == 'sponsorshipadd') {
 	if ($sponsors_id && $fundraising_type && $value) {
-		mysql_query("INSERT INTO fundraising_donations (sponsors_id,fundraising_type,value,status,probability,fiscalyear) VALUES ('$sponsors_id','$fundraising_type','$value','$status','$probability','{$config['FISCALYEAR']}')");
-		mysql_query("INSERT INTO fundraising_donor_logs (sponsors_id,dt,users_id,log) VALUES (
+		$stmt = $pdo->prepare("INSERT INTO fundraising_donations (sponsors_id,fundraising_type,value,status,probability,fiscalyear) VALUES ('$sponsors_id','$fundraising_type','$value','$status','$probability','{$config['FISCALYEAR']}')");
+		$stmt->execute();
+
+		$stmt = $pdo->prepare("INSERT INTO fundraising_donor_logs (sponsors_id,dt,users_id,log) VALUES (
+		$stmt->execute();
 			'$sponsors_id',
 			NOW(),
 			'" . $_SESSION['users_id'] . "',
-			'".mysql_real_escape_string("Created sponsorship: type=$fundraising_type, value=\$$value, status=$status, probability=$probability%")."')");
-		happy_("Added new sponsorship");
-	}
-	else
-		error_("Required fields were missing, please try again");
-	if(mysql_error())
-		error_(mysql_error());
+			'" . "Created sponsorship: type=$fundraising_type, value=\$$value, status=$status, probability=$probability%") . "')";
+		happy_('Added new sponsorship');
+	} else
+		error_('Required fields were missing, please try again');
+	if ($pdo->errorInfo())
+		error_($pdo->errorInfo());
 	exit;
 }
 

admin/fundraising_types.php

@@ -1,59 +1,59 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2008 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2008 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
-	require("../common.inc.php");
-	require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 
 user_auth_required('committee', 'admin');
 
 if ($_GET['id']) {
 	$id = intval($_GET['id']);
-		$q=mysql_query("SELECT * FROM fundraising WHERE id='$id'");
+	$q = $pdo->prepare("SELECT * FROM fundraising WHERE id='$id'");
+	$q->execute();
 	//	echo "<h2>Edit Fund</h2>";
-		$fund=mysql_fetch_object($q);
-		$formaction="fundedit";
-	}
-	else {
+	$fund = $q->fetch(PDO::FETCH_OBJ);
+	$formaction = 'fundedit';
+} else {
 	//	echo "<h2>Create New Fund</h2>";
-		$formaction="fundadd";
+	$formaction = 'fundadd';
 }
-    echo "<form id=\"fundraisingfundraising\">";
+echo '<form id="fundraisingfundraising">';
 echo "<input type=\"hidden\" name=\"action\" value=\"$formaction\">";
 echo "<input type=\"hidden\" name=\"fundraising_id\" value=\"$id\">";
 
-	echo "<table class=\"tableedit\" style=\"width: 90%;\">";
-	if($fund->system=="yes") {
-		echo "<tr><th>".i18n("Type")."</th><td>".i18n("System (non-editable)")."</td></tr>\n";
-		echo "<tr><th>".i18n("Name")."</th><td>".htmlspecialchars($fund->name)."</td></tr>\n";
-		echo "<tr><th>".i18n("Key")."</th><td>".htmlspecialchars($fund->type)."</td></tr>\n";
+echo '<table class="tableedit" style="width: 90%;">';
+if ($fund->system == 'yes') {
+	echo '<tr><th>' . i18n('Type') . '</th><td>' . i18n('System (non-editable)') . "</td></tr>\n";
+	echo '<tr><th>' . i18n('Name') . '</th><td>' . htmlspecialchars($fund->name) . "</td></tr>\n";
+	echo '<tr><th>' . i18n('Key') . '</th><td>' . htmlspecialchars($fund->type) . "</td></tr>\n";
+} else {
+	echo '<tr><th>' . i18n('Type') . '</th><td>' . i18n('Custom (editable)') . "</td></tr>\n";
+	echo '<tr><th>' . i18n('Name') . '</th><td><input type="text" name="name" value="' . htmlspecialchars($fund->name) . "\"></td></tr>\n";
+	echo '<tr><th>' . i18n('Key') . '</th><td><input type="text" name="type" value="' . htmlspecialchars($fund->type) . "\"></td></tr>\n";
 }
-	else {
-		echo "<tr><th>".i18n("Type")."</th><td>".i18n("Custom (editable)")."</td></tr>\n";
-		echo "<tr><th>".i18n("Name")."</th><td><input type=\"text\" name=\"name\" value=\"".htmlspecialchars($fund->name)."\"></td></tr>\n";
-		echo "<tr><th>".i18n("Key")."</th><td><input type=\"text\" name=\"type\" value=\"".htmlspecialchars($fund->type)."\"></td></tr>\n";
-	}
-	echo "<tr><th>".i18n("Description")."</th><td><textarea style=\"width: 100%; height: 4em;\" name=\"description\">".htmlspecialchars($fund->description)."</textarea></td></tr>\n";
-	echo "<tr><th>".i18n("Goal")."</th><td><input type=\"text\" size=\"8\" name=\"goal\" value=\"$fund->goal\"></td></tr>\n";
+echo '<tr><th>' . i18n('Description') . '</th><td><textarea style="width: 100%; height: 4em;" name="description">' . htmlspecialchars($fund->description) . "</textarea></td></tr>\n";
+echo '<tr><th>' . i18n('Goal') . "</th><td><input type=\"text\" size=\"8\" name=\"goal\" value=\"$fund->goal\"></td></tr>\n";
 echo "</table>\n";
 echo "</form>\n";
 

admin/gettranslation.php

@@ -1,38 +1,41 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
-include "../common.inc.php";
-require_once("../user.inc.php");
+include '../common.inc.php';
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 $ret = array();
 foreach ($config['languages'] AS $l => $ln) {
-	if($l==$config['default_language']) continue;
-	$q=mysql_query("SELECT * FROM translations WHERE lang='$l' AND strmd5='".md5(iconv("ISO-8859-1","UTF-8",$_GET['str']))."'");
-	if($r=mysql_fetch_object($q))
-        $ret[$l]=iconv("ISO-8859-1","UTF-8",$r->val);
+        if ($l == $config['default_language'])
+                continue;
+        $q = $pdo->prepare("SELECT * FROM translations WHERE lang='$l' AND strmd5='" . md5(iconv('ISO-8859-1', 'UTF-8', $_GET['str'])) . "'");
+        $q->execute();
+        if ($r = $q->fetch(PDO::FETCH_OBJ))
+                $ret[$l] = iconv('ISO-8859-1', 'UTF-8', $r->val);
         else
-        $ret[$l]="";
+                $ret[$l] = '';
 }
 echo json_encode($ret);
 ?>

admin/index.php

@@ -26,12 +26,15 @@
  require_once("../user.inc.php");
  require_once("../committee.inc.php");
 
+
  user_auth_required('committee','admin');
 
  send_header("Administration",
  	array('Committee Main' => 'committee_main.php'),
 	"administration");
 
+
+
  echo "<table class=\"adminconfigtable\">";
  echo " <tr>";
  echo "  <td><a href=\"registration.php\">".theme_icon("participant_registration")."<br />".i18n("Participant Registration")."</a></td>";
@@ -41,7 +44,7 @@
  if($config['volunteer_enable'] == 'yes')
 	echo "<a href=\"volunteers.php\">".theme_icon("volunteer_management")."<br />".i18n("Volunteer Management")."</a>";
  else
-	echo theme_icon("volunteer_management")."<br />".i18n("Volunteer Management")."<br /><i>(".i18n("disabled").")</i>";
+	// {echo theme_icon("volunteer_management")."<br />".i18n("Volunteer Management")."<br /><i>(".i18n("disabled").")</i>"};
  echo "</td></tr>";
  echo "</table>\n";
  echo "<hr />";
@@ -53,23 +56,25 @@
  if($config['tours_enable'] == 'yes')
  	echo "<a href=\"tours.php\">".theme_icon("tour_management")."<br />".i18n("Tour Management")."</a>";
  else
- 	echo theme_icon("tour_management")."<br />".i18n("Tour Management")."<br /><i>(".i18n("disabled").")</i>";
+ 	// {echo theme_icon("tour_management")."<br />".i18n("Tour Management")."<br /><i>(".i18n("disabled").")</i>";}
  echo "</td>";
  echo "  <td>";
  if($config['participant_regfee_items_enable'] == 'yes')
  	echo "<a href=\"regfee_items_manager.php\">".theme_icon("registration_fee_items_management")."<br />".i18n("Registration Fee Items Management")."</a>";
  else
- 	echo theme_icon("registration_fee_items_management")."<br />".i18n("Registration Fee Items Management")."<br /><i>(".i18n("disabled").")</i>";
+ 	// {echo theme_icon("registration_fee_items_management")."<br />".i18n("Registration Fee Items Management")."<br /><i>(".i18n("disabled").")</i>";}
  echo "</td>";
  echo " </tr>\n";
+
  echo " <tr>";
  echo "  <td><a href=\"reports.php\">".theme_icon("print/export_reports")."<br />".i18n("Print / Export Reports")."</a></td>";
  echo "  <td><a href=\"reports_ceremony.php\">".theme_icon("print_awards_ceremony_scripts")."<br />".i18n("Print Award Ceremony Scripts")."</a></td>";
  echo "  <td><a href=\"reports_editor.php\">".theme_icon("report_management")."<br />".i18n("Report Management")."</a></td>";
  echo "  <td><a href=\"translations.php\">".theme_icon("translations_management")."<br />".i18n("Translations Management")."</a></td>";
- echo "  <td>";
+ 
  echo "</td>";
  echo " </tr>\n";
+
  echo " <tr>";
  echo "<td></td><td></td>\n";
  echo " </tr>\n";
@@ -77,13 +82,13 @@
  echo "<hr />";
  echo "<table class=\"adminconfigtable\">";
  echo " <tr>";
- if($config['score_entry_enable'] == 'yes') {
-	echo "<td><a href=\"judging_score_entry.php\">".theme_icon("judging_score_entry")."<br />".i18n("Judging Score Entry")."</a></td>";
- }
  echo "  <td><a href=\"winners.php\">".theme_icon("enter_winning_projects")."<br />".i18n("Enter Winning Projects")."</a></td>";
  echo "  <td><a href=\"cwsfregister.php\">".theme_icon("one-click_cwsf_registration")."<br />".i18n("One-Click CWSF Registration")."</a></td>";
  echo "  <td><a href=\"fair_stats.php\">".theme_icon("fair_stats")."<br />".i18n("Upload Fair Statistics")."</a></td>";
  echo "  <td><a href=\"user_list.php?show_types[]=fair\">".theme_icon("sciencefair_management")."<br />".i18n("Feeder/Upstream Fair Management")."</a></td>";
+if(get_value_from_array($config, 'score_entry_enable') == 'yes') {
+ echo "<td><a href=\"judging_score_entry.php\">".theme_icon("judging_score_entry")."<br />".i18n("Judging Score Entry")."</a></td>";
+ }
  echo " </tr>\n";
  echo "</table>\n";
  echo "<hr />";
@@ -93,7 +98,10 @@
  echo "  <td><a href=\"documents.php\">".theme_icon("internal_document_management")."<br />".i18n("Internal Document Management")."</a></td>";
  echo "  <td><a href=\"cms.php\">".theme_icon("website_content_management")."<br />".i18n("Website Content Management")."</a></td>";
  echo "  <td><a href=\"fundraising.php\">".theme_icon("fundraising")."<br />".i18n("Fundraising")."</a></td>";
- echo "  <td></td>";
+ if(get_value_from_array($config, 'score_entry_enable') == 'yes') {
+ echo "<td><a href=\"../plugins/evaluations/index.php\">".theme_icon("judging_score_entry")."<br />".i18n("Evaluations Plugin")."</a></td>"; 
+ }
+ //echo "  <td><a href=\"../plugins/evaluations/index.php\">Go To Evaluations</a></td>";
  echo " </tr>\n";
  echo "</table>\n";
 

admin/judges.inc.php

@@ -1,9 +1,8 @@
 <?
 function getJudgingTeams()
 {
-	global $config;
-
-	$q=mysql_query("SELECT 	judges_teams.id,
+	global $config, $pdo;
+	$q = $pdo->prepare("SELECT judges_teams.id,
 				judges_teams.num,
 				judges_teams.name
 			FROM 
@@ -11,15 +10,14 @@ function getJudgingTeams()
 			WHERE 
 				judges_teams.year='" . $config['FAIRYEAR'] . "'
 			ORDER BY 
-				num,name
-				");
+				num,name");
+	$q->execute();
 
 	$lastteamid = -1;
 	$lastteamnum = -1;
-	echo mysql_error();
+	show_pdo_errors_if_any($pdo);
 	$teams = array();
-	while($r=mysql_fetch_object($q))
-	{
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		$teams[$r->id]['id'] = $r->id;
 		$teams[$r->id]['num'] = $r->num;
 		$teams[$r->id]['name'] = $r->name;
@@ -28,27 +26,30 @@ function getJudgingTeams()
 
 		/* Load timeslots */
 		$rounds = array();
-		$tq = mysql_query("SELECT * FROM judges_teams_timeslots_link
+		$tq = $pdo->prepare("SELECT * FROM judges_teams_timeslots_link
 					LEFT JOIN judges_timeslots ON judges_timeslots.id=judges_teams_timeslots_link.judges_timeslots_id
 					WHERE judges_teams_timeslots_link.judges_teams_id='{$r->id}'");
+		$tq->execute();
 		$teams[$r->id]['timeslots'] = array();
 		$teams[$r->id]['rounds'] = array();
-		while($ts = mysql_fetch_assoc($tq)) {
+
+		while ($ts = $tq->fetch(PDO::FETCH_ASSOC)) {
 			$teams[$r->id]['timeslots'][] = $ts;
 			$rounds[$ts['round_id']] = $ts['round_id'];
 		}
+
 		foreach ($rounds as $round_id) {
-			$tq = mysql_query("SELECT * FROM judges_timeslots WHERE id='{$round_id}'");
-			$teams[$r->id]['rounds'][] = mysql_fetch_assoc($tq);
+			$tq = $pdo->prepare("SELECT * FROM judges_timeslots WHERE id='{$round_id}'");
+			$tq->execute();
+			$teams[$r->id]['rounds'][] = $tq->fetch(PDO::FETCH_ASSOC);
 		}
 
 		// get the members for this team
-		$mq=mysql_query("SELECT 	
+		$mq = $pdo->prepare("SELECT \t
 					users.id AS judges_id,
 					users.firstname,
 					users.lastname,
 					judges_teams_link.captain
-			
 				FROM 
 					users,
 					judges_teams_link
@@ -59,12 +60,11 @@ function getJudgingTeams()
 					captain DESC,
 					lastname,
 					firstname");
-		echo mysql_error();
-
+		$mq->execute();
+		show_pdo_errors_if_any($pdo);
 
 		$teamlangs = array();
-		while($mr=mysql_fetch_object($mq))
-		{
+		while ($mr = $mq->fetch(PDO::FETCH_OBJ)) {
 			$u = user_load($mr->judges_id, false);
 			$judgelangs = join('/', $u['languages']);
 			foreach ($u['languages'] AS $l) {
@@ -73,25 +73,26 @@ function getJudgingTeams()
 			}
 
 			$teams[$lastteamid]['members'][] = array(
-				"id"=>$mr->judges_id,
-				"firstname"=>$mr->firstname,
-				"lastname"=>$mr->lastname,
-				"captain"=>$mr->captain,
-				"languages"=>$judgelangs,
-				"languages_array"=>$u['languages']
+				'id' => $mr->judges_id,
+				'firstname' => $mr->firstname,
+				'lastname' => $mr->lastname,
+				'captain' => $mr->captain,
+				'languages' => $judgelangs,
+				'languages_array' => $u['languages']
 			);
 		}
 		$teams[$r->id]['languages_members'] = $teamlangs;
 
 		// we also need to add all the languages that the team must JUDGE to the teams languages.
-		$lq=mysql_query("SELECT projects.language
+		$lq = $pdo->prepare("SELECT projects.language
 			FROM judges_teams_timeslots_projects_link 
 			LEFT JOIN projects ON judges_teams_timeslots_projects_link.projects_id=projects.id
 			WHERE judges_teams_timeslots_projects_link.year='{$config['FAIRYEAR']}' AND
-			judges_teams_id='$r->id' ");
-		echo mysql_error();
+			judges_teams_id='$r->id' AND language!='' ");
+		$lq->execute();
+		show_pdo_errors_if_any($pdo);
 		$projectlangs = array();
-		while($lr=mysql_fetch_object($lq)) {
+		while ($lr = $lq->fetch(PDO::FETCH_OBJ)) {
 			if (!in_array($lr->language, $projectlangs))
 				$projectlangs[] = $lr->language;
 			if (!in_array($lr->language, $teamlangs))
@@ -101,7 +102,7 @@ function getJudgingTeams()
 		$teams[$r->id]['languages'] = $teamlangs;
 
 		// get the awards for this team
-		$aq=mysql_query("SELECT award_awards.id,
+		$aq = $pdo->prepare("SELECT award_awards.id,
 					award_awards.name,
 					award_awards.criteria,
 					award_awards.award_types_id,
@@ -118,14 +119,14 @@ function getJudgingTeams()
 				ORDER BY
 					name
 				");
-		while($ar=mysql_fetch_object($aq))
-		{
+		$aq->execute();
+		while ($ar = $aq->fetch(PDO::FETCH_OBJ)) {
 			$teams[$r->id]['awards'][] = array(
-					"id"=>$ar->id,
-					"name"=>$ar->name,
-					"criteria"=>$ar->criteria,
-					"award_types_id"=>$ar->award_types_id,
-					"award_type"=>$ar->award_type
+				'id' => $ar->id,
+				'name' => $ar->name,
+				'criteria' => $ar->criteria,
+				'award_types_id' => $ar->award_types_id,
+				'award_type' => $ar->award_type
 			);
 		}
 	}
@@ -135,8 +136,8 @@ function getJudgingTeams()
 function getJudgingTeam($teamid)
 {
 	global $config;
-
-	$q=mysql_query("SELECT 	judges_teams.id,
+	global $pdo;
+	$q = $pdo->prepare("SELECT \tjudges_teams.id,
 				judges_teams.num,
 				judges_teams.name
 				
@@ -149,18 +150,18 @@ function getJudgingTeam($teamid)
 				num,
 				name
 				");
+	$q->execute();
 
 	$team = array();
 
 	$first = true;
-	while($r=mysql_fetch_object($q))
-	{
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		$team['id'] = $r->id;
 		$team['num'] = $r->num;
 		$team['name'] = $r->name;
 
 		// get the members for this team
-		$mq=mysql_query("SELECT 	
+		$mq = $pdo->prepare("SELECT \t
 			users.id AS judges_id,
 			users.firstname,
 			users.lastname,
@@ -176,22 +177,20 @@ function getJudgingTeam($teamid)
 			captain DESC,
 			lastname,
 			firstname");
-		echo mysql_error();
+		$mq->execute();
+		show_pdo_errors_if_any($pdo);
 
-		
-		while($mr=mysql_fetch_object($mq))
-		{
+		while ($mr = $mq->fetch(PDO::FETCH_OBJ)) {
 			$team['members'][] = array(
-				"id"=>$mr->judges_id,
-				"firstname"=>$mr->firstname,
-				"lastname"=>$mr->lastname,
-				"captain"=>$mr->captain
+				'id' => $mr->judges_id,
+				'firstname' => $mr->firstname,
+				'lastname' => $mr->lastname,
+				'captain' => $mr->captain
 			);
 		}
 
-
 		// get the awards for this team
-		$aq=mysql_query("SELECT award_awards.id,
+		$aq = $pdo->prepare("SELECT award_awards.id,
 					award_awards.name,
 					award_awards.award_types_id,
 					award_types.type AS award_type
@@ -207,24 +206,22 @@ function getJudgingTeam($teamid)
 				ORDER BY
 					name
 				");
-		while($ar=mysql_fetch_object($aq))
-		{
+		$aq->execute();
+		while ($ar = $aq->fetch(PDO::FETCH_OBJ)) {
 			$team['awards'][] = array(
-					"id"=>$ar->id,
-					"name"=>$ar->name,
-					"award_types_id"=>$ar->award_types_id,
-					"award_type"=>$ar->award_type
+				'id' => $ar->id,
+				'name' => $ar->name,
+				'award_types_id' => $ar->award_types_id,
+				'award_type' => $ar->award_type
 			);
 		}
-
-
 	}
 
 	return $team;
-
 }
 
-function getJudgingEligibilityCode() {
+function getJudgingEligibilityCode()
+{
 	global $config;
 	switch ($config['project_status']) {
 		case 'open':
@@ -241,12 +238,12 @@ function getJudgingEligibilityCode() {
 
 function teamMemberToName($member)
 {
-       return $member["firstname"] . " " . $member["lastname"];
+	return $member['firstname'] . ' ' . $member['lastname'];
 }
 
 function judges_load_all()
 {
-	global $config;
+	global $config, $pdo;
 
 	$ret = array();
 
@@ -254,11 +251,14 @@ function judges_load_all()
 				AND year='{$config['FAIRYEAR']}'
 				AND deleted='no'
 				ORDER BY lastname, firstname";
-	$r = mysql_query($query);
-	while($i = mysql_fetch_assoc($r)) {
+	$r = $pdo->prepare($query);
+	$r->execute();
+	while ($i = $r->fetch(PDO::FETCH_ASSOC)) {
 		$u = user_load($i['id']);
-		if($u['judge_complete'] == 'no') continue;
-		if($u['judge_active'] == 'no') continue;
+		if ($u['judge_complete'] == 'no')
+			continue;
+		if ($u['judge_active'] == 'no')
+			continue;
 
 		$ret[$i['id']] = $u;
 	}

admin/judges.php

@@ -1,54 +1,53 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
- send_header("Judges", 
+send_header('Judges',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php'),
-            "judging_management"
-			);
- echo "<br />";
+    'judging_management');
+echo '<br />';
 echo '<b>' . i18n('Judges') . '</b><ul>';
- echo "<li><a href=\"../user_invite.php?type=judge\">".i18n("Invite Judges")."</a></li></li>";
- echo "<li><a href=\"user_list.php?show_types[]=judge\">".i18n("Manage Judges")."</a> - ".i18n("Add, Delete, Edit, and List judges").'</li>';
+echo '<li><a href="../user_invite.php?type=judge">' . i18n('Invite Judges') . '</a></li></li>';
+echo '<li><a href="user_list.php?show_types[]=judge">' . i18n('Manage Judges') . '</a> - ' . i18n('Add, Delete, Edit, and List judges') . '</li>';
 echo '</ul>';
 echo '<b>' . i18n('Create the Judging Schedule') . '</b><ul>';
- echo "<li><a href=\"judges_timeslots.php\">".i18n("Create/Edit Judging Timeslots")."</a></li>";
- echo "<li><a href=\"judges_jdiv.php\">".i18n("Create/Edit Divisional Judging Groupings")."</a></li>";
- echo "<li><a href=\"judges_schedulerconfig.php\">".i18n("Run the Automatic Judging Scheduler")."</a></li>";
+echo '<li><a href="judges_timeslots.php">' . i18n('Create/Edit Judging Timeslots') . '</a></li>';
+echo '<li><a href="judges_jdiv.php">' . i18n('Create/Edit Divisional Judging Groupings') . '</a></li>';
+echo '<li><a href="judges_schedulerconfig.php">' . i18n('Run the Automatic Judging Scheduler') . '</a></li>';
 echo '</ul>';
 echo '<b>' . i18n('Edit the Judging Schedule') . '</b><ul>';
- echo "<li><a href=\"judges_teams.php\">".i18n("Manage Judging Teams")."</a></li>";
- echo "<li><a href=\"judges_teams_members.php\">".i18n("Manage Judging Team Members")."</a></li>";
- echo "<li><a href=\"judges_teams_timeslots.php\">".i18n("Manage Judging Team Timeslot Assignments")."</a></li>";
- echo "<li><a href=\"judges_teams_projects.php\">".i18n("Manage Judging Team Project Assignments")."</a></li>";
+echo '<li><a href="judges_teams.php">' . i18n('Manage Judging Teams') . '</a></li>';
+echo '<li><a href="judges_teams_members.php">' . i18n('Manage Judging Team Members') . '</a></li>';
+echo '<li><a href="judges_teams_timeslots.php">' . i18n('Manage Judging Team Timeslot Assignments') . '</a></li>';
+echo '<li><a href="judges_teams_projects.php">' . i18n('Manage Judging Team Project Assignments') . '</a></li>';
 echo '</ul>';
 
-
 send_footer();
 
 ?>

admin/judges_info.php

@@ -1,53 +1,53 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
 // this file is meant to be used as a popup from the judging teams page to view the judge info
 // it needs the judge ID passed into it.
 // thus, we do not need the normal header and footer
- require("../questions.inc.php");
+require ('../questions.inc.php');
 
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
 $preferencechoices = array(
-	-2=>"Very Low",
-	-1=>"Low",
-	0=>"Indifferent",
-	1=>"Medium",
-	2=>"High"
+	-2 => 'Very Low',
+	-1 => 'Low',
+	0 => 'Indifferent',
+	1 => 'Medium',
+	2 => 'High'
 );
 
-
 $id = intval($_GET['id']);
 $judgeinfo = user_load($id);
 
+send_popup_header('Judge Information');
 echo '<div style="text-align:center; padding: 5px;">';
-send_popup_header("Judge Information");
 
 if ($id < 1) {
-	echo error(i18n("No Judge ID passed to Judges Info"));
+	echo error(i18n('No Judge ID passed to Judges Info'));
 	send_popup_footer();
 	exit;
 }
@@ -55,9 +55,9 @@ send_popup_header("Judge Information");
 ?>
 	<table class="tableview" style="margin:auto; width:100%; text-align:left">
 		<tr>
-			<th><?=i18n("First Name");?></th>
-			<th><?=i18n("Last Name");?></th>
-			<th><?=i18n("Organization");?></th>
+			<th><?= i18n('First Name'); ?></th>
+			<th><?= i18n('Last Name'); ?></th>
+			<th><?= i18n('Organization'); ?></th>
 		</tr>
 		<tr>
 			<td><?= $judgeinfo['firstname']; ?></td>
@@ -69,31 +69,31 @@ send_popup_header("Judge Information");
 	<table class="tableview" style="margin:auto; width:100%; margin-top: 5px; text-align:left">
 		
 		<tr>
-			<th><?=i18n("Email Address");?>:</th>
+			<th><?= i18n('Email Address'); ?>:</th>
 			<td><?= $judgeinfo['email']; ?></td>
-			<th><?=i18n("City");?>:</th>
+			<th><?= i18n('City'); ?>:</th>
 			<td><?= $judgeinfo['city']; ?></td>
 		</tr>
 		<tr>
-			<th><?=i18n("Phone (Home)");?>:</th>
+			<th><?= i18n('Phone (Home)'); ?>:</th>
 			<td><?= $judgeinfo['phonehome']; ?></td>
-			<th><?=i18n("Address 1");?>:</th>
+			<th><?= i18n('Address 1'); ?>:</th>
 			<td><?= $judgeinfo['address']; ?></td>
 		</tr>
 		<tr>
-			<th><?=i18n("Phone (Work)");?>:</th>
+			<th><?= i18n('Phone (Work)'); ?>:</th>
 			<td><?= $judgeinfo['phonework']; ?></td>
-			<th><?=i18n("Address 2");?>:</th>
+			<th><?= i18n('Address 2'); ?>:</th>
 			<td><?= $judgeinfo['address2']; ?></td>
 		</tr>
 		<tr>
-			<th><?=i18n("Phone (Cell)");?>:</th>
+			<th><?= i18n('Phone (Cell)'); ?>:</th>
 			<td><?= $judgeinfo['phonecell']; ?></td>
 			<th><?= i18n($config['provincestate']); ?>:</th>
 			<td><?= $judgeinfo['province']; ?></td>
 		</tr>
 		<tr>
-			<th><?=i18n("Languages");?>:</th>
+			<th><?= i18n('Languages'); ?>:</th>
 			<td><?= join(', ', $judgeinfo['languages']); ?></td>
 			<th><?= i18n($config['postalzip']); ?>:</th>
 			<td><?= $judgeinfo['postalcode']; ?></td>
@@ -103,11 +103,12 @@ send_popup_header("Judge Information");
 <?php
 
 // get their availability
-$availabilityText = "";
+$availabilityText = '';
 if ($config['judges_availability_enable'] == 'yes') {
-	$q = mysql_query("SELECT * FROM judges_availability WHERE users_id=\"{$judgeinfo['id']}\" ORDER BY `start`");
+	$q = $pdo->prepare("SELECT * FROM judges_availability WHERE users_id=\"{$judgeinfo['id']}\" ORDER BY `start`");
+	$q->execute();
 	$sel = array();
-	while($r=mysql_fetch_object($q)) {
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		$st = substr($r->start, 0, 5);
 		$end = substr($r->end, 0, 5);
 		$availabilityText .= "<li>$st - $end</li>";
@@ -115,40 +116,42 @@ if($config['judges_availability_enable'] == 'yes'){
 	if (strlen($availabilityText) > 0) {
 		$availabilityText = '<ul>' . $availabilityText . '</ul>';
 	} else {
-		$availabilityText = i18n("Unspecified");
+		$availabilityText = i18n('Unspecified');
 	}
 }
 echo '<div style="text-align:left">';
 
 // is their info complete?
-$completeText = $judgeinfo['complete']=="yes" ? "Yes" : "No";
+$completeText = $judgeinfo['judge_complete'] == 'yes' ? 'Yes' : 'No';
+$activeText = $judgeinfo['judge_active'] == 'yes' ? 'Yes' : 'No';
 
 // find out if they've signed up for judging any special awards
-$specialAwardsText = "";
-if($judgeinfo['special_award_only'] == "yes"){
-	$query = "SELECT aa.name AS awardname FROM judges_specialaward_sel jss"
-		. " JOIN users ON jss.users_id = users.id"
-		. " JOIN award_awards aa ON aa.id = jss.award_awards_id"
-		. " WHERE users.id=" . $id;
-	$results = mysql_query($query);
-	while($record = mysql_fetch_array($results)){
+$specialAwardsText = '';
+if ($judgeinfo['special_award_only'] == 'yes') {
+	$query = 'SELECT aa.name AS awardname FROM judges_specialaward_sel jss'
+		. ' JOIN users ON jss.users_id = users.id'
+		. ' JOIN award_awards aa ON aa.id = jss.award_awards_id'
+		. ' WHERE users.id=' . $id;
+	$results = $pdo->prepare($query);
+	$results . execute();
+	while ($record = $results . fetch()) {
 		$awardList[] = $record['awardname'];
 	}
 	$specialAwardsText .= implode(', ', $awardList);
-	
 } else {
-	$specialAwardsText .= i18n("None");
+	$specialAwardsText .= i18n('None');
 }
 
 // get their preference for age category
-$q=mysql_query("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}'");
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}'");
+$q->execute();
 
-$catPreferenceText =  mysql_error() . "<ul>";
-while($r=mysql_fetch_object($q)) {
+$catPreferenceText = $pdo->errorInfo() . '<ul>';
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$p = intval($judgeinfo['cat_prefs'][$r->id]);
-	$catPreferenceText .= "<li><em>" . i18n($r->category)."</em>: {$preferencechoices[$p]}</li>";
+	$catPreferenceText .= '<li><em>' . i18n($r->category) . "</em>: {$preferencechoices[$p]}</li>";
 }
-$catPreferenceText .= "</ul>";
+$catPreferenceText .= '</ul>';
 
 ?>
 
@@ -156,65 +159,70 @@ $catPreferenceText .= "</ul>";
 	<tr><td>
 		<ul>
 
+			<li><strong><?= "Active for {$config['FAIRYEAR']}"; ?>: </strong>
+			<?= $activeText; ?></li>
+
 			<li><strong><?= "Complete for {$config['FAIRYEAR']}"; ?>: </strong>
 			<?= $completeText; ?></li>
 
-			<li><strong><?=i18n("Special awards");?>: </strong>
+			<li><strong><?= i18n('Special awards'); ?>: </strong>
 			<?= $specialAwardsText; ?></li>
 
-			<li><strong><?=i18n("Highest post-secondary degree");?>: </strong>
+			<li><strong><?= i18n('Highest post-secondary degree'); ?>: </strong>
 			<?= $judgeinfo['highest_psd']; ?></li>
 
-			<li><strong><?=i18n("Age category preference");?>: </strong>
+			<li><strong><?= i18n('Age category preference'); ?>: </strong>
 			<?= $catPreferenceText; ?></li>
 
 			<?php
-			if($availabilityText != ""){
-				echo "<li><strong>" . i18n("Time Availability") . ": </strong>";
-				echo $availabilityText . "</li>";
+			if ($availabilityText != '') {
+				echo '<li><strong>' . i18n('Time Availability') . ': </strong>';
+				echo $availabilityText . '</li>';
 			}
 			?>
 		</ul>
 	</td>
 	<td>
-		<h3><?=i18n("Areas of Expertise");?></h3>
+		<h3><?= i18n('Areas of Expertise'); ?></h3>
 		<table class="tableview" style="margin:auto;width:100%">
 <?php
 
 // grab the list of divisions, because the last fields of the table will be the sub-divisions
-$q=mysql_query("SELECT * FROM projectdivisions WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
+$q->execute();
 $divs = array();
-while($r=mysql_fetch_object($q))
-{
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$divs[] = $r->id;
 	$divnames[$r->id] = $r->division;
 }
 
-foreach($divs as $div)
-{
+foreach ($divs as $div) {
 	$p = $judgeinfo['div_prefs'][$div];
-	echo "<tr><th align=\"right\" >".i18n($divnames[$div]).":</th>";
+	echo '<tr><th align="right" >' . i18n($divnames[$div]) . ':</th>';
 	echo " <td>$p/5</td>";
 
-	echo "<td>";
-	$subq=mysql_query("SELECT * FROM projectsubdivisions WHERE 
+	echo '<td>';
+	$subq = $pdo->prepare("SELECT * FROM projectsubdivisions WHERE 
 				projectdivisions_id='$div' AND year='{$config['FAIRYEAR']}' ORDER BY subdivision");
+	$subq->execute();
 	$sd = array();
-	while($subr=mysql_fetch_object($subq)) {
+	while ($subr = $subq->fetch(PDO::FETCH_OBJ)) {
 		if ($u['div_prefs_sub'][$subr->id] == 1) {
 			$sd[] = $subdivr->subdivision;
 		}
 	}
 
 	// Only show subdiv if main div >=3
-	if($p >= 3) echo implode(", ",$sd);
-	else echo "&nbsp;";
+	if ($p >= 3)
+		echo implode(', ', $sd);
+	else
+		echo '&nbsp;';
 
-	echo "</td>";
-	echo "</tr>";
+	echo '</td>';
+	echo '</tr>';
 }
 echo "<tr>\n";
-echo " <th align=\"right\" valign=\"top\">".i18n("Other").":</th>";
+echo ' <th align="right" valign="top">' . i18n('Other') . ':</th>';
 echo " <td colspan=\"2\">{$judgeinfo['expertise_other']}<br />";
 echo " </td>\n";
 echo "</tr>\n";
@@ -229,25 +237,22 @@ echo "</tr>\n";
 echo '</div></div>';
 
 /*
- send_popup_header("Judge Information");
+ * send_popup_header("Judge Information");
  */
 
-
 /*
-echo "<tr>\n";
-echo " <th valign=\"top\" align=\"right\" colspan=\"2\">".i18n("Time Availability").":</th><td colspan=\"2\">";
-$q = mysql_query("SELECT * FROM judges_availability WHERE users_id=\"{$judgeinfo['id']}\" ORDER BY `start`");
-$sel = array();
-while($r=mysql_fetch_object($q)) {
-	$st = substr($r->start, 0, 5);
-	$end = substr($r->end, 0, 5);
-	echo "$st - $end<br />";
-}
-echo "</td></tr>";
-echo "<tr>";
+ * echo "<tr>\n";
+ * echo " <th valign=\"top\" align=\"right\" colspan=\"2\">".i18n("Time Availability").":</th><td colspan=\"2\">";
+ * $q = mysql_query("SELECT * FROM judges_availability WHERE users_id=\"{$judgeinfo['id']}\" ORDER BY `start`");
+ * $sel = array();
+ * while($r=$q->fetch(PDO::FETCH_OBJ)) {
+ * 	$st = substr($r->start, 0, 5);
+ * 	$end = substr($r->end, 0, 5);
+ * 	echo "$st - $end<br />";
+ * }
+ * echo "</td></tr>";
+ * echo "<tr>";
  */
 
-
-
 // send_popup_footer();
 ?>

admin/judges_invite.php

@@ -1,64 +1,62 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- include "judges.inc.php";
+include 'judges.inc.php';
 
- send_header("Invite Judges",
+send_header('Invite Judges',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judges' => 'admin/judges.php')
-			);
- echo "<br />";
- if($_POST['action']=="invite" && $_POST['email'])
- {
- 	$q=mysql_query("SELECT id FROM judges WHERE email='".$_POST['email']."'");
-	if(mysql_num_rows($q))
-	{
-		echo error(i18n("A judge already exists with that email address"));
-	}
-	else
-	{
+		'Judges' => 'admin/judges.php'));
+echo '<br />';
+if ($_POST['action'] == 'invite' && $_POST['email']) {
+	$q = $pdo->prepare("SELECT id FROM judges WHERE email=?");
+	$q->execute([$_POST['email']]);
+	if ($q->rowCount()) {
+		echo error(i18n('A judge already exists with that email address'));
+	} else {
 		$pass = generatePassword();
-		mysql_query("INSERT INTO judges (email,password) VALUES ('".mysql_escape_string(stripslashes($_POST['email']))."','$pass')");
-		email_send("new_judge_invite",stripslashes($_POST['email']),array("FAIRNAME"=>$config['fairname']),array("FAIRNAME"=>$config['fairname'],"EMAIL"=>stripslashes($_POST['email']),"PASSWORD"=>$pass));
+		$hash = password_hash($pass, PASSWORD_BCRYPT);
+		$stmt = $pdo->prepare("INSERT INTO judges (email,password) VALUES (?, ?)");
+		$stmt->execute([$_POST['email'], $hash]);
+		email_send('new_judge_invite', stripslashes($_POST['email']), array('FAIRNAME' => $config['fairname']), array('FAIRNAME' => $config['fairname'], 'EMAIL' => stripslashes($_POST['email']), 'PASSWORD' => $pass));
 
-		echo happy(i18n("%1 has been invited to be a judge",array($_POST['email'])));
+		echo happy(i18n('%1 has been invited to be a judge', array($_POST['email'])));
 	}
 }
 
-
 echo i18n("Enter the judge's email address to invite them to be a judge");
 echo "<br />\n";
 echo "<br />\n";
 echo "<form method=\"post\" action=\"judges_invite.php\">\n";
 echo "<input type=\"hidden\" name=\"action\" value=\"invite\" />\n";
- echo i18n("Email").": ";
+echo i18n('Email') . ': ';
 echo "<input type=\"text\" name=\"email\" size=\"40\" />\n";
- echo "<input type=\"submit\" value=\"".i18n("Invite Judge")."\" />\n";
+echo '<input type="submit" value="' . i18n('Invite Judge') . "\" />\n";
 echo "</form>\n";
 
 send_footer();

admin/judges_jdiv.php

@@ -1,38 +1,38 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- include "judges.inc.php";
+include 'judges.inc.php';
 
- send_header("Judging Division Groupings",
+send_header('Judging Division Groupings',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judges' => 'admin/judges.php')
-				);
- echo i18n("Instructions: The goal is to create groupings that have the least number of divisions/categories required to have at least %1 projects in the group.  %1 is the number of projects that a single team can judge that you have specifed in the judge scheduler configuration. Judge division groupings indicate which divisions/categories can be judged together (by the same team of judges), so the divisons/categories should be somewhat similar to ensure there are judges that can handle judging all divisions assigned to a grouping.",array($config['max_projects_per_team']));
+		'Judges' => 'admin/judges.php'));
+echo i18n('Instructions: The goal is to create groupings that have the least number of divisions/categories required to have at least %1 projects in the group.  %1 is the number of projects that a single team can judge that you have specifed in the judge scheduler configuration. Judge division groupings indicate which divisions/categories can be judged together (by the same team of judges), so the divisons/categories should be somewhat similar to ensure there are judges that can handle judging all divisions assigned to a grouping.', array($config['max_projects_per_team']));
 ?>
 
 <script language="javascript" type="text/javascript">
@@ -56,55 +56,57 @@ function newbuttonclicked(jdivs)
 
 $div = array();
 $divshort = array();
-	$q=mysql_query("SELECT * FROM projectdivisions WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-	while($r=mysql_fetch_object($q)) {
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$divshort[$r->id] = $r->division_shortform;
 	$div[$r->id] = $r->division;
 }
 
 $cat = array();
-	$q=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-	while($r=mysql_fetch_object($q)) {
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$cat[$r->id] = $r->category;
 }
 
 $dkeys = array_keys($div);
 $ckeys = array_keys($cat);
 
-	if($config['filterdivisionbycategory']=="yes") {
-		$q=mysql_query("SELECT * FROM projectcategoriesdivisions_link WHERE year='".$config['FAIRYEAR']."' ORDER BY projectdivisions_id,projectcategories_id");
+if ($config['filterdivisionbycategory'] == 'yes') {
+	$q = $pdo->prepare("SELECT * FROM projectcategoriesdivisions_link WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY projectdivisions_id,projectcategories_id");
+	$q->execute();
 	$divcat = array();
-		while($r=mysql_fetch_object($q)) {
-			$divcat[]=array("c"=>$r->projectcategories_id,"d"=>$r->projectdivisions_id);
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		$divcat[] = array('c' => $r->projectcategories_id, 'd' => $r->projectdivisions_id);
 	}
-
-	}
-	else {
+} else {
 	$divcat = array();
 	foreach ($dkeys AS $d) {
 		foreach ($ckeys AS $c) {
-				$divcat[]=array("c"=>$c,"d"=>$d);
+			$divcat[] = array('c' => $c, 'd' => $d);
 		}
 	}
 }
 
 $langr = array();
-	$q=mysql_query("SELECT * FROM languages WHERE active='Y'");
-	while($r=mysql_fetch_object($q)) {
+$q = $pdo->prepare("SELECT * FROM languages WHERE active='Y'");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$langr[$r->lang] = $r->langname;
 }
 
-
 function get_all_divs()
 {
-	global $config;
+	global $config, $pdo;
 	global $divshort, $div, $cat, $langr;
 	global $divcat;
 
 	$cdlcheck = array();
 	$cdl = array();
-	$q=mysql_query("SELECT * FROM judges_jdiv");
-	while($r=mysql_fetch_object($q)) {
+	$q = $pdo->prepare('SELECT * FROM judges_jdiv');
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		$cdl[$r->id]['id'] = $r->id;
 		$cdl[$r->id]['jdiv'] = $r->jdiv_id;
 		$cdl[$r->id]['div'] = $r->projectdivisions_id;
@@ -126,22 +128,25 @@ function get_all_divs()
 			if ($cdlcheck[$x][$y][$z] == 1)
 				continue;
 
-			/* Also, make an entry in the DB, so that this isn't 
-			 * unassigned anymore */
-			mysql_query("INSERT INTO judges_jdiv (id, jdiv_id, projectdivisions_id, projectcategories_id, lang) ".
-					" VALUES('', 0, '$y', '$x', '$z')"); 
-			$q = mysql_query("SELECT id FROM judges_jdiv WHERE ".
-					" projectdivisions_id='$y' ".
-					" AND projectcategories_id='$x' ".
-					" AND lang='$z' ");
-			$r = mysql_fetch_object($q);
+			/*
+			 * Also, make an entry in the DB, so that this isn't
+			 * unassigned anymore
+			 */
+			$stmt = $pdo->prepare('INSERT INTO judges_jdiv (id, jdiv_id, projectdivisions_id, projectcategories_id, lang) '
+				. " VALUES('', 0, '$y', '$x', '$z')");
+			$stmt->execute();
+			$q = $pdo->prepare('SELECT id FROM judges_jdiv WHERE '
+				. " projectdivisions_id='$y' "
+				. " AND projectcategories_id='$x' "
+				. " AND lang='$z' ");
+			$q->execute();
+			$r = $q->fetch(PDO::FETCH_OBJ);
 
 			$cdl[$r->id]['id'] = $r->id;
 			$cdl[$r->id]['jdiv'] = 0;  /* Unassigned */
 			$cdl[$r->id]['cat'] = $x;
 			$cdl[$r->id]['div'] = $y;
 			$cdl[$r->id]['lang'] = $z;
-
 		}
 		reset($lankeys);
 	}
@@ -153,180 +158,187 @@ function get_all_divs()
 		$x = $cat[$cdl[$id]['cat']];
 		$y = $divshort[$cdl[$id]['div']];
 		$z = $div[$cdl[$id]['div']];
-		$q = mysql_query("SELECT count(projects.id) AS cnt FROM projects,registrations WHERE ".
-			" projectdivisions_id='{$cdl[$id]['div']}' ".
-			" AND projectcategories_id='{$cdl[$id]['cat']}' ".
-			" AND language='{$cdl[$id]['lang']}' ".
-			" AND registrations.year='{$config['FAIRYEAR']}'".
-			" AND projects.registrations_id=registrations.id".
-			" AND (registrations.status='complete' OR registrations.status='paymentpending')");
+		$q = $pdo->prepare('SELECT count(projects.id) AS cnt FROM projects,registrations WHERE '
+			. " projectdivisions_id='{$cdl[$id]['div']}' "
+			. " AND projectcategories_id='{$cdl[$id]['cat']}' "
+			. " AND language='{$cdl[$id]['lang']}' "
+			. " AND registrations.year='{$config['FAIRYEAR']}'"
+			. ' AND projects.registrations_id=registrations.id'
+			. " AND (registrations.status='complete' OR registrations.status='paymentpending')");
+		$q->execute();
 
-		$r = mysql_fetch_object($q);
-		echo mysql_error();
+		$r = $q->fetch(PDO::FETCH_OBJ);
+		show_pdo_errors_if_any($pdo);
 		$c = $r->cnt;
 
-		$cdl[$id]['name'] = "$x $y ({$cdl[$id]['lang']}) ($c project".($c==1?'':'s').")";
-		$cdl[$id]['lname'] = "$x $z ({$cdl[$id]['lang']}) ($c project".($c==1?'':'s').")";
+		$cdl[$id]['name'] = "$x $y ({$cdl[$id]['lang']}) ($c project" . ($c == 1 ? '' : 's') . ')';
+		$cdl[$id]['lname'] = "$x $z ({$cdl[$id]['lang']}) ($c project" . ($c == 1 ? '' : 's') . ')';
 		$cdl[$id]['projects'] = $c;
 	}
 	return $cdl;
 }
 
-	if($_POST['action']=="add" && $_POST['jdiv_id'] && count($_POST['cdllist'])>0)
-	{
+if (get_value_from_array($_POST, 'action') == 'add' && get_value_from_array($_POST, 'jdiv_id') && count(get_value_from_array($_POST, 'cdllist', [])) > 0) {
 	foreach ($_POST['cdllist'] AS $selectedcdl) {
-			$q=mysql_query("UPDATE judges_jdiv SET jdiv_id='{$_POST['jdiv_id']}' WHERE ".
-						" id='$selectedcdl' ");
+		$q = $pdo->prepare("UPDATE judges_jdiv SET jdiv_id='{$_POST['jdiv_id']}' WHERE "
+			. " id='$selectedcdl' ");
+		$q->execute();
 	}
-		echo happy(i18n("Judging Division(s) successfully added"));
+	echo happy(i18n('Judging Division(s) successfully added'));
 }
 
-	if($_GET['action']=="del" && $_GET['cdl_id']) {
-		mysql_query("UPDATE judges_jdiv SET jdiv_id=0 WHERE id='{$_GET['cdl_id']}'");
+if (get_value_from_array($_GET, 'action') == 'del' && get_value_from_array($_GET, 'cdl_id')) {
+	$stmt = $pdo->prepare("UPDATE judges_jdiv SET jdiv_id=0 WHERE id='{$_GET['cdl_id']}'");
+	$stmt->execute();
 }
 
-	if($_GET['action']=="empty" && $_GET['jdiv_id']) {
-		mysql_query("UPDATE judges_jdiv SET jdiv_id=0 WHERE jdiv_id='{$_GET['jdiv_id']}' ");
-		echo happy(i18n("Emptied all divisions from Judging Division Group %1",array($_GET['jdiv_id'])));
+if (get_value_from_array($_GET, 'action') == 'empty' && get_value_from_array($_GET, 'jdiv_id')) {
+	$stmt = $pdo->prepare("UPDATE judges_jdiv SET jdiv_id=0 WHERE jdiv_id='{$_GET['jdiv_id']}' ");
+	$stmt->execute();
+	echo happy(i18n('Emptied all divisions from Judging Division Group %1', array($_GET['jdiv_id'])));
 }
 
-	if($_GET['action']=="recreate") {
+if (get_value_from_array($_GET, 'action') == 'recreate') {
 	// just delete them all, they'll be recreated automagically
-		mysql_query("TRUNCATE TABLE judges_jdiv");
-		echo happy(i18n("Recreated all division/category/language options"));
+	$stmt = $pdo->prepare('TRUNCATE TABLE judges_jdiv');
+	$stmt->execute();
+	echo happy(i18n('Recreated all division/category/language options'));
 }
 
-
 /* Sort out all the judging divisions */
 $cdl = get_all_divs();
 
 $dkeys = array_keys($cdl);
 
-	/* Count the divisions, or, use the posted variable so we can create new 
-	 * and empty judging divisions */
-	if($_POST['jdivs'] > 0) { 
+/*
+ * Count the divisions, or, use the posted variable so we can create new
+ * and empty judging divisions
+ */
+if (get_value_from_array($_POST, 'jdivs') > 0) {
 	$jdivs = $_POST['jdivs'];
 } else {
 	$jdivs = 0;
 	foreach ($dkeys as $d) {
-			if($cdl[$d]['jdiv'] > $jdivs) $jdivs = $cdl[$d]['jdiv'];
+		if ($cdl[$d]['jdiv'] > $jdivs)
+			$jdivs = $cdl[$d]['jdiv'];
 	}
 }
 
 reset($dkeys);
 $showdivlist = false;
 foreach ($dkeys as $id) {
-		if($cdl[$id]['jdiv'] == 0){ $showdivlist=true; break; }
+	if ($cdl[$id]['jdiv'] == 0) {
+		$showdivlist = true;
+		break;
+	}
 }
 
-
-	echo "<form name=\"jdivs\" method=\"post\" action=\"judges_jdiv.php\">";
-	echo "<input type=\"hidden\" name=\"action\">";
+echo '<form name="jdivs" method="post" action="judges_jdiv.php">';
+echo '<input type="hidden" name="action">';
 echo "<input type=\"hidden\" name=\"jdivs\" value=\"$jdivs\">";
-	echo "<input type=\"hidden\" name=\"jdiv_id\">";
-	echo "<input type=\"hidden\" name=\"judges_id\">";
-	echo "<table width=\"100%\">";
-	echo "<tr>";
+echo '<input type="hidden" name="jdiv_id">';
+echo '<input type="hidden" name="judges_id">';
+echo '<table width="100%">';
+echo '<tr>';
 
 if ($showdivlist) {
-		echo "<th width=\"25%\">".i18n("Division List");
-		echo "<br />";
-		echo "</th>";
+	echo '<th width="25%">' . i18n('Division List');
+	echo '<br />';
+	echo '</th>';
 }
-	echo "<th>".i18n("Judging Division Groups")."</th>";
-	echo "</tr>";
-	echo "<tr>";
+echo '<th>' . i18n('Judging Division Groups') . '</th>';
+echo '</tr>';
+echo '<tr>';
 
 if ($showdivlist) {
-		echo "<td valign=\"top\">";
-		echo "<select name=\"cdllist[]\" multiple=\"multiple\" style=\"width: 300px; height: 600px;\">";
+	echo '<td valign="top">';
+	echo '<select name="cdllist[]" multiple="multiple" style="width: 300px; height: 600px;">';
 	/* Print the list of all unassigned divs */
 	reset($dkeys);
 	foreach ($dkeys as $id) {
-			if($cdl[$id]['jdiv'] != 0) continue;
+		if ($cdl[$id]['jdiv'] != 0)
+			continue;
 		echo "<option value=\"$id\">{$cdl[$id]['name']}</option>\n";
 	}
-		echo "</select>";
-		echo "</td>";
+	echo '</select>';
+	echo '</td>';
 }
-	echo "<td valign=\"top\">";
+echo '<td valign="top">';
 
 /* Print he groupings of the assigned ones */
 for ($jdiv = 1; $jdiv <= $jdivs; $jdiv++) {
-		echo "<hr>";
+	echo '<hr>';
 
-		echo "<table width=\"100%\">";
-		echo "<tr><td valign=top width=\"80\">";
+	echo '<table width="100%">';
+	echo '<tr><td valign=top width="80">';
 	if ($showdivlist) {
 		echo "<input onclick=\"addbuttonclicked('$jdiv')\" type=\"button\" value=\"Add &gt;&gt;\"><br />";
 	}
-		echo "<br />";
+	echo '<br />';
 	echo "<a onclick=\"return confirmClick('Are you sure you want to empty all the divisions from this grouping?')\" href=\"judges_jdiv.php?action=empty&jdiv_id=$jdiv \">";
-		echo "<img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\">";		
-		echo " ".i18n("Empty")." ";
-		echo "</a>";
+	echo '<img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '">';
+	echo ' ' . i18n('Empty') . ' ';
+	echo '</a>';
 
-
-		echo "</td><td>";
+	echo '</td><td>';
 
 	$p = 0;
 	reset($dkeys);
 	foreach ($dkeys as $id) {
-			if($cdl[$id]['jdiv'] != $jdiv) continue;
+		if ($cdl[$id]['jdiv'] != $jdiv)
+			continue;
 		$p += $cdl[$id]['projects'];
 	}
 
 	echo "<table class=\"tableedit\" width=\"95%\">\n";
-		echo "<tr><th colspan=\"2\" align=\"left\">Judging Division $jdiv ($p project".($p==1?'':'s').")";
+	echo "<tr><th colspan=\"2\" align=\"left\">Judging Division $jdiv ($p project" . ($p == 1 ? '' : 's') . ')';
 	echo "</th></tr>\n";
 
 	$x = 0;
 	reset($dkeys);
 	foreach ($dkeys as $id) {
-			if($cdl[$id]['jdiv'] != $jdiv) continue;
+		if ($cdl[$id]['jdiv'] != $jdiv)
+			continue;
 
-			echo "<tr><td>";
-			echo "<a href=\"judges_jdiv.php?action=del&cdl_id=$id\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
-			echo "</td><td width=\"100%\">";
+		echo '<tr><td>';
+		echo "<a href=\"judges_jdiv.php?action=del&cdl_id=$id\"><img border=0 src=\"" . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"></a>';
+		echo '</td><td width="100%">';
 
 		echo $cdl[$id]['lname'];
-			echo "</td></tr>";
+		echo '</td></tr>';
 		$x++;
-
 	}
 
 	if ($x) {
-			echo "<tr><td colspan=\"2\">";
+		echo '<tr><td colspan="2">';
 		//			echo "<a onclick=\"return confirmClick('Are you sure you want to empty all the divisions from this grouping?')\" href=\"judges_jdiv.php?action=empty&jdiv_id=$jdiv \">";
 		//			echo " ".i18n("Empty All Divisions")." ";
 		//			echo "<img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\">";
 		//			echo "</a>";
-			echo "</td></tr>";
+		echo '</td></tr>';
 	} else {
-			echo "<tr><td colspan=\"2\">";
-			echo error(i18n("No divisions present"),"inline");
-			echo "</td></tr>";
+		echo '<tr><td colspan="2">';
+		echo error(i18n('No divisions present'), 'inline');
+		echo '</td></tr>';
 	}
 
-		echo "</table>";
+	echo '</table>';
 
-		echo "</td></tr></table>";
+	echo '</td></tr></table>';
 }
-	echo "<hr><input onclick=\"newbuttonclicked('".($jdivs+1)."')\" type=\"button\" value=\"New Judging Divsion Group\">";
+echo '<hr><input onclick="newbuttonclicked(\'' . ($jdivs + 1) . '\')" type="button" value="New Judging Divsion Group">';
 
-	echo "<br />";
+echo '<br />';
 
-	echo "</td></tr>";
-	echo "</table>";
-	echo "</form>";
+echo '</td></tr>';
+echo '</table>';
+echo '</form>';
 
-	echo "<br />";
-	echo "<a onclick=\"return confirmClick('".i18n("Are you sure you want to empty all groupings and re-create the options")."')\" href=\"judges_jdiv.php?action=recreate\">".i18n("Re-create all division/category/language options")."</a>.  ".i18n("This will completely empty ALL of your groupings and recreate all the possibly division/category/language options.  Do this if for example you end up with a division/category that should not exist (due to the config option to filter divisions by category, or due to changing your divisions/categories alltogether)");
-	echo "<br />";
-	echo "<br />";
+echo '<br />';
+echo '<a onclick="return confirmClick(\'' . i18n('Are you sure you want to empty all groupings and re-create the options') . '\')" href="judges_jdiv.php?action=recreate">' . i18n('Re-create all division/category/language options') . '</a>.  ' . i18n('This will completely empty ALL of your groupings and recreate all the possibly division/category/language options.  Do this if for example you end up with a division/category that should not exist (due to the config option to filter divisions by category, or due to changing your divisions/categories alltogether)');
+echo '<br />';
+echo '<br />';
 
 send_footer();
 
-
-
 ?>

admin/judges_sa_launcher.php

@@ -1,16 +1,57 @@
 <?
 
 // make sure logs folder exists, and htaccess it to deny access
-if(!file_exists("../data/logs"))
-	@mkdir("../data/logs");
-
- if(!file_exists("../data/logs/.htaccess"))
- 	@file_put_contents("../data/logs/.htaccess","Order Deny,Allow\r\nDeny From All\r\n");
+if (!file_exists('../data/logs'))
+	@mkdir('../data/logs');
 
+if (!file_exists('../data/logs/.htaccess'))
+	@file_put_contents('../data/logs/.htaccess', "Order Deny,Allow\r\nDeny From All\r\n");
+//   Check which OS we are running
+$pos = strpos(getcwd(), '/');
+if ($pos === false) {
+	// Windows os server.
+	// if IIS Web Server use WScript.Shell 'run' command and.. we need a batch file to start a process and return immediately
+	$bat_filename = '../data/judges_sa.bat';
+	if (file_exists($bat_filename)) {
+		// delete the batch file then re-create it with the current date
+		unlink($bat_filename);
+	}
+	$bat_file = fopen($bat_filename, 'w');
+	if ($bat_file) {
+		fwrite($bat_file, 'ECHO OFF' . "\n");
+		fwrite($bat_file, 'START /BELOWNORMAL /B php judges_sa.php >../data/logs/judge_scheduler_' . date('YmdHis') . '.log 2>&1 &' . "\n");
+		fwrite($bat_file, 'EXIT' . "\n");
+		fclose($bat_file);
+	}
+	$WshShell = new COM('WScript.Shell');
+	//  next line designed for Windows os with IIS web server. It will probably fail if Windows using apache web server
+	try {
+		$oExec = $WshShell->run($bat_filename, 0, false);  // THIS SHOULD WORK for windows using IIS as webserver.
+	} catch (Exception $e) {
+		//  if the wshshell-> run fails then we are perhaps running an apache server and the next might work.
+		//  But, the call in judges_sa_launcher_apache.php does not return until completed so I use this logic
+		//  to inform the user how to get to the status page.
+		//	CAUTION:  This path REQUIRES that php be compiled with CLI option and other things Dennis does not understand!
+		//  This may work for some servers.    NEVER use this on a shared server - you will hog it and get your account suspended.
+		echo ' This server requires manual intervention to start the scheduler and to navigate to the Status page.<br/>';
+		echo ' The scheduler will run at normal priority - which in some servers may present a sluggish response.<br />';
+		echo ' Please follow these instruction exactly:<br />';
+		echo " 1. Click 'Start the Scheduler' link ONCE. (You will not see any change in this screen) <br />";
+		echo "       *** DO NOT Click 'Start the Scheduler' more than once!<br />";
+		echo " 2. Click 'Check the Status' link and wait. (You will be taken to the Status Page. There, you should see that the scheduler is running.) <br />";
+		echo '<br /><a href="judges_sa_launcher_apache.php">Start the Scheduler</a><br /><br />';
+		echo '<a href="judges_scheduler_status.php">Check the Status</a><br />';
+		exit;
+		// This is the call that works - but it does not return until judges_sa is finished so... I launch it from another window
+		//	exec("php judges_sa.php >../data/logs/judge_scheduler_".date("YmdHis").".log 2>&1 &");
+	}
+} else {
+	// *nix server
 	// add PHP_SELF just so when we do a process listing on the server we know which fair its running for
 	// the argument does not get used by the script at all
-exec("nice php judges_sa.php {$_SERVER['PHP_SELF']} >../data/logs/judge_scheduler_".date("YmdHis").".log 2>&1 &");
-usleep(1500000); // 1.5 second to allow the judges_sa to update the % status to 0% otherwise the status page will think its not running if it gets there too soon
-header("Location: judges_scheduler_status.php");
+	exec("nice php judges_sa.php {$_SERVER['PHP_SELF']} >../data/logs/judge_scheduler_" . date('YmdHis') . '.log 2>&1 &');
+}
+// usleep(1500000); // 1.5 second to allow the judges_sa to update the % status to 0% otherwise the status page will think its not running if it gets there too soon
+header('Location: judges_scheduler_status.php');
 exit;
 ?>

admin/judges_sa_launcher_apache.php

@@ -0,0 +1,6 @@
+<?php
+//  In Windows OS with Apache server this exec call will start judges_sa.php as a separate process but the call to exec() does not return until the scheduler completes. Note the process runs at normal priority. Status can be checked with judges_scheduler_status.php. This is a temporary solution for Windows / Apache
+exec('php judges_sa.php >../data/logs/judge_scheduler_' . date('YmdHis') . '.log 2>&1 &');
+exit;
+?>
+

admin/judges_scheduler_status.php

@@ -1,34 +1,33 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this pr<input type=\"submit\" value=\"".i18n("Save Configuration")."\" />\n";
-ogram; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ *    SFIAB Website: http://www.sfiab.ca
+ *
+ *    Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ *    Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ *    This program is free software; you can redistribute it and/or
+ *    modify it under the terms of the GNU General Public
+ *    License as published by the Free Software Foundation, version 2.
+ *
+ *    This program is distributed in the hope that it will be useful,
+ *    but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *     General Public License for more details.
+ *
+ *    You should have received a copy of the GNU General Public License
+ *    along with this program; see the file COPYING.  If not, write to
+ *    the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ *    Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- send_header("Scheduler Status",
+require ('../common.inc.php');
+send_header('Scheduler Status',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judges' => 'admin/judges.php')
-				);
+		'Judges' => 'admin/judges.php'));
 ?>
 
 <script type="text/javascript">
@@ -126,31 +125,30 @@ function format_duration(seconds) {
 </script>
 
 <?
-if($config['judge_scheduler_percent']=="-1") {
-	echo i18n("The judge scheduler is not currently running");
-	echo "<br />";
-	echo "<br />";
-	echo "<a href=\"judges_schedulerconfig.php\">".i18n("Judges Scheduler Configuration")."</a>";
+if ($config['judge_scheduler_percent'] == '-1') {
+	echo i18n('The judge scheduler is not currently running');
+	echo '<br />';
+	echo '<br />';
+	echo '<a href="judges_schedulerconfig.php">' . i18n('Judges Scheduler Configuration') . '</a>';
+} else {
+	echo '<table>';
+	echo '<tr><td>' . i18n('Scheduler status') . ':</td><td><div id="schedulerstatus" style="font-weight: bold;"></div></td></tr>';
+	echo '<tr><td>' . i18n('Scheduler percent') . ':</td><td><div id="schedulerpercent" style="font-weight: bold;"></div></td></tr>';
+	echo '<tr><td>' . i18n('Scheduler ETA') . ':</td><td><div id="schedulereta" style="font-weight: bold;"></div></td></tr>';
+	echo '<tr><td align="center" colspan="2"><div id="updatestatus" style="font-weight: bold; text-align: center;"></div></td></tr>';
+	echo '</table>';
 
-}
-else {
- echo "<table>";
- echo "<tr><td>".i18n("Scheduler status").":</td><td><div id=\"schedulerstatus\" style=\"font-weight: bold;\"></div></td></tr>";
- echo "<tr><td>".i18n("Scheduler percent").":</td><td><div id=\"schedulerpercent\" style=\"font-weight: bold;\"></div></td></tr>";
- echo "<tr><td>".i18n("Scheduler ETA").":</td><td><div id=\"schedulereta\" style=\"font-weight: bold;\"></div></td></tr>";
- echo "<tr><td align=\"center\" colspan=\"2\"><div id=\"updatestatus\" style=\"font-weight: bold; text-align: center;\"></div></td></tr>";
- echo "</table>";
-
- echo "<br />";
- echo i18n("When scheduling is finished, the following links will be useful");
- echo "<br />";
-echo "<a href=\"judges_teams.php\">".i18n("Manage Judge Teams")."</a>";
-echo "<br />";
-echo "<a href=\"judges_teams_members.php\">".i18n("Manage Judge Members")."</a>";
-echo "<br />";
-echo "<a href=\"reports.php\">".i18n("Print/Export Reports")."</a>";
-echo "<br />";
-echo "<br />";
+	echo '<br />';
+	echo i18n('When scheduling is finished, the following links will be useful');
+	echo '<br />';
+	echo '<a href="judges_teams.php">' . i18n('Manage Judge Teams') . '</a>';
+	echo '<br />';
+	echo '<a href="judges_teams_members.php">' . i18n('Manage Judge Members') . '</a>';
+	echo '<br />';
+	echo '<a href="reports.php">' . i18n('Print/Export Reports') . '</a>';
+	echo '<br />';
+	echo '<br />';
+	echo "Note: If you are using Windows Internet Explorer and do not see status updates do this:<br /> Click menu bar 'Tools' then 'Internet Options'.<br /> In the 'General' Tab under 'Browsing history' click 'Settings'.<br /> Under 'Check for newer versions of stored pages:'<br /> Select the option 'Every time I visit the webpage'.<br /> Click OK then OK";
 }
 send_footer();
 

admin/judges_scheduler_status_output.php

@@ -1,13 +1,15 @@
 <?
-include "../data/config.inc.php";
-mysql_connect($DBHOST,$DBUSER,$DBPASS);
-mysql_select_db($DBNAME);
-$q=mysql_query("SELECT val FROM config WHERE year='0' AND var='judge_scheduler_percent'");
-$r=mysql_fetch_object($q);
+include '../data/config.inc.php';
+include '../common.inc.php';
+
+$q = $pdo->prepare("SELECT val FROM config WHERE year='0' AND var='judge_scheduler_percent'");
+$q->execute();
+$r = $q->fetch(PDO::FETCH_OBJ);
 $percent = $r->val;
 
-$q=mysql_query("SELECT val FROM config WHERE year='0' AND var='judge_scheduler_activity'");
-$r=mysql_fetch_object($q);
+$q = $pdo->prepare("SELECT val FROM config WHERE year='0' AND var='judge_scheduler_activity'");
+$q->execute();
+$r = $q->fetch(PDO::FETCH_OBJ);
 $status = $r->val;
 
 echo "$percent:$status\n";

admin/judges_schedulerconfig.php

@@ -1,165 +1,154 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this pr<input type=\"submit\" value=\"".i18n("Save Configuration")."\" />\n";
-ogram; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ *    SFIAB Website: http://www.sfiab.ca
+ *
+ *    Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ *    Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ *    This program is free software; you can redistribute it and/or
+ *    modify it under the terms of the GNU General Public
+ *    License as published by the Free Software Foundation, version 2.
+ *
+ *    This program is distributed in the hope that it will be useful,
+ *    but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *     General Public License for more details.
+ *
+ *    You should have received a copy of the GNU General Public License
+ *    along with this pr<input type=\"submit\" value=\"".i18n("Save Configuration")."\" />\n";
+ * ogram; see the file COPYING.  If not, write to
+ *    the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ *    Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
- require("../config_editor.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
+require ('../config_editor.inc.php');
 user_auth_required('committee', 'admin');
- require("judges.inc.php");
- require("judges_schedulerconfig_check.inc.php");
+require ('judges.inc.php');
+require ('judges_schedulerconfig_check.inc.php');
 
- $action = config_editor_handle_actions("Judge Scheduler", $config['FAIRYEAR'], "var");
+$action = config_editor_handle_actions('Judge Scheduler', $config['FAIRYEAR'], 'var');
 if ($action == 'update') {
- 	header("Location: judges_schedulerconfig.php");
+	header('Location: judges_schedulerconfig.php');
 	exit;
 }
 
-
- send_header("Judge Scheduler Configuration",
+send_header('Judge Scheduler Configuration',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judges' => 'admin/judges.php')
-				);
+		'Judges' => 'admin/judges.php'));
 
- config_editor("Judge Scheduler", $config['FAIRYEAR'], "var", $_SERVER['PHP_SELF']);
- echo "<hr />";
+config_editor('Judge Scheduler', $config['FAIRYEAR'], 'var', $_SERVER['PHP_SELF']);
+echo '<hr />';
 
- if($_GET['action']=="reset")
- {
- 	mysql_query("UPDATE config SET `val`='-1' WHERE `var`='judge_scheduler_percent' AND `year`=0");
-	$config['judge_scheduler_percent']="-1";
-	echo happy(i18n("Judge scheduler status forcibly reset"));
+if (get_value_from_array($_GET, 'action') == 'reset') {
+	$stmt = $pdo->prepare("UPDATE config SET `val`='-1' WHERE `var`='judge_scheduler_percent' AND `year`=0");
+	$stmt->execute();
+	$config['judge_scheduler_percent'] = '-1';
+	echo happy(i18n('Judge scheduler status forcibly reset'));
 }
 
-if($config['judge_scheduler_percent']=="-1")
-{
-
+if ($config['judge_scheduler_percent'] == '-1') {
 	$ok = 1;
 
 	echo "<table class='headertable'><tr><td><h3>Timeslots</h3></td>";
-	echo "<td> - <a href=\"judges_timeslots.php\">".i18n("Timeslot Manager")."</a>";
-	echo "</td></tr></table>";
+	echo '<td> - <a href="judges_timeslots.php">' . i18n('Timeslot Manager') . '</a>';
+	echo '</td></tr></table>';
 
 	$timeslots = judges_scheduler_check_timeslots();
 	if ($timeslots > 0) {
-		echo happy(i18n("There are %1 timeslot(s) defined for divisional judging, good", array($timeslots)));
+		echo happy(i18n('There are %1 timeslot(s) defined for divisional judging, good', array($timeslots)));
 	} else {
-		echo error(i18n("There are no timeslots defined for divisional judging"));
+		echo error(i18n('There are no timeslots defined for divisional judging'));
 		$ok = 0;
 	}
 
 	if ($config['scheduler_enable_sa_scheduling'] == 'yes') {
 		$timeslots = judges_scheduler_check_timeslots_sa();
 		if ($timeslots > 0) {
-			echo happy(i18n("There are %1 timeslot(s) defined for special awards judging, good", array($timeslots)));
+			echo happy(i18n('There are %1 timeslot(s) defined for special awards judging, good', array($timeslots)));
 		} else {
-			echo error(i18n("There are no timeslots defined for special awards judging (but the scheduler is configured to do special awards judging)"));
+			echo error(i18n('There are no timeslots defined for special awards judging (but the scheduler is configured to do special awards judging)'));
 			$ok = 0;
 		}
 	}
 
 	echo "<table class='headertable'><tr><td><h3>Awards</h3></td>";
-	echo "<td> - <a href=\"awards.php\">".i18n("Awards Manager")."</a>";
-	echo "</td></tr></table>";
+	echo '<td> - <a href="awards.php">' . i18n('Awards Manager') . '</a>';
+	echo '</td></tr></table>';
 
 	$missing_awards = judges_scheduler_check_awards();
 	if (count($missing_awards) == 0) {
-		echo happy(i18n("There is a single divisional award for each division/category, good"));
+		echo happy(i18n('There is a single divisional award for each division/category, good'));
 	} else {
-		echo "<br />The following divisional awards problems were identified:<br /><ul>";
+		echo '<br />The following divisional awards problems were identified:<br /><ul>';
 		for ($x = 0; $x < count($missing_awards); $x++) {
-			print($missing_awards[$x]."<br />");
+			print ($missing_awards[$x] . '<br />');
 		}
-		echo "</ul>";
-		echo error(i18n("There needs to be exactly one award for each division/category"));
+		echo '</ul>';
+		echo error(i18n('There needs to be exactly one award for each division/category'));
 		$ok = 0;
 	}
 
 	echo "<table class='headertable'><tr><td><h3>Divisional Judging Groupings</h3></td>";
-	echo "<td> - <a href=\"judges_jdiv.php\">".i18n("Divisional Judging Groupings Manager")."</a>";
-	echo "</td></tr></table>";
+	echo '<td> - <a href="judges_jdiv.php">' . i18n('Divisional Judging Groupings Manager') . '</a>';
+	echo '</td></tr></table>';
 
 	$jdivs = judges_scheduler_check_jdivs();
 	if ($jdivs > 1) {
-		echo happy(i18n("There are %1 divisional groups defined for divisional judging, good", array($jdivs)));
+		echo happy(i18n('There are %1 divisional groups defined for divisional judging, good', array($jdivs)));
 	} else {
-		echo error(i18n("There is not more than 1 divisional groups defined for divisional judging.  Please assign ALL categories/divisions/languages to judging groupings before continuing"));
+		echo error(i18n('There is not more than 1 divisional groups defined for divisional judging.  Please assign ALL categories/divisions/languages to judging groupings before continuing'));
 		$ok = 0;
 	}
 
-	echo "<h3>Projects and Judges</h3><br />";
+	echo '<h3>Projects and Judges</h3><br />';
 
 	$k = judges_scheduler_check_judges();
 
-	if(!$k) $ok=0;
+	if (!$k)
+		$ok = 0;
 
-if($ok)
-{
+	if ($ok) {
 		echo i18n("Everything looks in order, we're ready to create the
 	divisional awards judging teams.  Click link below to start the scheduler.  
 	Please be patient as it may take several minutes find an good solution to 
 	the judging team assignments.");
 
-	echo "<br />";
-	echo "<br />";
+		echo '<br />';
+		echo '<br />';
 
-	echo "<a href=\"judges_sa_launcher.php\">".i18n("Start the judging scheduler to create judging teams and judging schedule")."</a>";
+		echo '<a href="judges_sa_launcher.php">' . i18n('Start the judging scheduler to create judging teams and judging schedule') . '</a>';
+	} else {
+		echo '<br />';
+		echo '<br />';
 
+		echo '<a href="judges_sa_launcher.php">' . i18n('Something above looks bad, but you can start the judging scheduler anyways with the understanding that results will NOT be optimal, or in fact, the scheduler may not work at all!') . '</a>';
 	}
-else {
-	echo "<br />";
-	echo "<br />";
-
-	echo "<a href=\"judges_sa_launcher.php\">".i18n("Something above looks bad, but you can start the judging scheduler anyways with the understanding that results will NOT be optimal, or in fact, the scheduler may not work at all!")."</a>";
+} else {
+	echo '<br />';
+	echo '<b>';
+	echo i18n('The scheduler is currently running');
+	echo '</b>';
+	echo '<br />';
+	echo '<br />';
+	echo '<a href="judges_scheduler_status.php">' . i18n('Click here to check the judging scheduler progress') . '</a>';
+	echo '<br />';
+	echo '<br />';
+	echo '<br />';
+	echo i18n('If the scheduler is not running (and you are 100% sure that it is not!) click the link below to reset the scheduler status');
+	echo '<br />';
+	echo '<a href="judges_schedulerconfig.php?action=reset">' . i18n('Reset judge scheduler status') . '</a>';;
 }
 
-}
-else
-{
-	echo "<br />";
-	echo "<b>";
-	echo i18n("The scheduler is currently running");
-	echo "</b>";
-	echo "<br />";
-	echo "<br />";
-	echo "<a href=\"judges_scheduler_status.php\">".i18n("Click here to check the judging scheduler progress")."</a>";
-	echo "<br />";
-	echo "<br />";
-	echo "<br />";
-	echo i18n("If the scheduler is not running (and you are 100% sure that it is not!) click the link below to reset the scheduler status");
-	echo "<br />";
-	echo "<a href=\"judges_schedulerconfig.php?action=reset\">".i18n("Reset judge scheduler status")."</a>";;
-
-
-}
-
-echo "<br />";
-echo "<br />";
-echo "<br />";
+echo '<br />';
+echo '<br />';
+echo '<br />';
 
 send_footer();
 
-
 ?>

admin/judges_schedulerconfig_check.inc.php

@@ -2,32 +2,35 @@
 
 function judges_scheduler_check_timeslots()
 {
-	global $config;
+	global $config, $pdo;
 
-	$q=mysql_query("SELECT * FROM judges_timeslots WHERE ".
-		" year='".$config['FAIRYEAR']."'".
-		" AND `type`='divisional1'" );
-	if(mysql_num_rows($q)) {
-		$round=mysql_fetch_object($q);
-		$q=mysql_query("SELECT * FROM judges_timeslots WHERE round_id='$round->id' AND type='timeslot'");
-		return mysql_num_rows($q);
-	}
-	else
+	$q = $pdo->prepare('SELECT * FROM judges_timeslots WHERE '
+		. " year='" . $config['FAIRYEAR'] . "'"
+		. " AND `type`='divisional1'");
+	$q->execute();
+	if ($q->rowCount()) {
+		$round = $q->fetch(PDO::FETCH_OBJ);
+		$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE round_id='$round->id' AND type='timeslot'");
+		$q->execute();
+		return $q->rowCount();
+	} else
 		return 0;
 }
 
 function judges_scheduler_check_timeslots_sa()
 {
-	global $config;
+	global $config, $pdo;
 	$rows = 0;
 
-	$q=mysql_query("SELECT * FROM judges_timeslots WHERE ".
-		" year='".$config['FAIRYEAR']."'".
-		" AND `type`='special'" );
-	if(mysql_num_rows($q)) {
-		while((	$round=mysql_fetch_object($q))) {
-			$rq=mysql_query("SELECT * FROM judges_timeslots WHERE round_id='$round->id' AND type='timeslot'");
-			$rows += mysql_num_rows($rq);
+	$q = $pdo->prepare('SELECT * FROM judges_timeslots WHERE '
+		. " year='" . $config['FAIRYEAR'] . "'"
+		. " AND `type`='special'");
+	$q->execute();
+	if ($q->rowCount()) {
+		while (($round = $q->fetch(PDO::FETCH_OBJ))) {
+			$rq = $pdo->prepare("SELECT * FROM judges_timeslots WHERE round_id='$round->id' AND type='timeslot'");
+			$rq->execute();
+			$rows += $rq->rowCount();
 		}
 	}
 	return $rows;
@@ -35,42 +38,42 @@ function judges_scheduler_check_timeslots_sa()
 
 function judges_scheduler_check_awards()
 {
-	global $config;
+	global $config, $pdo;
 
-	$q=mysql_query("SELECT * FROM projectdivisions WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-	while($r=mysql_fetch_object($q))
+	$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ))
 		$div[$r->id] = $r->division;
 
-	$q=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-	while($r=mysql_fetch_object($q))
+	$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ))
 		$cat[$r->id] = $r->category;
 
 	$dkeys = array_keys($div);
 	$ckeys = array_keys($cat);
 
-	if($config['filterdivisionbycategory']=="yes") {
-		$q=mysql_query("SELECT * FROM projectcategoriesdivisions_link WHERE year='".$config['FAIRYEAR']."' ORDER BY projectdivisions_id,projectcategories_id");
+	if ($config['filterdivisionbycategory'] == 'yes') {
+		$q = $pdo->prepare("SELECT * FROM projectcategoriesdivisions_link WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY projectdivisions_id,projectcategories_id");
+		$q->execute();
 		$divcat = array();
-		while($r=mysql_fetch_object($q)) {
-			$divcat[]=array("c"=>$r->projectcategories_id,"d"=>$r->projectdivisions_id);
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			$divcat[] = array('c' => $r->projectcategories_id, 'd' => $r->projectdivisions_id);
 		}
-
-	}
-	else {
+	} else {
 		$divcat = array();
 		foreach ($dkeys AS $d) {
 			foreach ($ckeys AS $c) {
-				$divcat[]=array("c"=>$c,"d"=>$d);
+				$divcat[] = array('c' => $c, 'd' => $d);
 			}
 		}
 	}
 
-
 	$missing_awards = array();
 	foreach ($divcat AS $dc) {
 		$d = $dc['d'];
 		$c = $dc['c'];
-			$q=mysql_query("SELECT award_awards.id FROM 
+		$q = $pdo->prepare("SELECT award_awards.id FROM 
 							award_awards,
 							award_awards_projectcategories,
 							award_awards_projectdivisions
@@ -84,69 +87,76 @@ function judges_scheduler_check_awards()
 							AND award_awards_projectdivisions.projectdivisions_id='$d'
 							AND award_awards.award_types_id='1'
 						");
-						echo mysql_error();
-			if(mysql_num_rows($q)!=1) {
-				$missing_awards[] = "{$cat[$c]} - {$div[$d]} (".i18n("%1 found",array(mysql_num_rows($q))).")";
+		$q->execute();
+		show_pdo_errors_if_any($pdo);
+		if ($q->rowCount() != 1) {
+			$missing_awards[] = "{$cat[$c]} - {$div[$d]} (" . i18n('%1 found', array($q->rowCount())) . ')';
 		}
 	}
 	return $missing_awards;
 }
 
-
 function judges_scheduler_check_jdivs()
 {
-	global $config;
+	global $config, $pdo;
 
-	$q=mysql_query("SELECT DISTINCT jdiv_id FROM judges_jdiv ");
-	$rows = mysql_num_rows($q);
+	$q = $pdo->prepare('SELECT DISTINCT jdiv_id FROM judges_jdiv ');
+	$q->execute();
+	$rows = $q->rowCount();
 
 	return $rows;
 }
 
-
 function judges_scheduler_check_judges()
 {
-	global $config;
+	global $config, $pdo;
 	$ok = 1;
 
 	$jdiv = array();
-	$q=mysql_query("SELECT * FROM judges_jdiv ORDER BY jdiv_id");
-	while($r=mysql_fetch_object($q)) {
+	$projectlanguagetotal = array();
+	$projecttotal = 0;
+
+	$q = $pdo->prepare('SELECT * FROM judges_jdiv ORDER BY jdiv_id');
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		/* Ignore any div/cat with jdiv 0 */
-		if($r->jdiv_id == 0) continue;
+		if ($r->jdiv_id == 0)
+			continue;
 
 		$d = $r->projectdivisions_id;
 		$c = $r->projectcategories_id;
 		$l = $r->lang;
 
-		$qp = mysql_query("SELECT COUNT(projects.id) as cnt FROM projects, registrations WHERE ".
-						" projects.year='".$config['FAIRYEAR']."' AND ".
-						" projectdivisions_id='$d' AND ".
-						" projectcategories_id='$c' AND ".
-						" language='$l' AND " .
-						" registrations.id = projects.registrations_id " .
-						getJudgingEligibilityCode()
-				);
-		$qr = mysql_fetch_object($qp);
+		$qp = $pdo->prepare('SELECT COUNT(projects.id) as cnt FROM projects, registrations WHERE '
+			. " projects.year='" . $config['FAIRYEAR'] . "' AND "
+			. " projectdivisions_id='$d' AND "
+			. " projectcategories_id='$c' AND "
+			. " language='$l' AND "
+			. ' registrations.id = projects.registrations_id '
+			. getJudgingEligibilityCode());
+		$qp->execute();
+		$qr = $qp->fetch(PDO::FETCH_OBJ);
 
+		// if (get_value_from_3d_array($jdiv, $r->jdiv_id, 'num_projects', 'total') !== null){
 		$jdiv[$r->jdiv_id]['num_projects']['total'] += $qr->cnt;
+		// }
+
 		$jdiv[$r->jdiv_id]['num_projects'][$l] += $qr->cnt;
 
 		$projectlanguagetotal[$l] += $qr->cnt;
 		$projecttotal += $qr->cnt;
-		
 	}
 
 	$totalteams['total'] = 0;
-	echo "<table border=1 width=\"85%\"><tr><th></th>".
-		"<th colspan=\"".(count($config['languages'])+1)."\">".i18n("Projects")."</th>".
-		"<th colspan=\"".(count($config['languages'])+1)."\">".i18n("Estimated Required Teams")."</th></tr>";
+	echo '<table border=1 width="85%"><tr><th></th>'
+		. '<th colspan="' . (count($config['languages']) + 1) . '">' . i18n('Projects') . '</th>'
+		. '<th colspan="' . (count($config['languages']) + 1) . '">' . i18n('Estimated Required Teams') . '</th></tr>';
 
-        echo "<tr>";
-        echo "<th></th><th>".i18n("Total")."</th>";
+	echo '<tr>';
+	echo '<th></th><th>' . i18n('Total') . '</th>';
 	foreach ($config['languages'] AS $lkey => $lname)
 		echo "<th>$lkey</th>";
-        echo "<th>".i18n("Total")."</th>";
+	echo '<th>' . i18n('Total') . '</th>';
 	foreach ($config['languages'] AS $lkey => $lname)
 		echo "<th>$lkey</th>";
 	echo "</tr>\n";
@@ -156,21 +166,23 @@ function judges_scheduler_check_judges()
 
 		// total judge teams calculation
 		$t['total'] = ceil($c / $config['max_projects_per_team'] * $config['times_judged']);
-			if($t['total'] < $config['times_judged'] && $c>0) $t['total'] = $config['times_judged'];
+		if ($t['total'] < $config['times_judged'] && $c > 0)
+			$t['total'] = $config['times_judged'];
 		$jdiv[$jdiv_id]['num_jteams']['total'] = $t['total'];
 		$totalteams['total'] += $t['total'];
 		// language teams calculation
 		foreach ($config['languages'] AS $lkey => $lname) {
 			$c = $jd['num_projects'][$lkey];
 			$t['total_' . $lkey] = ceil($c / $config['max_projects_per_team'] * $config['times_judged']);
-				if($t['total_'.$lkey] < $config['times_judged'] && $c>0) $t['total_'.$lkey] = $config['times_judged'];
+			if ($t['total_' . $lkey] < $config['times_judged'] && $c > 0)
+				$t['total_' . $lkey] = $config['times_judged'];
 			$jdiv[$jdiv_id]['num_jteams']['total_' . $lkey] = $t['total_' . $lkey];
 			$totalteams['total_' . $lkey] += $t['total_' . $lkey];
 		}
 
 		echo "<tr><td>Judging Division Group $jdiv_id</td>";
-			echo "<td align=\"center\">$c</td>";
-			$langstr="";
+		echo "<td align=\"center\">{$jd['num_projects']['total']}</td>";
+		$langstr = '';
 		foreach ($config['languages'] AS $lkey => $lname) {
 			$clang = ($jd['num_projects'][$lkey] ? $jd['num_projects'][$lkey] : 0);
 			echo "<td align=\"center\">$clang</td>";
@@ -182,18 +194,18 @@ function judges_scheduler_check_judges()
 			echo "<td align=\"center\">{$t['total_' . $lkey]}</td>";
 		}
 
-        echo "</tr>";
+		echo '</tr>';
 	}
-	echo "</table>";
+	echo '</table>';
 
-	echo "<br />";
-	echo "<b>";
-	echo i18n("Total judging teams required: %1",array($totalteams['total']));
-	echo "<br />";
-	echo "<br />";
+	echo '<br />';
+	echo '<b>';
+	echo i18n('Total judging teams required: %1', array($totalteams['total']));
+	echo '<br />';
+	echo '<br />';
 	$minjudges['total'] = ($totalteams['total'] * $config['min_judges_per_team']);
 	$maxjudges['total'] = ($totalteams['total'] * $config['max_judges_per_team']);
-	echo i18n("Minimum number of judges required: %1",array($minjudges['total']))."<br />";
+	echo i18n('Minimum number of judges required: %1', array($minjudges['total'])) . '<br />';
 
 	foreach ($config['languages'] AS $lkey => $lname) {
 		if ($minjudges['total'] && $projecttotal)
@@ -201,12 +213,12 @@ function judges_scheduler_check_judges()
 		else
 			$minjudges[$lkey] = 0;
 
-        echo "&nbsp;&nbsp; ".i18n("Minimum number of %1 judges required: %2",array($lname,$minjudges[$lkey]))."<br />";
+		echo '&nbsp;&nbsp; ' . i18n('Minimum number of %1 judges required: %2', array($lname, $minjudges[$lkey])) . '<br />';
 	}
 
-	echo i18n("Maximum number of judges needed: %1",array($maxjudges['total']));
-	echo "<br />";
-	echo "<br />";
+	echo i18n('Maximum number of judges needed: %1', array($maxjudges['total']));
+	echo '<br />';
+	echo '<br />';
 
 	/*	$jq=mysql_query("SELECT COUNT(judges.id) AS num FROM judges,judges_years WHERE complete='yes' AND deleted='no' AND judges_years.year='{$config['FAIRYEAR']}' AND judges_years.judges_id=judges.id");
 		$jr=mysql_fetch_object($jq);
@@ -215,10 +227,10 @@ function judges_scheduler_check_judges()
 	$judges = judges_load_all();
 	$currentjudges = count($judges);
 	echo "Current number of registered judges: $currentjudges";
-	echo "</b>";
-	echo "<br />";
+	echo '</b>';
+	echo '<br />';
 	if ($currentjudges < $minjudges['total']) {
-		echo error(i18n("You do not have sufficient number of total judges based on your parameters"));
+		echo error(i18n('You do not have sufficient number of total judges based on your parameters'));
 		$ok = false;
 	}
 
@@ -226,26 +238,25 @@ function judges_scheduler_check_judges()
 		$lcount = 0;
 		foreach ($judges AS $j) {
 			foreach ($j['languages'] AS $jlang) {
-				if($jlang==$lkey) $lcount++;
+				if ($jlang == $lkey)
+					$lcount++;
 			}
 		}
 
 		$currentjudges = $lcount;
-        echo "&nbsp;&nbsp;<b>".i18n("Current number of registered judges that can judge in %1: %2",array($lname,$currentjudges))."</b>";
-        echo "<br />";
+		echo '&nbsp;&nbsp;<b>' . i18n('Current number of registered judges that can judge in %1: %2', array($lname, $currentjudges)) . '</b>';
+		echo '<br />';
 		if ($currentjudges < $minjudges[$lkey]) {
-            echo error(i18n("You do not have sufficient number of %1 judges based on your parameters",array($lname)));
+			echo error(i18n('You do not have sufficient number of %1 judges based on your parameters', array($lname)));
 			$ok = false;
 		}
-
 	}
 
 	if (!$ok) {
-		echo "&nbsp;&nbsp;";
-		echo "<a href=\"judges_schedulerconfig.php\">".i18n("Update Scheduler Configuration")."</a> (".i18n("or get more judges!").")";
-	}
-	else
-		echo happy(i18n("You have a sufficient number of judges based on your parameters"));
+		echo '&nbsp;&nbsp;';
+		echo '<a href="judges_schedulerconfig.php">' . i18n('Update Scheduler Configuration') . '</a> (' . i18n('or get more judges!') . ')';
+	} else
+		echo happy(i18n('You have a sufficient number of judges based on your parameters'));
 
 	// now check if we can find a divisional award for each division and category
 	return $ok;

admin/judges_teams.php

@@ -1,128 +1,145 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- include "judges.inc.php";
+include 'judges.inc.php';
+$action = null;
+if (get_value_from_array($_GET, 'edit'))
+	$edit = get_value_from_array($_GET, 'edit');
+if (get_value_from_array($_POST, 'edit'))
+	$edit = get_value_from_array($_POST, 'edit');
+if (get_value_from_array($_GET, 'action'))
+	$action = get_value_from_array($_GET, 'action');
+if (get_value_from_array($_POST, 'action'))
+	$action = get_value_from_array($_POST, 'action');
 
-	if($_GET['edit']) $edit=$_GET['edit'];
-	if($_POST['edit']) $edit=$_POST['edit'];
-	if($_GET['action']) $action=$_GET['action'];
-	if($_POST['action']) $action=$_POST['action'];
-
-	if($action=="delete" && $_GET['delete'])
-	{
+if ($action == 'delete' && get_value_from_array($_GET, 'delete')) {
 	// ALSO DELETE: team members, timeslots, projects, awards
-		mysql_query("DELETE FROM judges_teams_link WHERE judges_teams_id='".$_GET['delete']."' AND year='".$config['FAIRYEAR']."'");
-		mysql_query("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='".$_GET['delete']."' AND year='".$config['FAIRYEAR']."'");
-		mysql_query("DELETE FROM judges_teams_timeslots_projects_link WHERE judges_teams_id='".$_GET['delete']."' AND year='".$config['FAIRYEAR']."'");
-		mysql_query("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='".$_GET['delete']."' AND year='".$config['FAIRYEAR']."'");
-		mysql_query("DELETE FROM judges_teams WHERE id='".$_GET['delete']."' AND year='".$config['FAIRYEAR']."'");
-		message_push(happy(i18n("Judge team successfully removed, and all of its corresponding members, timeslots, projects and awards unlinked from team")));
+
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_link WHERE judges_teams_id='" . $_GET['delete'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='" . $_GET['delete'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_projects_link WHERE judges_teams_id='" . $_GET['delete'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='" . $_GET['delete'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	$stmt = $pdo->prepare("DELETE FROM judges_teams WHERE id='" . $_GET['delete'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	message_push(happy(i18n('Judge team successfully removed, and all of its corresponding members, timeslots, projects and awards unlinked from team')));
 }
 
-	if($action=="deletealldivisional")
-	{
-		$q2=mysql_query("SELECT *
-				FROM 	
+if (get_value_or_default($action) == 'deletealldivisional') {
+	$q2 = $pdo->prepare("SELECT *
+				FROM \t
 					judges_teams
 				WHERE 
 					year='" . $config['FAIRYEAR'] . "'
 					AND autocreate_type_id='1'
 					");
-					echo mysql_error();
+	show_pdo_errors_if_any($pdo);
 	$numdeleted = 0;
-		while($r2=mysql_fetch_object($q2))
-		{
+	while ($r2 = $q2->fetch(PDO::FETCH_OBJ)) {
 		// okay now we can start deleting things! whew!
 		// first delete any linkings to the team
-			mysql_query("DELETE FROM judges_teams_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams_timeslots_projects_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams WHERE id='$r2->id' AND year='".$config['FAIRYEAR']."'");
+
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_projects_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams WHERE id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
 		$numdeleted++;
 	}
 	if ($numdeleted)
-			message_push(happy(i18n("Successfully deleted %1 auto-created divisional team(s)",array($numdeleted))));
+		message_push(happy(i18n('Successfully deleted %1 auto-created divisional team(s)', array($numdeleted))));
 	else
-			message_push(error(i18n("There were no auto-created divisional teams to delete")));
+		message_push(error(i18n('There were no auto-created divisional teams to delete')));
 }
 
-	if($action=="deleteall")
-	{
-		$q2=mysql_query("SELECT *
-				FROM 	judges_teams
+if (get_value_or_default($action) == 'deleteall') {
+	$q2 = $pdo->prepare("SELECT *
+				FROM \tjudges_teams
 				WHERE 
 					year='" . $config['FAIRYEAR'] . "'
 					");
+	$q2->execute();
 	$numdeleted = 0;
-		while($r2=mysql_fetch_object($q2))
-		{
+	while ($r2 = $q2->FETCH(PDO::FETCH_OBJ)) {
 		// okay now we can start deleting things! whew!
 		// first delete any linkings to the team
-			mysql_query("DELETE FROM judges_teams_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams_timeslots_projects_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='$r2->id' AND year='".$config['FAIRYEAR']."'");
-			mysql_query("DELETE FROM judges_teams WHERE id='$r2->id' AND year='".$config['FAIRYEAR']."'");
+
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_projects_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		$stmt = $pdo->prepare("DELETE FROM judges_teams WHERE id='$r2->id' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
 		$numdeleted++;
 	}
 	if ($numdeleted)
-			message_push(happy(i18n("Successfully deleted %1 team(s)",array($numdeleted))));
+		message_push(happy(i18n('Successfully deleted %1 team(s)', array($numdeleted))));
 	else
-			message_push(error(i18n("There were no teams to delete")));
+		message_push(error(i18n('There were no teams to delete')));
 }
 
-	if(($action=="save" || $action=="assign") && $edit)
-	{
+if ((get_value_or_default($action) == 'save' || $action == 'assign') && $edit) {
 	// if we're updating or assigning, it doesnt matter, lets do the same thing (save record, add award
 	// but when we're done, if we're "assign" then go back to edit that team
 	// if we're save, then go back to the team list
 	$err = false;
-		$q=mysql_query("UPDATE judges_teams SET num='".$_POST['team_num']."', name='".mysql_escape_string(stripslashes($_POST['team_name']))."' WHERE id='$edit'");
-		if(mysql_error())
-		{
+	$q = $pdo->prepare("UPDATE judges_teams SET num='" . $_POST['team_num'] . "', name='" . (stripslashes($_POST['team_name'])) . "' WHERE id='$edit'");
+	$q->execute();
+	if ($pdo->errorInfo()) {
 		$err = true;
-			message_push(error(mysql_error()));
+		message_push(error($pdo->errorInfo()));
 	}
 
-		if($_POST['award'])
-		{
+	if ($_POST['award']) {
 		// we can only have 1 special award assigned to any given team so we'll be able to properly
 		// manage the projects that we assign to the team.  If there was more than one special award
 		// the judges wouldnt know which projects to judge for which award.  This doesnt apply for divisions
 		// because the category/division is obvious based on project numbesr.  A divisional judge team could easily
 		// be assigned to do all of Comp Sci - Junior, Intermediate and Senior without any problems.
-			$q=mysql_query("SELECT award_types.type FROM award_awards, award_types WHERE award_awards.award_types_id=award_types.id AND award_awards.id='".$_POST['award']."'");
-			$aw=mysql_fetch_object($q);
+		$q = $pdo->prepare("SELECT award_types.type FROM award_awards, award_types WHERE award_awards.award_types_id=award_types.id AND award_awards.id='" . $_POST['award'] . "'");
+		$q->execute();
+		$aw = $q->fetch(PDO::FETCHH_OBJ);
 
 		$addaward = true;
-			if($aw->type=="Special")
-			{
-				$q=mysql_query("SELECT COUNT(*) AS num FROM 
+		if ($aw->type == 'Special') {
+			$q = $pdo->prepare("SELECT COUNT(*) AS num FROM 
 							judges_teams_awards_link,
 							award_awards,
 							award_types
@@ -132,71 +149,63 @@
 							AND award_awards.award_types_id=award_types.id
 							AND award_types.type='Special'
 						");
-				$r=mysql_fetch_object($q);
+			$q->exxecute();
+			$r = $q->fetch(PDO::FETCHH_OBJ);
 			echo "special awards: $r->num";
-				if($r->num)
-				{
+			if ($r->num) {
 				$addaward = false;
-					message_push(error(i18n("Sorry, only one Special Award can be assigned to a judging team")));
-				}
-				else
-				{
+				message_push(error(i18n('Sorry, only one Special Award can be assigned to a judging team')));
+			} else {
 				$addaward = true;
 			}
 		}
 
-			if($addaward)
-			{
+		if ($addaward) {
 			// link up the award
-				mysql_query("INSERT INTO judges_teams_awards_link (award_awards_id,judges_teams_id,year) VALUES ('".$_POST['award']."','$edit','".$config['FAIRYEAR']."')");
-				message_push(happy(i18n("Award assigned to team")));
+			$stmt = $pdo->prepare("INSERT INTO judges_teams_awards_link (award_awards_id,judges_teams_id,year) VALUES ('" . $_POST['award'] . "','$edit','" . $config['FAIRYEAR'] . "')");
+			$stmt->execute();
+			message_push(happy(i18n('Award assigned to team')));
 		}
 	}
 
-
-		if($action=="assign")
-			$action="edit";
-		else if($action=="save")
-		{
+	if ($action == 'assign')
+		$action = 'edit';
+	else if ($action == 'save') {
 		if ($err)
-				$action="edit";
-			else
-			{
-				message_push(happy(i18n("Team successfully saved")));
+			$action = 'edit';
+		else {
+			message_push(happy(i18n('Team successfully saved')));
 			unset($action);
 			unset($edit);
 		}
 	}
 }
 
-	if($action=="unassign")
-	{
-		mysql_query("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='$edit' AND award_awards_id='".$_GET['unassign']."' AND year='".$config['FAIRYEAR']."'");
-		message_push(happy(i18n("Award unassigned from judge team")));
+if (get_value_or_default($action) == 'unassign') {
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_awards_link WHERE judges_teams_id='$edit' AND award_awards_id='" . $_GET['unassign'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	message_push(happy(i18n('Award unassigned from judge team')));
 	// keep editing the same team
-		$action="edit";
+	$action = 'edit';
 }
 
-	if($action=="createall")
-	{
+if (get_value_or_default($action) == 'createall') {
 	// first make sure we dont have any non-divisional award teams (dont want people hitting refresh and adding all the teams twice
-		$q=mysql_query("SELECT COUNT(*) AS c FROM judges_teams WHERE autocreate_type_id!='1' AND year='".$config['FAIRYEAR']."'");
-		$r=mysql_fetch_object($q);
-		if($r->c)
-		{
+	$q = $pdo->prepare("SELECT COUNT(*) AS c FROM judges_teams WHERE autocreate_type_id!='1' AND year='" . $config['FAIRYEAR'] . "'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_OBJ);
+	if ($r->c) {
 		message_push(error(i18n("Cannot 'Create All' teams when any divisional teams currently exist.  Try deleting all existing non-divisional teams first.")));
-		}
-		else
-		{
+	} else {
 		// grab all the awards
-			$q=mysql_query("SELECT 
+		$q = $pdo->prepare("SELECT 
 						award_awards.*, 
 						award_types.type AS award_type, 
 						award_types.order AS award_types_order 
-					FROM 	
+					FROM \t
 						award_awards,
 						award_types 
-					WHERE 	
+					WHERE \t
 						award_awards.award_types_id=award_types.id 
 						AND award_awards.year='" . $config['FAIRYEAR'] . "' 
 						AND award_types.year='" . $config['FAIRYEAR'] . "' 
@@ -205,33 +214,52 @@
 						award_types_order, 
 						award_awards.order,
 						name");
+		$q->execute();
+
+		// startat
+		$q2 = $pdo->prepare("SELECT MAX(num) AS lastnum FROM judges_teams WHERE year='{$config['FAIRYEAR']}'");
+		$q2->execute();
+		$r2 = $q2->fetch(PDO::FETCH_OBJ);
+		if ($r2->lastnum)
+			$num = $r2->lastnum + 1;
+		else
 			$num = 1;
-			while($r=mysql_fetch_object($q))
-			{
+
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 			//				print_r($r);
-				$name=mysql_escape_string("($r->award_type) $r->name");
-				mysql_query("INSERT INTO judges_teams(num,name,autocreate_type_id,year) VALUES ('$num','$name','$r->award_types_id','".$config['FAIRYEAR']."')");
-				echo mysql_error();
-				$team_id=mysql_insert_id();
+			$name = "($r->award_type) $r->name";
+			$stmt = $pdo->prepare('INSERT INTO judges_teams (num, name, autocreate_type_id, year) 
+                       VALUES (:num, :name, :autocreate_type_id, :year)');
+			$stmt->bindParam(':num', $num);
+			$stmt->bindParam(':name', $name);
+			$stmt->bindParam(':autocreate_type_id', $r->award_types_id);
+			$stmt->bindParam(':year', $config['FAIRYEAR']);
+			$stmt->execute();
+			show_pdo_errors_if_any($pdo);
+			$team_id = $pdo->lastInsertId();
+			if ($team_id) {
 				// now link the new team to the award
-				mysql_query("INSERT INTO judges_teams_awards_link (award_awards_id,judges_teams_id,year) VALUES ('$r->id','$team_id','".$config['FAIRYEAR']."')");
-				message_push(happy(i18n("Created team #%1: %2",array($num,$name))));
+				$stmt = $pdo->prepare("INSERT INTO judges_teams_awards_link (award_awards_id,judges_teams_id,year) VALUES ('$r->id','$team_id','" . $config['FAIRYEAR'] . "')");
+				$stmt->execute();
+				message_push(happy(i18n('Created team #%1: %2', array($num, $name))));
+			} else {
+				message_push(error(i18n('Error creating team #%1: %2', array($num, $name))));
+			}
 			$num++;
 		}
 	}
 }
 
-	if($action=="add" && $_GET['num'])
-	{
-		mysql_query("INSERT INTO judges_teams(num,year) VALUES ('".$_GET['num']."','".$config['FAIRYEAR']."')");
-		echo mysql_error();
-		$edit=mysql_insert_id();
-		$action="edit";
+if (get_value_or_default($action) == 'add' && $_GET['num']) {
+	$stmt = $pdo->prepare("INSERT INTO judges_teams(num,year) VALUES ('" . $_GET['num'] . "','" . $config['FAIRYEAR'] . "')");
+	$stmt->execute();
+	show_pdo_errors_if_any($pdo);
+	$edit = $pdo->lastInsertId();
+	$action = 'edit';
 }
 
-	if($action=="edit" && $edit)
-	{
-		send_header("Edit Judging Team",
+if (get_value_or_default($action) == 'edit' && $edit) {
+	send_header('Edit Judging Team',
 		array('Committee Main' => 'committee_main.php',
 			'Administration' => 'admin/index.php',
 			'Judges' => 'admin/judges.php',
@@ -249,49 +277,42 @@ function addclicked()
 
 <?
 
-		echo "<br />";
+	echo '<br />';
 	$team = getJudgingTeam($edit);
 
 	if (!$_SESSION['viewstate']['judges_teams_awards_show'])
 		$_SESSION['viewstate']['judges_teams_awards_show'] = 'unassigned';
 	// now update the judges_teams_awards_show viewstate
-		if($_GET['judges_teams_awards_show'])
+	if (get_value_from_array($_GET, 'judges_teams_awards_show'))
 		$_SESSION['viewstate']['judges_teams_awards_show'] = $_GET['judges_teams_awards_show'];
 
-		echo "<form name=\"judges\" method=\"post\" action=\"judges_teams.php\">";
-		echo "<input type=\"hidden\" name=\"action\" value=\"save\">";
+	echo '<form name="judges" method="post" action="judges_teams.php">';
+	echo '<input type="hidden" name="action" value="save">';
 	echo "<input type=\"hidden\" name=\"edit\" value=\"$edit\">";
 
-		echo "<table>";
-		echo "<tr><td>".i18n("Team Number").":</td><td><input type=\"text\" size=\"4\" name=\"team_num\" value=\"".$team['num']."\"></td></tr>";
-		echo "<tr><td>".i18n("Team Name").":</td><td><input type=\"text\" size=\"40\" name=\"team_name\" value=\"".$team['name']."\"></td></tr>";
-		echo "<tr><td>".i18n("Awards").":</td><td>";
+	echo '<table>';
+	echo '<tr><td>' . i18n('Team Number') . ':</td><td><input type="text" size="4" name="team_num" value="' . $team['num'] . '"></td></tr>';
+	echo '<tr><td>' . i18n('Team Name') . ':</td><td><input type="text" size="40" name="team_name" value="' . $team['name'] . '"></td></tr>';
+	echo '<tr><td>' . i18n('Awards') . ':</td><td>';
 
-		if(count($team['awards']))
-		{
-			foreach($team['awards'] AS $award)
-			{
-				echo "<a onclick=\"return confirmClick('Are you sure you want to unassign this award from this team?')\" href=\"judges_teams.php?action=unassign&unassign=".$award['id']."&edit=".$team['id']."\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
-				echo " (".$award['award_type'].") ".$award['name']." <br />";
+	if (count(get_value_from_array($team, 'awards', []))) {
+		foreach ($team['awards'] AS $award) {
+			echo '<a onclick="return confirmClick(\'Are you sure you want to unassign this award from this team?\')" href="judges_teams.php?action=unassign&unassign=' . $award['id'] . '&edit=' . $team['id'] . '"><img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"></a>';
+			echo ' (' . $award['award_type'] . ') ' . $award['name'] . ' <br />';
 		}
 	}
 
-		echo "<table><tr>";
-		if($_SESSION['viewstate']['judges_teams_awards_show']=='all')
-		{
-			echo "<td align=left><a href=\"judges_teams.php?action=edit&edit=$edit&judges_teams_awards_show=unassigned\">".i18n("show unassigned")."</a></td>";
-			echo "<td align=right><b>".i18n("show all")."</b></td>";
+	echo '<table><tr>';
+	if ($_SESSION['viewstate']['judges_teams_awards_show'] == 'all') {
+		echo "<td align=left><a href=\"judges_teams.php?action=edit&edit=$edit&judges_teams_awards_show=unassigned\">" . i18n('show unassigned') . '</a></td>';
+		echo '<td align=right><b>' . i18n('show all') . '</b></td>';
+	} else {
+		echo '<td align=left><b>' . i18n('show unassigned') . '</b></td>';
+		echo "<td align=right><a href=\"judges_teams.php?action=edit&edit=$edit&judges_teams_awards_show=all\">" . i18n('show all') . '</a></td>';
 	}
-		else
-		{
-			echo "<td align=left><b>".i18n("show unassigned")."</b></td>";
-			echo "<td align=right><a href=\"judges_teams.php?action=edit&edit=$edit&judges_teams_awards_show=all\">".i18n("show all")."</a></td>";
+	echo '</tr>';
 
-		}
-		echo "</tr>";
-
-		if($_SESSION['viewstate']['judges_teams_awards_show']=='all')
-		{
+	if ($_SESSION['viewstate']['judges_teams_awards_show'] == 'all') {
 		$querystr = "SELECT 
 					award_awards.id, 
 					award_awards.name, 
@@ -308,9 +329,7 @@ function addclicked()
 					award_type_order,
 					name
 				";
-		}
-		else
-		{
+	} else {
 		$querystr = "SELECT 
 					award_awards.id, 
 					award_awards.name, 
@@ -332,113 +351,102 @@ function addclicked()
 					name";
 	}
 
-		echo "<tr><td colspan=2>";
-		$q=mysql_query($querystr);
+	echo '<tr><td colspan=2>';
+	$q = $pdo->prepare($querystr);
+	$q->execute();
 
-		echo mysql_error();
-		echo "<select name=\"award\">";
-		echo "<option value=\"\">".i18n("Choose award to assign to team")."</option>\n";
+	show_pdo_errors_if_any($pdo);
+	echo '<select name="award">';
+	echo '<option value="">' . i18n('Choose award to assign to team') . "</option>\n";
 
-		while($r=mysql_fetch_object($q))
-		{
+	while ($r = $q->fetch(PDO::FETCHH_OBJ)) {
 		echo "<option value=\"$r->id\">($r->award_type) $r->name</option>\n";
 	}
 
-		echo "</select>";
-		echo "<input type=\"button\" value=\"Add\" onclick=\"addclicked()\">";
-		echo "</td></tr>";
-		echo "</table>";
+	echo '</select>';
+	echo '<input type="button" value="Add" onclick="addclicked()">';
+	echo '</td></tr>';
+	echo '</table>';
 
-		echo "</td></tr>";
-		echo "</table>";
-		echo "<input type=submit value=\"".i18n("Save Changes")."\">";
-		echo "</form>";
-
-
-	}
-	else
-	{
-		send_header("Manage Judging Teams",
+	echo '</td></tr>';
+	echo '</table>';
+	echo '<input type=submit value="' . i18n('Save Changes') . '">';
+	echo '</form>';
+} else {
+	send_header('Manage Judging Teams',
 		array('Committee Main' => 'committee_main.php',
 			'Administration' => 'admin/index.php',
 			'Judges' => 'admin/judges.php'));
-		echo "<br />";
+	echo '<br />';
 
 	$teams = getJudgingTeams();
-		//print_r($teams);
-
-		if(!count($teams))
-		{
-			echo "<a href=\"judges_teams.php?action=createall\">".i18n("Automatically create one new team for every non-divisional award")."</a><br />";
-			echo "<a href=\"judges_teams.php?action=add&num=1\">".i18n("Manually add individual team")."</a><br />";
-		}
-		else
-		{
+	$newteamnum = null;
+	if (count($teams)) {
 		// grab an array of all the current team numbers
 		foreach ($teams AS $team)
 			$teamnumbers[$team['num']] = 1;
 
 		// start at 1, and find the next available team number
 		$newteamnum = 1;
-			while($teamnumbers[$newteamnum]==1)
-			{
+		while (get_value_from_array($teamnumbers, $newteamnum) == 1) {
 			$newteamnum++;
 		}
+	}
 
+	echo '<table width="95%">';
+	echo '<tr><td>';
+	$q = $pdo->prepare("SELECT COUNT(*) AS c FROM judges_teams WHERE autocreate_type_id!='1' AND year='" . $config['FAIRYEAR'] . "'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_OBJ);
+	if (!$r->c) {
+		echo '<a href="judges_teams.php?action=createall">' . i18n('Automatically create one new team for every non-divisional award') . '</a><br />';
+	}
 
-			echo "<table width=\"95%\">";
-			echo "<tr><td>";
-			echo "<a href=\"judges_teams.php?action=add&num=$newteamnum\">Add individual team</a><br />";
-			echo "</td><td>";
-			echo "<a onclick=\"return confirmClick('".i18n("Are you sure you want to delete all teams that are assigned to divisional awards?")."')\" href=\"judges_teams.php?action=deletealldivisional\">Delete all teams assigned to divisional awards</a>";
-			echo "<br />";
-			echo "<a onclick=\"return confirmClick('".i18n("Are you sure you want to delete all teams?")."')\" href=\"judges_teams.php?action=deleteall\">Delete all teams</a><br />";
-			echo "</td></tr></table>";
+	echo "<a href=\"judges_teams.php?action=add&num=$newteamnum\">" . i18n('Manually add individual team') . '</a><br />';
+	echo '</td><td>';
+
+	if (count($teams)) {
+		echo '<a onclick="return confirmClick(\'' . i18n('Are you sure you want to delete all teams that are assigned to divisional awards?') . '\')" href="judges_teams.php?action=deletealldivisional">Delete all teams assigned to divisional awards</a>';
+		echo '<br />';
+		echo '<a onclick="return confirmClick(\'' . i18n('Are you sure you want to delete all teams?') . '\')" href="judges_teams.php?action=deleteall">Delete all teams</a><br />';
+		echo '</td></tr></table>';
 
 		echo "<table class=\"summarytable\">\n";
-			echo "<thead style=\"cursor:pointer\"><tr><th>Num</th>";
-			echo "<th>Team Name</th>";
-			echo "<th>Award(s)</th>";
-			echo "<th>Actions</th>";
-			echo "</tr></thead>";
-			foreach($teams AS $team)
-			{
-				echo "<tr><td>#".$team['num']."</td><td>";
+		echo '<thead style="cursor:pointer"><tr><th>Num</th>';
+		echo '<th>Team Name</th>';
+		echo '<th>Award(s)</th>';
+		echo '<th>Actions</th>';
+		echo '</tr></thead>';
+		foreach ($teams AS $team) {
+			echo '<tr><td>#' . $team['num'] . '</td><td>';
 			echo $team['name'];
-				echo "</td>";
+			echo '</td>';
 
-				echo "<td>";
-				if(count($team['awards']))
-				{
-					foreach($team['awards'] AS $award)
-					{
-						echo $award['name']." <br />";
+			echo '<td>';
+			if (count(get_value_from_array($team, 'awards', []))) {
+				foreach ($team['awards'] AS $award) {
+					echo $award['name'] . ' <br />';
 				}
+			} else {
+				echo error(i18n('No award assigned to team'), 'inline');
 			}
-				else
-				{
-					echo error(i18n("No award assigned to team"),"inline");
-				}
-				echo "</td>";
+			echo '</td>';
 
-				echo " <td align=\"center\">";
-				echo "<a href=\"judges_teams.php?action=edit&edit=".$team['id']."\"><img border=\"0\" src=\"".$config['SFIABDIRECTORY']."/images/16/edit.".$config['icon_extension']."\"></a>";
-				echo "&nbsp;";
-				echo "<a onclick=\"return confirmClick('Are you sure you want to remove this team?')\" href=\"judges_teams.php?action=delete&delete=".$team['id']."\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
+			echo ' <td align="center">';
+			echo '<a href="judges_teams.php?action=edit&edit=' . $team['id'] . '"><img border="0" src="' . $config['SFIABDIRECTORY'] . '/images/16/edit.' . $config['icon_extension'] . '"></a>';
+			echo '&nbsp;';
+			echo '<a onclick="return confirmClick(\'Are you sure you want to remove this team?\')" href="judges_teams.php?action=delete&delete=' . $team['id'] . '"><img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"></a>';
 
 			echo " </td>\n";
 			echo "</tr>\n";
-
-
-
 		}
-			echo "</table>";
-			echo "<script type=\"text/javascript\">$('.summarytable').tablesorter();</script>";
-			echo "<br />";
+		echo '</table>';
+		echo '<script type="text/javascript">$(\'.summarytable\').tablesorter();</script>';
+		echo '<br />';
+	} else {
+		echo '</td></tr></table>';
 	}
 }
 send_footer();
 
-
-
 ?>

admin/judges_teams_members.php

@@ -1,24 +1,25 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -27,11 +28,10 @@
 user_auth_required('committee', 'admin');
 require_once ('judges.inc.php');
 
- send_header("Judging Team Members",
+send_header('Judging Team Members',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judges' => 'admin/judges.php')
-				);
+		'Judges' => 'admin/judges.php'));
 ?>
 <script language="javascript" type="text/javascript">
 function addbuttonclicked(team)
@@ -55,7 +55,7 @@ function switchjudgeinfo()
 	else
 	{
 		document.forms.judges.judgeinfobutton.disabled=true;
-		document.forms.judges.judgeinfobutton.value="<? echo i18n("Judge Info")?>";
+		document.forms.judges.judgeinfobutton.value="<? echo i18n('Judge Info') ?>";
 	}
 
 }
@@ -106,181 +106,219 @@ jQuery(document).ready(function(){
 </script>
 <?
 
-	if($_POST['action']=="add" && $_POST['team_num'] && count($_POST['judgelist'])>0)
-	{
+if (get_value_from_array($_POST, 'action') == 'add' && get_value_from_array($_POST, 'team_num') && count(get_value_from_array($_POST, 'judgelist', [])) > 0) {
 	// first check if this team exists.
-		$q=mysql_query("SELECT id,name FROM judges_teams WHERE num='".$_POST['team_num']."' AND year='".$config['FAIRYEAR']."'");
-		if(mysql_num_rows($q))
-		{
-			$r=mysql_fetch_object($q);
+	$q = $pdo->prepare("SELECT id,name FROM judges_teams WHERE num='" . $_POST['team_num'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$q->execute();
+	if ($q->rowCount()) {
+		$r = $q->fetch(PDO::FETCH_OBJ);
 		$team_id = $r->id;
 		$team_name = $r->name;
 
 		// if the team is empty, we'll add the first person as the captain
 		$team = getJudgingTeam($team_id);
-			if(count($team['members']))
+		if (count(get_value_from_array($team, 'members', [])))
 			$captain = 'no';
 		else
 			$captain = 'yes';
 	}
 	$added = 0;
 
-		foreach($_POST['judgelist'] AS $selectedjudge)
-		{
+	foreach ($_POST['judgelist'] AS $selectedjudge) {
 		// before we insert them, we need to make sure they dont already belong to this team.  We can not have the same judge assigned to the same team multiple times.
 
-			$q=mysql_query("SELECT * FROM judges_teams_link WHERE users_id='$selectedjudge' AND judges_teams_id='$team_id'");
-			if(mysql_num_rows($q))
-			{
-				echo notice(i18n("Judge (%1) already belongs to judging team: %2",array($selectedjudge,$team_name)));
-
-			}
-			else
-			{
+		$q = $pdo->prepare("SELECT * FROM judges_teams_link WHERE users_id='$selectedjudge' AND judges_teams_id='$team_id'");
+		$q->execute();
+		if ($q->rowCount()) {
+			echo notice(i18n('Judge (%1) already belongs to judging team: %2', array($selectedjudge, $team_name)));
+		} else {
 			// lets make the first one we add a captain, the rest, non-captains :)
-				mysql_query("INSERT INTO judges_teams_link (users_id,judges_teams_id,captain,year) VALUES ('$selectedjudge','$team_id','$captain','".$config['FAIRYEAR']."')");	
+			$stmt = $pdo->prepare("INSERT INTO judges_teams_link (users_id,judges_teams_id,captain,year) VALUES ('$selectedjudge','$team_id','$captain','" . $config['FAIRYEAR'] . "')");
+			$stmt->execute();
 			$added++;
 		}
 		// if this is alreayd no, then who cares, but if its the first one that is going into the new team, then
 		// captain will be yes, and we only want the first one assigned to a new team to be the captain
 		// sno now we can set this back to no
 		$captain = 'no';
-
 	}
-		if($added==1) $j=i18n("judge");
-		else $j=i18n("judges");
+	if ($added == 1)
+		$j = i18n('judge');
+	else
+		$j = i18n('judges');
 
-		echo happy(i18n("%1 %2 added to team #%3 (%4)",array($added,$j,$_POST['team_num'],$team_name)));
+	echo happy(i18n('%1 %2 added to team #%3 (%4)', array($added, $j, $_POST['team_num'], $team_name)));
 }
 
-	if($_GET['action']=="del" && $_GET['team_num'] && $_GET['team_id'] && $_GET['users_id'])
-	{
-		mysql_query("DELETE FROM judges_teams_link WHERE users_id='".$_GET['users_id']."' AND judges_teams_id='".$_GET['team_id']."' AND year='".$config['FAIRYEAR']."'");
-		echo happy(i18n("Removed judge from team #%1 (%2)",array($_GET['team_num'],$_GET['team_name'])));
+if (get_value_from_array($_GET, 'action') == 'del' && get_value_from_array($_GET, 'team_num') && get_value_from_array($_GET, 'team_id') && get_value_from_array($_GET, 'users_id')) {
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_link WHERE users_id='" . $_GET['users_id'] . "' AND judges_teams_id='" . $_GET['team_id'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	echo happy(i18n('Removed judge from team #%1 (%2)', array($_GET['team_num'], $_GET['team_name'])));
 
 	// if there is still members left in the team, make sure we have a captain still
-		$q=mysql_query("SELECT * FROM judges_teams_link WHERE judges_teams_id='".$_GET['team_id']."' AND year='".$config['FAIRYEAR']."'");
-		if(mysql_num_rows($q))
-		{
+	$q = $pdo->prepare("SELECT * FROM judges_teams_link WHERE judges_teams_id='" . $_GET['team_id'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$q->execute();
+	if ($q->rowCount()) {
 		// make sure the team still has a captain!
 		// FIXME: this might best come from the "i am willing to be a team captain" question under the judges profile
 		$gotcaptain = false;
 		$first = true;
-			while($r=mysql_fetch_object($q))
-			{
-				if($first)
-				{
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			if ($first) {
 				$firstjudge = $r->users_id;
 				$first = false;
 			}
 
-				if($r->captain=="yes")
-				{
+			if ($r->captain == 'yes') {
 				$gotcaptain = true;
 				break;
 			}
 		}
-			if(!$gotcaptain)
-			{
+		if (!$gotcaptain) {
 			// make the first judge the captain
-				mysql_query("UPDATE judges_teams_link SET captain='yes' WHERE judges_teams_id='".$_GET['team_id']."' AND users_id='$firstjudge' AND year='".$config['FAIRYEAR']."'");	
-				echo notice(i18n("Team captain was removed. A new team captain has been automatically assigned"));
+			$stmt = $pdo->prepare("UPDATE judges_teams_link SET captain='yes' WHERE judges_teams_id='" . $_GET['team_id'] . "' AND users_id='$firstjudge' AND year='" . $config['FAIRYEAR'] . "'");
+			$stmt->execute();
+			echo notice(i18n('Team captain was removed. A new team captain has been automatically assigned'));
 		}
 	}
 }
 
-	if($_GET['action']=="empty" && $_GET['team_num'] && $_GET['team_id'])
-	{
-		mysql_query("DELETE FROM judges_teams_link WHERE judges_teams_id='".$_GET['team_id']."' AND year='".$config['FAIRYEAR']."'");
-		echo happy(i18n("Emptied all judges from team #%1 (%2)",array($_GET['team_num'],$_GET['team_name'])));
+if (get_value_from_array($_GET, 'action') == 'empty' && get_value_from_array($_GET, 'team_num') && get_value_from_array($_GET, 'team_id')) {
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_link WHERE judges_teams_id='" . $_GET['team_id'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$stmt->execute();
+	echo happy(i18n('Emptied all judges from team #%1 (%2)', array($_GET['team_num'], $_GET['team_name'])));
 }
 
-	if($_POST['action']=="saveteamnames")
-	{
-		if(count($_POST['team_names']))
-		{
-			foreach($_POST['team_names'] AS $team_id=>$team_name)
-			{
-				mysql_query("UPDATE judges_teams SET name='".mysql_escape_string(stripslashes($team_name))."' WHERE id='$team_id'");
+if (get_value_from_array($_POST, 'action') == 'saveteamnames') {
+	if (count($_POST['team_names'])) {
+		foreach ($_POST['team_names'] AS $team_id => $team_name) {
+			$stmt = $pdo->prepare("UPDATE judges_teams SET name='" . stripslashes($team_name) . "' WHERE id='$team_id'");
+			$stmt->execute();
+		}
+		echo happy(i18n('Team names successfully saved'));
 	}
-			echo happy(i18n("Team names successfully saved"));
 }
 
-	}
-
-	if($_GET['action']=="addcaptain")
-	{
-
+if (get_value_from_array($_GET, 'action') == 'addcaptain') {
 	// teams can have as many captains as they want, so just add it.
-		mysql_query("UPDATE judges_teams_link SET captain='yes' WHERE judges_teams_id='".$_GET['team_id']."' AND users_id='".$_GET['judge_id']."'");
-		echo happy(i18n("Team captain assigned"));
+	$stmt = $pdo->prepare("UPDATE judges_teams_link SET captain='yes' WHERE judges_teams_id='" . $_GET['team_id'] . "' AND users_id='" . $_GET['judge_id'] . "'");
+	$stmt->execute();
+	echo happy(i18n('Team captain assigned'));
 }
 
-	if($_GET['action']=="removecaptain")
-	{
+if (get_value_from_array($_GET, 'action') == 'removecaptain') {
 	// teams must always have at least one captain, so if we only have one, and we are trying to remove it, dont let them!
-		$q=mysql_query("SELECT * FROM judges_teams_link WHERE captain='yes' AND judges_teams_id='".$_GET['team_id']."'");
-		if(mysql_num_rows($q)<2)
-		{
-			echo error(i18n("A judge team must always have at least one captain"));
+	$q = $pdo->prepare("SELECT * FROM judges_teams_link WHERE captain='yes' AND judges_teams_id='" . $_GET['team_id'] . "'");
+	$q->execute();
+	if ($q->rowCount() < 2) {
+		echo error(i18n('A judge team must always have at least one captain'));
+	} else {
+		$pdo->prepare("UPDATE judges_teams_link SET captain='no' WHERE judges_teams_id='" . $_GET['team_id'] . "' AND users_id='" . $_GET['judge_id'] . "'");
+		$pdo->execute();
+		echo happy(i18n('Team captain removed'));
+	}
+}
+
+if (get_value_from_array($_GET, 'action') == 'autoassignspecial') {
+	/* Load all the judges (judge_complete=yes, deleted=no, year=fairyear) */
+	$judgelist = judges_load_all();
+
+	/* Load all the teams */
+	$teams = array();
+	$q = $pdo->prepare("SELECT * FROM judges_teams WHERE year='{$config['FAIRYEAR']}'");
+	$q->execute();
+	while ($i = $q->fetch(PDO::FETCH_ASSOC)) {
+		$teams[$i['id']] = $i;
+	}
+
+	/* And the links */
+	$links = array();
+	$q = $pdo->prepare("SELECT * FROM judges_teams_link WHERE year='{$config['FAIRYEAR']}'");
+	$q->execute();
+	while ($i = $q->fetch(PDO::FETCH_ASSOC)) {
+		$judgelist[$i['users_id']]['teams_links'][] = $i;
+	}
+
+	$jlist = array();
+
+	/* Remove all judges that have a link */
+	foreach ($judgelist as $j) {
+		if (count($j['teams_links']) == 0 && $j['special_award_only'] == 'yes')
+			$jlist[] = $j['id'];
+	}
+	echo 'We have ' . count($jlist) . ' special awards judges to assign';
+	foreach ($jlist AS $jid) {
+		$j = $judgelist[$jid];
+		if (is_array($j['special_award_selected']) && count($j['special_award_selected'])) {
+			// assing them to ALL teams for ALL awards
+			foreach ($j['special_award_selected'] AS $awardid) {
+				echo "Looking for a team for award $awardid <br />";
+				// find the award id linked to a team
+				$q = $pdo->prepare("SELECT * FROM judges_teams_awards_link WHERE award_awards_id='{$awardid}' AND year='{$config['FAIRYEAR']}'");
+				$q->execute();
+				if ($q->rowCount()) {
+					while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+						$stmt = $pdo->prepare("INSERT INTO judges_teams_link (users_id,judges_teams_id,captain,year) VALUES ('$jid','$r->judges_teams_id','yes','{$config['FAIRYEAR']}')");
+						$stmt->execute();
+						echo happy(i18n('%1 %2 to their special award(s) team(s)', array($j['firstname'], $j['lastname'])));
+					}
+				} else {
+					echo error(i18n('%1 %2 not assigned - No team found that is judging award id %1', array($awardid)));
+				}
+			}
+		} else {
+			echo error(i18n('%1 %2 has indicated special awards only, but didnt selected any awards', array($j['firstname'], $j['lastname'])));
 		}
-		else
-		{
-			mysql_query("UPDATE judges_teams_link SET captain='no' WHERE judges_teams_id='".$_GET['team_id']."' AND users_id='".$_GET['judge_id']."'");
-			echo happy(i18n("Team captain removed"));
 	}
 }
 
 if (!$_SESSION['viewstate']['judges_teams_list_show'])
 	$_SESSION['viewstate']['judges_teams_list_show'] = 'unassigned';
 // now update the judges_teams_list_show viewstate
-	if($_GET['judges_teams_list_show'])
+if (get_value_from_array($_GET, 'judges_teams_list_show'))
 	$_SESSION['viewstate']['judges_teams_list_show'] = $_GET['judges_teams_list_show'];
 
-	echo "<form name=\"judges\" method=\"post\" action=\"judges_teams_members.php\">";
-	echo "<input type=\"hidden\" name=\"action\">";
-	echo "<input type=\"hidden\" name=\"team_id\">";
-	echo "<input type=\"hidden\" name=\"team_num\">";
-	echo "<input type=\"hidden\" name=\"team_name\">";
-	echo "<input type=\"hidden\" name=\"users_id\">";
-	echo "<table>";
-	echo "<tr>";
-	echo "<th>".i18n("Judges List");
-	echo "<br />";
-	echo "<input disabled=\"true\" name=\"judgeinfobutton\" id=\"judgeinfobutton\" onclick=\"showMemberDetails()\" type=\"button\" value=\"".i18n("Judge Info")."\">";
-	echo "</th>";
-	echo "<th>".i18n("Judge Teams")."</th>";
-	echo "</tr>";
-	echo "<tr><td valign=\"top\">";
-	echo "<table width=\"100%\"><tr>";
-	if($_SESSION['viewstate']['judges_teams_list_show']=='all')
-	{
-		echo "<td align=left><a href=\"judges_teams_members.php?judges_teams_list_show=unassigned\">".i18n("show unassigned")."</a></td>";
-		echo "<td align=right><b>".i18n("show all")."</b></td>";
+echo '<form name="judges" method="post" action="judges_teams_members.php">';
+echo '<input type="hidden" name="action">';
+echo '<input type="hidden" name="team_id">';
+echo '<input type="hidden" name="team_num">';
+echo '<input type="hidden" name="team_name">';
+echo '<input type="hidden" name="users_id">';
+echo '<table>';
+echo '<tr>';
+echo '<th>' . i18n('Judges List');
+echo '<br />';
+echo '<input disabled="true" name="judgeinfobutton" id="judgeinfobutton" onclick="showMemberDetails()" type="button" value="' . i18n('Judge Info') . '">';
+echo '</th>';
+echo '<th>' . i18n('Judge Teams') . '</th>';
+echo '</tr>';
+echo '<tr><td valign="top">';
+echo '<table width="100%"><tr>';
+if ($_SESSION['viewstate']['judges_teams_list_show'] == 'all') {
+	echo '<td align=left><a href="judges_teams_members.php?judges_teams_list_show=unassigned">' . i18n('show unassigned') . '</a></td>';
+	echo '<td align=right><b>' . i18n('show all') . '</b></td>';
+} else {
+	echo '<td align=left><b>' . i18n('show unassigned') . '</b></td>';
+	echo '<td align=right><a href="judges_teams_members.php?judges_teams_list_show=all">' . i18n('show all') . '</a></td>';
 }
-	else
-	{
-		echo "<td align=left><b>".i18n("show unassigned")."</b></td>";
-		echo "<td align=right><a href=\"judges_teams_members.php?judges_teams_list_show=all\">".i18n("show all")."</a></td>";
-
-	}
-	echo "</tr></table>";
-
+echo '</tr></table>';
 
 /* Load all the judges (judge_complete=yes, deleted=no, year=fairyear) */
 $judgelist = judges_load_all();
 
 /* Load all the teams */
 $teams = array();
-	$q = mysql_query("SELECT * FROM judges_teams WHERE year='{$config['FAIRYEAR']}'");
-	while($i = mysql_fetch_assoc($q)) {
+$q = $pdo->prepare("SELECT * FROM judges_teams WHERE year='{$config['FAIRYEAR']}'");
+$q->execute();
+while ($i = $q->fetch(PDO::FETCH_ASSOC)) {
 	$teams[$i['id']] = $i;
 }
 
 /* And the links */
 $links = array();
-	$q = mysql_query("SELECT * FROM judges_teams_link WHERE year='{$config['FAIRYEAR']}'");
-	while($i = mysql_fetch_assoc($q)) {
+$q = $pdo->prepare("SELECT * FROM judges_teams_link WHERE year='{$config['FAIRYEAR']}'");
+$q->execute();
+while ($i = $q->fetch(PDO::FETCH_ASSOC)) {
 	$judgelist[$i['users_id']]['teams_links'][] = $i;
 }
 
@@ -288,113 +326,140 @@ jQuery(document).ready(function(){
 if ($_SESSION['viewstate']['judges_teams_list_show'] == 'unassigned') {
 	/* Remove all judges that have a link */
 	foreach ($judgelist as $j) {
-			if(count($j['teams_links']) == 0) $jlist[] = $j['id'];
+		if (count(get_value_from_array($j, 'teams_links', [])) == 0)
+			$jlist[] = $j['id'];
 	}
 } else {
 	$jlist = array_keys($judgelist);
 }
 
-	echo "<center>";
-	echo i18n("Listing %1 judges",array(count($jlist)));
-	echo "<br />";
-	echo "</center>";
-	echo mysql_error();
-	echo "<select name=\"judgelist[]\" onchange=\"switchjudgeinfo()\" multiple=\"multiple\" style=\"width: 250px; height: 600px;\">";
+echo '<center>';
+echo i18n('Listing %1 judges', array(count($jlist)));
+echo '<br />';
+echo '</center>';
+show_pdo_errors_if_any($pdo);
+echo '<select name="judgelist[]" onchange="switchjudgeinfo()" multiple="multiple" style="width: 250px; height: 600px;">';
 
 foreach ($jlist as $jid) {
 	$u = &$judgelist[$jid];
-		if($u['firstname'] && $u['lastname'])
-			echo "<option value=\"$jid\">{$u['firstname']} {$u['lastname']} (" . implode(' ', $u['languages']) . ")</option>\n";
+	if ($u['firstname'] && $u['lastname']) {
+		if ($u['special_award_only'] == 'yes') {
+			$sp = '[sp] ';
+		} else
+			$sp = '';
+		echo "<option value=\"$jid\">{$sp}{$u['firstname']} {$u['lastname']} (" . implode(' ', $u['languages']) . ")</option>\n";
+	}
 }
 unset($u);
 
-	echo "</select>";
-	echo "</td>";
-	echo "<td valign=\"top\">";
+echo '</select>';
+echo '<br />';
+echo "<a href=\"judges_teams_members.php?action=autoassignspecial\">Auto-Assign Special Awards Judges to Special Awards Teams</a>\n";
+echo '</td>';
+echo '<td valign="top">';
 
 $teams = getJudgingTeams();
 
 foreach ($teams AS $team) {
-		echo "<hr>";
+	echo '<hr>';
 
-		echo "<table width=\"100%\">";
-		echo "<tr><td valign=top width=\"80\">";
-		echo "<input onclick=\"addbuttonclicked('".$team['num']."')\" type=\"button\" value=\"Add &gt;&gt;\">";
-		echo "</td><td>";
+	echo '<table width="100%">';
+	echo '<tr><td valign=top width="80">';
+	echo '<input onclick="addbuttonclicked(\'' . $team['num'] . '\')" type="button" value="Add &gt;&gt;">';
+	echo '</td><td>';
 
 	echo "<table width=\"100%\">\n";
-		echo "<tr><th colspan=\"2\" align=\"left\">#".$team['num'].": ";
+	echo '<tr><th colspan="2" align="left">#' . $team['num'] . ': ';
 	echo $team['name'];
 	echo "</th></tr>\n";
-		echo "<tr><td colspan=\"2\">";
+	echo '<tr><td colspan="2">';
 	foreach ($team['rounds'] as $ts) {
-			echo "{$ts['name']}: ".format_time($ts['starttime'])." - ".format_time($ts['endtime'])."<br />";
+		echo "{$ts['name']}: " . format_time($ts['starttime']) . ' - ' . format_time($ts['endtime']) . '<br />';
 	}
-		echo "</td></tr>";
+	echo '</td></tr>';
 
-		if(count($team['members'])) {
+	if (count(get_value_from_array($team, 'members', []))) {
 		foreach ($team['members'] AS $member) {
 			$j = &$judgelist[$member['id']];
-				echo "<tr><td>";
+			echo '<tr><td>';
+
+			/*
+			 * if($team['num']=="89") {
+			 * 	echo "<pre>";
+			 * 	print_r($team);
+			 * 	print_r($j);
+			 * 	echo "</pre>";
+			 * }
+			 */
 
 			$langerr = false;
+			$judgeerr = false;
 			foreach ($team['languages'] AS $teamlang) {
+				if (is_array($j['languages'])) {
 					if (!in_array($teamlang, $j['languages'])) {
 						$langerr = true;
 						break;
 					}
+				} else {
+					$langerr = true;
+				}
 			}
 
-				echo "<a onclick=\"return confirmClick('Are you sure you want to remove this judge from this team?')\" href=\"judges_teams_members.php?action=del&team_id=".$team['id']."&team_num=".$team['num']."&users_id=".$member['id']."&team_name=".rawurlencode($team['name'])."\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
-				echo "</td><td width=\"100%\">";
-				if($langerr) echo "<span class=\"error\" style=\"width: 100%; display: block;\">";
-				if($member['captain']=="yes") {
-					echo "<a title=\"Captain - Click to remove captain status\" href=\"judges_teams_members.php?action=removecaptain&team_id=".$team['id']."&judge_id=".$member['id']."\">";
-					echo "<img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/bookmark.".$config['icon_extension']."\">";
-					echo "</a>&nbsp;";
-
+			if (!$j['id']) {
+				$judgeerr = true;
 			}
-				else {
-					echo "<a title=\"Non-Captain - Click to make a team captain\" href=\"judges_teams_members.php?action=addcaptain&team_id=".$team['id']."&judge_id=".$member['id']."\">";
-					echo "<img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/bookmark_disabled.".$config['icon_extension']."\">";
-					echo "</a>&nbsp;";
 
+			echo '<a onclick="return confirmClick(\'Are you sure you want to remove this judge from this team?\')" href="judges_teams_members.php?action=del&team_id=' . $team['id'] . '&team_num=' . $team['num'] . '&users_id=' . $member['id'] . '&team_name=' . rawurlencode($team['name']) . '"><img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"></a>';
+			echo '</td><td width="100%">';
+			if ($langerr || $judgeerr)
+				echo '<span class="error" style="width: 100%; display: block;">';
+			if ($judgeerr) {
+				echo 'ERROR: this judge is assigned to the team, but they are not an active/complete judge! <br />';
 			}
-				echo "<a  onclick=\"showMemberDetails(" . $member['id'] . ");\">";
-				echo $member['firstname']." ".$member['lastname'];
+
+			if ($member['captain'] == 'yes') {
+				echo '<a title="Captain - Click to remove captain status" href="judges_teams_members.php?action=removecaptain&team_id=' . $team['id'] . '&judge_id=' . $member['id'] . '">';
+				echo '<img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/bookmark.' . $config['icon_extension'] . '">';
+				echo '</a>&nbsp;';
+			} else {
+				echo '<a title="Non-Captain - Click to make a team captain" href="judges_teams_members.php?action=addcaptain&team_id=' . $team['id'] . '&judge_id=' . $member['id'] . '">';
+				echo '<img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/bookmark_disabled.' . $config['icon_extension'] . '">';
+				echo '</a>&nbsp;';
+			}
+			echo '<a  onclick="showMemberDetails(' . $member['id'] . ');">';
+			echo $member['firstname'] . ' ' . $member['lastname'];
 			if (is_array($j['languages']))
 				$l = is_array($j['languages']) ? join(' ', $j['languages']) : '';
 
 			echo "</a>&nbsp;<span style=\"font-size: 1.0em;\">($l)</span>\n";
-				if($langerr) echo "</span>\n";
-				echo "</td></tr>";
+			if ($langerr || $judgeerr)
+				echo "</span>\n";
+			echo '</td></tr>';
 		}
 
-			echo "<tr><td colspan=\"2\">";
-			echo "<a onclick=\"return confirmClick('Are you sure you want to empty all judges from this team?')\" href=\"judges_teams_members.php?action=empty&team_id=".$team['id']."&team_num=".$team['num']."&team_name=".rawurlencode($team['name'])."\">";
-			echo " ".i18n("Empty All Members")." ";
-			echo "<img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\">";
-			echo "</a>";
-			echo "</td></tr>";
-		}
-		else
-		{
-			echo "<tr><td colspan=\"2\">";
-			echo error(i18n("Team has no members"),"inline");
-			echo "</td></tr>";
+		echo '<tr><td colspan="2">';
+		echo '<a onclick="return confirmClick(\'Are you sure you want to empty all judges from this team?\')" href="judges_teams_members.php?action=empty&team_id=' . $team['id'] . '&team_num=' . $team['num'] . '&team_name=' . rawurlencode($team['name']) . '">';
+		echo ' ' . i18n('Empty All Members') . ' ';
+		echo '<img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '">';
+		echo '</a>';
+		echo '</td></tr>';
+	} else {
+		echo '<tr><td colspan="2">';
+		echo error(i18n('Team has no members'), 'inline');
+		echo '</td></tr>';
 	}
 
-		echo "</table>";
+	echo '</table>';
 
-		echo "</td></tr></table>";
+	echo '</td></tr></table>';
 }
 
-	echo "<br />";
+echo '<br />';
 
-	echo "</td></tr>";
-	echo "</table>";
-	echo "</form>";
-	echo '<div id="infodiv" style="background-color: #DDF; border:solid;'
+echo '</td></tr>';
+echo '</table>';
+echo '</form>';
+echo '<div id="infodiv" style="font-size: 1.2em; background-color: #DDF; border:solid;'
 	. ' border-width:1px;'
 	. ' border-color: #000;'
 	. ' position:absolute;'
@@ -407,9 +472,6 @@ jQuery(document).ready(function(){
 	. ' onmouseout="hideMemberDetails();"'
 	. '></div>';
 
-
 send_footer();
 
-
-
 ?>

admin/judges_teams_projects.php

@@ -1,38 +1,38 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("judges.inc.php");
- require("../projects.inc.php");
+require ('judges.inc.php');
+require ('../projects.inc.php');
 
- send_header("Judging Teams Projects",
+send_header('Judging Teams Projects',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judges' => 'admin/judges.php')
-				);
+		'Judges' => 'admin/judges.php'));
 ?>
 <script language="javascript" type="text/javascript">
 function assign(ts)
@@ -56,101 +56,96 @@ function eligibleclick()
 
  <?
 
- 	echo "<br />";
+echo '<br />';
+$action = null;
+if (get_value_from_array($_GET, 'actio'))
+	$action = $_GET['action'];
+else if (get_value_from_array($_POST, 'action'))
+	$action = $_POST['action'];
 
- if($_GET['action']) $action=$_GET['action'];
- else if($_POST['action']) $action=$_POST['action'];
+if (get_value_from_array($_GET, 'edit'))
+	$edit = $_GET['edit'];
+else if (get_value_from_array($_POST, 'edit'))
+	$edit = $_POST['edit'];
 
- if($_GET['edit']) $edit=$_GET['edit'];
- else if($_POST['edit']) $edit=$_POST['edit'];
-
-if(!$_SESSION['viewstate']['judges_projects_list_show'])
+if (!get_value_from_2d_array($_SESSION, 'viewstate', 'judges_projects_list_show'))
 	$_SESSION['viewstate']['judges_projects_list_show'] = 'unassigned';
 // now update the judges_teams_list_show viewstate
-if($_GET['judges_projects_list_show'])
+if (get_value_from_array($_GET, 'judges_projects_list_show'))
 	$_SESSION['viewstate']['judges_projects_list_show'] = $_GET['judges_projects_list_show'];
 
-if(!$_SESSION['viewstate']['judges_projects_list_eligible'])
+if (!get_value_from_2d_array($_SESSION, 'viewstate', 'judges_projects_list_eligible'))
 	$_SESSION['viewstate']['judges_projects_list_eligible'] = 'true';
 // now update the judges_teams_list_show viewstate
-if($_GET['judges_projects_list_eligible'])
+if (get_value_from_array($_GET, 'judges_projects_list_eligible'))
 	$_SESSION['viewstate']['judges_projects_list_eligible'] = $_GET['judges_projects_list_eligible'];
 
-
-if($_GET['action']=="delete" && $_GET['delete'] && $_GET['edit'])
-{
-	mysql_query("DELETE FROM judges_teams_timeslots_projects_link WHERE id='".$_GET['delete']."'");
-	echo happy(i18n("Judging team project successfully removed"));
-	$action="edit";
+if (get_value_from_array($_GET, 'action') == 'delete' && $_GET['delete'] && $_GET['edit']) {
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_projects_link WHERE id='" . $_GET['delete'] . "'");
+	$stmt->execute();
+	echo happy(i18n('Judging team project successfully removed'));
+	$action = 'edit';
 }
 
-
-if($_POST['action']=="assign" && $_POST['edit'] && $_POST['timeslot'] && $_POST['project_id'])
-{
-	mysql_query("INSERT INTO judges_teams_timeslots_projects_link (judges_teams_id,judges_timeslots_id,projects_id,year) VALUES ('".$_POST['edit']."','".$_POST['timeslot']."','".$_POST['project_id']."','".$config['FAIRYEAR']."')");
-	echo happy(i18n("Project assigned to team timeslot"));
+if (get_value_from_array($_POST, 'action') == 'assign' && $_POST['edit'] && $_POST['timeslot'] && $_POST['project_id']) {
+	$stmt = $pdo->prepare("INSERT INTO judges_teams_timeslots_projects_link (judges_teams_id,judges_timeslots_id,projects_id,year) VALUES ('" . $_POST['edit'] . "','" . $_POST['timeslot'] . "','" . $_POST['project_id'] . "','" . $config['FAIRYEAR'] . "')");
+	$stmt->execute();
+	echo happy(i18n('Project assigned to team timeslot'));
 }
 
-$q=mysql_query("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='".$config['FAIRYEAR']."'");
-if(mysql_num_rows($q)>1)
+$q = $pdo->prepare("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='" . $config['FAIRYEAR'] . "'");
+$q->execute();
+if ($q->rowCount() > 1)
 	$show_date = true;
 else
 	$show_date = false;
 
-
-if( ($action=="edit" || $action=="assign" ) && $edit)
- {
-	echo "<a href=\"judges_teams_projects.php\">Back to Judging Teams Projects List</a>";
- 	echo "<form name=\"teamsprojects\" method=\"post\" action=\"judges_teams_projects.php\">";
+if (($action == 'edit' || $action == 'assign') && $edit) {
+	echo '<a href="judges_teams_projects.php">Back to Judging Teams Projects List</a>';
+	echo '<form name="teamsprojects" method="post" action="judges_teams_projects.php">';
 	echo "<input type=\"hidden\" name=\"action\" value=\"assign\">\n";
 	echo "<input type=\"hidden\" name=\"edit\" value=\"$edit\">\n";
 	echo "<input type=\"hidden\" name=\"timeslot\" value=\"\">\n";
 	$team = getJudgingTeam($edit);
 
-	echo "<b>".$team['name']." (#".$team['num'].")</b><br />";
-	if(count($team['members']))
-	{
-		$memberlist="&nbsp;&nbsp;";
-		foreach($team['members'] AS $member)
-		{
-			if($member['captain']=="yes")
-				$memberlist.="<i>";
-			$memberlist.=$member['firstname']." ".$member['lastname'];
-			if($member['captain']=="yes")
-				$memberlist.="</i>";
-			$memberlist.=", ";
+	echo '<b>' . $team['name'] . ' (#' . $team['num'] . ')</b><br />';
+	if (count($team['members'])) {
+		$memberlist = '&nbsp;&nbsp;';
+		foreach ($team['members'] AS $member) {
+			if ($member['captain'] == 'yes')
+				$memberlist .= '<i>';
+			$memberlist .= $member['firstname'] . ' ' . $member['lastname'];
+			if ($member['captain'] == 'yes')
+				$memberlist .= '</i>';
+			$memberlist .= ', ';
 		}
-		echo "<b>".i18n("Judging Team Members").": </b>";
+		echo '<b>' . i18n('Judging Team Members') . ': </b>';
 		$memberlist = substr($memberlist, 0, -2);
-		echo "<br />";
-	}
-	else
-		$memberlist=error(i18n("Team has no members assigned to it.  <a href=\"judges_teams_members.php\">Assign Judges Here</a>"));
+		echo '<br />';
+	} else
+		$memberlist = error(i18n('Team has no members assigned to it.  <a href="judges_teams_members.php">Assign Judges Here</a>'));
 	echo $memberlist;
-	echo "<br />";
-	echo "<br />";
+	echo '<br />';
+	echo '<br />';
 
 	// we need award_ids for use below to get the eligible projects, so lets build the array here while we're displaying the awards
 	$award_ids = array();
-	if(count($team['awards']))
-	{
-		$awardlist="&nbsp;&nbsp;";
-		foreach($team['awards'] AS $award)
-		{
+	if (count($team['awards'])) {
+		$awardlist = '&nbsp;&nbsp;';
+		foreach ($team['awards'] AS $award) {
 			$awardlist .= $award['name'];
-			$awardlist.=", ";
+			$awardlist .= ', ';
 			$award_ids[] = $award['id'];
 		}
-		echo "<b>".i18n("Judging Team Awards").": </b>";
+		echo '<b>' . i18n('Judging Team Awards') . ': </b>';
 		$awardlist = substr($awardlist, 0, -2);
-		echo "<br />";
-	}
-	else
-		$awardlist=error(i18n("Team has no awards assigned to it.  <a href=\"judges_teams.php\">Assign Awards Here</a>"));
+		echo '<br />';
+	} else
+		$awardlist = error(i18n('Team has no awards assigned to it.  <a href="judges_teams.php">Assign Awards Here</a>'));
 	echo $awardlist;
 
 	// get the timeslots that this team has.
-	$q=mysql_query("SELECT 
+	$q = $pdo->prepare("SELECT 
 				judges_timeslots.id,
 				judges_timeslots.date,
 				judges_timeslots.starttime,
@@ -166,41 +161,35 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 			ORDER BY
 				date,starttime
 			");
+	$q->execute();
 
-
-	$numslots=mysql_num_rows($q);
-	if($numslots)
-	{
-
-		echo "<br />";
-		echo "<br />";
+	$numslots = $q - rowCount();
+	if ($numslots) {
+		echo '<br />';
+		echo '<br />';
 		if ($_SESSION['viewstate']['judges_projects_list_eligible'] == 'true')
-			$ch="checked=\"checked\"";
+			$ch = 'checked="checked"';
 		else
-			$ch="";
+			$ch = '';
 
-		echo "<input $ch onclick=\"eligibleclick()\" type=\"checkbox\" name=\"showeligible\"> ".i18n("Only show projects eligible/nominated for awards assigned to this team");
-		echo "<table>";
-		echo "</tr>";
+		echo "<input $ch onclick=\"eligibleclick()\" type=\"checkbox\" name=\"showeligible\"> " . i18n('Only show projects eligible/nominated for awards assigned to this team');
+		echo '<table>';
+		echo '</tr>';
 
-		echo "<tr>";
-		if($_SESSION['viewstate']['judges_projects_list_show']=='all')
-		{
-			echo "<td align=left><a href=\"judges_teams_projects.php?action=$action&edit=$edit&judges_projects_list_show=unassigned\">".i18n("show unassigned")."</a></td>";
-			echo "<td align=right><b>".i18n("show all")."</b></td>";
+		echo '<tr>';
+		if ($_SESSION['viewstate']['judges_projects_list_show'] == 'all') {
+			echo "<td align=left><a href=\"judges_teams_projects.php?action=$action&edit=$edit&judges_projects_list_show=unassigned\">" . i18n('show unassigned') . '</a></td>';
+			echo '<td align=right><b>' . i18n('show all') . '</b></td>';
+		} else {
+			echo '<td align=left><b>' . i18n('show unassigned') . '</b></td>';
+			echo "<td align=right><a href=\"judges_teams_projects.php?action=$action&edit=$edit&judges_projects_list_show=all\">" . i18n('show all') . '</a></td>';
 		}
-		else
-		{
-			echo "<td align=left><b>".i18n("show unassigned")."</b></td>";
-			echo "<td align=right><a href=\"judges_teams_projects.php?action=$action&edit=$edit&judges_projects_list_show=all\">".i18n("show all")."</a></td>";
-		}
-		echo "<td>&nbsp;</td>";
-		echo "</tr>";
-		echo "<tr><td colspan=2>";
+		echo '<td>&nbsp;</td>';
+		echo '</tr>';
+		echo '<tr><td colspan=2>';
 
-		if($_SESSION['viewstate']['judges_projects_list_show']=='all')
-		{
-			$querystr="SELECT 
+		if ($_SESSION['viewstate']['judges_projects_list_show'] == 'all') {
+			$querystr = 'SELECT 
 					projects.id,
 					projects.projectnumber,
 					projects.title,
@@ -210,14 +199,12 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 					registrations
 				WHERE
 					projectnumber is not null 
-					" . getJudgingEligibilityCode(). " AND
+					' . getJudgingEligibilityCode() . " AND
 					projects.registrations_id=registrations.id AND
 					projects.year='" . $config['FAIRYEAR'] . "'
 				ORDER BY
 					projectnumber";
-		}
-		else if($_SESSION['viewstate']['judges_projects_list_show']=='unassigned')
-		{
+		} else if ($_SESSION['viewstate']['judges_projects_list_show'] == 'unassigned') {
 			$querystr = "SELECT 
 					projects.id,
 					projects.projectnumber,
@@ -229,15 +216,17 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 					registrations
 				WHERE
 					projectnumber is not null 
-					" . getJudgingEligibilityCode(). " AND
+					' . getJudgingEligibilityCode(). ' AND
 					projects.registrations_id=registrations.id AND
 					judges_teams_timeslots_projects_link.projects_id IS NULL AND
 					projects.year='" . $config['FAIRYEAR'] . "'
 				ORDER BY
 					projectnumber";
 		}
-		$pq=mysql_query($querystr);
-		echo mysql_error();
+
+		$pq = $pdo->prepare($querystr);
+		$pq->execute();
+		show_pdo_errors_if_any($pdo);
 
 		$eligibleprojects = getProjectsEligibleOrNominatedForAwards($award_ids);
 		//		echo nl2br(print_r($eligibleprojects,true));
@@ -246,49 +235,47 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 		//		echo nl2br(print_r($eligibleprojects,true));
 
 		$numprojects = 0;
-		echo "<select name=\"project_id\">";
-		echo "<option value=\"\">".i18n("Choose Project to Assign to Timeslot")."</option>\n";
-		while($pr=mysql_fetch_object($pq)) {
+		echo '<select name="project_id">';
+		echo '<option value="">' . i18n('Choose Project to Assign to Timeslot') . "</option>\n";
+		while ($pr = $pq->fetch(PDO::FETCH_OBJ)) {
 			if ($_SESSION['viewstate']['judges_projects_list_eligible'] == 'true') {
 				if (in_array($pr->projectnumber, $eligibleprojectsnumbers)) {
 					echo "<option value=\"$pr->id\">$pr->projectnumber - $pr->title</option>\n";
 					$numprojects++;
 				}
-			}
-			else {
+			} else {
 				echo "<option value=\"$pr->id\">$pr->projectnumber - $pr->title</option>\n";
 				$numprojects++;
 			}
 		}
-		echo "</select>";
-		echo "</td><td>";
-		echo i18n("%1 projects listed",array($numprojects));
-		echo "</td></tr>";
-		echo "</table>";
+		echo '</select>';
+		echo '</td><td>';
+		echo i18n('%1 projects listed', array($numprojects));
+		echo '</td></tr>';
+		echo '</table>';
 
-		echo "<br />";
-		echo "<br />";
+		echo '<br />';
+		echo '<br />';
 
-		echo "<table class=\"summarytable\">";
-		echo "<tr>";
-		echo "<th>".i18n("Timeslot")."</th>";
-		echo "<th>".i18n("Project")."</th>";
-		echo "</tr>";
+		echo '<table class="summarytable">';
+		echo '<tr>';
+		echo '<th>' . i18n('Timeslot') . '</th>';
+		echo '<th>' . i18n('Project') . '</th>';
+		echo '</tr>';
 
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			echo '<tr><td>';
 
-		while($r=mysql_fetch_object($q)) {
-			echo "<tr><td>";
-
-			echo "<nobr>";
+			echo '<nobr>';
 			if ($show_date)
-				echo format_date($r->date)."&nbsp;";
+				echo format_date($r->date) . '&nbsp;';
 			echo format_time($r->starttime);
-			echo " - ";
+			echo ' - ';
 			echo format_time($r->endtime);
-			echo "</nobr>";
-			echo "</td><td>";
+			echo '</nobr>';
+			echo '</td><td>';
 
-			$projq=mysql_query("SELECT
+			$projq = $pdo->prepare("SELECT
 						judges_teams_timeslots_projects_link.id AS link_id,
 						projects.projectnumber,
 						projects.id,
@@ -304,44 +291,41 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 					ORDER BY
 						projectnumber
 					");
+			$projq->execute();
 
-		echo mysql_Error();
-			while($proj=mysql_fetch_object($projq)) {
-				echo "<a onclick=\"return confirmClick('Are you sure you want to remove this project from this team timeslot?')\" href=\"judges_teams_projects.php?action=delete&delete=".$proj->link_id."&edit=".$team['id']."\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
+			show_pdo_errors_if_any($pdo);
+			while ($proj = $projq->fetch(PDO::FETCH_OBJ)) {
+				echo '<a onclick="return confirmClick(\'Are you sure you want to remove this project from this team timeslot?\')" href="judges_teams_projects.php?action=delete&delete=' . $proj->link_id . '&edit=' . $team['id'] . '"><img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"></a>';
 				echo "$proj->projectnumber - $proj->title <br />";
-
 			}
-			echo "<input name=\"assignbtn[$r->id]\" type=\"button\" onclick=\"assign('$r->id')\" value=\"".i18n("Assign")."\">";
+			echo "<input name=\"assignbtn[$r->id]\" type=\"button\" onclick=\"assign('$r->id')\" value=\"" . i18n('Assign') . '">';
 
-
-			echo "</td></tr>";
+			echo '</td></tr>';
 		}
-		echo "</table>";
-	}
-	else {
-		echo error(i18n("Team has no timeslots assigned to it.  <a href=\"judges_teams_timeslots.php\">Assign Timeslots Here</a>"));
+		echo '</table>';
+	} else {
+		echo error(i18n('Team has no timeslots assigned to it.  <a href="judges_teams_timeslots.php">Assign Timeslots Here</a>'));
 	}
 
-	echo "</form>";
- }
- else {
-	echo "<input type=\"hidden\" name=\"action\" value=\"assign\">";
+	echo '</form>';
+} else {
+	echo '<input type="hidden" name="action" value="assign">';
 
-	echo "<table class=\"tableview\">";
-	echo "<thead><tr>";
-	echo "<th>".i18n("Team")."</th>";
-	echo "<th>".i18n("Timeslots and Projects")."</th>";
-	echo "</tr></thead>";
+	echo '<table class="tableview">';
+	echo '<thead><tr>';
+	echo '<th>' . i18n('Team') . '</th>';
+	echo '<th>' . i18n('Timeslots and Projects') . '</th>';
+	echo '</tr></thead>';
 
 	$teams = getJudgingTeams();
 	foreach ($teams AS $team) {
-		echo "<tr>";
-		echo "<td width=\"200\">";
-		echo "<b>".$team['name']." (#".$team['num'].")</b><br />";
-		$memberlist="";
-		if(count($team['members'])) {
+		echo '<tr>';
+		echo '<td width="200">';
+		echo '<b>' . $team['name'] . ' (#' . $team['num'] . ')</b><br />';
+		$memberlist = '';
+		if (count(get_value_from_array($team, 'members', []))) {
 			foreach ($team['members'] AS $member) {
-				echo "&nbsp;&nbsp;";
+				echo '&nbsp;&nbsp;';
 				$err = false;
 				foreach ($team['languages_projects'] AS $projectlang) {
 					if (!in_array($projectlang, $member['languages_array'])) {
@@ -349,19 +333,21 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 						break;
 					}
 				}
-				if($err) echo "<span class=\"error\">";
-				if($member['captain']=="yes")
-					echo "<i>";
-				echo $member['firstname']." ".$member['lastname']." (".$member['languages'].")<br />";
-				if($member['captain']=="yes")
-					echo "</i>";
-				if($err) echo "</span>";
+				if ($err)
+					echo '<span class="error">';
+				if ($member['captain'] == 'yes')
+					echo '<i>';
+				echo $member['firstname'] . ' ' . $member['lastname'] . ' (' . $member['languages'] . ')<br />';
+				if ($member['captain'] == 'yes')
+					echo '</i>';
+				if ($err)
+					echo '</span>';
 			}
 		}
-		echo "</td>";
-		echo "<td>";
+		echo '</td>';
+		echo '<td>';
 		// get the timeslots that this team has.
-		$q=mysql_query("SELECT 
+		$q = $pdo->prepare("SELECT 
 					judges_timeslots.id,
 					judges_timeslots.date,
 					judges_timeslots.starttime,
@@ -377,25 +363,26 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 				ORDER BY
 					date,starttime
 				");
-		$numslots=mysql_num_rows($q);
+		$q->execute();
+		$numslots = $q->rowCount();
 
-		echo "<a href=\"judges_teams_projects.php?action=edit&edit=".$team['id']."\">".i18n("Edit team project assignments")."</a>";
+		echo '<a href="judges_teams_projects.php?action=edit&edit=' . $team['id'] . '">' . i18n('Edit team project assignments') . '</a>';
 
-		echo "<table class=\"tableview\" style=\"margin-left: 0px; width: 100%; font-size: 1.0em;\">";
+		echo '<table class="tableview" style="margin-left: 0px; width: 100%; font-size: 1.0em;">';
 
-		while($r=mysql_fetch_object($q)) {
-			echo "<tr><td width=\"100\" align=\"center\">";
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			echo '<tr><td width="100" align="center">';
 
-			echo "<nobr>";
+			echo '<nobr>';
 			if ($show_date)
-				echo format_date($r->date)."&nbsp;";
+				echo format_date($r->date) . '&nbsp;';
 			echo format_time($r->starttime);
-			echo " - ";
+			echo ' - ';
 			echo format_time($r->endtime);
-			echo "</nobr>";
-			echo "</td><td>";
+			echo '</nobr>';
+			echo '</td><td>';
 
-			$projq=mysql_query("SELECT
+			$projq = $pdo->prepare("SELECT
 					projects.projectnumber,
 					projects.id,
 					projects.title,
@@ -411,28 +398,28 @@ if( ($action=="edit" || $action=="assign" ) && $edit)
 				ORDER BY
 					projectnumber
 				");
+			$projq->execute();
 
-			echo mysql_error();
-			while($proj=mysql_fetch_object($projq)) {
+			show_pdo_errors_if_any($pdo);
+			while ($proj = $projq->fetch(PDO::FETCH_OBJ)) {
 				if (!in_array($proj->language, $team['languages_members']))
-                    echo "<span class=\"error\">";
+					echo '<span class="error">';
 
 				echo "$proj->projectnumber - $proj->title ($proj->language)";
 
-                if(!in_array($proj->language,$team['languages'])) 
+				if (!in_array($proj->language, $team['languages_members']))
 					echo "</span>\n";
-                echo "<br />";
+				echo '<br />';
 			}
-			echo "</td></tr>";
+			echo '</td></tr>';
 		}
-		echo "</table>";
+		echo '</table>';
 
-		echo "</td>";
-		echo "</tr>";
+		echo '</td>';
+		echo '</tr>';
 	}
 
-	echo "</table>";
-
+	echo '</table>';
 }
 
 send_footer();

admin/judges_teams_timeslots.php

@@ -1,24 +1,25 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -27,6 +28,8 @@
 user_auth_required('committee', 'admin');
 require_once ('judges.inc.php');
 
+$action = null;
+
 $round_str = array('timeslot' => 'Judging Timeslot',
 	'divisional1' => 'Divisional Round 1',
 	'divisional2' => 'Divisional Round 2',
@@ -37,17 +40,18 @@
 if (array_key_exists('action', $_POST))
 	$action = $_POST['action'];
 
-
- if($action == 'delete' && array_key_exists('delete', $_GET)) {
+if (get_value_from_array($_GET, 'action') && $action == 'delete') {
 	$id = intval($_GET['delete']);
- 	mysql_query("DELETE FROM judges_teams_timeslots_link WHERE id='$id'");
-	message_push(happy(i18n("Judging team timeslot successfully removed")));
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_link WHERE id='$id'");
+	$stmt->execute();
+	message_push(happy(i18n('Judging team timeslot successfully removed')));
 }
 
- if($action == 'empty' && array_key_exists('empty',$_GET)) {
+if (array_key_exists('empty', $_GET) && $action == 'empty') {
 	$id = intval($_GET['empty']);
- 	mysql_query("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='$id'");
-	message_push(happy(i18n("Judging team timeslots successfully removed")));
+	$stmt = $pdo->prepare("DELETE FROM judges_teams_timeslots_link WHERE judges_teams_id='$id'");
+	$stmt->execute();
+	message_push(happy(i18n('Judging team timeslots successfully removed')));
 }
 
 if ($action == 'assign') {
@@ -56,24 +60,21 @@
 	if (count($_POST['teams']) && count($_POST['timeslots'])) {
 		foreach ($_POST['teams'] AS $tm) {
 			foreach ($_POST['timeslots'] AS $ts) {
-				mysql_query("INSERT INTO judges_teams_timeslots_link (judges_teams_id,judges_timeslots_id,year) 
+				$stmt = $pdo->prepare("INSERT INTO judges_teams_timeslots_link (judges_teams_id,judges_timeslots_id,year) 
 						VALUES ('$tm','$ts','{$config['FAIRYEAR']}')");
-
+				$stmt->execute();
 			}
 		}
-		message_push(happy(i18n("%1 Timeslots assigned to %2 teams",array(count($_POST['timeslots']),count($_POST['teams'])))));
+		message_push(happy(i18n('%1 Timeslots assigned to %2 teams', array(count($_POST['timeslots']), count($_POST['teams'])))));
 	} else {
-		message_push(error(i18n("You must select both team(s) and timeslot(s) to assign")));
+		message_push(error(i18n('You must select both team(s) and timeslot(s) to assign')));
 	}
 }
 
-
-
-  send_header("Judging Teams Timeslots",
+send_header('Judging Teams Timeslots',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judges' => 'admin/judges.php')
-				);
+		'Judges' => 'admin/judges.php'));
 
 ?>
 <script language="javascript" type="text/javascript">
@@ -113,96 +114,96 @@ function checkinvert(what)
 
  <?
 
- 	echo "<br />";
+echo '<br />';
 
- 	echo "<form name=\"teamstimeslots\" method=\"post\" action=\"judges_teams_timeslots.php\">";
-	echo "<input type=\"hidden\" name=\"action\" value=\"assign\">";
+echo '<form name="teamstimeslots" method="post" action="judges_teams_timeslots.php">';
+echo '<input type="hidden" name="action" value="assign">';
 
-	echo "Choose timeslots to assign: <br />";
-	echo "<a href=\"\" onclick=\"return checkall('timeslots')\">select all</a>";
-	echo "&nbsp;|&nbsp";
-	echo "<a href=\"\" onclick=\"return checknone('timeslots')\">select none</a>";
-	echo "&nbsp;|&nbsp";
-	echo "<a href=\"\" onclick=\"return checkinvert('timeslots')\">invert selection</a>";
+echo 'Choose timeslots to assign: <br />';
+echo '<a href="" onclick="return checkall(\'timeslots\')">select all</a>';
+echo '&nbsp;|&nbsp';
+echo '<a href="" onclick="return checknone(\'timeslots\')">select none</a>';
+echo '&nbsp;|&nbsp';
+echo '<a href="" onclick="return checkinvert(\'timeslots\')">invert selection</a>';
 
-
-	$q=mysql_query("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='".$config['FAIRYEAR']."'");
-	if(mysql_num_rows($q)>1)
+$q = $pdo->prepare("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='" . $config['FAIRYEAR'] . "'");
+$q->execute();
+if ($q->rowCount() > 1)
 	$show_date = true;
 else
 	$show_date = false;
 
-	echo "<table class=\"summarytable\">";
-	echo "<tr>";
-	echo "<th>&nbsp;</th>";
-	if($show_date)	echo "<th>".i18n("Date")."</th>";
-	echo "<th>".i18n("Start Time")."</th>";
-	echo "<th>".i18n("End Time")."</th>";
+echo '<table class="summarytable">';
+echo '<tr>';
+echo '<th>&nbsp;</th>';
+if ($show_date)
+	echo '<th>' . i18n('Date') . '</th>';
+echo '<th>' . i18n('Start Time') . '</th>';
+echo '<th>' . i18n('End Time') . '</th>';
 echo "</tr>\n";
 
-	$q=mysql_query("SELECT * FROM judges_timeslots 
+$q = $pdo->prepare("SELECT * FROM judges_timeslots 
 			WHERE year='{$config['FAIRYEAR']}' 
 			AND round_id='0' ORDER BY date,starttime");
-	while($r=mysql_fetch_object($q)) {
-		echo "<tr>";
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	echo '<tr>';
 	$span = $show_date ? 4 : 3;
-		echo "<td colspan=\"$span\">{$r->name} (".$round_str[$r->type].")</td>";
-		$qq = mysql_query("SELECT * FROM judges_timeslots 
+	echo "<td colspan=\"$span\">{$r->name} (" . $round_str[$r->type] . ')</td>';
+	$qq = $pdo->prepare("SELECT * FROM judges_timeslots 
 					WHERE round_id='{$r->id}' ORDER BY date,starttime");
-		while($rr = mysql_fetch_object($qq)) {
-			echo "<tr>";
+	$qq->execute();
+	while ($rr = $qq->fetch(PDO::FETCH_OBJ)) {
+		echo '<tr>';
 		echo "<td><input type=\"checkbox\" name=\"timeslots[]\" value=\"{$rr->id}\" /></td>";
-			if($show_date)	echo "<td>".format_date($r->date)."</td>";
-			echo "<td align=\"center\">".format_time($rr->starttime)."</td>";
-			echo "<td align=\"center\">".format_time($rr->endtime)."</td>";
+		if ($show_date)
+			echo '<td>' . format_date($r->date) . '</td>';
+		echo '<td align="center">' . format_time($rr->starttime) . '</td>';
+		echo '<td align="center">' . format_time($rr->endtime) . '</td>';
 		echo "</tr>\n";
 	}
 }
-	echo "</table>";
+echo '</table>';
 
-	echo "<br />";
-	echo "<br />";
-	echo "Choose teams to assign the above selected timeslots to:";
-	echo "<br />";
+echo '<br />';
+echo '<br />';
+echo 'Choose teams to assign the above selected timeslots to:';
+echo '<br />';
 
-	echo "<a href=\"\" onclick=\"return checkall('teams')\">select all</a>";
-	echo "&nbsp;|&nbsp";
-	echo "<a href=\"\" onclick=\"return checknone('teams')\">select none</a>";
-	echo "&nbsp;|&nbsp";
-	echo "<a href=\"\" onclick=\"return checkinvert('teams')\">invert selection</a>";
+echo '<a href="" onclick="return checkall(\'teams\')">select all</a>';
+echo '&nbsp;|&nbsp';
+echo '<a href="" onclick="return checknone(\'teams\')">select none</a>';
+echo '&nbsp;|&nbsp';
+echo '<a href="" onclick="return checkinvert(\'teams\')">invert selection</a>';
 
-	echo "<table class=\"summarytable\">";
-	echo "<tr>";
-	echo "<th>&nbsp;</th>";
-	echo "<th>".i18n("Team")."</th>";
-	echo "<th>".i18n("Timeslots")."</th>";
-	echo "</tr>";
+echo '<table class="summarytable">';
+echo '<tr>';
+echo '<th>&nbsp;</th>';
+echo '<th>' . i18n('Team') . '</th>';
+echo '<th>' . i18n('Timeslots') . '</th>';
+echo '</tr>';
 
 $teams = getJudgingTeams();
-	foreach($teams AS $team)
-	{
-		echo "<tr>";
-		echo "<td><input type=\"checkbox\" name=\"teams[]\" value=\"".$team['id']."\" /></td>";
-		echo "<td>";
-		echo "<b>".$team['name']." (#".$team['num'].")</b><br />";
-		$memberlist="";
-		if(count($team['members']))
-		{
-			foreach($team['members'] AS $member)
-			{
-				echo "&nbsp;&nbsp;";
-				if($member['captain']=="yes")
-					echo "<i>";
-				echo $member['firstname']." ".$member['lastname']."<br />";
-				if($member['captain']=="yes")
-					echo "</i>";
-
+foreach ($teams AS $team) {
+	echo '<tr>';
+	echo '<td><input type="checkbox" name="teams[]" value="' . $team['id'] . '" /></td>';
+	echo '<td>';
+	echo '<b>' . $team['name'] . ' (#' . $team['num'] . ')</b><br />';
+	$memberlist = '';
+	if (count(get_value_from_array($team, 'members', []))) {
+		foreach ($team['members'] AS $member) {
+			echo '&nbsp;&nbsp;';
+			if ($member['captain'] == 'yes')
+				echo '<i>';
+			echo $member['firstname'] . ' ' . $member['lastname'] . '<br />';
+			if ($member['captain'] == 'yes')
+				echo '</i>';
 		}
 	}
-		echo "</td>";
-		echo "<td>";
+	echo '</td>';
+	echo '<td>';
 	// get the timeslots that this team has.
-		$q=mysql_query("SELECT 
+	$q = $pdo->prepare("SELECT 
 					judges_teams_timeslots_link.id,
 					judges_timeslots.date,
 					judges_timeslots.starttime,
@@ -218,34 +219,33 @@ function checkinvert(what)
 				ORDER BY
 					date,starttime
 				");
-		$numslots=mysql_num_rows($q);
+	$q->execute();
+	$numslots = $q->rowCount();
 
-		while($r=mysql_fetch_object($q))
-		{
-			echo "<nobr>";
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		echo '<nobr>';
 		if ($show_date)
 			echo format_date($r->date);
 		echo format_time($r->starttime);
-			echo " - ";
+		echo ' - ';
 		echo format_time($r->endtime);
-			echo "&nbsp;&nbsp;<a onclick=\"return confirmClick('Are you sure you want to remove this timeslot from the team?')\" href=\"judges_teams_timeslots.php?action=delete&delete=$r->id\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"></a>";
-			echo "</nobr>";
-			echo "<br />";
+		echo "&nbsp;&nbsp;<a onclick=\"return confirmClick('Are you sure you want to remove this timeslot from the team?')\" href=\"judges_teams_timeslots.php?action=delete&delete=$r->id\"><img border=0 src=\"" . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"></a>';
+		echo '</nobr>';
+		echo '<br />';
 	}
 	if ($numslots)
-			echo "&nbsp; <a onclick=\"return confirmClick('Are you sure you want to remove all timeslots from the team?')\" href=\"judges_teams_timeslots.php?action=empty&empty=".$team['id']."\"><img border=0 src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\"> remove all</a>";
+		echo '&nbsp; <a onclick="return confirmClick(\'Are you sure you want to remove all timeslots from the team?\')" href="judges_teams_timeslots.php?action=empty&empty=' . $team['id'] . '"><img border=0 src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '"> remove all</a>';
 
-		echo "</td>";
-		echo "</tr>";
+	echo '</td>';
+	echo '</tr>';
 }
 
- echo "</table>";
-
- echo "<br />";
- echo "<br />";
- echo "<input type=\"submit\" value=\"".i18n("Assign selected timeslots to selected teams")."\">";
- echo "</form>";
+echo '</table>';
 
+echo '<br />';
+echo '<br />';
+echo '<input type="submit" value="' . i18n('Assign selected timeslots to selected teams') . '">';
+echo '</form>';
 
 send_footer();
 ?>

admin/judges_timeslots.php

@@ -1,24 +1,25 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -32,17 +33,26 @@
 	'grand' => 'Grand Awards',
 	'special' => 'Special Awards');
 
- if(array_key_exists('action',$_POST)) $action = $_POST['action'];
- else if(array_key_exists('action',$_GET)) $action = $_GET['action'];
- else $action = '';
+if (array_key_exists('action', $_POST))
+	$action = $_POST['action'];
+else if (array_key_exists('action', $_GET))
+	$action = $_GET['action'];
+else
+	$action = '';
 
- if(array_key_exists('round_id',$_POST)) $round_id = intval($_POST['round_id']);
- else if(array_key_exists('round_id',$_GET)) $round_id = intval($_GET['round_id']);
- else $round_id = 0;
+if (array_key_exists('round_id', $_POST))
+	$round_id = intval($_POST['round_id']);
+else if (array_key_exists('round_id', $_GET))
+	$round_id = intval($_GET['round_id']);
+else
+	$round_id = 0;
 
- if(array_key_exists('timeslot_id',$_POST)) $timeslot_id = intval($_POST['timeslot_id']);
- else if(array_key_exists('timeslot_id',$_GET)) $timeslot_id = intval($_GET['timeslot_id']);
- else $timeslot_id = 0;
+if (array_key_exists('timeslot_id', $_POST))
+	$timeslot_id = intval($_POST['timeslot_id']);
+else if (array_key_exists('timeslot_id', $_GET))
+	$timeslot_id = intval($_GET['timeslot_id']);
+else
+	$timeslot_id = 0;
 
 if ($action == 'saveround') {
 	$save = true;
@@ -50,24 +60,25 @@
 	$y = intval($_POST['date_year']);
 	$m = intval($_POST['date_month']);
 	$d = intval($_POST['date_day']);
-	if($y && $m && $d) $date = "$y-$m-$d";
+	if ($y && $m && $d)
+		$date = "$y-$m-$d";
 	else {
 		$save = false;
-		message_push(error(i18n("Date is required")));
+		message_push(error(i18n('Date is required')));
 	}
 
 	if (array_key_exists('starttime_hour', $_POST) && array_key_exists('starttime_minute', $_POST)) {
-		$starttime = sprintf("%02d:%02d:00", intval($_POST['starttime_hour']), intval($_POST['starttime_minute']));
+		$starttime = sprintf('%02d:%02d:00', intval($_POST['starttime_hour']), intval($_POST['starttime_minute']));
 	} else {
 		$save = false;
-		message_push( error(i18n("Start Time is required")));
+		message_push(error(i18n('Start Time is required')));
 	}
 
 	if (array_key_exists('endtime_hour', $_POST) && array_key_exists('endtime_minute', $_POST)) {
-		$endtime = sprintf("%02d:%02d:00", intval($_POST['endtime_hour']), intval($_POST['endtime_minute']));
+		$endtime = sprintf('%02d:%02d:00', intval($_POST['endtime_hour']), intval($_POST['endtime_minute']));
 	} else {
 		$save = false;
-		message_push( error(i18n("End Time is required")));
+		message_push(error(i18n('End Time is required')));
 	}
 
 	$type = $_POST['type'];
@@ -76,75 +87,83 @@
 		message_push(error(i18n('Invalid type specified')));
 	}
 
-	$name = mysql_escape_string(stripslashes($_POST['name']));
+	$name = stripslashes($_POST['name']);
 
 	if ($save == true) {
 		if ($round_id == 0) {
 			/* New entry */
-			mysql_query("INSERT INTO judges_timeslots (round_id,year) VALUES('0','{$config['FAIRYEAR']}')");
-			$round_id = mysql_insert_id();
+			$stmt = $pdo->prepare("INSERT INTO judges_timeslots (round_id,year) VALUES('0','{$config['FAIRYEAR']}')");
+			$stmt->execute();
+			$round_id = $pdo->lastInsertId();
 		}
 
-		mysql_query("UPDATE judges_timeslots SET `date`='$date', 
+		$stmt = $pdo->prepare("UPDATE judges_timeslots SET `date`='$date', 
 								starttime='$starttime', endtime='$endtime',
 								`name`='$name',
 								`type`='$type' WHERE id='$round_id'");
+		$stmt->execute();
 
-		echo mysql_error();
-		message_push(happy(i18n("Round successfully saved")));
+		show_pdo_errors_if_any($pdo);
+		message_push(happy(i18n('Round successfully saved')));
 		$action = '';
 	}
-	
 }
 
 if ($action == 'deleteround') {
- 	mysql_query("DELETE FROM judges_timeslots WHERE id='$round_id'");
+	$stmt = $pdo->prepare("DELETE FROM judges_timeslots WHERE id='$round_id'");
+	$stmt->execute();
 	/* Also delete all timeslots */
- 	mysql_query("DELETE FROM judges_timeslots WHERE round_id='$round_id'");
-	message_push(happy(i18n("Round successfully removed")));
+
+	$stmt = $pdo->prepare("DELETE FROM judges_timeslots WHERE round_id='$round_id'");
+	$stmt->execute();
+	message_push(happy(i18n('Round successfully removed')));
 	$action = '';
 }
 if ($action == 'deletetimeslot') {
- 	mysql_query("DELETE FROM judges_timeslots WHERE id='$timeslot_id'");
-	message_push(happy(i18n("Timeslot successfully removed")));
+	$stmt = $pdo->prepare("DELETE FROM judges_timeslots WHERE id='$timeslot_id'");
+	$stmt->execute();
+	message_push(happy(i18n('Timeslot successfully removed')));
 	$action = '';
 }
 
 if ($action == 'savetimeslot') {
 	$save = true;
 
-	$q = mysql_query("SELECT * FROM judges_timeslots WHERE id='$round_id'");
-	$round_data = mysql_fetch_assoc($q);
+	$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE id='$round_id'");
+	$q->execute();
+	$round_data = $q->fetch(PDO::FETCH_ASSOC);
 
 	$date = $round_data['date'];
 
 	if (array_key_exists('starttime_hour', $_POST) && array_key_exists('starttime_minute', $_POST)) {
-		$starttime = sprintf("%02d:%02d:00", intval($_POST['starttime_hour']), intval($_POST['starttime_minute']));
+		$starttime = sprintf('%02d:%02d:00', intval($_POST['starttime_hour']), intval($_POST['starttime_minute']));
 	} else {
 		$save = false;
-		message_push( error(i18n("Start Time is required")));
+		message_push(error(i18n('Start Time is required')));
 	}
 
 	if (array_key_exists('endtime_hour', $_POST) && array_key_exists('endtime_minute', $_POST)) {
-		$endtime = sprintf("%02d:%02d:00", intval($_POST['endtime_hour']), intval($_POST['endtime_minute']));
+		$endtime = sprintf('%02d:%02d:00', intval($_POST['endtime_hour']), intval($_POST['endtime_minute']));
 	} else {
 		$save = false;
-		message_push( error(i18n("End Time is required")));
+		message_push(error(i18n('End Time is required')));
 	}
 
 	if ($save == true) {
 		if ($timeslot_id == 0) {
 			/* New entry */
-			mysql_query("INSERT INTO judges_timeslots (round_id,date,type,year) VALUES('$round_id',
+			$stmt = $pdo->prepare("INSERT INTO judges_timeslots (round_id,date,type,year) VALUES('$round_id',
 								'$date','timeslot','{$config['FAIRYEAR']}')");
-			$timeslot_id = mysql_insert_id();
+			$stmt->execute();
+			$timeslot_id = $pdo->lastInsertId();
 		}
 
-		mysql_query("UPDATE judges_timeslots SET starttime='$starttime', endtime='$endtime'
+		$stmt = $pdo->prepare("UPDATE judges_timeslots SET starttime='$starttime', endtime='$endtime'
 								WHERE id='$timeslot_id'");
+		$stmt->execute();
 
-		echo mysql_error();
-		message_push(happy(i18n("Timeslot successfully saved")));
+		show_pdo_errors_if_any($pdo);
+		message_push(happy(i18n('Timeslot successfully saved')));
 		$action = '';
 	}
 }
@@ -157,9 +176,9 @@
 	$break = intval($_POST['break']);
 
 	if (array_key_exists('starttime_hour', $_POST) && array_key_exists('starttime_minute', $_POST) && $addnum && $duration) {
-	    	
-		$q = mysql_query("SELECT * FROM judges_timeslots WHERE id='$round_id'");
-		$round_data = mysql_fetch_assoc($q);
+		$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE id='$round_id'");
+		$q->execute();
+		$round_data = $q->fetch(PDO::FETCH_ASSOC);
 
 		$date = $round_data['date'];
 
@@ -169,231 +188,235 @@
 		$tt = $duration + $break;
 
 		for ($x = 0; $x < $addnum; $x++) {
-			$q=mysql_query("SELECT 	DATE_ADD('$date $hr:$min:00', INTERVAL $duration MINUTE) AS endtime, 
+			$q = $pdo->prepare("SELECT \tDATE_ADD('$date $hr:$min:00', INTERVAL $duration MINUTE) AS endtime, 
 						DATE_ADD('$date $hr:$min:00', INTERVAL $tt MINUTE) AS startnext ");
-			echo mysql_error();
-			$r=mysql_fetch_object($q);
-			list($ed,$et)=split(" ",$r->endtime);
-			list($nd,$nt)=split(" ",$r->startnext);
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
+			$r = $q->fetch(PDO::FETCH_OBJ);
+			list($ed, $et) = explode(' ', $r->endtime);
+			list($nd, $nt) = explode(' ', $r->startnext);
 
-			$starttime = sprintf("%02d:%02d:00", $hr, $min);
+			$starttime = sprintf('%02d:%02d:00', $hr, $min);
 
-			mysql_query("INSERT INTO judges_timeslots (date,type,round_id,starttime,endtime,year) VALUES (
+			$stmt = $pdo->prepare("INSERT INTO judges_timeslots (date,type,round_id,starttime,endtime,year) VALUES (
 					'$date','timeslot','{$round_data['id']}',
 					'$starttime', '$et',
 					'{$config['FAIRYEAR']}')");
-			echo mysql_error();
+			$stmt->execute();
+			show_pdo_errors_if_any($pdo);
 			$date = $nd;
-			list($s_h,$s_m,$s_s)=split(":",$nt);
-			list($e_h,$e_m,$e_s)=split(":",$et);
-			message_push(happy(i18n("Adding timeslot: %1",array("$date $hr:$min - $e_h:$e_m"))));
+			list($s_h, $s_m, $s_s) = explode(':', $nt);
+			list($e_h, $e_m, $e_s) = explode(':', $et);
+			message_push(happy(i18n('Adding timeslot: %1', array("$date $hr:$min - $e_h:$e_m"))));
 			$hr = $s_h;
 			$min = $s_m;
 		}
 		$action = '';
 	} else {
-		message_push(error(i18n("All fields are required to add multiple timeslots")));
+		message_push(error(i18n('All fields are required to add multiple timeslots')));
 	}
 }
 
-
-
 if ($action == '') {
-	 send_header("Judging Rounds and Timeslots",
+	send_header('Judging Rounds and Timeslots',
 		array('Committee Main' => 'committee_main.php',
 			'Administration' => 'admin/index.php',
 			'Judges' => 'admin/judges.php'));
 } else {
-	 send_header("Judging Rounds and Timeslots",
+	send_header('Judging Rounds and Timeslots',
 		array('Committee Main' => 'committee_main.php',
 			'Administration' => 'admin/index.php',
 			'Judges' => 'admin/judges.php',
 			'Judging Rounds and Timeslots' => 'admin/judges_timeslots.php'));
 }
- echo "<br />";
-
+echo '<br />';
 
 if ($action == 'addround' || $action == 'editround') {
-	echo "<form method=\"post\" action=\"judges_timeslots.php\">";
+	echo '<form method="post" action="judges_timeslots.php">';
 	echo "<input type=\"hidden\" name=\"action\" value=\"saveround\">\n";
 	echo "<input type=\"hidden\" name=\"round_id\" value=\"$round_id\">\n";
 
 	if ($action == 'addround') {
-		echo "<h3>Add New Judging Round</h3>";
+		echo '<h3>Add New Judging Round</h3>';
 		$r = array();
 		$r['date'] = $config['dates']['fairdate'];
 	} else {
-		echo "<h3>Edit Judging Round</h3>";
-		$q=mysql_query("SELECT * FROM judges_timeslots WHERE id='$round_id'");
-		if(mysql_num_rows($q) != 1) {
+		echo '<h3>Edit Judging Round</h3>';
+		$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE id='$round_id'");
+		$q->execute();
+		if ($q->rowCount() != 1) {
 			echo "UNKNOWN ROUND $round_id";
 			exit;
 		}
-		$r = mysql_fetch_assoc($q);
+		$r = $q->fetch(PDO::FETCH_ASSOC);
 	}
 
-	echo "<table>";
-	echo "<tr><td>".i18n('Round Type').":</td><td>";
-	echo "<select name=\"type\">";
+	echo '<table>';
+	echo '<tr><td>' . i18n('Round Type') . ':</td><td>';
+	echo '<select name="type">';
 	foreach ($round_str as $k => $v) {
-	    	if($k == 'timeslot') continue;  /* Don't let them add a timeslot directly */
+		if ($k == 'timeslot')
+			continue;  /* Don't let them add a timeslot directly */
 		$s = ($r['type'] == $k) ? 'selected="selected"' : '';
 		echo "<option value=\"$k\" $s>$v</option>";
 	}
-	echo "</select>";
+	echo '</select>';
 
-	echo "<tr><td>".i18n("Name").":</td><td>";
-	echo "<input type=\"textbox\" name=\"name\" value=\"{$r['name']}\" width=\"60\" /></td></tr>";
+	echo '<tr><td>' . i18n('Name') . ':</td><td>';
+	echo '<input type="textbox" name="name" value="' . get_value_from_array($r, 'name') . '" width="60" /></td></tr>';
 
-	echo "<tr><td>".i18n("Date").":</td><td>";
-	emit_date_selector("date",$r['date']);
+	echo '<tr><td>' . i18n('Date') . ':</td><td>';
+	emit_date_selector('date', $r['date']);
 
-	echo "</td></tr>";
-	echo "<tr><td>".i18n("Start Time").":</td><td>";
-	emit_time_selector("starttime",$r['starttime']);
+	echo '</td></tr>';
+	echo '<tr><td>' . i18n('Start Time') . ':</td><td>';
+	emit_time_selector('starttime', get_value_from_array($r, 'starttime'));
 
-	echo "</td></tr>";
-	echo "<tr><td>".i18n("End Time").":</td><td>";
-	emit_time_selector("endtime",$r['endtime']);
+	echo '</td></tr>';
+	echo '<tr><td>' . i18n('End Time') . ':</td><td>';
+	emit_time_selector('endtime', get_value_from_array($r, 'endtime'));
 
-	echo "</td></tr>";
-	echo "</table>";
+	echo '</td></tr>';
+	echo '</table>';
 
-	echo "<input type=\"submit\" value=\"".i18n('Save')."\" />";
-	echo "</form>";
+	echo '<input type="submit" value="' . i18n('Save') . '" />';
+	echo '</form>';
 }
 
 if ($action == 'addtimeslot' || $action == 'edittimeslot') {
-	echo "<form method=\"post\" action=\"judges_timeslots.php\">";
+	echo '<form method="post" action="judges_timeslots.php">';
 	echo "<input type=\"hidden\" name=\"action\" value=\"savetimeslot\">\n";
 	echo "<input type=\"hidden\" name=\"round_id\" value=\"$round_id\">\n";
 	echo "<input type=\"hidden\" name=\"timeslot_id\" value=\"$timeslot_id\">\n";
 
-	$q = mysql_query("SELECT * FROM judges_timeslots WHERE id='$round_id'");
-	$round_data = mysql_fetch_assoc($q);
+	$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE id='$round_id'");
+	$q->execute();
+	$round_data = $q->fetch(PDO::FETCH_ASSOC);
 
 	if ($action == 'addtimeslot') {
-		echo "<h3>Add New Judging Timeslot</h3>";
+		echo '<h3>Add New Judging Timeslot</h3>';
 		$r = array();
 		$r['date'] = $round_data['date'];
 	} else {
-		echo "<h3>Edit Judging Timeslot</h3>";
-		$q=mysql_query("SELECT * FROM judges_timeslots WHERE id='$timeslot_id'");
-		if(mysql_num_rows($q) != 1) {
+		echo '<h3>Edit Judging Timeslot</h3>';
+		$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE id='$timeslot_id'");
+		$q->execute();
+		if ($q->rowCount() != 1) {
 			echo "UNKNOWN ROUND $round_id";
 			exit;
 		}
-		$r = mysql_fetch_assoc($q);
+		$r = $q->fetch(PDO::FETCH_ASSOC);
 	}
 
-	echo "<table>";
-	echo "<tr><td>".i18n('Round Type').":</td><td>{$round_str[$round_data['type']]}</td></tr>";
-	echo "<tr><td>".i18n("Name").":</td><td>{$round_data['name']}</td></tr>";
+	echo '<table>';
+	echo '<tr><td>' . i18n('Round Type') . ":</td><td>{$round_str[$round_data['type']]}</td></tr>";
+	echo '<tr><td>' . i18n('Name') . ":</td><td>{$round_data['name']}</td></tr>";
 
-	echo "<tr><td>".i18n("Start Time").":</td><td>";
-	emit_time_selector("starttime",$r['starttime']);
+	echo '<tr><td>' . i18n('Start Time') . ':</td><td>';
+	emit_time_selector('starttime', $r['starttime']);
 
-	echo "</td></tr>";
-	echo "<tr><td>".i18n("End Time").":</td><td>";
-	emit_time_selector("endtime",$r['endtime']);
+	echo '</td></tr>';
+	echo '<tr><td>' . i18n('End Time') . ':</td><td>';
+	emit_time_selector('endtime', $r['endtime']);
 
-	echo "</td></tr>";
-	echo "</table>";
+	echo '</td></tr>';
+	echo '</table>';
 
-	echo "<input type=\"submit\" value=\"".i18n('Save')."\" />";
-	echo "</form>";
+	echo '<input type="submit" value="' . i18n('Save') . '" />';
+	echo '</form>';
 }
 
 if ($action == 'addmultiple') {
+	echo '<h3>Add Multiple New Judging Timeslots</h3>';
 
-	echo "<h3>Add Multiple New Judging Timeslots</h3>";
-
-	echo "<form method=\"post\" action=\"judges_timeslots.php\">";
+	echo '<form method="post" action="judges_timeslots.php">';
 	echo "<input type=\"hidden\" name=\"action\" value=\"savemultiple\">\n";
 	echo "<input type=\"hidden\" name=\"round_id\" value=\"$round_id\">\n";
 	echo "<input type=\"hidden\" name=\"timeslot_id\" value=\"$timeslot_id\">\n";
 
-	$q = mysql_query("SELECT * FROM judges_timeslots WHERE id='$round_id'");
-	$round_data = mysql_fetch_assoc($q);
+	$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE id='$round_id'");
+	$q->execute();
+	$round_data = $q->fetch(PDO::FETCH_ASSOC);
 
-	echo "<table border=\"0\">";
-	echo "<tr><td>".i18n('Round Type').":</td><td>{$round_str[$round_data['type']]}</td></tr>";
-	echo "<tr><td>".i18n("Name").":</td><td>{$round_data['name']}</td></tr>";
-	echo "<tr><td>".i18n("Add")."</td><td>";
-	echo "<input type=\"text\" name=\"addnum\" size=\"4\">&nbsp;";
-	echo i18n("new timeslots");
-	echo "</td></tr>";
-	echo "<tr><td>".i18n("Starting timeslots at")."</td><td>";
-	emit_time_selector("starttime");
-	echo "</td></tr>";
-	echo "<tr><td>".i18n("With a duration of")."</td><td>";
-	echo "<input type=\"text\" name=\"duration\" size=\"4\">&nbsp;";
-	echo i18n("minutes")."</td></tr>";
-	echo "<tr><td>".i18n("And a break of")."</td><td>";
-	echo "<input type=\"text\" name=\"break\" size=\"4\">&nbsp;";
-	echo i18n("minutes")."</td></tr>";
+	echo '<table border="0">';
+	echo '<tr><td>' . i18n('Round Type') . ":</td><td>{$round_str[$round_data['type']]}</td></tr>";
+	echo '<tr><td>' . i18n('Name') . ":</td><td>{$round_data['name']}</td></tr>";
+	echo '<tr><td>' . i18n('Add') . '</td><td>';
+	echo '<input type="text" name="addnum" size="4">&nbsp;';
+	echo i18n('new timeslots');
+	echo '</td></tr>';
+	echo '<tr><td>' . i18n('Starting timeslots at') . '</td><td>';
+	emit_time_selector('starttime');
+	echo '</td></tr>';
+	echo '<tr><td>' . i18n('With a duration of') . '</td><td>';
+	echo '<input type="text" name="duration" size="4">&nbsp;';
+	echo i18n('minutes') . '</td></tr>';
+	echo '<tr><td>' . i18n('And a break of') . '</td><td>';
+	echo '<input type="text" name="break" size="4">&nbsp;';
+	echo i18n('minutes') . '</td></tr>';
 
-	echo "<tr><td colspan=\"2\">";
-	echo "<input type=\"submit\" value=\"".i18n("Add these timeslots")."\">";
-	echo "</td></tr>";
-	echo "</table>";
+	echo '<tr><td colspan="2">';
+	echo '<input type="submit" value="' . i18n('Add these timeslots') . '">';
+	echo '</td></tr>';
+	echo '</table>';
 
-	echo "</form>";
+	echo '</form>';
 }
 
 if ($action == '') {
-	echo "<A href=\"judges_timeslots.php?action=addround&round_id=0\">".i18n("Add new round")."</a> <br />";
-	echo "<br />";
-	echo "<table class=\"summarytable\">";
-	echo "<tr>";
-	echo "<th>".i18n("Date")."</th>";
-	echo "<th>".i18n("Start Time")."</th>";
-	echo "<th>".i18n("End Time")."</th>";
-	echo "<th>".i18n("Judging Round")."</th>";
-	echo "<th>".i18n("Actions")."</th>";
-	echo "</tr>";
+	echo '<A href="judges_timeslots.php?action=addround&round_id=0">' . i18n('Add new round') . '</a> <br />';
+	echo '<br />';
+	echo '<table class="summarytable">';
+	echo '<tr>';
+	echo '<th>' . i18n('Date') . '</th>';
+	echo '<th>' . i18n('Start Time') . '</th>';
+	echo '<th>' . i18n('End Time') . '</th>';
+	echo '<th>' . i18n('Judging Round') . '</th>';
+	echo '<th>' . i18n('Actions') . '</th>';
+	echo '</tr>';
 
-	$q=mysql_query("SELECT * FROM judges_timeslots WHERE year='{$config['FAIRYEAR']}' AND `type`!='timeslot' ORDER BY date,starttime");
-	while($r=mysql_fetch_object($q)) {
-		echo "<tr>";
-		$qq = mysql_query("SELECT * FROM judges_timeslots WHERE round_id='{$r->id}' ORDER BY `date`,`starttime`");
-		$c = mysql_num_rows($qq) +1;
+	$q = $pdo->prepare("SELECT * FROM judges_timeslots WHERE year='{$config['FAIRYEAR']}' AND `type`!='timeslot' ORDER BY date,starttime");
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		echo '<tr>';
+		$qq = $pdo->prepare("SELECT * FROM judges_timeslots WHERE round_id='{$r->id}' ORDER BY `date`,`starttime`");
+		$qq->execute();
+		$c = $qq->rowCount() + 1;
 
-		echo "<td rowspan=\"$c\"><b>".format_date($r->date)."</b></td>";
-		echo "<td align=\"center\"><b>".format_time($r->starttime)."</b><br/>";
+		echo "<td rowspan=\"$c\"><b>" . format_date($r->date) . '</b></td>';
+		echo '<td align="center"><b>' . format_time($r->starttime) . '</b><br/>';
 
-		echo "</td>";
-		echo "<td align=\"center\"><b>".format_time($r->endtime)."</b></td>";
-		echo "<td align=\"center\"><b>{$r->name}  (".i18n($round_str[$r->type]).")</b></td>";
-		echo " <td align=\"center\">";
+		echo '</td>';
+		echo '<td align="center"><b>' . format_time($r->endtime) . '</b></td>';
+		echo "<td align=\"center\"><b>{$r->name}  (" . i18n($round_str[$r->type]) . ')</b></td>';
+		echo ' <td align="center">';
 		echo "<a href=\"judges_timeslots.php?action=editround&round_id={$r->id}\"><img border=\"0\" src=\"{$config['SFIABDIRECTORY']}/images/16/edit.{$config['icon_extension']}\"></a>";
-		echo "&nbsp;";
+		echo '&nbsp;';
 		echo "<a onclick=\"return confirmClick('Are you sure you want to remove this round?')\" href=\"judges_timeslots.php?action=deleteround&round_id={$r->id}\"><img border=\"0\" src=\"{$config['SFIABDIRECTORY']}/images/16/button_cancel.{$config['icon_extension']}\"></a>";
 
 		echo "<A href=\"judges_timeslots.php?action=addtimeslot&round_id={$r->id}\">(new)</a>  ";
 		echo "<A href=\"judges_timeslots.php?action=addmultiple&round_id={$r->id}\">(multiple)</a><br />";
 		echo " </td>\n";
 
-		echo "</tr>";
+		echo '</tr>';
 
-		while($rr = mysql_fetch_object($qq)) {
-			echo "<tr>";
+		while ($rr = $qq->fetch(PDO::FETCH_OBJ)) {
+			echo '<tr>';
 			//			echo "<td></td>";
-			echo "<td align=\"right\">".format_time($rr->starttime)."</td>";
-			echo "<td align=\"right\">".format_time($rr->endtime)."</td>";
-			echo "<td align=\"center\">".i18n($round_str[$rr->type])."</td>";
+			echo '<td align="right">' . format_time($rr->starttime) . '</td>';
+			echo '<td align="right">' . format_time($rr->endtime) . '</td>';
+			echo '<td align="center">' . i18n($round_str[$rr->type]) . '</td>';
 
-
-			echo " <td align=\"center\">";
+			echo ' <td align="center">';
 			echo "<a href=\"judges_timeslots.php?action=edittimeslot&round_id={$r->id}&timeslot_id={$rr->id}\"><img border=\"0\" src=\"{$config['SFIABDIRECTORY']}/images/16/edit.{$config['icon_extension']}\"></a>";
-			echo "&nbsp;";
+			echo '&nbsp;';
 			echo "<a onclick=\"return confirmClick('Are you sure you want to remove this timeslot?')\" href=\"judges_timeslots.php?action=deletetimeslot&timeslot_id={$rr->id}\"><img border=\"0\" src=\"{$config['SFIABDIRECTORY']}/images/16/button_cancel.{$config['icon_extension']}\"></a>";
 
 			echo " </td>\n";
-			echo "</tr>";
+			echo '</tr>';
 		}
 	}
-	echo "</table>";
+	echo '</table>';
 }
 
 send_footer();

admin/judging_score_edit.php

@@ -1,36 +1,36 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005-2006 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005-2006 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
- require_once("judges.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
+require_once ('judges.inc.php');
 user_auth_required('committee', 'admin');
- send_header("Judging Score Entry - Update",
+send_header('Judging Score Entry - Update',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Judging Score Entry' => 'admin/judging_score_entry.php')
-				);
+		'Judging Score Entry' => 'admin/judging_score_entry.php'));
 
 $year = $config['FAIRYEAR'];
 $project_id = NULL;
@@ -40,18 +40,22 @@
 	$project_id = $_POST['projectid'];
 	$curr_team = $_POST['score_count'];
 	while ($curr_team > 0) {
-		 if($_POST["team_" . $curr_team . "_score"] != "") {
-                         $score = $_POST["team_" . $curr_team . "_score"];
+		if ($_POST['team_' . $curr_team . '_score'] != '') {
+			$score = $_POST['team_' . $curr_team . '_score'];
 			if ($score == 0) {
-                                 $score = "NULL";
+				$score = 'NULL';
 			} else {
-                                 $score = mysql_real_escape_string($score);
+				$score = $score;
 			}
-		 mysql_query("UPDATE judges_teams_timeslots_projects_link 
-				 					SET score=" . $score . 
-			          " WHERE judges_teams_id = " . mysql_real_escape_string($_POST["team_" . $curr_team . "_id"]) . 
-			          " and projects_id =$project_id and year=$year");
-		 echo mysql_error();
+			if ($score > 100.0) {
+				$score_error = '*** ERROR **** You entered a value greater than 100.00';
+			}
+			$stmt = $pdo->prepare("UPDATE judges_teams_timeslots_projects_link 
+			\t \t\t\t\t\tSET score=" . $score
+				. ' WHERE judges_teams_id = ' . $_POST['team_' . $curr_team . '_id']
+				. " and projects_id =$project_id and year=$year");
+			$stmt->execute();
+			show_pdo_errors_if_any($pdo);
 		}
 		$curr_team--;
 	}
@@ -60,55 +64,64 @@
 ?>
 <?
 if ($project_id) {
-$q=mysql_query("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
-while($r=mysql_fetch_object($q))
+	$q = $pdo->prepare("SELECT * FROM projects WHERE projects.id = '" . $project_id . "'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_OBJ);
+	$project_number = $r->projectnumber;
+	$project_title = $r->title;
+	$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ))
 		$cats[$r->id] = $r->category;
 
-$q=mysql_query("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
+	$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
+	$q->execute();
 
-
-	$q=mysql_query("SELECT judges_teams_timeslots_projects_link.judges_teams_id, 
-												 score, 
-												 judges_teams.num
-			            FROM judges_teams_timeslots_projects_link, 
-									     judges_teams
-			            WHERE judges_teams_timeslots_projects_link.judges_teams_id = judges_teams.id 
-									     AND projects_id = ".mysql_real_escape_string($project_id)." ORDER BY judges_teams_id"
-								);
-	echo mysql_error();
-
-	echo "<form action=\"judging_score_edit.php\" method=\"post\">";
-	echo "<input type=\"hidden\" name=\"score_count\" value=\"" . mysql_num_rows($q) . "\"/>";
+	$q = $pdo->prepare("SELECT judges_teams_timeslots_projects_link.judges_teams_id, 
+											\t score, 
+											\t judges_teams.num
+		\t            FROM judges_teams_timeslots_projects_link, 
+								\t     judges_teams
+		\t            WHERE judges_teams_timeslots_projects_link.judges_teams_id = judges_teams.id 
+								\t     AND projects_id = " . $project_id . ' ORDER BY judges_teams_id');
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
+	echo 'Project# ' . $project_number . '  ' . $project_title . '<br />';
+	if ($score_error != '') {
+		echo $score_error . '<br />';
+	}
+	echo '<form action="judging_score_edit.php" method="post">';
+	echo '<input type="hidden" name="score_count" value="' . $q->rowCount() . '"/>';
 	echo "<input type=\"hidden\" name=\"projectid\" value=\"$project_id\"/>";
-	echo "<table class=\"tableview\">";
-	echo "<tr>";
-	echo "<th>".i18n("Team Number")."</th>";
-	echo "<th>".i18n("Judges")."</th>";
-	echo "<th>".i18n("Score")."</th>";
-	echo "<th>".i18n("New Score")."</th>";
-	echo "</tr>";
+	echo '<table class="tableview">';
+	echo '<tr>';
+	echo '<th>' . i18n('Team Number') . '</th>';
+	echo '<th>' . i18n('Judges') . '</th>';
+	echo '<th>' . i18n('Score') . '</th>';
+	echo '<th>' . i18n('New Score') . '</th>';
+	echo '</tr>';
 
 	$i = 1;
-	while($r=mysql_fetch_object($q)) {
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		$team = getJudgingTeam($r->judges_teams_id);
-		$teamNames=array_map("teamMemberToName", $team['members']);
+		$teamNames = array_map('teamMemberToName', $team['members']);
 		echo "<tr>\n";
 		echo "<td style=\"vertical-align: middle\">\n";
 		echo $r->num;
-		echo "<input type=\"hidden\" name=\"team_" . $i. "_id\" value=\"$r->judges_teams_id\"/>\n";
+		echo '<input type="hidden" name="team_' . $i . "_id\" value=\"$r->judges_teams_id\"/>\n";
 		echo "</td>\n";
-		echo "<td style=\"vertical-align: middle\">";
-		echo implode(", ", $teamNames);
+		echo '<td style="vertical-align: middle">';
+		echo implode(', ', $teamNames);
 		echo "</td>\n";
 		echo "<td style=\"vertical-align: middle; text-align: center\">\n";
 		if ($r->score) {
 			echo $r->score;
 		} else {
-			echo "None";
+			echo 'None';
 		}
 		echo "\n</td>\n";
 		echo "<td style=\"vertical-align: middle; text-align: center\">\n";
-		echo "<input type=\"text\" size=\"3\" maxlength=\"3\" name=\"team_" . $i . "_score\" value=\"$r->score\"/>\n";
+		echo '<input type="text" size="5" maxlength="5" name="team_' . $i . "_score\" value=\"$r->score\"/>\n";
 		echo "</td>\n";
 		echo "</tr>\n";
 		$i++;
@@ -117,6 +130,5 @@ $q=mysql_query("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
 	echo "<input type=\"submit\" />\n";
 	echo "</form>\n";
 } else {
-	echo i18n("Invalid Project ID.");
+	echo i18n('Invalid Project ID.');
 }
-	

admin/judging_score_entry.php

@@ -1,58 +1,62 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005-2006 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005-2006 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
- require_once("judges.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
+require_once ('judges.inc.php');
 user_auth_required('committee', 'admin');
 
- if($_GET['year']) $year=$_GET['year'];
- else $year=$config['FAIRYEAR'];
+if ($_GET['year'])
+	$year = $_GET['year'];
+else
+	$year = $config['FAIRYEAR'];
 
 if ($_GET['csv'] == 'yes') {
-	header("Content-type: text/csv");
-	header("Cache-Control: no-cache");
-	header("Content-disposition: inline; filename=judging_scores.csv");
+	header('Content-type: text/csv');
+	header('Cache-Control: no-cache');
+	header('Content-disposition: inline; filename=judging_scores.csv');
 } else {
- 	send_header("Judging Score Entry",
+	send_header('Judging Score Entry',
 		array('Committee Main' => 'committee_main.php',
-				'Administration' => 'admin/index.php')
-				);
+			'Administration' => 'admin/index.php'));
 }
 ?>
 <?
-$q=mysql_query("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
-while($r=mysql_fetch_object($q))
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ))
 	$cats[$r->id] = $r->category;
 
-$q=mysql_query("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
-while($r=mysql_fetch_object($q))
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ))
 	$divs[$r->id] = $r->division;
 
-$ORDERBY="projects.projectcategories_id, projects.projectdivisions_id, projects.projectnumber";
+$ORDERBY = 'projects.projectcategories_id, projects.projectdivisions_id, projects.projectnumber';
 
-	$q=mysql_query("SELECT  registrations.id AS reg_id,
+$q = $pdo->prepare("SELECT  registrations.id AS reg_id,
 				registrations.num AS reg_num,
 				projects.id as projectid,
 				projects.title,
@@ -62,9 +66,9 @@ $ORDERBY="projects.projectcategories_id, projects.projectdivisions_id, projects.
 				judges_teams_id as res_team_id,
 				avg(score) as score, 
 				avg(score + (SELECT 70-avg(score) 
-				             FROM judges_teams_timeslots_projects_link 
-										 WHERE judges_teams_id = res_team_id))
-				    AS norm_score
+			\t             FROM judges_teams_timeslots_projects_link 
+									\t WHERE judges_teams_id = res_team_id))
+			\t    AS norm_score
 			FROM
 				registrations
 				left outer join projects on projects.registrations_id=registrations.id
@@ -76,58 +80,57 @@ $ORDERBY="projects.projectcategories_id, projects.projectdivisions_id, projects.
 			ORDER BY
 				$ORDERBY
 			");
-		echo mysql_error();
+$q->execute();
+show_pdo_errors_if_any($pdo);
 
 if ($_GET['csv'] != 'yes') {
-		echo "<a href='judging_score_entry.php?csv=yes'>" . i18n("Generate CSV Report") . "</a>\n";
-		echo "<table class=\"tableview\">";
-		echo "<tr>";
-		echo  "<th>".i18n("Proj Num")."</th>";
-		echo  "<th>".i18n("Project Title")."</th>";
-		echo  "<th>".i18n("Age Category")."</th>";
-		echo  "<th>".i18n("Division")."</th>";
-		echo  "<th>".i18n("Score")."</th>";
-		echo  "<th>".i18n("Normalized Score")."</th>";
-		echo  "<th>".i18n("Action")."</th>";
-		echo "</tr>";
+	echo "<a href='judging_score_entry.php?csv=yes'>" . i18n('Generate CSV Report') . "</a>\n";
+	echo '<table class="tableview">';
+	echo '<tr>';
+	echo '<th>' . i18n('Proj Num') . '</th>';
+	echo '<th>' . i18n('Project Title') . '</th>';
+	echo '<th>' . i18n('Age Category') . '</th>';
+	echo '<th>' . i18n('Division') . '</th>';
+	echo '<th>' . i18n('Score') . '</th>';
+	echo '<th>' . i18n('Normalized Score') . '</th>';
+	echo '<th>' . i18n('Action') . '</th>';
+	echo '</tr>';
 } else {
 	echo "Project #\tTitle\tCategory\tDivision\tScore\tNormalized Scores\tJudge Name\tJudges Score\n";
 }
 
-	while($r=mysql_fetch_object($q))
-	{
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	if ($_GET['csv'] == 'yes') {
 		echo "$r->projectnumber \t $r->title \t" . $cats[$r->projectcategories_id] . "\t" . $divs[$r->projectdivisions_id] . " \t $r->score \t $r->norm_score ";
-			$p=mysql_query("SELECT judges_teams_timeslots_projects_link.judges_teams_id, 
-								    				 score, 
-												     judges_teams.num
-			                FROM judges_teams_timeslots_projects_link, 
-									         judges_teams
-			                WHERE judges_teams_timeslots_projects_link.judges_teams_id = judges_teams.id 
-									          AND projects_id = ".mysql_real_escape_string($r->projectid)." ORDER BY judges_teams_id"
-								);
-	echo mysql_error();
-			while($s=mysql_fetch_object($p)) {
+		$p = $pdo->prepare("SELECT judges_teams_timeslots_projects_link.judges_teams_id, 
+							\t    \t\t\t\t score, 
+											\t     judges_teams.num
+		\t                FROM judges_teams_timeslots_projects_link, 
+								\t         judges_teams
+		\t                WHERE judges_teams_timeslots_projects_link.judges_teams_id = judges_teams.id 
+								\t          AND projects_id = " . $r->projectid . ' ORDER BY judges_teams_id');
+		$p->execute();
+		show_pdo_errors_if_any($pdo);
+		while ($s = $p->fetch(PDO::FETCH_OBJ)) {
 			$team = getJudgingTeam($s->judges_teams_id);
-                                $teamNames=array_map("teamMemberToName", $team['members']);
-				echo "\t " . implode(", ", $teamNames) . " \t $s->score";
+			$teamNames = array_map('teamMemberToName', $team['members']);
+			echo "\t " . implode(', ', $teamNames) . " \t $s->score";
 		}
 		echo "\n";
-
 	} else {
-			echo "<tr>";
+		echo '<tr>';
 		echo "<td>$r->projectnumber</td>\n";
 		echo "<td>$r->title</td>\n";
 
-			echo "<td>".i18n($cats[$r->projectcategories_id])."</td>\n";
-			echo "<td>".i18n($divs[$r->projectdivisions_id])."</td>\n";
-			echo "<td>" . number_format($r->score, 2) . "</td>\n";
-			echo "<td>" . number_format($r->norm_score, 2) . "</td>\n";
-			echo "<td align=\"center\">";
+		echo '<td>' . i18n($cats[$r->projectcategories_id]) . "</td>\n";
+		echo '<td>' . i18n($divs[$r->projectdivisions_id]) . "</td>\n";
+		echo '<td>' . number_format($r->score, 2) . "</td>\n";
+		echo '<td>' . number_format($r->norm_score, 2) . "</td>\n";
+		echo '<td align="center">';
 		if ($year == $config['FAIRYEAR']) {
 			echo "<a href=\"judging_score_edit.php?projectid=$r->projectid\">";
-				echo i18n("Edit Scores");
-				echo "</a>";
+			echo i18n('Edit Scores');
+			echo '</a>';
 		}
 		echo "</td>\n";
 		echo "</tr>\n";
@@ -135,7 +138,7 @@ $ORDERBY="projects.projectcategories_id, projects.projectdivisions_id, projects.
 }
 if ($_GET['csv'] != 'yes') {
 	echo "</table>\n";
-		echo "<br />";
+	echo '<br />';
 
 	send_footer();
 }

admin/project_editor.php

@@ -1,25 +1,31 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005-2006 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005-2006 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
+
+// This file was modified Jan of 2014 by Richard Sin
+// Project type has been added and can be toggled by configuration.
+// Feedback box also has been added for flagging purposes
+
 ?>
 <?
 require_once ('../common.inc.php');
@@ -28,7 +34,6 @@ require_once('../register_participants.inc.php');
 
 $auth_type = user_auth_required(array('fair', 'committee'), 'admin');
 
-
 $registrations_id = intval($_GET['id']);
 $action = $_GET['action'];
 
@@ -41,19 +46,20 @@ if($auth_type == 'fair') {
 	} else {
 		/* Make sure they have permission to laod this student, check
 		the master copy of the fairs_id in the project */
-		$q=mysql_query("SELECT * FROM projects WHERE 
+		$q = $pdo->prepare("SELECT * FROM projects WHERE 
 				registrations_id='$registrations_id' 
 				AND year='{$config['FAIRYEAR']}'
 				AND fairs_id=$fairs_id");
-		if(mysql_num_rows($q) != 1) {
-			echo "permission denied.";
+
+		$q->execute();
+		if ($q->rowCount() != 1) {
+			echo 'permission denied.';
 			exit;
 		}
 		/* Ok, they have permission */
 	}
 }
 
-
 switch ($action) {
 	case 'project_load':
 		project_load();
@@ -63,20 +69,26 @@ case 'project_regenerate_number':
 		project_save();
 
 		/* Now generate */
-	$q=mysql_query("SELECT id FROM projects WHERE registrations_id='{$registrations_id}' AND year='{$config['FAIRYEAR']}'");
-	$i=mysql_fetch_assoc($q);
+		$q = $pdo->prepare("SELECT id FROM projects WHERE registrations_id='{$registrations_id}' AND year='{$config['FAIRYEAR']}'");
+		$q->execute();
+		$i = $q->fetch(PDO::FETCH_ASSOC);
+
 		$id = $i['id'];
 
-	mysql_query("UPDATE projects SET projectnumber=NULL,projectsort=NULL,
+		$stmt = $pdo->prepare("UPDATE projects SET projectnumber=NULL,projectsort=NULL,
 				projectnumber_seq='0',projectsort_seq='0'
 				WHERE id='$id'");
-	echo mysql_error();
+		$stmt->execute();
+		show_pdo_errors_if_any($pdo);
 		list($pn, $ps, $pns, $pss) = generateProjectNumber($registrations_id);
+
 		//	print("Generated Project Number [$pn]");
-	mysql_query("UPDATE projects SET projectnumber='$pn',projectsort='$ps',
+		$stmt = $pdo->prepare("UPDATE projects SET projectnumber='$pn',projectsort='$ps',
 				projectnumber_seq='$pns',projectsort_seq='$pss'
 				WHERE id='$id'");
+		$stmt->execute();
 		happy_("Generated and Saved Project Number: $pn");
+
 		break;
 
 	case 'project_save':
@@ -90,69 +102,114 @@ exit;
 
 function project_save()
 {
-	global $registrations_id, $config;
+	global $registrations_id, $config, $pdo;
 
 	// first, lets make sure this project really does belong to them
-	$q=mysql_query("SELECT * FROM projects WHERE registrations_id='{$registrations_id}' AND year='{$config['FAIRYEAR']}'");
-	$projectinfo=mysql_fetch_object($q);
-	if(!projectinfo) {
-		echo error(i18n("Invalid project to update"));
+	$q = $pdo->prepare("SELECT * FROM projects WHERE registrations_id='{$registrations_id}' AND year='{$config['FAIRYEAR']}'");
+	$q->execute();
+	$projectinfo = $q->fetch(PDO::FETCH_OBJ);
+	if (!$projectinfo) {
+		echo error(i18n('Invalid project to update'));
 	}
 
-	$summarywords=preg_split("/[\s,]+/",$_POST['summary']);
+	$summarywords = preg_split('/[\s,]+/', $_POST['summary']);
 	$summarywordcount = count($summarywords);
 	if ($summarywordcount > $config['participant_project_summary_wordmax'])
 		$summarycountok = 0;
 	else
 		$summarycountok = 1;
 
+	// check if it is flagged then update it
+
+	if (empty($_POST['feedback'])) {
+		$stmt = $pdo->prepare('UPDATE projects SET '
+			. "flagged='0'"
+			. "WHERE id='" . intval($_POST['id']) . "'");
+		$stmt->execute();
+	} else {
+		$stmt = $pdo->prepare('UPDATE projects SET '
+			. "flagged='1'"
+			. "WHERE id='" . intval($_POST['id']) . "'");
+		$stmt->execute();
+	}
+	show_pdo_errors_if_any($pdo);
+	happy_('Flagging process successfully updated');
+
 	if ($config['participant_project_title_charmax'] && strlen(stripslashes($_POST['title'])) > $config['participant_project_title_charmax']) {  // 0 for no limit, eg 255 database field limit
 		$title = substr(stripslashes($_POST['title']), 0, $config['participant_project_title_charmax']);
-		error_("Project title truncated to %1 characters",array($config['participant_project_title_charmax']));
+		error_('Project title truncated to %1 characters', array($config['participant_project_title_charmax']));
 	} else
 		$title = stripslashes($_POST['title']);
 
-	mysql_query("UPDATE projects SET ".
-			"title='".mysql_escape_string(iconv("UTF-8","ISO-8859-1//TRANSLIT",$title))."', ".
-			"projectdivisions_id='".intval($_POST['projectdivisions_id'])."', ".
-			"language='".mysql_escape_string(stripslashes($_POST['language']))."', ".
-			"req_table='".mysql_escape_string(stripslashes($_POST['req_table']))."', ".
-			"req_electricity='".mysql_escape_string(stripslashes($_POST['req_electricity']))."', ".
-			"req_special='".mysql_escape_string(iconv("UTF-8","ISO-8859-1//TRANSLIT",stripslashes($_POST['req_special'])))."', ".
-			"summary='".mysql_escape_string(iconv("UTF-8","ISO-8859-1//TRANSLIT",stripslashes($_POST['summary'])))."', ".
-			"summarycountok='$summarycountok',".
-			"projectsort='".mysql_escape_string(stripslashes($_POST['projectsort']))."'".
-			"WHERE id='".intval($_POST['id'])."'");
-			echo mysql_error();
-	happy_("Project information successfully updated");
+	$stmt = $pdo->prepare(
+		'UPDATE projects SET 
+				title = :title,
+				projectdivisions_id = :projectdivisions_id,
+				projecttype = :projecttype,
+				language = :language,
+				req_table = :req_table,
+				req_electricity = :req_electricity,
+				req_special = :req_special,
+				human_participants = :human_participants,
+				animal_participants = :animal_participants,
+				summary = :summary,
+				summarycountok = :summarycountok,
+				feedback = :feedback,
+				projectsort = :projectsort
+			WHERE id = :id'
+	);
+
+	$stmt->bindValue(':title', $_POST['title']);
+	$stmt->bindValue(':projectdivisions_id', intval($_POST['projectdivisions_id']));
+	$stmt->bindValue(':projecttype', $_POST['projecttype']);
+	$stmt->bindValue(':language', $_POST['language']);
+	$stmt->bindValue(':req_table', $_POST['req_table']);
+	$stmt->bindValue(':req_electricity', $_POST['req_electricity']);
+	$stmt->bindValue(':req_special', $_POST['req_special']);
+	$stmt->bindValue(':human_participants', $_POST['human_participants']);
+	$stmt->bindValue(':animal_participants', $_POST['animal_participants']);
+	$stmt->bindValue(':summary', $_POST['summary']);
+	$stmt->bindValue(':summarycountok', $summarycountok);
+	$stmt->bindValue(':feedback', $_POST['feedback']);
+	$stmt->bindValue(':projectsort', $_POST['projectsort']);
+	$stmt->bindValue(':id', intval($_POST['id']));
+
+	$stmt->execute();
+
+	show_pdo_errors_if_any($pdo);
+	happy_('Project information successfully updated');
 
 	// check if they changed the project number
 	if ($_POST['projectnumber'] != $projectinfo->projectnumber) {
 		// check if hte new one is available
-		$q=mysql_query("SELECT * FROM projects WHERE year='".$config['FAIRYEAR']."' AND projectnumber='".$_POST['projectnumber']."'");
-		if(mysql_num_rows($q)) {
-			error_("Could not change project number.  %1 is already in use",array($_POST['projectnumber']));
+		$q = $pdo->prepare("SELECT * FROM projects WHERE year='" . $config['FAIRYEAR'] . "' AND projectnumber='" . $_POST['projectnumber'] . "'");
+		$q->execute();
+		if ($q->rowCount()) {
+			error_('Could not change project number.  %1 is already in use', array($_POST['projectnumber']));
 		} else {
-			mysql_query("UPDATE projects SET
+			$stmt = $pdo->prepare("UPDATE projects SET
 					projectnumber='" . $_POST['projectnumber'] . "'
 					WHERE id='" . $_POST['id'] . "'");
-			happy_("Project number successfully changed to %1",array($_POST['projectnumber']));
+			$stmt->execute();
+			happy_('Project number successfully changed to %1', array($_POST['projectnumber']));
 		}
 	}
 }
 
-
 function project_load()
 {
-	global $registrations_id, $config;
+	global $registrations_id, $config, $pdo;
 
+	// $projectcategories_id=null;
 	// now lets find out their MAX grade, so we can pre-set the Age Category
-	$q=mysql_query("SELECT MAX(grade) AS maxgrade FROM students WHERE registrations_id='".$registrations_id."'");
-	$gradeinfo=mysql_fetch_object($q);
+	$q = $pdo->prepare("SELECT MAX(grade) AS maxgrade FROM students WHERE registrations_id='" . $registrations_id . "'");
+	$q->execute();
+	$gradeinfo = $q->fetch(PDO::FETCH_OBJ);
 
 	// now lets grab all the age categories, so we can choose one based on the max grade
-	$q=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-	while($r=mysql_fetch_object($q)) {
+	$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+	$q->execute();
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		// save these in an array, just incase we need them later (FIXME: remove this array if we dont need it)
 		$agecategories[$r->id]['category'] = $r->category;
 		$agecategories[$r->id]['mingrade'] = $r->mingrade;
@@ -163,14 +220,24 @@ function project_load()
 	}
 
 	// now select their project info
-	$q=mysql_query("SELECT * FROM projects WHERE registrations_id='".$registrations_id."' AND year='".$config['FAIRYEAR']."'");
+	$q = $pdo->prepare("SELECT * FROM projects WHERE registrations_id='" . $registrations_id . "' AND year='" . $config['FAIRYEAR'] . "'");
 	// check if it exists, if we didnt find any record, lets insert one
-	$projectinfo=mysql_fetch_object($q);
+	$q->execute();
+	$projectinfo = $q->fetch(PDO::FETCH_OBJ);
+	if (!$projectinfo) {
+		$stmt = $pdo->prepare("INSERT INTO projects (registrations_id,projectcategories_id,year) VALUES ('" . $registrations_id . "','$projectcategories_id','" . $config['FAIRYEAR'] . "')");
+		// and then pull it back out
+		$stmt->execute();
+		$q = $pdo->prepare("SELECT * FROM projects WHERE registrations_id='" . $registrations_id . "' AND year='" . $config['FAIRYEAR'] . "'");
+		$q->execute();
+		$projectinfo = $q->fetch(PDO::FETCH_OBJ);
+	}
 
 	// make sure that if they changed their grade on the student page, we update their projectcategories_id accordingly
 	if ($projectcategories_id && $projectinfo->projectcategories_id != $projectcategories_id) {
-		echo notice(i18n("Age category changed, updating to %1",array($agecategories[$projectcategories_id]['category'])));
-		mysql_query("UPDATE projects SET projectcategories_id='$projectcategories_id' WHERE id='$projectinfo->id'");
+		echo notice(i18n('Age category changed, updating to %1', array($agecategories[$projectcategories_id]['category'])));
+		$stmt = $pdo->prepare("UPDATE projects SET projectcategories_id='$projectcategories_id' WHERE id='$projectinfo->id'");
+		$stmt->execute();
 	}
 
 	// output the current status
@@ -198,7 +265,7 @@ function countwords()
 <?
 
 	if (!$projectinfo) {
-		echo error(i18n("Invalid project to edit"));
+		echo error(i18n('Invalid project to edit'));
 		exit;
 	}
 
@@ -206,45 +273,71 @@ function countwords()
 	<form id="project_form">
 	<input type="hidden" name="id" value="<?= $projectinfo->id ?>">
 	<table>
-	<tr>	<td><?=i18n("Project Title")?>: </td>
-		<td><input type="text" name="title" size="50" value="<?=htmlspecialchars($projectinfo->title)?>" /><?=REQUIREDFIELD?>
+	<tr>	<td><?= i18n('Project Title') ?>: </td>
+		<td><input type="text" name="title" size="50" value="<?= htmlspecialchars($projectinfo->title, null, 'ISO8859-1') ?>" /><?= REQUIREDFIELD ?>
 <?
 	if ($config['participant_project_title_charmax'])
-		echo i18n("(Max %1 characters)",array($config['participant_project_title_charmax']));
+		echo i18n('(Max %1 characters)', array($config['participant_project_title_charmax']));
 	?>
 		</td>
 	</tr><tr>
-		<td><?=i18n("Project Number")?>: </td>
+		<td><?= i18n('Project Number') ?>: </td>
 		<td><input type="text" name="projectnumber" size="10" value="<?= $projectinfo->projectnumber ?>" />
-			<input type="button" id="project_regenerate_number" value="<?=i18n("Re-Generate Project Number")?>" />
+			<input type="button" id="project_regenerate_number" value="<?= i18n('Re-Generate Project Number') ?>" />
 		</td>
 	</tr><tr>
-		<td><?=i18n("Project Sort")?>: </td>
-		<td><input type="text" name="projectsort" size="10" value="<?=$projectinfo->projectsort?>" /></td>
+		<td><?= i18n('Project Sort') ?>: </td>
+		<td><input type="text" name="projectsort" size="10" value="<?= $projectinfo->projectsort ?>" /></td></tr>
+
+<?
+	if ($config['project_type'] == 'yes') {
+		$q = $pdo->prepare('SELECT * FROM projecttypes ORDER BY type');
+		$q->execute();
+		echo '<tr><td>' . i18n('Project Type') . ': </td><td>';
+		echo "<select name=\"projecttype\">\n";
+		echo '<option value="">' . i18n('Select a project type') . "</option>\n";
+		// FIXME: need to fix the loading glitch
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			if ($r->type == $projectinfo->projecttype) {
+				$sel = 'selected="selected"';
+			} else {
+				$sel = '';
+			}
+			echo "<option $sel value=\"$r->type\">" . htmlspecialchars(i18n($r->type), null, 'ISO8859-1') . "</option>\n";
+		}
+		echo '</select>' . REQUIREDFIELD . '</td></tr>';
+	}
+	?>
+	<tr>
+		<td><?= i18n('Age Category') ?>: </td>
+		<td><?= i18n($agecategories[$projectcategories_id]['category']) ?> (<?= i18n('Grades %1-%2', array($agecategories[$projectcategories_id]['mingrade'], $agecategories[$projectcategories_id]['maxgrade'])) ?>)</td>
 	</tr><tr>
-		<td><?=i18n("Age Category")?>: </td>
-		<td><?=i18n($agecategories[$projectcategories_id]['category'])?> (<?=i18n("Grades %1-%2",array($agecategories[$projectcategories_id]['mingrade'],$agecategories[$projectcategories_id]['maxgrade']))?>)</td>
-	</tr><tr>
-		<td><?=i18n("Division")?>: </td>
+		<td><?= i18n('Division') ?>: </td>
 		<td>
 <?
 	// ###### Feature Specific - filtering divisions by category
-	if($config['filterdivisionbycategory']=="yes"){
-		$q=mysql_query("SELECT projectdivisions.* FROM projectdivisions,projectcategoriesdivisions_link WHERE projectdivisions.id=projectdivisions_id AND projectcategories_id=".$projectcategories_id." AND projectdivisions.year='".$config['FAIRYEAR']."' AND projectcategoriesdivisions_link.year='".$config['FAIRYEAR']."' ORDER BY division"); 
-		echo mysql_error();
+	if ($config['filterdivisionbycategory'] == 'yes') {
+		$q = $pdo->prepare('SELECT projectdivisions.* FROM projectdivisions,projectcategoriesdivisions_link WHERE projectdivisions.id=projectdivisions_id AND projectcategories_id=' . $projectcategories_id . " AND projectdivisions.year='" . $config['FAIRYEAR'] . "' AND projectcategoriesdivisions_link.year='" . $config['FAIRYEAR'] . "' ORDER BY division");
+		$q->execute();
+		show_pdo_errors_if_any($pdo);
 		// ###
-	} else
-		$q=mysql_query("SELECT * FROM projectdivisions WHERE year='".$config['FAIRYEAR']."' ORDER BY division");
-
-	echo "<select name=\"projectdivisions_id\">";
-	echo "<option value=\"\">".i18n("Select a division")."</option>\n";
-	while($r=mysql_fetch_object($q)) {
-		if($r->id == $projectinfo->projectdivisions_id) $sel="selected=\"selected\""; else $sel="";
-		echo "<option $sel value=\"$r->id\">".htmlspecialchars(i18n($r->division))."</option>\n";
+	} else {
+		$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY division");
+		$q->execute();
 	}
-	echo "</select>".REQUIREDFIELD;
 
-	if($config['usedivisionselector']=="yes") {
+	echo '<select name="projectdivisions_id">';
+	echo '<option value="">' . i18n('Select a division') . "</option>\n";
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+		if ($r->id == $projectinfo->projectdivisions_id)
+			$sel = 'selected="selected"';
+		else
+			$sel = '';
+		echo "<option $sel value=\"$r->id\">" . htmlspecialchars(i18n($r->division), null, 'ISO8859-1') . "</option>\n";
+	}
+	echo '</select>' . REQUIREDFIELD;
+
+	if ($config['usedivisionselector'] == 'yes') {
 		?>
 		<script language="javascript" type="text/javascript">
 
@@ -258,11 +351,11 @@ function countwords()
 	<?
 	}
 
-	echo "<br />";
-	echo i18n("WARNING!  If you change the division you must manually change the project number too!  It will NOT be assigned a new number automatically");
-	echo "</td></tr>";
+	echo '<br />';
+	echo i18n('WARNING!  If you change the division you must manually change the project number too!  It will NOT be assigned a new number automatically');
+	echo '</td></tr>';
 
-	echo "<tr><td>".i18n("Language").": </td><td>";
+	echo '<tr><td>' . i18n('Language') . ': </td><td>';
 	echo "<select name=\"language\">\n";
 
 	if ($projectinfo->language)
@@ -271,73 +364,123 @@ function countwords()
 		$currentlang = $_SESSION['lang'];
 
 	foreach ($config['languages'] AS $key => $val) {
-		if($currentlang==$key) $selected="selected=\"selected\""; else $selected="";
+		if ($currentlang == $key)
+			$selected = 'selected="selected"';
+		else
+			$selected = '';
 
 		echo "<option $selected value=\"$key\">$val</option>";
 	}
-	echo "</select>".REQUIREDFIELD;
-	echo "</td></tr>";
+	echo '</select>' . REQUIREDFIELD;
+	echo '</td></tr>';
 
-	echo "<tr><td>".i18n("Requirements").": </td><td>";
-	echo "<table>";
+	echo '<tr><td>' . i18n('Requirements') . ': </td><td>';
+	echo '<table>';
 
-	if($config['participant_project_table']=="no") {
+	if ($config['participant_project_table'] == 'no') {
 		// if we arent asking them if they want a table or not, then we set it to 'yes' assuming everyone will get a table
-		echo " <input type=\"hidden\" name=\"req_table\" value=\"yes\" />";
+		echo ' <input type="hidden" name="req_table" value="yes" />';
 	} else {
-		echo "<tr>";
-		echo " <td>".i18n("Table").REQUIREDFIELD."</td>";
-		if($projectinfo->req_table=="yes") $check="checked=\"checked\""; else $check="";
-		echo " <td><input $check type=\"radio\" name=\"req_table\" value=\"yes\" />Yes</td>";
-		echo " <td width=\"20\">&nbsp;</td>";
-		if($projectinfo->req_table=="no") $check="checked=\"checked\""; else $check="";
-		echo " <td><input $check type=\"radio\" name=\"req_table\" value=\"no\" />No</td>";
-		echo "</tr>";
-	}
-
-	if($config['participant_project_electricity']=="no")
-	{
-		//if we arent asking them if they want electricity or not, then we set it to 'yes' assuming everyone will get electricity
-		echo " <input type=\"hidden\" name=\"req_electricity\" value=\"yes\" />";
-	}
+		echo '<tr>';
+		echo ' <td>' . i18n('Table') . REQUIREDFIELD . '</td>';
+		if ($projectinfo->req_table == 'yes')
+			$check = 'checked="checked"';
 		else
-	{
-		echo "<tr>";
-		echo " <td>".i18n("Electricity").REQUIREDFIELD."</td>";
-		if($projectinfo->req_electricity=="yes") $check="checked=\"checked\""; else $check="";
-		echo " <td><input $check type=\"radio\" name=\"req_electricity\" value=\"yes\" />Yes</td>";
-		echo " <td width=\"20\">&nbsp;</td>";
-		if($projectinfo->req_electricity=="no") $check="checked=\"checked\""; else $check="";
-		echo " <td><input $check type=\"radio\" name=\"req_electricity\" value=\"no\" />No</td>";
-		echo "</tr>";
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"req_table\" value=\"yes\" />Yes</td>";
+		echo ' <td width="20">&nbsp;</td>';
+		if ($projectinfo->req_table == 'no')
+			$check = 'checked="checked"';
+		else
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"req_table\" value=\"no\" />No</td>";
+		echo '</tr>';
 	}
 
-	echo "<tr>";
-	echo " <td>".i18n("Special")."</td>";
+	if ($config['participant_project_electricity'] == 'no') {
+		// if we arent asking them if they want electricity or not, then we set it to 'yes' assuming everyone will get electricity
+		echo ' <input type="hidden" name="req_electricity" value="yes" />';
+	} else {
+		echo '<tr>';
+		echo ' <td>' . i18n('Electricity') . REQUIREDFIELD . '</td>';
+		if ($projectinfo->req_electricity == 'yes')
+			$check = 'checked="checked"';
+		else
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"req_electricity\" value=\"yes\" />Yes</td>";
+		echo ' <td width="20">&nbsp;</td>';
+		if ($projectinfo->req_electricity == 'no')
+			$check = 'checked="checked"';
+		else
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"req_electricity\" value=\"no\" />No</td>";
+		echo '</tr>';
+	}
+
+	echo '<tr>';
+	echo ' <td>' . i18n('Special') . '</td>';
 	echo " <td colspan=\"3\"><input type=\"text\" name=\"req_special\" value=\"$projectinfo->req_special\" /></td>";
-	echo "</tr>";
+	echo '</tr>';
 
-	echo "</table>";
+	echo '</table>';
 
-	echo "</td></tr>";
+	if ($config['ethics_questions'] == 'yes')
+	// If we have set ethics questions to yes then ask the ethics questions!
+	{
+		echo '<tr><td>' . i18n('Ethics Questions') . ':</td><td>';
+		echo '<table>';
+		echo '<tr>';
+		echo ' <td>' . i18n('My project involves human participants') . REQUIREDFIELD . '</td>';
+		if ($projectinfo->human_participants == 'yes')
+			$check = 'checked="checked"';
+		else
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"human_participants\" value=\"yes\" />Yes</td>";
+		echo ' <td width="20">&nbsp;</td>';
+		if ($projectinfo->human_participants == 'no')
+			$check = 'checked="checked"';
+		else
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"human_participants\" value=\"no\" />No</td>";
+		echo '</tr>';
 
-	echo "<tr><td>".i18n("Summary").": </td><td><textarea onchange='countwords()' onkeypress='countwords()' cols=\"60\" rows=\"12\" id=\"summary\" name=\"summary\">".htmlspecialchars($projectinfo->summary)."</textarea>".REQUIREDFIELD."<br />";
+		echo '<tr>';
+		echo ' <td>' . i18n('My project involves animals') . REQUIREDFIELD . '</td>';
+		if ($projectinfo->animal_participants == 'yes')
+			$check = 'checked="checked"';
+		else
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"animal_participants\" value=\"yes\" />Yes</td>";
+		echo ' <td width="20">&nbsp;</td>';
+		if ($projectinfo->animal_participants == 'no')
+			$check = 'checked="checked"';
+		else
+			$check = '';
+		echo " <td><input $check type=\"radio\" name=\"animal_participants\" value=\"no\" />No</td>";
+		echo '</tr>';
+		echo '</table>';
+	}
+	echo '</td></tr>';
 
-	$summarywords=preg_split("/[\s,]+/",$projectinfo->summary);
+	echo '<tr><td>' . i18n('Summary') . ': </td><td><textarea onchange=\'countwords()\' onkeypress=\'countwords()\' cols="60" rows="12" id="summary" name="summary">' . htmlspecialchars($projectinfo->summary, ENT_NOQUOTES, 'ISO8859-1') . '</textarea>' . REQUIREDFIELD . '<br />';
+
+	$summarywords = preg_split('/[\s,]+/', $projectinfo->summary);
 	$summarywordcount = count($summarywords);
 	if ($summarywordcount > $config['participant_project_summary_wordmax'])
-		echo "<div id=\"wordcountmessage\" class=\"incomplete\">";
+		echo '<div id="wordcountmessage" class="incomplete">';
 	else
-		echo "<div id=\"wordcountmessage\" class=\"complete\">";
+		echo '<div id="wordcountmessage" class="complete">';
 
 	echo "<span id=\"wordcount\">$summarywordcount</span>/";
-	echo i18n("%1 words maximum",array($config['participant_project_summary_wordmax']));
-	echo "</div>";
+	echo i18n('%1 words maximum', array($config['participant_project_summary_wordmax']));
+	echo '</div>';
+
+	echo '<tr><td>' . i18n('Feedback') . ': </td><td><textarea cols="60" rows="4" id="feedback" name="feedback">' . htmlspecialchars($projectinfo->feedback, null, 'ISO8859-1') . '</textarea><br />';
 
 	?>
 	</td></tr>
 	</table>
-	<input type="button" id="project_save" value="<?=i18n("Save Project Information")?>" />
+	<input type="button" id="project_save" value="<?= i18n('Save Project Information') ?>" />
 	</form>
 <?
 }

admin/regfee_items_manager.php

@@ -1,53 +1,52 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2007 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require("../tableeditor.class.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require ('../tableeditor.class.php');
+require_once ('../user.inc.php');
 
 user_auth_required('committee', 'admin');
- send_header("Registration Fee Items Manager",
+send_header('Registration Fee Items Manager',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php'),
-            "registration_fee_items_management"
-			);
+    'registration_fee_items_management');
 
- $editor=new TableEditor("regfee_items",
- 			array(  'name' => 'Name (for regfee line)',
+$editor = new TableEditor('regfee_items',
+    array(
+        'name' => 'Name (for regfee line)',
         'description' => 'Description',
         'cost' => 'Cost',
         'per' => 'Cost Per',
     ), null,
-			array('year' => $config['FAIRYEAR'])
-			);
+    array('year' => $config['FAIRYEAR']));
 
- $editor->setPrimaryKey("id");
- $editor->setDefaultSortField("description");
- $editor->setRecordType("Registration Fee Item");
- $editor->setFieldOptions("per", array( array('key' => 'student', 'val' => "Student"),
-					array('key' => 'project', 'val' => "Project") 
-			              )  );
- $editor->setFieldInputType("per", 'select');
+$editor->setPrimaryKey('id');
+$editor->setDefaultSortField('description');
+$editor->setRecordType('Registration Fee Item');
+$editor->setFieldOptions('per', array(array('key' => 'student', 'val' => 'Student'),
+    array('key' => 'project', 'val' => 'Project')));
+$editor->setFieldInputType('per', 'select');
 $editor->filterList('year', $config['FAIRYEAR']);
 
 $editor->execute();

admin/registration.php

@@ -1,42 +1,41 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+include '../config/signaturepage_or_permissionform.php';
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- send_header("Participant Registration",
+send_header('Participant Registration',
     array('Committee Main' => 'committee_main.php',
         'Administration' => 'admin/index.php'),
-            "participant_registration"
-			);
- echo "<br />";
- echo "<a href=\"registration_receivedforms.php\">".i18n("Input Received Signature Forms")."</a> <br />";
- echo "<a href=\"registration_list.php\">".i18n("Registration List and Student/Project Editor")."</a> <br />";
- echo "<a href=\"registration_stats.php\">".i18n("Registration Statistics")."</a> <br />";
- echo "<a href=\"registration_webconsent.php\">".i18n("Website Consent")."</a> <br />";
-
-
+    'participant_registration');
+echo '<br />';
+echo '<a href="registration_receivedforms.php">' . i18n("Input Received $plural_participationform") . '</a> <br />';
+echo '<a href="registration_list.php">' . i18n('Registration List and Student/Project Editor') . '</a> <br />';
+echo '<a href="registration_stats.php">' . i18n('Registration Statistics') . '</a> <br />';
+echo '<a href="registration_webconsent.php">' . i18n('Website Consent') . '</a> <br />';
 
 send_footer();
 ?>

admin/registration_list.php

@@ -1,25 +1,30 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005-2006 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005-2006 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
+
+// This file was modified Jan of 2014 by Richard Sin
+// Flagging has been added to monitor projects with concern.
+
 ?>
 <?
 require_once ('../common.inc.php');
@@ -29,57 +34,80 @@ $auth_type = user_auth_required(array('fair','committee'), 'admin');
 
 // require_once('../register_participants.inc.php');
 
- if($_GET['year']) $year=$_GET['year'];
- else $year=$config['FAIRYEAR'];
+if (get_value_from_array($_GET, 'year'))
+	$year = $_GET['year'];
+else
+	$year = $config['FAIRYEAR'];
 
-$q=mysql_query("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
-while($r=mysql_fetch_object($q))
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
+$q->execute();
+
+while ($r = $q->fetch(PDO::FETCH_OBJ))
 	$cats[$r->id] = $r->category;
 
-$q=mysql_query("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
-while($r=mysql_fetch_object($q))
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
+$q->execute();
+
+while ($r = $q->fetch(PDO::FETCH_OBJ))
 	$divs[$r->id] = $r->division;
 
-$action=$_GET['action'];
+$action = get_value_from_array($_GET, 'action');
 switch ($action) {
 	case 'load_row':
 		$id = intval($_GET['id']);
 		$q = list_query($year, '', $id);
-	$r = mysql_fetch_object($q);
+		$r = $q->fetch(PDO::FETCH_OBJ);
 		print_row($r);
 		exit;
 
 	case 'delete':
 		$regid = intval($_GET['id']);
-	$q = mysql_query("SELECT * FROM projects WHERE registrations_id='$regid'");
-	if(mysql_num_rows($q)) {
-		$p = mysql_fetch_assoc($q);
-		mysql_query("DELETE FROM winners WHERE projects_id='{$p['id']}'");
+		$q = $pdo->prepare("SELECT * FROM projects WHERE registrations_id='$regid'");
+		$q->execute();
+		if ($q->rowCount()) {
+			$p = $q->fetch(PDO::FETCH_ASSOC);
+			$stmt = $pdo->prepare("DELETE FROM winners WHERE projects_id='{$p['id']}'");
+			$stmt->execute();
 		}
- 	mysql_query("DELETE FROM registrations WHERE id='$regid' AND year='".$config['FAIRYEAR']."'");
-	mysql_query("DELETE FROM students WHERE registrations_id='$regid' AND year='".$config['FAIRYEAR']."'");
-	mysql_query("DELETE FROM projects WHERE registrations_id='$regid' AND year='".$config['FAIRYEAR']."'");
-	mysql_query("DELETE FROM safety WHERE registrations_id='$regid' AND year='".$config['FAIRYEAR']."'");
-	mysql_query("DELETE FROM questions_answers WHERE registrations_id='$regid' AND year='".$config['FAIRYEAR']."'");
-	mysql_query("DELETE FROM mentors WHERE registrations_id='$regid' AND year='".$config['FAIRYEAR']."'");
-	mysql_query("DELETE FROM emergencycontact WHERE registrations_id='$regid' AND year='".$config['FAIRYEAR']."'");
-	happy_("Registration and all related data successfully deleted");
+
+		$stmt = $pdo->prepare("DELETE FROM registrations WHERE id='$regid' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+
+		$stmt = $pdo->prepare("DELETE FROM students WHERE registrations_id='$regid' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+
+		$stmt = $pdo->prepare("DELETE FROM projects WHERE registrations_id='$regid' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+
+		$stmt = $pdo->prepare("DELETE FROM safety WHERE registrations_id='$regid' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+
+		$stmt = $pdo->prepare("DELETE FROM questions_answers WHERE registrations_id='$regid' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+
+		$stmt = $pdo->prepare("DELETE FROM mentors WHERE registrations_id='$regid' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+
+		$stmt = $pdo->prepare("DELETE FROM emergencycontact WHERE registrations_id='$regid' AND year='" . $config['FAIRYEAR'] . "'");
+		$stmt->execute();
+		happy_('Registration and all related data successfully deleted');
 		exit;
 }
 
 if ($auth_type == 'committee') {
-	 send_header("Registration Management",
+	send_header('Registration Management',
 		array('Committee Main' => 'committee_main.php',
 			'Administration' => 'admin/index.php',
-			'Participant Registration' => 'admin/registration.php')
-				);
+			'Participant Registration' => 'admin/registration.php'));
 } else {
-	 send_header("Student/Project Management",
+	send_header('Student/Project Management',
 		array('Fair Main' => 'fair_main.php'));
 }
 
 ?>
 
+ 
+
 <div id="student_editor" title="Student/Project Editor" style="display: none">
 	<div id="editor_tabs" >
 		<ul>
@@ -87,7 +115,8 @@ if($auth_type == 'committee') {
 			<li><a href="#editor_tab_students"><span><?= i18n('Students') ?></span></a></li>
 			<li><a href="#editor_tab_project"><span><?= i18n('Project') ?></span></a></li>
 		</ul>
-		<div id="editor_tab_reg">Loading...</div>
+		<div id="editor_tab_reg">Loading...
+		</div>
 		<div id="editor_tab_students">Loading...</div>
 		<div id="editor_tab_project">Loading...</div>
 	</div>
@@ -105,6 +134,7 @@ function popup_editor(id, open_tab)
 	var h = (document.documentElement.clientHeight * 0.9);
 
 	registrations_id = id;
+	
 	registrations_new = 0;
 
 	if(id == -1) {
@@ -115,23 +145,24 @@ function popup_editor(id, open_tab)
 	/* Force no tabs to be selected, need to set collapsible 
 	 * to true first */
 	$('#editor_tabs').tabs('option', 'collapsible', true);
-	$('#editor_tabs').tabs('option', 'selected', -1);
+	$('#editor_tabs').tabs('option', 'active', -1);
+
 
 	/* Then we'll select a tab to force a reload */
 	switch(open_tab) {
 	case 'reg':
 		/* If we open on the reg tab, disable the others until a save */
 		$('#editor_tabs').tabs('option', 'disabled', [1,2]);
-		$('#editor_tabs').tabs('select', 0);
+		$('#editor_tabs').tabs('option', 'active', 0);
 		break;
 
 	case 'project':
 		$('#editor_tabs').tabs('option', 'disabled', []);
-		$('#editor_tabs').tabs('select', 2);
+		$('#editor_tabs').tabs('option', 'active', 2);
 		break;
 	default:
 		$('#editor_tabs').tabs('option', 'disabled', []);
-		$('#editor_tabs').tabs('select', 1);
+		$('#editor_tabs').tabs('option', 'active', 1);
 		break;
 	}
 	/* Don't let anything collapse */
@@ -168,7 +199,7 @@ function update_students(numstudents)
 			$(".students_remove_button").click(function() {		
 				var id = registrations_id;
 				var sid = $("#"+this.id +"_students_id").val();
-				var conf = confirmClick('<?=i18n("Are you sure you want to remove this student from the project?")?>');
+				var conf = confirmClick('<?= i18n('Are you sure you want to remove this student from the project?') ?>');
 
 				if(conf == false) return false;
 
@@ -214,7 +245,7 @@ function update_project()
 function delete_registration(id)
 {
 	registrations_id=id;
-	var conf = confirmClick('<?=i18n("Are you sure you want to completely delete this registration?")?>');
+	var conf = confirmClick('<?= i18n('Are you sure you want to completely delete this registration?') ?>');
 	if(conf == false) return false;
 
 	$("#debug").load("<?= $_SERVER['PHP_SELF'] ?>?action=delete&id="+id,{},
@@ -275,14 +306,30 @@ $(document).ready(function() {
 				/* Create a row before loading it */
 				$("#registration_list").append("<tr id=\"row_"+id+"\"></tr>");
 			}
-			$("#row_"+id).load("<?$_SERVER['PHP_SELF']?>?action=load_row&id="+id);
-			$("#row_"+id).effect('highlight',{},500);			
+			$("#" + $.escapeSelector("row_" + id)).load("<? $_SERVER['PHP_SELF'] ?>?action=load_row&id="+id);
+			$("#" + $.escapeSelector("row_" + id)).effect('highlight',{},500);			
 		}
 	});
 
 
 	$("#editor_tabs").tabs({
+		create: function(event, ui) {
+            update_students();
+			update_project();
+			update_reg();
+        },
+		
+		activate: function( event, ui ) {
+			update_students();
+			update_project();
+			update_reg();
+		},
+		selected: -1
+	});
+
+	/*$("#editor_tabs").tabs({
 		show: function(event, ui) {
+			console.log('hi');
 			switch(ui.panel.id) {
 			case 'editor_tab_students':
 				update_students();
@@ -298,12 +345,12 @@ $(document).ready(function() {
 			}
 		},
 		selected: -1
-	});
+	});*/
 
-	$("#newproject").click(function() {
+	$("#newproject").on("click", (function() {
 			popup_editor(-1);
 		}
-	);
+	));
 });
 </script>
 
@@ -311,7 +358,7 @@ $(document).ready(function() {
 <br />
 <table width="100%">
 <tr><td>
-	<?=i18n("Choose Status")?>:
+	<?= i18n('Choose Status') ?>:
 	<form name="statuschangerform" method="get" action="registration_list.php">
 	<select name="showstatus" onchange="document.forms.statuschangerform.submit()">
 
@@ -325,61 +372,74 @@ $(document).ready(function() {
 $showstatus = $_GET['showstatus'];
 
 foreach ($status_str as $s => $str) {
-	if($str == '') continue;
-	$sel = ($showstatus == $s) ? "selected=\"selected\"" : '';
+	if ($str == '')
+		continue;
+	$sel = ($showstatus == $s) ? 'selected="selected"' : '';
 	echo "<option $sel value=\"$s\">" . i18n($str) . "</option>\n";
 }
 ?>
 	</select></form></td>
-	<td align="right"><button id="newproject"><?=i18n("Create New Project")?></button></td>
+	<td align="right"><button id="newproject"><?= i18n('Create New Project') ?></button></td>
 	</tr></table>
 <?
 
 if ($showstatus) {
 	switch ($showstatus) {
-		case "complete": $wherestatus="AND status='complete' "; break;
-		case "paymentpending": $wherestatus="AND status='paymentpending' "; break;
-		case "completeorpaymentpending": $wherestatus="AND (status='complete' OR status='paymentpending') "; break;
-		case "open": $wherestatus="AND status='open' "; break;
-		case "new": $wherestatus="AND status='new' "; break;
-		default: $wherestatus="";
+		case 'complete':
+			$wherestatus = "AND status='complete' ";
+			break;
+		case 'paymentpending':
+			$wherestatus = "AND status='paymentpending' ";
+			break;
+		case 'completeorpaymentpending':
+			$wherestatus = "AND (status='complete' OR status='paymentpending') ";
+			break;
+		case 'open':
+			$wherestatus = "AND status='open' ";
+			break;
+		case 'new':
+			$wherestatus = "AND status='new' ";
+			break;
+		default:
+			$wherestatus = '';
 	}
-}
-else $wherestatus="";
+} else
+	$wherestatus = '';
 
 $q = list_query($year, $wherestatus, false);
 
-echo "<table id=\"registration_list\" class=\"tableview\">";
-echo "<thead><tr>";
-if($showstatus) $stat="&showstatus=".$showstatus;
-echo  "<th>".i18n("Status")."</th>";
-echo  "<th>".i18n("Email Address")."</th>";
-echo  "<th>".i18n("Reg Num")."</th>";
-echo  "<th>".i18n("Proj Num")."</th>";
-echo  "<th>".i18n("Project Title")."</th>";
-echo  "<th>".i18n("Age Category")."</th>";
-echo  "<th>".i18n("Division")."</th>";
-echo  "<th>".i18n("School(s)")."</th>";
-echo  "<th>".i18n("Student(s)")."</th>";
-echo  "<th>".i18n("Action")."</th>";
-echo "</tr></thead>";
+echo '<table id="registration_list" class="tableview">';
+echo "<thead><tr style='background: black';>";
+if ($showstatus)
+	$stat = '&showstatus=' . $showstatus;
+echo '<th>' . i18n('Status') . '</th>';
+echo '<th>' . i18n('Email Address') . '</th>';
+echo '<th>' . i18n('Reg Num') . '</th>';
+echo '<th>' . i18n('Proj Num') . '</th>';
+echo '<th>' . i18n('Project Title') . '</th>';
+echo '<th>' . i18n('Age Category') . '</th>';
+echo '<th>' . i18n('Division') . '</th>';
+echo '<th>' . i18n('School(s)') . '</th>';
+echo '<th>' . i18n('Student(s)') . '</th>';
+echo '<th>' . i18n('Flagged') . '</th>';
+echo '<th>' . i18n('Action') . '</th>';
+echo '</tr></thead>';
 
-while($r=mysql_fetch_object($q)) {
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	echo "<tr id=\"row_{$r->reg_id}\">";
 	print_row($r);
-	echo "</tr>";
+	echo '</tr>';
 }
-echo "</table>";
+echo '</table>';
 
-
-echo "<br/><br/>The statistics have moved here: <a href=\"registration_stats.php\">Registration Statistics</a><br/><br/>";
+echo '<br/><br/>The statistics have moved here: <a href="registration_stats.php">Registration Statistics</a><br/><br/>';
 
 send_footer();
 
-/* Now some helper fucntions we call more than once */
+/* Now some helper functions we call more than once */
 function list_query($year, $wherestatus, $reg_id)
 {
-	global $auth_type;
+	global $auth_type, $pdo;
 
 	$reg = '';
 	if ($reg_id != false)
@@ -390,14 +450,16 @@ function list_query($year, $wherestatus, $reg_id)
 		$fair = "AND projects.fairs_id='{$_SESSION['fairs_id']}'";
 	}
 
-	$q=mysql_query("SELECT  registrations.id AS reg_id,
+	$q = $pdo->prepare("SELECT  registrations.id AS reg_id,
 				registrations.num AS reg_num,
 				registrations.status,
 				registrations.email,
 				projects.title,
 				projects.projectnumber,
 				projects.projectcategories_id,
-				projects.projectdivisions_id
+				projects.projectdivisions_id,
+				projects.feedback,
+				projects.flagged
 			FROM
 				registrations
 				left outer join projects on projects.registrations_id=registrations.id
@@ -409,28 +471,48 @@ function list_query($year, $wherestatus, $reg_id)
 			ORDER BY
 				registrations.status DESC, projects.title
 			");
-	echo mysql_error();
+
+	$q->execute();
+
+	// FIXME
+	show_pdo_errors_if_any($pdo);
 	return $q;
 }
 
-
-
 function print_row($r)
 {
-	global $cats, $divs, $config, $year;
-	switch($r->status) {
-	case "new": $status_text="New"; break;
-	case "open": $status_text="Open"; break;
-	case "paymentpending": $status_text="Payment Pending"; break;
-	case "complete": $status_text="Complete"; break;
+	global $cats, $divs, $config, $year, $pdo;
+	$status_text = null;
+	switch (get_value_property_or_default($r, 'status')) {
+		case 'new':
+			$status_text = 'New';
+			break;
+		case 'open':
+			$status_text = 'Open';
+			break;
+		case 'paymentpending':
+			$status_text = 'Payment Pending';
+			break;
+		case 'complete':
+			$status_text = 'Complete';
+			break;
 	}
 
 	$status_text = i18n($status_text);
 
-	$scl = "style=\"cursor:pointer;\" onclick=\"popup_editor('{$r->reg_id}','');\"";
-	$pcl = "style=\"cursor:pointer;\" onclick=\"popup_editor('{$r->reg_id}','project');\"";
+	$scl = 'style="cursor:pointer;" onclick="popup_editor(\'' . get_value_property_or_default($r, 'reg_id') . "','');\"";
+	$pcl = 'style="cursor:pointer;" onclick="popup_editor(\'' . get_value_property_or_default($r, 'reg_id') . "','project');\"";
 
 	echo "<td $scl>{$status_text}</td>";
+	// echo "<td $scl>" . get_value_property_or_default($r, 'email') . '</td>';
+	// echo "<td $scl>" . get_value_property_or_default($r, 'reg_num') . '</td>';
+	// $pn = str_replace(' ', '&nbsp;', get_value_property_or_default($r, 'projectnumber', ''));
+	// echo "<td $scl>$pn</td>";
+	// echo "<td $pcl>" . get_value_property_or_default($r, 'title') . '</td>';
+
+	// echo "<td $scl>" . i18n(get_value_from_array($cats, get_value_property_or_default($r, 'projectcategories_id'), '')) . '</td>';
+	// echo "<td $scl>" . i18n(get_value_from_array($divs, get_value_property_or_default($r, 'projectdivisions_id', ''))) . '</td>';
+
 	echo "<td $scl>{$r->email}</td>";
 	echo "<td $scl>{$r->reg_num}</td>";
 	$pn = str_replace(' ', '&nbsp;', $r->projectnumber);
@@ -440,7 +522,9 @@ function print_row($r)
 	echo "<td $scl>".i18n($cats[$r->projectcategories_id])."</td>";
 	echo "<td $scl>".i18n($divs[$r->projectdivisions_id])."</td>";
 
-	$sq=mysql_query("SELECT students.firstname,
+
+
+	$sq = $pdo->prepare("SELECT students.firstname,
 				students.lastname,
 				students.id,
 				schools.school,
@@ -453,35 +537,44 @@ function print_row($r)
 				AND
 				students.schools_id=schools.id
 			");
-			echo mysql_error();
+	$sq->execute();
+	show_pdo_errors_if_any($pdo);
 
 	$studnum = 1;
-	$schools="";
-	$students="";
-	while($studentinfo=mysql_fetch_object($sq))
-	{
+	$schools = '';
+	$students = '';
+	while ($studentinfo = $sq->fetch(PDO::FETCH_OBJ)) {
 		$students .= "$studentinfo->firstname $studentinfo->lastname<br />";
 		$schools .= "$studentinfo->school <br />";
 	}
 
 	echo "<td $scl>$schools</td>";
 	echo "<td $scl>$students</td>";
-	echo "<td align=\"center\"  >";
-	if($year==$config['FAIRYEAR']) {
-		echo "<a title=\"".i18n("Delete this registration")."\" href=\"#\" onClick=\"delete_registration({$r->reg_id});return false\" >";
-		echo "<img src=\"".$config['SFIABDIRECTORY']."/images/16/button_cancel.".$config['icon_extension']."\" border=0>";
-		echo "</a>";
 
-			echo "<form target=\"_blank\" method=\"post\" action=\"../register_participants.php\">";
-			echo "<input type=\"hidden\" name=\"action\" value=\"continue\">";
+	echo '<td align="center"  >';
+	if ($r->flagged == false) {
+		echo '<a title="' . i18n('Not flagged') . "\" href=\"#\" onClick=\"popup_editor('$r->reg_id','project');\" >";
+		echo '<img src="' . $config['SFIABDIRECTORY'] . '/images/16/ok.' . $config['icon_extension'] . '" border=0>';
+		echo '</a>';
+	} else {
+		echo '<a title="' . i18n('Flagged') . "\" href=\"#\" onClick=\"popup_editor('$r->reg_id','project');\" >";
+		echo '<img src="' . $config['SFIABDIRECTORY'] . '/images/16/flagged.' . $config['icon_extension'] . '" border=0>';
+		echo '</a>';
+	}
+
+	echo '<td align="center"  >';
+	if ($year == $config['FAIRYEAR']) {
+		echo '<a title="' . i18n('Delete this registration') . "\" href=\"#\" onClick=\"delete_registration({$r->reg_id});return false\" >";
+		echo '<img src="' . $config['SFIABDIRECTORY'] . '/images/16/button_cancel.' . $config['icon_extension'] . '" border=0>';
+		echo '</a>';
+
+		echo '<form target="_blank" method="post" action="../register_participants.php">';
+		echo '<input type="hidden" name="action" value="continue">';
 		echo "<input type=\"hidden\" name=\"email\" value=\"$r->email\">";
 		echo "<input type=\"hidden\" name=\"regnum\" value=\"$r->reg_num\">";
-			echo "<input type=\"submit\" value=\"".i18n("Login")."\">";
-			echo "</form>";
-
-
+		echo '<input type="submit" value="' . i18n('Login') . '">';
+		echo '</form>';
 	}
-	echo "</td>";
-
+	echo '</td>';
 }
 ?>

admin/registration_receivedforms.php

@@ -1,77 +1,77 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
+
+// This file was modified March of 2015 by Sebastian Ruan
+// Receive all button was added
+
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+include '../config/signaturepage_or_permissionform.php';
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../register_participants.inc.php");
+require ('../register_participants.inc.php');
 
- send_header("Input Received Signature Forms",
+send_header("Input Received $plural_participationform",
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Participant Registration' => 'admin/registration.php')
-				);
- echo "<br />";
+		'Participant Registration' => 'admin/registration.php'));
+echo '<br />';
 
 $showformatbottom = true;
- if($_POST['action']=="received" && $_POST['registration_number'])
- {
- 	$q=mysql_query("SELECT * FROM registrations WHERE num='".$_POST['registration_number']."' AND year='".$config['FAIRYEAR']."'");
-	if(mysql_num_rows($q)==1)
-	{
-		$r=mysql_fetch_object($q);
+if (get_value_from_array($_POST, 'action') == 'received' && get_value_from_array($_POST, 'registration_number')) {
+	$q = $pdo->prepare("SELECT * FROM registrations WHERE num='" . $_POST['registration_number'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+	$q->execute();
+	if ($q->rowCount() == 1) {
+		$r = $q->fetch(PDO::FETCH_OBJ);
 		$reg_id = $r->id;
 		$reg_num = $r->num;
 		$reg_status = $r->status;
 
-		if($r->status=='new')
-		{
-			echo error(i18n("Invalid Registration Status (%1 is New).  Cannot receive an empty form.",array($_POST['registration_number'])));
-		}
-		else
-		{
+		if ($r->status == 'new') {
+			echo error(i18n('Invalid Registration Status (%1 is New).  Cannot receive an empty form.', array($_POST['registration_number'])));
+		} else {
 			// make sure all of the statuses are correct
 			$statusstudent = studentStatus($reg_id);
 			$statusemergencycontact = emergencycontactStatus($reg_id);
 			$statusproject = projectStatus($reg_id);
-			if($config['participant_mentor']=="yes")
+			if ($config['participant_mentor'] == 'yes')
 				$statusmentor = mentorStatus($reg_id);
 			else
-				$statusmentor="complete";
+				$statusmentor = 'complete';
 			$statussafety = safetyStatus($reg_id);
 			$statusnamecheck = namecheckStatus($reg_id);
 
 			if (
-				$statusstudent == "complete" &&
-				$statusemergencycontact == "complete" &&
-				$statusproject == "complete" &&
-				$statusmentor == "complete" &&
-				$statussafety == "complete" &&
-				$statusnamecheck == "complete"
+				$statusstudent == 'complete' &&
+				$statusemergencycontact == 'complete' &&
+				$statusproject == 'complete' &&
+				$statusmentor == 'complete' &&
+				$statussafety == 'complete' &&
+				$statusnamecheck == 'complete'
 			) {
-				
-				$q=mysql_query("SELECT projects.title,
+				$q = $pdo->prepare("SELECT projects.title,
 							projectcategories.category,
 							projectdivisions.division
 						FROM
@@ -82,25 +82,35 @@ $showformatbottom=true;
 							projects.projectcategories_id=projectcategories.id
 							AND
 							projects.projectdivisions_id=projectdivisions.id
+							AND 
+							projectcategories.year=projects.year
+							AND
+							projectdivisions.year=projects.year
 						");
+				$q->execute();
 
-echo mysql_Error();
-				$projectinfo=mysql_fetch_object($q);
-				echo "<table class=\"summarytable\">";
- 				echo "<tr><th colspan=\"2\">".i18n("Registration Summary for %1",array($reg_num))."</th></tr>";
-				switch($reg_status)
-				{
-					case "paymentpending": $status_text="Payment Pending"; break;
-					case "complete": $status_text="Complete"; break;
-					case "open": $status_text="Open"; break;
+				show_pdo_errors_if_any($pdo);
+				$projectinfo = $q->fetch(PDO::FETCH_OBJ);
+				echo '<table class="summarytable">';
+				echo '<tr><th colspan="2">' . i18n('Registration Summary for %1', array($reg_num)) . '</th></tr>';
+				switch ($reg_status) {
+					case 'paymentpending':
+						$status_text = 'Payment Pending';
+						break;
+					case 'complete':
+						$status_text = 'Complete';
+						break;
+					case 'open':
+						$status_text = 'Open';
+						break;
 				}
-				echo "<tr><td><b>".i18n("Registration Status")."</b></td><td>$status_text</td></tr>";
+				echo '<tr><td><b>' . i18n('Registration Status') . "</b></td><td>$status_text</td></tr>";
 
-				echo "<tr><td><b>".i18n("Registration Number")."</b></td><td>$reg_num</td></tr>";
-				echo "<tr><td><b>".i18n("Project Title")."</b></td><td>$projectinfo->title</td></tr>";
-				echo "<tr><td><b>".i18n("Category / Division")."</b></td><td>$projectinfo->category / $projectinfo->division</td></tr>";
+				echo '<tr><td><b>' . i18n('Registration Number') . "</b></td><td>$reg_num</td></tr>";
+				echo '<tr><td><b>' . i18n('Project Title') . "</b></td><td>$projectinfo->title</td></tr>";
+				echo '<tr><td><b>' . i18n('Category / Division') . "</b></td><td>$projectinfo->category / $projectinfo->division</td></tr>";
 
-				$q=mysql_query("SELECT students.firstname,
+				$q = $pdo->prepare("SELECT students.firstname,
 							students.lastname,
 							schools.school
 						FROM
@@ -110,128 +120,247 @@ echo mysql_Error();
 							AND
 							students.schools_id=schools.id
 						");
+				$q->execute();
 
 				$studnum = 1;
-				while($studentinfo=mysql_fetch_object($q))
-				{
-					echo "<tr><td><b>".i18n("School %1",array($studnum))."</b></td><td>$studentinfo->school </td></tr>";
+				while ($studentinfo = $q->fetch(PDO::FETCH_OBJ)) {
+					echo '<tr><td><b>' . i18n('School %1', array($studnum)) . "</b></td><td>$studentinfo->school </td></tr>";
 
-					echo "<tr><td><b>".i18n("Student %1",array($studnum))."</b></td><td>$studentinfo->firstname $studentinfo->lastname </td></tr>";
+					echo '<tr><td><b>' . i18n('Student %1', array($studnum)) . "</b></td><td>$studentinfo->firstname $studentinfo->lastname </td></tr>";
 					$studnum++;
 				}
 
 				list($regfee, $regfeedata) = computeRegistrationFee($reg_id);
-				echo "<tr><td><b>".i18n("Registration Fee")."</b></td><td>".sprintf("$%.02f", $regfee)."</td></tr>";
+				echo '<tr><td><b>' . i18n('Registration Fee') . '</b></td><td>' . sprintf('$%.02f', $regfee) . '</td></tr>';
 				echo "</table>\n";
-					echo "<br />";
+				echo '<br />';
 
-				if($r->status!='complete')
-				{
-					echo "<table style=\"margin-left: 30px;\">";
-					echo "<tr><td colspan=\"3\">";
-					echo i18n("Is this the correct form to register?");
-					echo "</td></tr>";
-					echo "<tr>";
-					echo "<td>";
+				if ($r->status != 'complete') {
+					echo '<table style="margin-left: 30px;">';
+					echo '<tr><td colspan="3">';
+					echo i18n('Is this the correct form to register?');
+					echo '</td></tr>';
+					echo '<tr>';
+					echo '<td>';
 
-					echo "<form method=\"post\" action=\"registration_receivedforms.php\">";
+					echo '<form method="post" action="registration_receivedforms.php">';
 					echo "<input type=\"hidden\" name=\"registration_number\" value=\"$reg_num\" />";
-					echo "<input type=\"hidden\" name=\"action\" value=\"receivedno\" />";
-					echo "<input type=submit value=\"".i18n("No, this is the wrong form")."\" style=\"width: 400px;\"/>";
-					echo "</form>";
+					echo '<input type="hidden" name="action" value="receivedno" />';
+					echo '<input type=submit value="' . i18n('No, this is the wrong form') . '" style="width: 400px; height: 40px; margin: 10px;"/>';
+					echo '</form>';
 
-					if($config['regfee']>0)
-					{
-
-						echo "<form method=\"post\" action=\"registration_receivedforms.php\">";
+					if ($config['regfee'] > 0) {
+						echo '<form method="post" action="registration_receivedforms.php">';
 						echo "<input type=\"hidden\" name=\"registration_number\" value=\"$reg_num\" />";
-						echo "<input type=\"hidden\" name=\"action\" value=\"receivedyes\" />";
-						echo "<input type=submit value=\"".i18n("Yes, right form with registration fee")."\" style=\"width: 400px;\"/>";
-						echo "</form>";
+						echo '<input type="hidden" name="action" value="receivedyes" />';
+						echo '<input type=submit value="' . i18n('Yes, right form with registration fee') . '" style="width: 400px; height: 40px; margin: 10px;"/>';
+						echo '</form>';
 
-						echo "<form method=\"post\" action=\"registration_receivedforms.php\">";
+						echo '<form method="post" action="registration_receivedforms.php">';
 						echo "<input type=\"hidden\" name=\"registration_number\" value=\"$reg_num\" />";
-						echo "<input type=\"hidden\" name=\"action\" value=\"receivedyesnocash\" />";
-						echo "<input type=submit value=\"".i18n("Yes, right form without registration fee")."\" style=\"width: 400px;\"/>";
-						echo "</form>";
+						echo '<input type="hidden" name="action" value="receivedyesnocash" />';
+						echo '<input type=submit value="' . i18n('Yes, right form without registration fee') . '" style="width: 400px; height: 40px; margin: 10px;"/>';
+						echo '</form>';
+					} else {
+						echo '<form method="post" action="registration_receivedforms.php">';
+						echo "<input type=\"hidden\" name=\"registration_number\" value=\"$reg_num\" />";
+						echo '<input type="hidden" name="action" value="receivedyes" />';
+						echo '<input type=submit value="' . i18n('Yes, this is the right form') . '" style="width: 400px; height: 40px; margin: 10px;"/>';
+						echo '</form>';
 					}
-					else
-					{
-						echo "<form method=\"post\" action=\"registration_receivedforms.php\">";
-						echo "<input type=\"hidden\" name=\"registration_number\" value=\"$reg_num\" />";
-						echo "<input type=\"hidden\" name=\"action\" value=\"receivedyes\" />";
-						echo "<input type=submit value=\"".i18n("Yes, this is the right form")."\" style=\"width: 400px;\"/>";
-						echo "</form>";
-
-
-					}
-					echo "<br />";
+					echo '<br />';
 
 					echo "</td>\n";
-					echo "</tr>";
-					echo "</table>";
+					echo '</tr>';
+					echo '</table>';
 					$showformatbottom = false;
+				} else {
+					echo i18n('This form has already been received.  Registration is complete');
+					echo '<br />';
+					echo "<a href=\"registration_receivedforms.php?action=unregister&registration_number=$reg_num\">" . i18n('Click here to unregister this project') . '</a>';
+					echo '<br />';
+					echo '<hr />';
 				}
-				else
-				{
-					echo i18n("This form has already been received.  Registration is complete");
-					echo "<br />";
-					echo "<a href=\"registration_receivedforms.php?action=unregister&registration_number=$reg_num\">".i18n("Click here to unregister this project")."</a>";
-					echo "<br />";
-					echo "<hr />";
-				}
-
-
-			}
-			else
-			{
-				echo error(i18n("All registration sections are not complete.  Cannot register incomplete form"));
+			} else {
+				echo error(i18n('All registration sections are not complete.  Cannot register incomplete form'));
 			}
 		}
+	} else {
+		echo error(i18n('Invalid Registration Number (%1)', array($_POST['registration_number'])));
 	}
-	else
-	{
-		echo error(i18n("Invalid Registration Number (%1)",array($_POST['registration_number'])));
-
-	}
- 	
-
- }
- else if(($_POST['action']=="receivedyes" || $_POST['action']=="receivedyesnocash") && $_POST['registration_number']) {
- 	
+} else if ((get_value_from_array($_POST, 'action') == 'receivedyes' || get_value_from_array($_POST, 'action') == 'receivedyesnocash') && get_value_from_array($_POST, 'registration_number')) {
 	$regnum = intval($_POST['registration_number']);
- 	$checkNumQuery=mysql_query("SELECT projectnumber
+	$checkNumQuery = $pdo->prepare("SELECT projectnumber
 					FROM projects, registrations 
 					WHERE projects.registrations_id = registrations.id 
 						AND num='$regnum'
 						AND registrations.year='{$config['FAIRYEAR']}'");
-	$checkNumResults=mysql_fetch_object($checkNumQuery);
+	$checkNumQuery->execute();
+	$checkNumResults = $checkNumQuery->fetch(PDO::FETCH_OBJ);
 	$projectnum = $checkNumResults->projectnumber;
 
-	$q=mysql_query("SELECT id FROM registrations WHERE num='$regnum' AND year='{$config['FAIRYEAR']}'");
-	$r=mysql_fetch_object($q);
+	$q = $pdo->prepare("SELECT id FROM registrations WHERE num='$regnum' AND year='{$config['FAIRYEAR']}'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_OBJ);
 	$reg_id = $r->id;
 
- 	if($projectnum == null)
- 	{
+	if ($projectnum == null) {
 		list($projectnumber, $ps, $pns, $pss) = generateProjectNumber($reg_id);
-		mysql_query("UPDATE projects SET projectnumber='$projectnumber',
+		$stmt = $pdo->prepare("UPDATE projects SET projectnumber='$projectnumber',
 				projectsort='$ps',projectnumber_seq='$pns',projectsort_seq='$pss'
-				WHERE registrations_id='$reg_id' AND year='{$config['FAIRYEAR']}'");
-		echo happy(i18n("Assigned Project Number: %1",array($projectnumber)));
- 	}
-	else
+				WHERE registrations_id='$reg_id' AND year=$config{['FAIRYEAR']}");
+		$stmt->execute();
+		echo happy(i18n('Assigned Project Number: %1', array($projectnumber)));
+	} else
 		$projectnumber = $projectnum;
 
 	// get all students with this registration number
 	$recipients = getEmailRecipientsForRegistration($reg_id);
 
- 	if($_POST['action']=="receivedyes")
- 	{
+	if ($_POST['action'] == 'receivedyes') {
 		// actually set it to 'complete'
-		mysql_query("UPDATE registrations SET status='complete' WHERE num='$regnum' AND year='{$config['FAIRYEAR']}'");
-
+		$stmt = $pdo->prepare("UPDATE registrations SET status='complete' WHERE num='$regnum' AND year='{$config['FAIRYEAR']}'");
+		$stmt->execute();
 		foreach ($recipients AS $recip) {
+			$to = $recip['to'];
+			$subsub = array();
+			$subbod = array(
+				'TO' => $recip['to'],
+				'EMAIL' => $recip['email'],
+				'FIRSTNAME' => $recip['firstname'],
+				'LASTNAME' => $recip['lastname'],
+				'NAME' => $recip['firstname'] . ' ' . $recip['lastname'],
+				'REGNUM' => $regnum,
+				'PROJECTNUMBER' => $projectnumber,
+			);
+			email_send('register_participants_received', $to, $subsub, $subbod);
+		}
+
+		echo happy(i18n('Registration of form %1 successfully completed', array($regnum)));
+	} else if ($_POST['action'] == 'receivedyesnocash') {
+		// actually set it to 'paymentpending'
+		$stmt = $pdo->prepare("UPDATE registrations SET status='paymentpending' WHERE num='$regnum' AND year='{$config['FAIRYEAR']}'");
+		$stmt->execute();
+		foreach ($recipients AS $recip) {
+			$to = $recip['to'];
+			$subsub = array();
+			$subbod = array(
+				'TO' => $recip['to'],
+				'EMAIL' => $recip['email'],
+				'FIRSTNAME' => $recip['firstname'],
+				'LASTNAME' => $recip['lastname'],
+				'NAME' => $recip['firstname'] . ' ' . $recip['lastname'],
+				'REGNUM' => $regnum,
+				'PROJECTNUMBER' => $projectnumber,
+			);
+
+			email_send('register_participants_paymentpending', $to, $subsub, $subbod);
+		}
+		echo happy(i18n('Registration of form %1 marked as payment pending', array($regnum)));
+	}
+} else if (get_value_from_array($_POST, 'action') == 'receivedno' && get_value_from_array($_POST, 'registration_number')) {
+	echo notice(i18n('Registration of form %1 cancelled', array($_POST['registration_number'])));
+} else if (get_value_from_array($_GET, 'action') == 'unregister' && get_value_from_array($_GET, 'registration_number')) {
+	$reg_num = intval(trim($_GET['registration_number']));
+	$q = $pdo->prepare("SELECT registrations.id AS reg_id, projects.id AS proj_id FROM projects,registrations WHERE projects.registrations_id=registrations.id AND registrations.year='{$config['FAIRYEAR']}' AND registrations.num='$reg_num'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_OBJ);
+	$stmt = $pdo->prepare("UPDATE projects SET projectnumber=null, projectsort=null, projectnumber_seq=0, projectsort_seq=0 WHERE id='$r->proj_id' AND year='{$config['FAIRYEAR']}'");
+	$stmt->execute();
+	$stmt = $pdo->prepare("UPDATE registrations SET status='open' WHERE id='$r->reg_id' AND year='{$config['FAIRYEAR']}'");
+	$stmt->execute();
+	echo happy(i18n('Successfully unregistered project'));
+}
+
+if ($showformatbottom) {
+	echo '<table>';
+	echo '<tr><td>';
+	echo '<form id="inputform" method="post" action="registration_receivedforms.php">';
+	echo '<input type="hidden" name="action" value="received" />';
+	echo i18n("Enter the registration number from the $signatureformpermissionform : ") . '<br />';
+	echo '<input id="registration_number" type="text" size="15" name="registration_number" />';
+	echo '<input type="submit" value="' . i18n('Lookup Registration Number') . '" />';
+	echo '</form>';
+	?>
+	 <script type="text/javascript">
+	 document.forms.inputform.registration_number.focus();
+	 </script>
+	 <?
+
+	echo '<br/><br/>';
+	echo '</td></tr><tr><td>';
+	echo '<font size="2" color="red">This button does not keep track of payments</font>';
+	echo '</td></tr><tr><td>';
+	echo '<form method="post" action="registration_receivedforms.php">';
+	echo '<input type="hidden" name="action" value="receive_all" />';
+	echo '<input type="submit" value="' . i18n('Receive All') . "\" onclick=\"return confirmClick('Are you sure you wish to mark all students as has having their $signatureformpermissionform received?')\" />";
+	echo '</form>';
+	echo '</tr></td>';
+	echo '</table>';
+	echo '<br>';
+	echo i18n(" <lh>'Receive All' notes:</lh> <ul><li>The button will mark all open-status students that have completed registration as having their $signatureformpermissionform received.
+  <li> Students with above status will be emailed a \"$signatureformpermissionform received\" confirmation.
+ <li> Project numbers will be assigned to these students' projects.
+</ul>");
+}
+
+if (get_value_from_array($_POST, 'action') == 'receive_all') {
+	// Grab all projects that don't have project numbers. Status should therefor be open or new but not complete
+	$query_noprojectnumber = $pdo->prepare('SELECT * FROM projects WHERE projectnumber IS NULL AND year =' . $config['FAIRYEAR'] . '');
+	// Define arrays to append to later
+	$query_noprojectnumber->execute();
+	$completed_students = array();
+	$incomplete_students = array();
+	$newstatus_students = array();
+
+	// loop through each project that doesn't have a project number
+	while ($studentproject = $query_noprojectnumber->fetch(PDO::FETCH_ASSOC)) {
+		// Grab registration information about the current project
+		$q = $pdo->prepare("SELECT * FROM registrations WHERE id='" . $studentproject['registrations_id'] . "' AND year='" . $config['FAIRYEAR'] . "'");
+		$q->execute();
+		$r = $q->fetch(PDO::FETCH_OBJ);
+		$reg_id = $r->id;
+		$reg_num = $r->num;
+		$reg_status = $r->status;
+
+		// student has completed some or all of the registration process for their project. Let's find out which one is true
+		if ($r->status != 'new') {
+			// make sure all of the statuses are correct
+			$statusstudent = studentStatus($reg_id);
+			$statusemergencycontact = emergencycontactStatus($reg_id);
+			$statusproject = projectStatus($reg_id);
+			if ($config['participant_mentor'] == 'yes')
+				$statusmentor = mentorStatus($reg_id);
+			else
+				$statusmentor = 'complete';
+			$statussafety = safetyStatus($reg_id);
+			$statusnamecheck = namecheckStatus($reg_id);
+
+			if (
+				$statusstudent == 'complete' &&
+				$statusemergencycontact == 'complete' &&
+				// S$statusproject == "complete" &&
+				$statusmentor == 'complete' &&
+				$statussafety == 'complete' &&
+				$statusnamecheck == 'complete' &&
+				$r->status != 'complete'
+				// above: project status must not be complete. If it is complete signature page/permission form has already been received.
+			) {
+				// Generate project number and update it in data base
+				list($projectnumber, $ps, $pns, $pss) = generateProjectNumber($reg_id);
+				$stmt = $pdo->prepare("UPDATE projects SET projectnumber='$projectnumber',
+							projectsort='$ps',projectnumber_seq='$pns',projectsort_seq='$pss'
+							WHERE registrations_id='$reg_id' AND year='{$config['FAIRYEAR']}'");
+				$stmt->execute();
+
+				// email stuff
+				// get all students with this registration number
+				// $recipients=getEmailRecipientsForRegistration($reg_id);
+
+				// Set status to 'complete'
+				$stmt = $pdo->prepare("UPDATE registrations SET status='complete' WHERE num='$reg_num' AND year='{$config['FAIRYEAR']}'");
+				$stmt->execute();
+				/*foreach($recipients AS $recip) {
 					$to=$recip['to'];
 					$subsub=array();
 					$subbod=array(
@@ -244,62 +373,59 @@ echo mysql_Error();
 						"PROJECTNUMBER"=>$projectnumber,
 						);
 					email_send("register_participants_received",$to,$subsub,$subbod);
+				}*/
+
+				// End email stuff
+				// add cuurent registration number to completed_students array
+				$completed_students[] = $reg_num;
+			} else {
+				// or add current registration number to incomplete_student array
+				$incomplete_students[] = $reg_num;
+			}
+		}
+		// New status automatically means student has not completed the registration process for their project. So execute below:
+		else {
+			// or add current registration number to newstatus_students array
+			$newstatus_students[] = $reg_num;
+		}
+	}
+	// Find how many project numbers were assigned/how many projects have complete status (ie signature page/permission form is considered received)
+	$total_completed = count($completed_students);
+
+	// since incomplete_students and newstatus_students both did not get project numbers and are not considered as having signature page/permission form received
+	//    combine them
+	$total_incomplete = array_merge($incomplete_students, $newstatus_students);
+
+	echo '<br><br>';
+	echo '<table>';
+	echo '<tr><td>' . i18n("$total_completed student(s) registered as $non_capital_participationform received.") . '</td></tr>';
+
+	// display below only if there are registration numbers that don't have project numbers and the students have not completed the registration process
+	if (count($total_incomplete) > 0) {
+		echo '<tr><td>' . i18n("Registration numbers which are NOT marked as having their $non_capital_participationform received are shown below:") . '</td></tr>';
+		echo '<tr><td>&nbsp</td></tr>';
+		$string = '';
+		echo '<tr><td>';
+
+		// create a string that contains all incomplete registration numbers
+		foreach ($total_incomplete as $regnum) {
+			$string = $string . i18n($regnum);
+			$string = $string . ', ';
 		}
 
-	 	echo happy(i18n("Registration of form %1 successfully completed",array($regnum)));
+		// delete the comma at the end of the string
+		$string = substr($string, 0, strlen($string) - 2);
+		echo $string;
+		echo '</td></tr>';
+		echo '<tr><td>&nbsp</td></tr>';
+		echo '<tr><td>';
+		echo i18n('The above registration numbers correspond to projects in which the registration process has not been completed by the student.');
+		echo '</td></tr>';
 	}
- 	else if($_POST['action']=="receivedyesnocash")
- 	{
- 		//actually set it to 'paymentpending'
-		mysql_query("UPDATE registrations SET status='paymentpending' WHERE num='$regnum' AND year='{$config['FAIRYEAR']}'");
-
-		foreach($recipients AS $recip) {
-			$to=$recip['to'];
-			$subsub=array();
-			$subbod=array(
-				"TO"=>$recip['to'],
-				"EMAIL"=>$recip['email'],
-				"FIRSTNAME"=>$recip['firstname'],
-				"LASTNAME"=>$recip['lastname'],
-				"NAME"=>$recip['firstname']." ".$recip['lastname'],
-				"REGNUM"=>$regnum,
-				"PROJECTNUMBER"=>$projectnumber,
-				);
-
-			email_send("register_participants_paymentpending",$to,$subsub,$subbod);
-		}
- 		echo happy(i18n("Registration of form %1 marked as payment pending",array($regnum)));
- 	}
- }
- else if($_POST['action']=="receivedno" && $_POST['registration_number'])
- {
- 	echo notice(i18n("Registration of form %1 cancelled",array($_POST['registration_number'])));
-
- }
- else if($_GET['action']=="unregister" && $_GET['registration_number']) {
- 	$reg_num=intval(trim($_GET['registration_number']));
- 	$q=mysql_query("SELECT registrations.id AS reg_id, projects.id AS proj_id FROM projects,registrations WHERE projects.registrations_id=registrations.id AND registrations.year='{$config['FAIRYEAR']}' AND registrations.num='$reg_num'");
-	$r=mysql_fetch_object($q);
- 	mysql_query("UPDATE projects SET projectnumber=null, projectsort=null, projectnumber_seq=0, projectsort_seq=0 WHERE id='$r->proj_id' AND year='{$config['FAIRYEAR']}'");
- 	mysql_query("UPDATE registrations SET status='open' WHERE id='$r->reg_id' AND year='{$config['FAIRYEAR']}'");
-	echo happy(i18n("Successfully unregistered project"));
- }
-
-
- if($showformatbottom)
- {
-	 echo "<form id=\"inputform\" method=\"post\" action=\"registration_receivedforms.php\">";
-	 echo "<input type=\"hidden\" name=\"action\" value=\"received\" />";
-	 echo i18n("Enter the registration number from the signature form: ")."<br />";
-	 echo "<input id=\"registration_number\" type=\"text\" size=\"15\" name=\"registration_number\" />";
-	 echo "<input type=\"submit\" value=\"".i18n("Lookup Registration Number")."\" />";
-	 echo "</form>";
-	 ?>
-	 <script type="text/javascript">
-	 document.forms.inputform.registration_number.focus();
-	 </script>
-	 <?
+	echo '</table>';
+	echo happy_(i18n('Received all permision forms for complete students'));
 }
 
 send_footer();
+
 ?>

admin/registration_stats.php

@@ -1,103 +1,133 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005-2006 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005-2006 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../register_participants.inc.php");
+require ('../register_participants.inc.php');
 
- if($_GET['year']) $year=$_GET['year'];
- else $year=$config['FAIRYEAR'];
+if (get_value_from_array($_GET, 'year'))
+	$year = $_GET['year'];
+else
+	$year = $config['FAIRYEAR'];
 
- send_header("Registration Statistics",
+send_header('Registration Statistics',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Participant Registration' => 'admin/registration.php')
-				);
+		'Participant Registration' => 'admin/registration.php'));
 
- echo "<br />";
- echo i18n("Choose Status").":";
- echo "<form name=\"statuschangerform\" method=\"get\" action=\"registration_stats.php\">";
- echo "<select name=\"showstatus\" onchange=\"document.forms.statuschangerform.submit()\">";
+echo '<br />';
+echo i18n('Choose Status') . ':';
+echo '<form name="statuschangerform" method="get" action="registration_stats.php">';
+echo '<select name="showstatus" onchange="document.forms.statuschangerform.submit()">';
 
 $status_str = array();
- $status_str[''] = i18n("Any Status");
- $status_str['complete'] = i18n("Complete");
+$status_str[''] = i18n('Any Status');
+$status_str['complete'] = i18n('Complete');
 // if there is no reg fee, then we dont need to show this status, because nobody will ever be in this status
 if ($config['regfee'] > 0) {
-	 $status_str['paymentpending'] = i18n("Payment Pending");
-	 $status_str['completeorpaymentpending'] = i18n("Complete or Payment Pending");
+	$status_str['paymentpending'] = i18n('Payment Pending');
+	$status_str['completeorpaymentpending'] = i18n('Complete or Payment Pending');
 }
- $status_str['open'] = i18n("Open");
- $status_str['new'] = i18n("New");
+$status_str['open'] = i18n('Open');
+$status_str['new'] = i18n('New');
 
 $showstatus = $_GET['showstatus'];
 
 foreach ($status_str as $s => $str) {
- 	$sel = ($showstatus == $s) ? "selected=\"selected\"" : '';
+	$sel = ($showstatus == $s) ? 'selected="selected"' : '';
 	echo "<option $sel value=\"$s\">$str</option>\n";
 }
- echo "</select>";
- echo "</form>";
+echo '</select>';
+echo '</form>';
 
-$q=mysql_query("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
-while($r=mysql_fetch_object($q))
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='$year' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ))
 	$cats[$r->id] = $r->category;
 
-$q=mysql_query("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
-while($r=mysql_fetch_object($q))
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='$year' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ))
 	$divs[$r->id] = $r->division;
 
 if ($showstatus) {
 	switch ($showstatus) {
-		case "complete": $wherestatus="AND status='complete' "; break;
-		case "paymentpending": $wherestatus="AND status='paymentpending' "; break;
-		case "completeorpaymentpending": $wherestatus="AND (status='complete' OR status='paymentpending') "; break;
-		case "open": $wherestatus="AND status='open' "; break;
-		case "new": $wherestatus="AND status='new' "; break;
-		default: $wherestatus="";
+		case 'complete':
+			$wherestatus = "AND status='complete' ";
+			break;
+		case 'paymentpending':
+			$wherestatus = "AND status='paymentpending' ";
+			break;
+		case 'completeorpaymentpending':
+			$wherestatus = "AND (status='complete' OR status='paymentpending') ";
+			break;
+		case 'open':
+			$wherestatus = "AND status='open' ";
+			break;
+		case 'new':
+			$wherestatus = "AND status='new' ";
+			break;
+		default:
+			$wherestatus = '';
 	}
-}
-else $wherestatus="";
-	switch($_GET['sort']) {
-		case 'status': 	$ORDERBY="registrations.status DESC, projects.title"; break;
-		case 'num': 	$ORDERBY="registrations.num"; break;
-		case 'projnum':	$ORDERBY="projects.projectsort, projects.projectnumber"; break;
-		case 'title': 	$ORDERBY="projects.title, registrations.status DESC"; break;
-		case 'cat': 	$ORDERBY="projects.projectcategories_id, projects.title"; break;
-		case 'div': 	$ORDERBY="projects.projectdivisions_id, projects.title"; break;
-		default:	$ORDERBY="registrations.status DESC, projects.title"; break;
+} else
+	$wherestatus = '';
+switch (get_value_from_array($_GET, 'sort')) {
+	case 'status':
+		$ORDERBY = 'registrations.status DESC, projects.title';
+		break;
+	case 'num':
+		$ORDERBY = 'registrations.num';
+		break;
+	case 'projnum':
+		$ORDERBY = 'projects.projectsort, projects.projectnumber';
+		break;
+	case 'title':
+		$ORDERBY = 'projects.title, registrations.status DESC';
+		break;
+	case 'cat':
+		$ORDERBY = 'projects.projectcategories_id, projects.title';
+		break;
+	case 'div':
+		$ORDERBY = 'projects.projectdivisions_id, projects.title';
+		break;
+	default:
+		$ORDERBY = 'registrations.status DESC, projects.title';
+		break;
 }
 
-	$q=mysql_query("SELECT  registrations.id AS reg_id,
+$q = $pdo->prepare("SELECT  registrations.id AS reg_id,
 				registrations.num AS reg_num,
 				registrations.status,
 				registrations.email,
 				projects.title,
 				projects.projectnumber,
 				projects.projectcategories_id,
-				projects.projectdivisions_id
+				projects.projectdivisions_id,
+				projects.language
 			FROM
 				registrations
 				left outer join projects on projects.registrations_id=registrations.id
@@ -108,7 +138,8 @@ else $wherestatus="";
 			ORDER BY
 				$ORDERBY
 			");
-		echo mysql_error();
+$q->execute();
+show_pdo_errors_if_any($pdo);
 
 $stats_totalprojects = 0;
 $stats_totalstudents = 0;
@@ -118,26 +149,37 @@ else $wherestatus="";
 $stats_projects_catdiv = array();
 $stats_students_schools = array();
 $stats_projects_schools = array();
+$stats_projects_lang = array();
 $schools_names = array();
+$languages = array();
 
-	while($r=mysql_fetch_object($q))
-	{
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$stats_totalprojects++;
-		$stats_divisions[$r->projectdivisions_id]++;
-		$stats_categories[$r->projectcategories_id]++;
-		$stats_projects_catdiv[$r->projectcategories_id][$r->projectdivisions_id]++;
 
-		switch($r->status)
-		{
-			case "new": $status_text="New"; break;
-			case "open": $status_text="Open"; break;
-			case "paymentpending": $status_text="Payment Pending"; break;
-			case "complete": $status_text="Complete"; break;
+	$stats_divisions[$r->projectdivisions_id] = add_or_initialize($stats_divisions, $r->projectdivisions_id);
+	$stats_categories[$r->projectcategories_id] = add_or_initialize($stats_categories, $r->projectcategories_id);
+	$stats_projects_catdiv[$r->projectcategories_id][$r->projectdivisions_id] = add_or_initialize_multi_2($stats_projects_catdiv, $r->projectcategories_id, $r->projectdivisions_id);
+	$stats_projects_lang[$r->projectcategories_id][$r->projectdivisions_id][$r->language] = add_or_initialize_multi_3($stats_projects_lang, $r->projectcategories_id, $r->projectdivisions_id, $r->language);
+
+	$languages[$r->language] = add_or_initialize($languages, $r->language);
+
+	switch ($r->status) {
+		case 'new':
+			$status_text = 'New';
+			break;
+		case 'open':
+			$status_text = 'Open';
+			break;
+		case 'paymentpending':
+			$status_text = 'Payment Pending';
+			break;
+		case 'complete':
+			$status_text = 'Complete';
+			break;
 	}
 	$status_text = i18n($status_text);
 
-
-		$sq=mysql_query("SELECT students.firstname,
+	$sq = $pdo->prepare("SELECT students.firstname,
 					students.lastname,
 					students.id,
 					schools.school,
@@ -150,13 +192,13 @@ else $wherestatus="";
 					AND
 					students.schools_id=schools.id
 				");
-				echo mysql_error();
+	show_pdo_errors_if_any($pdo);
 
 	$studnum = 1;
-		$schools="";
-		$students="";
-		while($studentinfo=mysql_fetch_object($sq))
-		{
+	$schools = '';
+	$students = '';
+	$lastschoolid = -1;
+	while ($studentinfo = $sq->fetch(PDO::FETCH_OBJ)) {
 		$stats_totalstudents++;
 		$stats_students_catdiv[$r->projectcategories_id][$r->projectdivisions_id]++;
 		$stats_students_schools[$r->projectcategories_id][$studentinfo->schools_id]++;
@@ -165,105 +207,167 @@ else $wherestatus="";
 	}
 	// this really isnt right, its only taking the school from the last student in the project to count towards the school's project totals
 	// but there's really no other way
-		$stats_projects_schools[$r->projectcategories_id][$lastschoolid]++;
+	$stats_projects_schools[$r->projectcategories_id][$lastschoolid] = add_or_initialize_multi_2($stats_projects_schools, $r->projectcategories_id, $lastschoolid);
 }
 
-	echo "<table style=\"margin-left: 50px;\">";	
-	echo "<tr><td colspan=\"2\"><h3>{$status_str[$showstatus]} - ".i18n("Students / projects per age category / division")."</h3></td></tr>";
-	echo "<tr><td colspan=\"2\">";
-	echo "<table class=\"tableview\" width=\"100%\">";	
-	echo "<thead><tr><td width=\"50%\"></td>";
+echo '<table style="margin-left: 50px;">';
+echo "<tr><td colspan=\"2\"><h3>{$status_str[$showstatus]} - " . i18n('Students / projects per age category / division') . '</h3></td></tr>';
+echo '<tr><td colspan="2">';
+echo '<table class="tableview" width="100%">';
+echo '<thead><tr><td width="50%"></td>';
 foreach ($cats AS $c => $cn) {
-		echo "<th>$cn<br /><nobr>".i18n("Stud | Proj")."</nobr></th>";
+	echo "<th>$cn<br /><nobr>" . i18n('Stud | Proj') . '</nobr></th>';
 }
-	echo "<th>".i18n("Total")."<br /><nobr>".i18n("Stud | Proj")."</th>";
-	echo "</tr></thead>";
+echo '<th>' . i18n('Total') . '<br /><nobr>' . i18n('Stud | Proj') . '</th>';
+echo '</tr></thead>';
 foreach ($divs AS $d => $dn) {
 	echo "<tr><td>$dn</td>";
 	$tstud = 0;
+	$tstudcat = array();
 	$tproj = 0;
-		foreach($cats AS $c=>$cn)
-		{
-			echo "<td align=\"center\">";
-			echo ($stats_students_catdiv[$c][$d]?$stats_students_catdiv[$c][$d]:0);
-			echo "&nbsp;&nbsp;&nbsp;&nbsp;";
-			echo ($stats_projects_catdiv[$c][$d]?$stats_projects_catdiv[$c][$d]:0);
-			echo "</td>";
-			$tstud+=$stats_students_catdiv[$c][$d];
-			$tproj+=$stats_projects_catdiv[$c][$d];
+	$tprojcat = array();
+	foreach ($cats AS $c => $cn) {
+		echo '<td align="center">';
 
-			$tstudcat[$c]+=$stats_students_catdiv[$c][$d];
-			$tprojcat[$c]+=$stats_projects_catdiv[$c][$d];
+		echo ($stats_students_catdiv[$c][$d] ?? 0);
+		echo '&nbsp;&nbsp;&nbsp;&nbsp;';
+		echo ($stats_projects_catdiv[$c][$d] ?? 0);
+		echo '</td>';
+
+		$tstud += $stats_students_catdiv[$c][$d] ?? 0;
+		$tproj += $stats_projects_catdiv[$c][$d] ?? 0;
+
+		$tstudcat[$c] = add_or_initialize($tstudcat, $c, $stats_students_catdiv[$c][$d] ?? 0);
+		$tprojcat[$c] = add_or_initialize($tprojcat, $c, $stats_projects_catdiv[$c][$d] ?? 0);
 	}
-		echo "<td align=\"center\"><b>";
+	echo '<td align="center"><b>';
 	echo ($tstud ? $tstud : 0);
-		echo "&nbsp;&nbsp;&nbsp;&nbsp;";
+	echo '&nbsp;&nbsp;&nbsp;&nbsp;';
 	echo ($tproj ? $tproj : 0);
-		echo "</b></td>";
-		echo "</tr>";
+	echo '</b></td>';
+	echo '</tr>';
 }
-	echo "<tr><td><b>".i18n("Total")."</b></td>";
+echo '<tr><td><b>' . i18n('Total') . '</b></td>';
 $tstud = 0;
 $tproj = 0;
 foreach ($cats AS $c => $cn) {
-		echo "<td align=\"center\"><b>";
+	echo '<td align="center"><b>';
 	echo ($tstudcat[$c] ? $tstudcat[$c] : 0);
-		echo "&nbsp;&nbsp;&nbsp;&nbsp;";
+	echo '&nbsp;&nbsp;&nbsp;&nbsp;';
 	echo ($tprojcat[$c] ? $tprojcat[$c] : 0);
-		echo "</b></td>";
+	echo '</b></td>';
 	$tstud += $tstudcat[$c];
 	$tproj += $tprojcat[$c];
 }
-	echo "<td align=\"center\"><b>";
+echo '<td align="center"><b>';
 echo ($tstud);
-	echo "&nbsp;&nbsp;&nbsp;&nbsp;";
+echo '&nbsp;&nbsp;&nbsp;&nbsp;';
 echo ($tproj);
-	echo "</b></td>";
-	echo "</tr>";
+echo '</b></td>';
+echo '</tr>';
 
-	echo "</table>";
-	echo "</td></tr>";
+echo '</table>';
+echo '</td></tr>';
 
-	echo "<tr><td colspan=\"2\"><br /></td></tr>";
-	echo "<tr><td colspan=\"2\"><h3>{$status_str[$showstatus]} - ".i18n("Students / projects per age category / school")."</h3></td></tr>";
-	echo "<tr><td colspan=\"2\">";
-	echo "<table class=\"tableview\" width=\"100%\">";	
-	echo "<thead><tr><td width=\"50%\"></td>";
+echo '<tr><td colspan="2"><br /></td></tr>';
+echo "<tr><td colspan=\"2\"><h3>{$status_str[$showstatus]} - " . i18n('Students / projects per age category / school') . '</h3></td></tr>';
+echo '<tr><td colspan="2">';
+echo '<table class="tableview" width="100%">';
+echo '<thead><tr><td width="50%"></td>';
 foreach ($cats AS $c => $cn) {
-		echo "<th>$cn<br /><nobr>".i18n("Stud | Proj")."</nobr></th>";
+	echo "<th>$cn<br /><nobr>" . i18n('Stud | Proj') . '</nobr></th>';
 }
-	echo "<th>".i18n("Total")."<br /><nobr>".i18n("Stud | Proj")."</nobr></th>";
-	echo "</tr></thead>";
+echo '<th>' . i18n('Total') . '<br /><nobr>' . i18n('Stud | Proj') . '</nobr></th>';
+echo '</tr></thead>';
 
 asort($schools_names);
-	foreach($schools_names AS $id=>$sn) 
-	{
+foreach ($schools_names AS $id => $sn) {
 	echo "<tr><td>$sn</td>";
 	$tstud = 0;
 	$tproj = 0;
 	foreach ($cats AS $c => $cn) {
-			echo "<td align=\"center\">".($stats_students_schools[$c][$id]?$stats_students_schools[$c][$id]:0);
-			echo "&nbsp;&nbsp;&nbsp;&nbsp;";
-			echo ($stats_projects_schools[$c][$id]?$stats_projects_schools[$c][$id]:0)."</td>";
+		echo '<td align="center">' . ($stats_students_schools[$c][$id] ? $stats_students_schools[$c][$id] : 0);
+		echo '&nbsp;&nbsp;&nbsp;&nbsp;';
+		echo ($stats_projects_schools[$c][$id] ? $stats_projects_schools[$c][$id] : 0) . '</td>';
 		$tstud += $stats_students_schools[$c][$id];
 		$tproj += $stats_projects_schools[$c][$id];
 	}
-		echo "<td align=\"center\"><b>".($tstud?$tstud:0);
-		echo "&nbsp;&nbsp;&nbsp;&nbsp;";
-		echo ($tproj?$tproj:0)."</b></td>";
-		echo "</tr>";
+	echo '<td align="center"><b>' . ($tstud ? $tstud : 0);
+	echo '&nbsp;&nbsp;&nbsp;&nbsp;';
+	echo ($tproj ? $tproj : 0) . '</b></td>';
+	echo '</tr>';
 }
-	echo "</table>";
-	echo i18n("%1 schools total",array(count($schools_names)));
+echo '</table>';
+echo i18n('%1 schools total', array(count($schools_names)));
 
-	echo "</td></tr>";
-	echo "</table>";
+echo '</td></tr>';
+echo '<tr><td colspan="2"><br /></td></tr>';
+echo "<tr><td colspan=\"2\"><h3>{$status_str[$showstatus]} - " . i18n('Projects per age category / division / language') . '</h3></td></tr>';
+echo '<tr><td colspan="2">';
+echo '<table class="tableview" width="100%">';
+echo '<thead><tr><td rowspan=\'2\' width="50%"></td>';
+foreach ($cats AS $c => $cn) {
+	echo "<th colspan='" . count($languages) . "'>$cn</th>";
+}
+echo "<th colspan='" . count($languages) . "'>" . i18n('Total') . '</nobr></th>';
+echo '</tr><tr>';
+ksort($languages);
+$tprojcat = array();
+foreach ($cats AS $c => $cn) {
+	foreach ($languages AS $l => $ln) {
+		echo "<th>$l</th>";
+	}
+}
+foreach ($languages AS $l => $ln) {
+	echo "<th>$l</th>";
+}
+echo '</tr></thead>';
+foreach ($divs AS $d => $dn) {
+	echo "<tr><td>$dn</td>";
+	$tproj = array();
+	foreach ($cats AS $c => $cn) {
+		foreach ($languages AS $l => $ln) {
+			echo '<td align="center">';
+			echo ($stats_projects_lang[$c][$d][$l] ?? 0);
+			echo '</td>';
+			$tproj[$l] = add_or_initialize($tproj, $l, $stats_projects_lang[$c][$d][$l] ?? 0);
+			$tprojcat[$c][$l] = add_or_initialize_multi_2($tprojcat, $c, $l, $stats_projects_lang[$c][$d][$l] ?? 0);
+		}
+	}
+	foreach ($tproj AS $l => $ln) {
+		echo '<td align="center"><b>';
+		echo ($ln ? $ln : 0);
+		echo '</b></td>';
+	}
+	echo '</tr>';
+}
+echo '<tr><td><b>' . i18n('Total') . '</b></td>';
+$tproj = array();
+foreach ($cats AS $c => $cn) {
+	foreach ($languages AS $l => $ln) {
+		echo '<td align="center"><b>';
+		echo ($tprojcat[$c][$l] ? $tprojcat[$c][$l] : 0);
+		echo '</b></td>';
+		$tproj[$l] = add_or_initialize($tproj, $l, $tprojcat[$c][$l] ?? 0);
+	}
+}
+foreach ($tproj AS $l => $ln) {
+	echo '<td align="center"><b>';
+	echo ($ln);
+	echo '</b></td>';
+}
+echo '</tr>';
 
-	echo "<br />";
+echo '</table>';
+
+echo '</td></tr>';
+
+echo '</table>';
+
+echo '<br />';
 echo i18n("Note: statistics reflect the numbers of the current 'Status' selected at the top of the page");
-	echo "<br />";
-	echo "<br />";
-
+echo '<br />';
+echo '<br />';
 
 send_footer();
 ?>

admin/registration_webconsent.php

@@ -1,64 +1,65 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005-2006 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005-2006 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005-2006 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
- send_header("Web Consent", 
+send_header('Web Consent',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Participant Registration' => 'admin/registration.php')
-				);
+		'Participant Registration' => 'admin/registration.php'));
 
- echo "<br />";
+echo '<br />';
 
- if(is_array($_POST['changed']))
- {
+if (get_value_from_array($_POST, 'changed')) {
 	$numchanged = 0;
- 	foreach($_POST['changed'] AS $id=>$val)
-	{
-		if($val==1)
-		{
+	foreach ($_POST['changed'] AS $id => $val) {
+		if ($val == 1) {
 			$numchanged++;
-			$webfirst=$_POST['webfirst'][$id]=="yes"?"yes":"no";
-			$weblast=$_POST['weblast'][$id]=="yes"?"yes":"no";
-			$webphoto=$_POST['webphoto'][$id]=="yes"?"yes":"no";
-			mysql_query("UPDATE students SET 
+			$webfirst = get_value_from_2d_array($_POST, 'webfirst', $id) == 'yes' ? 'yes' : 'no';
+			$weblast = get_value_from_2d_array($_POST, 'weblast', $id) == 'yes' ? 'yes' : 'no';
+			$webphoto = get_value_from_2d_array($_POST, 'webphoto', $id) == 'yes' ? 'yes' : 'no';
+
+			$stmt = $pdo->prepare("UPDATE students SET 
 					webfirst='$webfirst',
 					weblast='$weblast',
 					webphoto='$webphoto'
 					WHERE
 					id='$id'");
+			$stmt->execute();
 		}
 	}
- 	if($numchanged==1)
-		echo happy(i18n("1 student record updated"));
-	else if($numchanged>1)
-		echo happy(i18n("%1 student records updated",array($numchanged)));
-	else
-		echo error(i18n("No student records where changed"));
+
+	if ($numchanged == 1) {
+		echo happy(i18n('1 student record updated'));
+	} else if ($numchanged > 1) {
+		echo happy(i18n('%1 student records updated', array($numchanged)));
+	} else {
+		echo error(i18n('No student records where changed'));
+	}
 }
 ?>
  <script type="text/javascript">
@@ -71,7 +72,7 @@
 
  <?
 
-		$sq=mysql_query("SELECT students.firstname,
+$sq = $pdo->prepare("SELECT students.firstname,
 				students.lastname,
 				students.id,
 				projects.projectnumber,
@@ -84,40 +85,41 @@
 				projects
 			WHERE
 				students.registrations_id=registrations.id
-				AND	( registrations.status = 'complete' OR registrations.status='paymentpending' )
-				AND	projects.registrations_id=registrations.id
-				AND 	registrations.year='".$config['FAIRYEAR']."' 
-				AND 	projects.year='".$config['FAIRYEAR']."' 
-				AND 	students.year='".$config['FAIRYEAR']."' 
+			AND\t( registrations.status = 'complete' OR registrations.status='paymentpending' )
+			AND\tprojects.registrations_id=registrations.id
+			AND \tregistrations.year='" . $config['FAIRYEAR'] . "' 
+			AND \tprojects.year='" . $config['FAIRYEAR'] . "' 
+			AND \tstudents.year='" . $config['FAIRYEAR'] . "' 
 			ORDER BY projectnumber
 			");
-				echo mysql_error();
+$sq->execute();
+show_pdo_errors_if_any($pdo);
 
-	echo "<form method=\"post\" action=\"registration_webconsent.php\">";
-	echo "<table class=\"tableview\">";
-	echo "<thead><tr>";
-	echo " <th>".i18n("Proj #")."</th>";
-	echo " <th>".i18n("Student Name")."</th>";
-	echo " <th>".i18n("First")."</th>";
-	echo " <th>".i18n("Last")."</th>";
-	echo " <th>".i18n("Photo")."</th>";
-	echo "</tr></thead>";
-	while($r=mysql_fetch_object($sq))
-	{
-		echo "<tr>";
+echo '<form method="post" action="registration_webconsent.php">';
+echo '<table class="tableview">';
+echo '<thead><tr>';
+echo ' <th>' . i18n('Proj #') . '</th>';
+echo ' <th>' . i18n('Student Name') . '</th>';
+echo ' <th>' . i18n('First') . '</th>';
+echo ' <th>' . i18n('Last') . '</th>';
+echo ' <th>' . i18n('Photo') . '</th>';
+echo '</tr></thead>';
+
+while ($r = $sq->fetch(PDO::FETCH_OBJ)) {
+	echo '<tr>';
 	echo "<td>$r->projectnumber<input id=\"changed_$r->id\" type=\"hidden\" name=\"changed[$r->id]\" value=\"0\"></td>";
 	echo "<td>$r->firstname $r->lastname</td>";
-		$ch=$r->webfirst=="yes"?"checked=\"checked\"":"";
+	$ch = $r->webfirst == 'yes' ? 'checked="checked"' : '';
 	echo "<td><input $ch type=\"checkbox\" name=\"webfirst[$r->id]\" value=\"yes\" onchange=\"changed($r->id)\"></td>";
-		$ch=$r->weblast=="yes"?"checked=\"checked\"":"";
+	$ch = $r->weblast == 'yes' ? 'checked="checked"' : '';
 	echo "<td><input $ch type=\"checkbox\" name=\"weblast[$r->id]\" value=\"yes\" onchange=\"changed($r->id)\"></td>";
-		$ch=$r->webphoto=="yes"?"checked=\"checked\"":"";
+	$ch = $r->webphoto == 'yes' ? 'checked="checked"' : '';
 	echo "<td><input $ch type=\"checkbox\" name=\"webphoto[$r->id]\" value=\"yes\" onchange=\"changed($r->id)\"></td>";
-		echo "</tr>";
+	echo '</tr>';
 }
-	echo "</table>";
-	echo "<input type=\"submit\" value=\"".i18n("Save Changes")."\">";
-	echo "</form>";
+echo '</table>';
+echo '<input type="submit" value="' . i18n('Save Changes') . '">';
+echo '</form>';
 
 send_footer();
 ?>

admin/reports.inc.php

@@ -1,26 +1,33 @@
 <?
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the Science-ation project
+ * Science-ation Website: https://science-ation.ca
+ *
+ * This file was part of the 'Science Fair In A Box' project
+ *
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ * Copyright (C) 2024 AlgoLibre Inc. <science-ation@algolibre.io>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
+// This file was modified Jan of 2014 by Richard Sin
+// A glitch that prints out both english and french columns has been modified.
+
  require_once("reports_students.inc.php");  	/* $report_students_fields */
  require_once("reports_judges.inc.php");  	/* $report_students_fields */
  require_once("reports_awards.inc.php");  	/* $report_students_fields */
@@ -299,6 +306,11 @@ foreach($report_stock as $n=>$v) {
 			'custom_url' => 'admin/reports_judges.php?type=csv',
 			'creator' => 'The Grant Brothers');
  $x++;
+ $report_custom[$x] = array('id' => $x, 'name' => 'Custom -- Judges List (CSV) -- ALL YEARS',
+ 			'desc' => 'Judges List - All Years',
+			'custom_url' => 'admin/reports_judges_allyears.php?type=csv',
+			'creator' => 'The Grant Brothers');
+ $x++;
  $report_custom[$x] = array('id' => $x, 'name' => 'Custom -- Judging Teams Project Assignments (PDF)',
  			'desc' => 'Judging Teams Project Assignments',
 			'custom_url' => 'admin/reports_judges_teams_projects.php?type=pdf',
@@ -332,14 +344,16 @@ foreach($report_stock as $n=>$v) {
 	global $report_volunteers_fields, $report_fairs_fields;
 	global $report_tours_fields, $report_fundraisings_fields;
 	
+	global $pdo;
 
 	$fieldvar = "report_{$report['type']}s_fields";
 	$allow_fields = array_keys($$fieldvar);
 
 	/* First delete all existing fields */
-	mysql_query("DELETE FROM reports_items 
+	$stmt = $pdo->prepare("DELETE FROM reports_items 
 			WHERE `reports_id`='{$report['id']}'
 			AND `type`='$type'");
+	$stmt->execute();
 	/* Now add new ones */
 
 	if(count($report[$type]) == 0) return;
@@ -349,30 +363,32 @@ foreach($report_stock as $n=>$v) {
 	foreach($report[$type] as $k=>$v) {
 		if($type == 'option') {
 			/* field, value, x, y, w, h, lines, face, align, valign, fn, fs, fsize, overflow */
-			$vals = "'$k','$v','0','0','0','0','0','','','','','','0','truncate'";
+			$vals = "".$pdo->quote($k).",".$pdo->quote($v).",'0','0','0','0','0','','','','','','0','truncate'";
 		} else {
-			if($v['lines'] == 0) $v['lines'] =1;
-			$fs = is_array($v['fontstyle']) ? implode(',',$v['fontstyle']) : '';
-			$opts = "{$v['align']} {$v['valign']}";
-			$vals = "'{$v['field']}','{$v['value']}',
-				'{$v['x']}','{$v['y']}','{$v['w']}',
-				'{$v['h']}','{$v['lines']}','{$v['face']}',
-				'$opts','{$v['valign']}',
-				'{$v['fontname']}','$fs','{$v['fontsize']}',
-				'{$v['on_overflow']}'";
+			if(get_value_from_array($v, 'lines') == 0) $v['lines'] =1;
+			$fs = is_array(get_value_from_array($v,'fontstyle')) ? implode(',',$v['fontstyle']) : '';
+			$opts = get_value_from_array($v, 'align') . " " .$pdo->quote(get_value_from_array($v, 'valign', ''));
+			$vals = "'".get_value_from_array($v, 'field')."','".get_value_from_array($v, 'value')."',
+				'".get_value_from_array($v,'x')."','".get_value_from_array($v, 'y')."','".get_value_from_array($v, 'w')."',
+				'".get_value_from_array($v, 'h')."','".get_value_from_array($v,'lines')."','".get_value_from_array($v, 'face')."',
+				'$opts','".get_value_from_array($v, 'valign')."',
+				'".get_value_from_array($v, 'fontname')."','$fs','".get_value_from_array($v, 'fontsize')."',
+				'".get_value_from_array($v, 'on_overflow')."'";
 		}
 		if($q != '') $q .= ',';
 		$q .= "({$report['id']}, '$type','$x',$vals)";
 		$x++;
 	}
 	
-	mysql_query("INSERT INTO reports_items(`reports_id`,`type`,`ord`,
+	
+	$stmt = $pdo->prepare("INSERT INTO reports_items(`reports_id`,`type`,`ord`,
 				`field`,`value`,`x`, `y`, `w`, `h`,
 				`lines`, `face`, `align`,`valign`,
 				`fontname`,`fontstyle`,`fontsize`,`on_overflow`) 
-			VALUES $q;");
+			VALUES $q");
 
-	echo mysql_error();
+	$stmt->execute();
+	show_pdo_errors_if_any($pdo);
 	
  }
 	
@@ -384,16 +400,19 @@ foreach($report_stock as $n=>$v) {
 	global $report_tours_fields, $report_fairs_fields;
 	global $report_fundraisings_fields;
 
+	global $pdo;
+
 	$report = array();
 
-	$q = mysql_query("SELECT * FROM reports WHERE id='$report_id'");
-	$r = mysql_fetch_assoc($q);
-	$report['name'] = $r['name'];
-	$report['id'] = $r['id'];
-	$report['system_report_id'] = $r['system_report_id']; 
-	$report['desc'] = $r['desc'];
-	$report['creator'] = $r['creator'];
-	$report['type'] = $r['type'];
+	$q = $pdo->prepare("SELECT * FROM reports WHERE id='$report_id'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_ASSOC);
+	$report['name'] = get_value_from_array($r, 'name');
+	$report['id'] = get_value_from_array($r, 'id');
+	$report['system_report_id'] = get_value_from_array($r, 'system_report_id'); 
+	$report['desc'] = get_value_from_array($r,'desc');
+	$report['creator'] = get_value_from_array($r,'creator');
+	$report['type'] = get_value_from_array($r, 'type');
 
 	$report['col'] = array();
 	$report['sort'] = array();
@@ -404,19 +423,21 @@ foreach($report_stock as $n=>$v) {
 	$report['loc'] = array();
 
 	$fieldvar = "report_{$report['type']}s_fields";
+
 	if(is_array($$fieldvar)) 
 		$allow_fields = array_keys($$fieldvar);
 	else
 		$allow_fields=array();
 
- 	$q = mysql_query("SELECT * FROM reports_items 
+ 	$q = $pdo->prepare("SELECT * FROM reports_items 
 			WHERE reports_id='{$report['id']}' 
 			ORDER BY `ord`");
-	print(mysql_error());
+	$q->execute();
+	show_pdo_errors_if_any($pdo);
 	
-	if(mysql_num_rows($q) == 0) return $ret;
+	if($q->rowCount() == 0) return $report;
 
-	while($a = mysql_fetch_assoc($q)) {
+	while($a = $q->fetch(PDO::FETCH_ASSOC)) {
 		$f = $a['field'];
 		$t = $a['type'];
 		switch($t) {
@@ -424,15 +445,14 @@ foreach($report_stock as $n=>$v) {
 			/* We dont' care about order, just construct
 			 * ['option'][name] = value; */
 			if(!in_array($f, $allow_options)) {
-				print("Type[$type] Field[$f] not allowed.\n");
-				continue;
+//				print("Type[$type] Field[$f] not allowed.\n");
+				break;
 			}
 			$report['option'][$f] = $a['value'];
-			break;
 		default:
 			if(!in_array($f, $allow_fields)) {
-				print("Type[$type] Field[$f] not allowed.\n");
-				continue;
+//				print("Type[$type] Field[$f] not allowed.\n");
+				break;
 			}
 			/* Pull out all the data */
 			$val = array();
@@ -462,16 +482,18 @@ foreach($report_stock as $n=>$v) {
  }
 
  function report_save($report)
- {
+ {	global $pdo;
  	if($report['id'] == 0) {
 		/* New report */
-		mysql_query("INSERT INTO reports (`id`) VALUES ('')");
-		$report['id'] = mysql_insert_id();
+		$stmt = $pdo->prepare("INSERT INTO reports (`id`) VALUES ('')");
+		$stmt->execute();
+		$report['id'] = $pdo->lastInsertId();
 	} else {
 		/* if the report['id'] is not zero, see if this is a
 		 * systeim report before doing anything. */
-		$q = mysql_query("SELECT system_report_id FROM reports WHERE id='{$report['id']}'");
-		$i = mysql_fetch_assoc($q);
+		$q = $pdo->prepare("SELECT system_report_id FROM reports WHERE id='{$report['id']}'");
+		$q->execute();
+		$i = $q->fetch(PDO::FETCH_ASSOC);
 		if(intval($i['system_report_id']) != 0) {
 			/* This is a system report, the editor (should)
 			 * properly setup the editor pages so that the user
@@ -490,14 +512,15 @@ foreach($report_stock as $n=>$v) {
 	print("</pre>");
 */
 
- 	mysql_query("UPDATE reports SET 
-			`name`='".mysql_escape_string($report['name'])."',
-			`desc`='".mysql_escape_string($report['desc'])."',
-			`creator`='".mysql_escape_string($report['creator'])."',
-			`type`='".mysql_escape_string($report['type'])."'
+ 	$stmt = $pdo->prepare("UPDATE reports SET 
+			`name`='".$report['name']."',
+			`desc`='".$report['desc']."',
+			`creator`='".$report['creator']."',
+			`type`='".$report['type']."'
 			WHERE `id`={$report['id']}");
+	$stmt->execute();
 
-	report_save_field($report, 'col', $report['loc']);
+	report_save_field($report, 'col', get_value_from_array($report, 'loc'));
 	report_save_field($report, 'group', array());
 	report_save_field($report, 'sort', array());
 	report_save_field($report, 'distinct', array());
@@ -507,11 +530,11 @@ foreach($report_stock as $n=>$v) {
  }
 
  function report_load_all() 
- {
+ {	global $pdo;
  	$ret = array();
- 	$q = mysql_query("SELECT * FROM reports ORDER BY `name`");
+ 	$q = $pdo->prepare("SELECT * FROM reports ORDER BY `name`");
 
-	while($r = mysql_fetch_assoc($q)) {
+	while($r = $q->fetch(PDO::FETCH_ASSOC)) {
 		$report = array();
 	        $report['name'] = $r['name'];
 	        $report['id'] = $r['id'];
@@ -528,8 +551,9 @@ foreach($report_stock as $n=>$v) {
  	$r = intval($report_id);
 	/* if the report['id'] is not zero, see if this is a
 	 * systeim report before doing anything. */
-	$q = mysql_query("SELECT system_report_id FROM reports WHERE id='$r'");
-	$i = mysql_fetch_assoc($q);
+	$q = $pdo->prepare("SELECT system_report_id FROM reports WHERE id='$r'");
+	$q->execute();
+	$i = $q->fetch(PDO::FETCH_ASSOC);
 	if(intval($i['system_report_id']) != 0) {
 		/* This is a system report, the editor (should)
 		 * properly setup the editor pages so that the user
@@ -539,19 +563,27 @@ foreach($report_stock as $n=>$v) {
 		echo "ERROR: attempt to delete a system report (reports.id=$r)";
 		exit;
 	}
- 	mysql_query("DELETE FROM reports WHERE `id`=$r");
-	mysql_query("DELETE FROM reports_items WHERE `reports_id`=$r");
- }
+ 	$stmt = $pdo->prepare("DELETE FROM reports WHERE `id`=$r");
+	$stmt->execute();
+	$stmt = $pdo->prepare("DELETE FROM reports_items WHERE `reports_id`=$r");
+ $stmt->execute();}
+
 
  function report_gen($report) 
  {
+foreach($report['col'] as $v)
+
 	global $config, $report_students_fields, $report_judges_fields, $report_awards_fields, $report_schools_fields;
 	global $report_stock, $report_committees_fields, $report_volunteers_fields;
 	global $report_tours_fields, $report_fairs_fields;
 	global $report_fundraisings_fields;
 	global $filter_ops;
 
-	//print_r($report);
+//foreach($report as $k=>$v){
+//print_r($k.' ~	>');
+//print_r($v);
+//print_r('<br> <br>');
+//}
 	$fieldvar = "report_{$report['type']}s_fields";
 	$fields = $$fieldvar;
 
@@ -639,6 +671,17 @@ foreach($report_stock as $n=>$v) {
 
 	$total_width = 0;
 	$scale_width = 0;
+	$temp=array();
+	$count=0;
+	foreach($report['col'] as $o=>$d) {
+		if($config['default_language']!='fr'){
+			if(strpos($d['field'],'fr_')!='fr_'){
+			$temp[$count]=$d;
+			$count++;
+			}
+		} 
+	}
+	$report['col']=$temp;
 	/* Add up the column widths, and figure out which
 	 * ones are scalable, just in case */
 	foreach($report['col'] as $o=>$d) {
@@ -650,12 +693,18 @@ foreach($report_stock as $n=>$v) {
 
 	/* Determine the scale factor (use the label width so
 	 * we can enforce margins) */
+
 	if($report['option']['fit_columns'] == 'yes') { // && $total_width > $label_stock['label_width'])  {
 		$static_width = $total_width - $scale_width;
-        if($scale_width) 
+        	if($scale_width){
+			if ($label_stock['label_width'] - $static_width > 0) {
 	        		$scale_factor = ($label_stock['label_width'] - $static_width) / $scale_width;
-        else
+ 			} else {
+				$scale_factor = $label_stock['label_width']/$total_width;
+			} 
+		} else {
         		$scale_factor = 1.0;
+		}
 	} else {
 			$scale_factor = 1.0;
 	}
@@ -699,6 +748,7 @@ foreach($report_stock as $n=>$v) {
 		}
 	}
 
+
 	/* If no sort order is specified, make the first field the order */
 	if(count($report['sort']) == 0) 
 		$report['sort'] = array(0 => array('field' => $report['col'][0]['field']));
@@ -761,12 +811,14 @@ foreach($report_stock as $n=>$v) {
 	$q = call_user_func_array($func, array($report, $components));
 
 	$q = "SELECT $sel  $q  $filter_query $group_query ORDER BY $order";
-	$r = mysql_query($q);
+	$r = $pdo->prepare($q);
+	$r->execute();
  
 //	print_r($report);
 //	print_r($report['filter']);
 //	echo "$q";
 	
+
 	if($r == false) {
 		echo "The report database query has failed.  This is
 		unfortunate but not your fault.  Please send the following to
@@ -775,19 +827,18 @@ foreach($report_stock as $n=>$v) {
 		a bug report so we can get this fixed.<br />"; 
 		echo "<pre>";
 		echo "Query: [$q]<br />";
-		echo "Error: [".mysql_error()."]<br />";
+		echo "Error: [".$pdo->erroInfo()."]<br />";
 		echo "</pre>";
 		exit;
 	}
-	echo mysql_error();
+	show_pdo_errors_if_any($pdo);
 
 	$ncols = count($report['col']);
 	$n_groups = count($report['group']);
 	$last_group_data = array();
 
 //	echo "<pre>";print_r($rep);
-
-	while($i = mysql_fetch_assoc($r)) {
+	while($i = $r->fetch(PDO::FETCH_ASSOC)) {
 		
 		if($n_groups > 0) {
 			$group_change = false;
@@ -808,9 +859,10 @@ foreach($report_stock as $n=>$v) {
 
 			if($group_change) {
 				/* Dump the last table */
+
 				if(count($table['data'])) {
 				//	print_r($table);
-					$rep->addTable($table);
+					$rep->addTable($table);  //table is the content
 					$rep->nextLine();
 					$table['data'] = array();
 					$table['total'] = 0;
@@ -843,18 +895,17 @@ foreach($report_stock as $n=>$v) {
 			$rep->label_new();
 		}
 
-		foreach($report['col'] as $o=>$d) {
+		foreach($report['col'] as $o=>$d) {			//fill in one page
 			$f = $d['field'];
+
 			if(is_array($fields[$f]['value_map'])) {
 				$v = $fields[$f]['value_map'][$i["C$o"]];
 			} else if(is_callable($fields[$f]['exec_function'])) {
 				$v = call_user_func_array($fields[$f]['exec_function'], array($report, $f, $i["C$o"]));
-//			} else if(isset($fields[$f]['exec_code'])) {
-//				Somethign like this, how do we pass $i["C$o"] in?
-//				$v = exec($fields[$f]['exec_code']);
 			} else {
 				$v =  $i["C$o"];
 			}
+
 			if($gen_mode == 'table') {
 				$data[] = $v;
 			} else if($gen_mode == 'label') {
@@ -865,7 +916,7 @@ foreach($report_stock as $n=>$v) {
 				if($report['option']['field_box'] == 'yes') 
 					$opt[] = 'field_box';
 
-
+//the page content is filled
 				/* Special column, draw a box */
 				if($f == 'static_box') {
 					$rep->addLabelBox($d['x'], $d['y'], $d['w'],
@@ -885,13 +936,62 @@ foreach($report_stock as $n=>$v) {
 
 //				echo "<pre>"; print_r($d);
 
+				switch($f) {
+				case 'static_box':
+					$rep->label_rect($d['x'], $d['y'], $d['w'], $d['h']);
+					break;
+				case 'fair_logo':
+					$rep->label_fair_logo($d['x'], $d['y'], $d['w'], $d['h'], $show_box);
+					break;
+				case "projectbarcode":
+					$style = array(
+					'border' => 2,
+					'vpadding' => 'auto',
+					'hpadding' => 'auto',
+					'fgcolor' => array(0,0,0),
+					'bgcolor' => false, //array(255,255,255)
+					'module_width' => 2, // width of a single module in points
+					'module_height' => 2 // height of a single module in points
+					);
+					$rep->label_barcode($v, 'QRCODE,H', $d['x'], $d['y'], $d['w'], $d['h'], $style, 'N');
+				break;
+					
+				default:
+					if($f == 'static_text') 
+						$v = $d['value'];
+
+					$v = iconv("ISO-8859-1","UTF-8",$v);
+
+					$rep->label_text($d['x'], $d['y'], $d['w'], $d['h'],
+					$v, $show_box, $d['align'], $d['valign'],
+					$d['fontname'],$d['fontstyle'],$d['fontsize'],
+					$d['on_overflow']);
+
+					break;
+				}
+
+
+
+/*
 				if($f == 'static_box') {
 					$rep->label_rect($d['x'], $d['y'], $d['w'], $d['h']);
 				} else {
 					if($f == 'static_text') $v = $d['value'];
 
 					$v = iconv("ISO-8859-1//TRANSLIT", "UTF-8", $v);
-
+					if($f=="projectbarcode") {
+						$style = array(
+							'border' => 2,
+							'vpadding' => 'auto',
+							'hpadding' => 'auto',
+							'fgcolor' => array(0,0,0),
+							'bgcolor' => false, //array(255,255,255)
+							'module_width' => 2, // width of a single module in points
+							'module_height' => 2 // height of a single module in points
+						);
+						$rep->label_barcode($v, 'QRCODE,H', $d['x'], $d['y'], $d['w'], $d['h'], $style, 'N');
+					}
+					else {
 						$rep->label_text($d['x'], $d['y'], $d['w'], $d['h'],
 								$v, $show_box, $d['align'], $d['valign'],
 								$d['fontname'],$d['fontstyle'],$d['fontsize'],
@@ -899,6 +999,10 @@ foreach($report_stock as $n=>$v) {
 					}
 
 				}
+				*/
+
+			}
+//}
 
 			if($fields[$f]['total'] == true)
 				$table['total'] += $v;

admin/reports.php

@@ -1,25 +1,29 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2007 James Grant <james@lightbox.org>
-   Copyright (C) 2007 David Grant <dave@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the Science-ation project
+ * Science-ation Website: https://science-ation.ca
+ *
+ * This file was part of the 'Science Fair In A Box' project
+ *
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ * Copyright (C) 2024 AlgoLibre Inc. <science-ation@algolibre.io>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -31,17 +35,17 @@
 
 $option_keys = array('type', 'stock');
 
-
-switch($_GET['action']) {
+switch (get_value_from_array($_GET, 'action')) {
 	case 'remove_report':
 		$id = intval($_GET['id']);
-	mysql_query("DELETE FROM reports_committee WHERE
+		$stmt = $pdo->prepare("DELETE FROM reports_committee WHERE
 			users_id='{$_SESSION['users_uid']}' AND id='$id'");
+		$stmt->execute();
 		happy_('Report successfully removed');
 		exit;
 	case 'reload':
 		$edit_mode = true;
- 	$reports_id = intval($_POST['reports_id']);
+		$reports_id = intval(get_value_from_array($_POST, 'reports_id'));
 		exit;
 
 	case 'load_report':
@@ -60,42 +64,46 @@ case 'load_report':
 			$ret['name'] = $report['name'];
 			$ret['category'] = '';
 		} else {
-		$q = mysql_query("SELECT * FROM reports_committee WHERE id='$id'");
-		$ret = mysql_fetch_assoc($q);
+			$q = $pdo->prepare("SELECT * FROM reports_committee WHERE id='$id'");
+			$ret = $q->fetch(PDO::FETCH_ASSOC);
 			$ret['type'] = $ret['format'];
 		}
 
 		/* Load available categories */
-	$q = mysql_query("SELECT DISTINCT category FROM reports_committee
- 			WHERE users_id='{$_SESSION['users_uid']}'
+		$q = $pdo->prepare("SELECT DISTINCT category FROM reports_committee
+ \t\t\tWHERE users_id='{$_SESSION['users_uid']}'
 			ORDER BY category");
-	while($i = mysql_fetch_object($q))
+		$q->execute();
+		while ($i = $q->fetch(PDO::FETCH_OBJ))
 			$ret['cat'][] = $i->category;
 		echo json_encode($ret);
 		exit;
 
 	case 'save':
-	echo "POST: ";
+		echo 'POST: ';
 		print_r($_POST);
 		$id = intval($_POST['id']);
 		$reports_id = intval($_POST['reports_id']);
 		if ($id == -1) {
 			/* New entry */
-		mysql_query("INSERT INTO `reports_committee` (`users_id`,`reports_id`) 
+			$stmt = $pdo->prepare("INSERT INTO `reports_committee` (`users_id`,`reports_id`) 
 			VALUES('{$_SESSION['users_uid']}','$reports_id');");
-		echo mysql_error();
-		$id = mysql_insert_id();
+			$stmt->execute();
+			show_pdo_errors_if_any($pdo);
+			$id = $pdo->lastInsertId();
 		}
 
 		/* Update entry */
 		$category = $_POST['category'];
 		$category_exist = $_POST['category_exist'];
-	$comment = mysql_real_escape_string(stripslashes($_POST['comment']));
+		$comment = stripslashes($_POST['comment']);
 
-	if($category_exist != '') $category = $category_exist;
-	$category = mysql_real_escape_string(stripslashes(trim($category)));
+		if ($category_exist != '')
+			$category = $category_exist;
+		$category = stripslashes(trim($category));
 
-	if($category == '') $category = 'default';
+		if ($category == '')
+			$category = 'default';
 
 		if ($reports_id > 0) {
 			/* SFIAB report */
@@ -115,22 +123,21 @@ case 'save':
 			$stock = '';
 		}
 
-	mysql_query("UPDATE `reports_committee` SET
+		$stmt = $pdo->prepare("UPDATE `reports_committee` SET
 			`category`='$category',
 			`comment`='$comment',
 			`format`='$type',
 			`stock`='$stock'
 			WHERE id='$id'");
-	happy_("Saved");
+		$stmt->execute();
+		happy_('Saved');
 		exit;
 }
 
-
 // send the header
-send_header("My Reports", 
-		array("Committee Main" => "committee_main.php"),
-		            "print/export_reports"
-		);
+send_header('My Reports',
+	array('Committee Main' => 'committee_main.php'),
+	'print/export_reports');
 
 /* Send a greeting */
 echo i18n('Welcome to the new report interface.  You can select and save specific reports under specific categories so you can always find the report you need without having to go through the list each time.  To begin customizing this list, click on the "Edit This List" button at the bottom of this page.');
@@ -189,12 +196,12 @@ var edit=false;
 function edit_toggle()
 {
 	if(edit == false) {
-		$('#edit_toggle').val("<?=i18n("Done Editing")?>");
+		$('#edit_toggle').val("<?= i18n('Done Editing') ?>");
 		$('#edit_info').show();
 		$('.edit_buttons').show();
 		edit = true;
 	} else {
-		$('#edit_toggle').val("<?=i18n("Edit This List")?>");
+		$('#edit_toggle').val("<?= i18n('Edit This List') ?>");
 		$('#edit_info').hide();
 		$('.edit_buttons').hide();
 		edit = false;
@@ -236,26 +243,28 @@ $(document).ready(function() {
 </script>
 <?
 
+global $edit_mode;
 /* Load all the users reports */
- $q = mysql_query("SELECT reports_committee.*,reports.name
- 			FROM reports_committee 
+$q = $pdo->prepare("SELECT reports_committee.*,reports.name
+ \t\t\tFROM reports_committee 
 				LEFT JOIN reports ON reports.id=reports_committee.reports_id
- 			WHERE users_id='{$_SESSION['users_uid']}'
+ \t\t\tWHERE users_id='{$_SESSION['users_uid']}'
 			ORDER BY category,id");
- echo mysql_error();
- if(mysql_num_rows($q) == 0) {
+$q->execute();
+show_pdo_errors_if_any($pdo);
+if ($q->rowCount() == 0) {
 	echo i18n('You have no reports saved');
 } else {
-
 	$last_category = '';
 	$x = 0;
-	echo "<table class=\"tableview\" style=\"border:0px;\">";
-	while($i = mysql_fetch_object($q)) {
+	echo '<table class="tableview" style="border:0px;">';
+	while ($i = $q->fetch(PDO::FETCH_OBJ)) {
 		$x++;
 		if ($last_category != $i->category) {
 			/* New category */
 			echo '<tr><td style="border:0px;" colspan="3" style="even"><h3>';
-			if($edit_mode == true) echo i18n('Category').': ';
+			if (get_value_or_default($edit_mode) == true)
+				echo i18n('Category') . ': ';
 			echo "{$i->category}</h3></td></tr>";
 			$last_category = $i->category;
 		}
@@ -283,32 +292,30 @@ $(document).ready(function() {
 			</td>
 		</tr>			
 <?
+
 		/*
-
-		if($i->reports_id > 0) {
-			echo '<tr><td width=\"20px\"></td><td>';
-			echo '<span style=\"font-size: 0.75em;\">';
-			echo i18n('Format').": {$i->format}, ";
-			echo i18n('Paper').": {$report_stock[$i->stock]['name']}, ";
-			echo i18n('Year').": {$config['FAIRYEAR']}";
-			echo '</span>';
-			echo '</td></tr>';
-		}
+		 * if($i->reports_id > 0) {
+		 * 	echo '<tr><td width=\"20px\"></td><td>';
+		 * 	echo '<span style=\"font-size: 0.75em;\">';
+		 * 	echo i18n('Format').": {$i->format}, ";
+		 * 	echo i18n('Paper').": {$report_stock[$i->stock]['name']}, ";
+		 * 	echo i18n('Year').": {$config['FAIRYEAR']}";
+		 * 	echo '</span>';
+		 * 	echo '</td></tr>';
+		 * }
 		 */
-
 	}
-	echo "</table>";
-		
+	echo '</table>';
 }
 
 ?>
 
 <div id="edit_info" style="display:none;"> 
 <p>* <?= i18n('Deleting all the reports from a category will also delete the category.') ?></p>
-<p>* <?=i18n('Deleting a report only unlinks it from your list, it doesn\'t delete it from the system.')?></p>
+<p>* <?= i18n("Deleting a report only unlinks it from your list, it doesn't delete it from the system.") ?></p>
 </div>
 <br />
-<input id="edit_toggle" type="submit" onclick="edit_toggle();return false;" value="<?=i18n("Edit This List")?>">
+<input id="edit_toggle" type="submit" onclick="edit_toggle();return false;" value="<?= i18n('Edit This List') ?>">
 <br />
 <br />
 
@@ -322,19 +329,19 @@ $(document).ready(function() {
 ?>
 
 <hr />
-<h4><?=i18n("All Reports")?></h3>
+<h4><?= i18n('All Reports') ?></h3>
 
 <form name="reportgen" >
 <select name="id" id="report">
-<option value="0"><?=i18n("Select a Report")?></option>
+<option value="0"><?= i18n('Select a Report') ?></option>
 <?
 foreach ($reports as $r) {
 	echo "<option value=\"{$r['id']}\">{$r['name']}</option>\n";
 }
 ?>
 </select><br />
-<input type="submit" onclick="gen_report();return false;" value="<?=i18n("Generate Report")?>">
-<input type="submit" onclick="add_report();return false;" value="<?=i18n("Add this Report to my list")?>">
+<input type="submit" onclick="gen_report();return false;" value="<?= i18n('Generate Report') ?>">
+<input type="submit" onclick="add_report();return false;" value="<?= i18n('Add this Report to my list') ?>">
 </form>
 <br />
 
@@ -349,25 +356,26 @@ foreach($reports as $r) {
 <br />
 <table class="tableedit">
 <tr>
-	<td><?=i18n("Category")?>:</td>
-	<td><?=i18n("Existing Category")?>: <select name="category_exist" id="report_category_exist" onchange="$('#report_category').val('')" >
+	<td><?= i18n('Category') ?>:</td>
+	<td><?= i18n('Existing Category') ?>: <select name="category_exist" id="report_category_exist" onchange="$('#report_category').val('')" >
 			</select><br />
-		<?=i18n("OR New Category")?>: <input type="text" id="report_category" name="category" onkeypress="$('#report_category_exist').val('')" >
+		<?= i18n('OR New Category') ?>: <input type="text" id="report_category" name="category" onkeypress="$('#report_category_exist').val('')" >
 	</td>
 </tr>
 <?
 foreach ($report_options as $ok => $o) {
- 	if(!in_array($ok, $option_keys)) continue;
+	if (!in_array($ok, $option_keys))
+		continue;
 	echo "<tr><td>{$o['desc']}:</td>";
 	echo "<td><select name=\"$ok\" id=\"report_$ok\">";
 	foreach ($o['values'] as $k => $v) {
 		echo "<option value=\"$k\">$v</option>\n";
 	}
-	echo "</select><span id=\"report{$ok}custom\" style=\"display: none;\">".i18n("Custom")."</span></td></tr>";
+	echo "</select><span id=\"report{$ok}custom\" style=\"display: none;\">" . i18n('Custom') . '</span></td></tr>';
 }
 ?> 
 <tr>
-	<td><?=i18n("Comments")?>:</td>
+	<td><?= i18n('Comments') ?>:</td>
 	<td><textarea rows="3" cols="40" name="comment" id="report_comment"></textarea></td>
 </tr>
 </table>

admin/reports_acscript.php

@@ -1,58 +1,72 @@
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
- require("../lcsv.php");
+require ('../lpdf.php');
+require ('../lcsv.php');
 
- if($_GET['year']) $foryear=$_GET['year'];
- else $foryear=$config['FAIRYEAR'];
+if ($_GET['year'])
+	$foryear = $_GET['year'];
+else
+	$foryear = $config['FAIRYEAR'];
 
- if($_GET['awardtype']=="All") $awardtype="";
- else if($_GET['awardtype']) $awardtype=" AND award_types.type='".mysql_escape_string($_GET['awardtype'])."'";
- else $awardtype="";
+if ($_GET['awardtype'] == 'All')
+	$awardtype = '';
+else if ($_GET['awardtype'])
+	$awardtype = " AND award_types.type='" . $_GET['awardtype'] . "'";
+else
+	$awardtype = '';
 
- if($_GET['show_unawarded_awards']=="on") $show_unawarded_awards="yes";
- else $show_unawarded_awards="no";
+if (get_value_from_array($_GET, 'show_unawarded_awards') == 'on')
+	$show_unawarded_awards = 'yes';
+else
+	$show_unawarded_awards = 'no';
 
- if($_GET['show_unawarded_prizes']=="on") $show_unawarded_prizes="yes";
- else $show_unawarded_prizes="no";
+if (get_value_from_array($_GET, 'show_unawarded_prizes') == 'on')
+	$show_unawarded_prizes = 'yes';
+else
+	$show_unawarded_prizes = 'no';
 
- $show_pronunciation= ($_GET['show_pronunciation'] == 'on') ? TRUE : FALSE;
- $group_by_prize= ($_GET['group_by_prize'] == 'on') ? true : false;
+$show_pronunciation = get_value_from_array($_GET, 'show_pronunciation' == 'on') ? TRUE : FALSE;
+$group_by_prize = (get_value_from_array($_GET, 'group_by_prize') == 'on') ? true : false;
 
 if (is_array($_GET['show_category'])) {
 	$show_category = array();
 	foreach ($_GET['show_category'] as $id => $val) {
-		$show_category[] = "award_awards_projectcategories.projectcategories_id='$id'";
+		$show_category[] = "projects.projectcategories_id='$id'";
+	}
+	if ($show_unawarded_prizes == 'yes') {
+		$show_category[] = 'projects.projectcategories_id IS NULL';
 	}
 	$and_categories = join(' OR ', $show_category);
 } else {
 	$and_categories = '1';
 }
 
- $show_criteria = ($_GET['show_criteria']=='on') ? true : false;
+$show_criteria = (get_value_from_array($_GET, 'show_criteria') == 'on') ? true : false;
 
 $type = $_GET['type'];
- if(!$type) $type="pdf";
+if (!$type)
+	$type = 'pdf';
 
 $scriptformat = $_GET['scriptformat'];
-if(!$scriptformat) $scriptformat="default";
+if (!$scriptformat)
+	$scriptformat = 'default';
 
-	if($type=="pdf") {
+if ($type == 'pdf') {
 	$rep = new lpdf(i18n($config['fairname']),
-				i18n("Awards Ceremony Script"),
-				$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-				);
+		i18n('Awards Ceremony Script'),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
 	$rep->newPage();
-		if($scriptformat=="default") $rep->setFontSize(12);
-		if($scriptformat=="formatted") $rep->setFontSize(14);
+	if ($scriptformat == 'default')
+		$rep->setFontSize(12);
+	if ($scriptformat == 'formatted')
+		$rep->setFontSize(14);
+} else if ($type == 'csv') {
+	$rep = new lcsv(i18n('Awards Ceremony Script'));
 }
-	else if($type=="csv") {
-		$rep=new lcsv(i18n("Awards Ceremony Script"));
-	}
-	$q=mysql_query("SELECT 
+$q = $pdo->prepare("SELECT 
 				award_awards.id,
 				award_awards.name,
 				award_awards.presenter,
@@ -64,31 +78,27 @@ if(!$scriptformat) $scriptformat="default";
 			FROM 
 				award_awards,
 				award_types,
-				sponsors,
-				award_awards_projectcategories
+				sponsors
 			WHERE 
 					award_awards.year='$foryear'
-				AND	award_types.year='$foryear'
-				AND	award_awards.award_types_id=award_types.id
-				AND	award_awards.sponsors_id=sponsors.id
-				AND     award_awards.id=award_awards_projectcategories.award_awards_id
-				AND	award_awards.excludefromac='0'
-				AND ($and_categories)
+				AND\taward_types.year='$foryear'
+				AND\taward_awards.award_types_id=award_types.id
+				AND\taward_awards.sponsors_id=sponsors.id
+				AND\taward_awards.excludefromac='0'
 				$awardtype
-			GROUP BY award_awards.id
 			ORDER BY awards_order");
+$q->execute();
 
-	echo mysql_error();
+show_pdo_errors_if_any($pdo);
 //	echo "<pre>";
-	if(!mysql_num_rows($q)) {
+if (!$q->rowCount()) {
 	$rep->output();
 	exit;
 }
 $awards = array();
 
-	while($r=mysql_fetch_object($q)) {
-
-		$pq=mysql_query("SELECT 
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	$pq = $pdo->prepare("SELECT 
 						award_prizes.prize,
 						award_prizes.number,
 						award_prizes.id,
@@ -107,16 +117,18 @@ if(!$scriptformat) $scriptformat="default";
 						award_awards_id='{$r->id}' 
 						AND award_prizes.year='$foryear'
 						AND award_prizes.excludefromac='0'
+						AND ($and_categories)
 					ORDER BY 
 						`order`,
 						projects.projectnumber");
-					echo mysql_error();
+	$pq->execute();
+	show_pdo_errors_if_any($pdo);
 
 	$r->winners = array();
 	$r->awarded_count = 0;
-		while($w = mysql_fetch_object($pq)) {
-			if($w->projects_id)
-			{
+
+	while ($w = $pq->fetch(PDO::FETCH_OBJ)) {
+		if ($w->projects_id) {
 			$r->awarded_count++;
 		}
 		if ($r->type == 'Divisional' && $group_by_prize == true) {
@@ -124,8 +136,10 @@ if(!$scriptformat) $scriptformat="default";
 			$found = false;
 			foreach ($awards as &$p_award) {
 				if ($p_award->name == $w->prize) {
-						/* Match!  Set the prize name to the award name, 
-						 * and add the prize to the award */
+					/*
+					 * Match!  Set the prize name to the award name,
+					 * and add the prize to the award
+					 */
 					$w->prize = $r->name;
 					$p_award->winners[] = $w;
 					$found = true;
@@ -144,19 +158,17 @@ if(!$scriptformat) $scriptformat="default";
 				$awards[] = $new_award;
 				//					echo "Create Award:"; print_r($new_award);
 			}
-
 		} else {
 			//				echo "Add non-div winner\n";
 			$r->winners[] = $w;
 		}
 	}
 
-		if($show_unawarded_awards=="no" && $r->awarded_count == 0)  {
+	if ($show_unawarded_awards == 'no' && $r->awarded_count == 0) {
 		/* No winners */
 		continue;
 	}
 
-
 	if ($r->type == 'Divisional' && $group_by_prize == true) {
 		/* Do nothing */
 	} else {
@@ -166,55 +178,52 @@ if(!$scriptformat) $scriptformat="default";
 //	echo '<pre>';	print_r($awards);
 
 foreach ($awards as $r) {
-
-		if($scriptformat=="formatted") 
+	if ($scriptformat == 'formatted')
 		$rep->newPage();
 
-		if($scriptformat=="default") 
+	if ($scriptformat == 'default')
 		$rep->heading("$r->name  ($r->type)");
-		if($scriptformat=="formatted") {
+	if ($scriptformat == 'formatted') {
 		$rep->setFontBold();
 		$rep->addText("$r->name  ($r->type)");
 		$rep->setFontNormal();
 	}
-		if($r->type!="Divisional")
-			$rep->addText(i18n("Sponsored by: %1",array($r->organization)));
+	if ($r->type != 'Divisional')
+		$rep->addText(i18n('Sponsored by: %1', array($r->organization)));
 	if ($r->presenter)
-			$rep->addText(i18n("Presented by: %1",array($r->presenter)));
+		$rep->addText(i18n('Presented by: %1', array($r->presenter)));
 	if ($r->description)
-			$rep->addText(i18n("Description: %1",array($r->description)));
+		$rep->addText(i18n('Description: %1', array($r->description)));
 	if ($show_criteria)
-			$rep->addText(i18n("Criteria: %1",array($r->criteria)));
+		$rep->addText(i18n('Criteria: %1', array($r->criteria)));
 
-		if($scriptformat=="formatted") $rep->nextline();
+	if ($scriptformat == 'formatted')
+		$rep->nextline();
 
-		if($r->awarded_count == 0)
-		{
-			$rep->addText("Not awarded");
+	if ($r->awarded_count == 0) {
+		$rep->addText('Not awarded');
 	}
 
 	$prevprizeid = -1;
 
 	foreach ($r->winners as $pr) {
-
-				if($pr->projectnumber || $show_unawarded_prizes=="yes") {
+		if ($pr->projectnumber || $show_unawarded_prizes == 'yes') {
 			if ($prevprizeid != $pr->id) {
 				$prizetext = $pr->prize;
 
 				if ($pr->cash || $pr->scholarship) {
-							$prizetext.=" (";
+					$prizetext .= ' (';
 					if ($pr->cash && $pr->scholarship)
 						$prizetext .= "\$$pr->cash cash / \$$pr->scholarship scholarship";
 					else if ($pr->cash)
 						$prizetext .= "\$$pr->cash cash";
 					else if ($pr->scholarship)
 						$prizetext .= "\$$pr->scholarship scholarship";
-							$prizetext.= ")";
-					
+					$prizetext .= ')';
 				}
-						if($scriptformat=="default") 
+				if ($scriptformat == 'default')
 					$rep->addText($prizetext);
-						if($scriptformat=="formatted") {
+				if ($scriptformat == 'formatted') {
 					$rep->setFontBold();
 					$rep->addText($prizetext);
 					$rep->setFontNormal();
@@ -225,10 +234,10 @@ if(!$scriptformat) $scriptformat="default";
 			}
 
 			if ($pr->projectnumber) {
-						if($scriptformat=="default") 
+				if ($scriptformat == 'default')
 					$rep->addText("    ($pr->projectnumber) $pr->title");
 
-						$sq=mysql_query("SELECT students.firstname,
+				$sq = $pdo->prepare("SELECT students.firstname,
 									students.lastname,
 									students.pronunciation,
 									students.schools_id,
@@ -240,16 +249,19 @@ if(!$scriptformat) $scriptformat="default";
 									students.registrations_id='$pr->reg_id'
 									AND students.schools_id=schools.id
 								");
+				$sq->execute();
 
-						$students="       Students: ";
+				$students = '       Students: ';
 				$studnum = 0;
-						$pronounce = "";
-						$rawpronounce = "";
-						while($studentinfo=mysql_fetch_object($sq)) {
-							if($studnum>0) $students.=", ";
+				$pronounce = '';
+				$rawpronounce = '';
+				while ($studentinfo = $sq->fetch(PDO::FETCH_OBJ)) {
+					if ($studnum > 0)
+						$students .= ', ';
 					$students .= "$studentinfo->firstname $studentinfo->lastname";
 
-							if($studnum>0) $pronounce .= ", ";
+					if ($studnum > 0)
+						$pronounce .= ', ';
 					$pronounce .= "\"{$studentinfo->pronunciation}\"";
 					$rawpronounce .= "{$studentinfo->pronunciation}";
 
@@ -259,13 +271,13 @@ if(!$scriptformat) $scriptformat="default";
 					$studnum++;
 				}
 
-						if($scriptformat=="default") {
+				if ($scriptformat == 'default') {
 					$rep->addText($students);
-							if(trim($rawpronounce) != "" && $show_pronunciation == TRUE)
+					if (trim($rawpronounce) != '' && $show_pronunciation == TRUE)
 						$rep->addText("       Pronunciation: $pronounce");
 					$rep->addText("       School: {$student_school[0]}");
 				}
-						if($scriptformat=="formatted") {
+				if ($scriptformat == 'formatted') {
 					$rep->addTextX("$pr->projectnumber", 0.5);
 					for ($x = 0; $x < $studnum; $x++) {
 						$rep->addTextX($student_winner[$x], 1.4);
@@ -274,18 +286,20 @@ if(!$scriptformat) $scriptformat="default";
 							$rep->nextline();
 							$rep->addTextX("({$student_win_pronunc[$x]})", 2.0);
 						}
-								if($type=="pdf") 
+						if ($type == 'pdf')
 							$rep->nextline();
 					}
-							if(($studnum==1) && ($type == "csv")) $rep->addTextX("");
-							if(($studnum==1) && ($type == "csv")) $rep->addTextX("");
+					if (($studnum == 1) && ($type == 'csv'))
+						$rep->addTextX('');
+					if (($studnum == 1) && ($type == 'csv'))
+						$rep->addTextX('');
 					$rep->addText($pr->title, 'left', 1.4);
-							if($type=="pdf") $rep->nextline();
+					if ($type == 'pdf')
+						$rep->nextline();
 					$rep->nextline();
 				}
-					}
-					else {
-						$rep->addText("    Prize not awarded");
+			} else {
+				$rep->addText('    Prize not awarded');
 			}
 		}
 	}

admin/reports_appeal_letters.php

@@ -1,24 +1,25 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
@@ -30,7 +31,7 @@ require_once('../tcpdf/tcpdf_sfiab_config.php');
 require_once ('../tcpdf/tcpdf.php');
 
 $fcid = intval($_GET['fundraising_campaigns_id']);
-$key = mysql_real_escape_string($_GET['key']);
+$key = $_GET['key'];
 
 /* Start an output PDF */
 $pdf = new TCPDF(PDF_PAGE_ORIENTATION, PDF_UNIT, PDF_PAGE_FORMAT, true, 'UTF-8', false);
@@ -69,23 +70,23 @@ $pdf->setImageScale(PDF_IMAGE_SCALE_RATIO);
 
 /* Load the users */
 $users = array();
-$q = mysql_query("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$fcid'");
-while($l = mysql_fetch_assoc($q)) {
+$q = $pdo->prepare("SELECT * FROM fundraising_campaigns_users_link WHERE fundraising_campaigns_id='$fcid'");
+while ($l = $q->fetch(PDO::FETCH_ASSOC)) {
 	$uid = $l['users_uid'];
 	$users[$uid] = user_load_by_uid($uid);
 }
 
 /* Grab all the emails */
-$q = mysql_query("SELECT * FROM emails WHERE fundraising_campaigns_id='$fcid' AND val='$key'");
-
-while($e = mysql_fetch_assoc($q)) {
+$q = $pdo->prepare("SELECT * FROM emails WHERE fundraising_campaigns_id='$fcid' AND val='$key'");
+$q->execute();
 
+while ($e = $q->fetch(PDO::FETCH_ASSOC)) {
 	foreach ($users as $uid => &$u) {
 		$subject = communication_replace_vars($e['subject'], $u);
 		$body = communication_replace_vars($e['bodyhtml'], $u);
 		/* these dont' need substitutions */
 		$to = $u['name'];
-		$date = date("F j, Y");
+		$date = date('F j, Y');
 
 		$html = "<table><tr><td align=\"right\" width=\"25\%\"><b>Attn:  </b></td><td>$to</td></tr>
 				<tr><td align=\"right\" width=\"25\%\"><b>Subject:  </b></td><td>$subject</td></tr>

admin/reports_awards.inc.php

@@ -1,319 +1,395 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the Science-ation project
+ * Science-ation Website: https://science-ation.ca
+ *
+ * This file was part of the 'Science Fair In A Box' project
+ *
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ * Copyright (C) 2024 AlgoLibre Inc. <science-ation@algolibre.io>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
+function report_awards_fr($report, $field, $text)
+{
+	return i18n($text, array(), array(), 'fr');
+}
+
+function report_cash_words($report, $field, $text)
+{
+	return wordify($text, true);
+}
+
 $report_awards_fields = array(
 	'name' => array(
 		'start_option_group' => 'Award Information',
 		'name' => 'Award -- Name',
 		'header' => 'Award Name',
 		'width' => 3.0,
-		'table' => 'award_awards.name' ),
-
+		'table' => 'award_awards.name'
+	),
+	'name_fr' => array(
+		'name' => 'Award -- Name (French)',
+		'header' => 'Award Name',
+		'width' => 3.0,
+		'table' => 'award_awards.name',
+		'exec_function' => 'report_awards_fr'
+	),
 	'criteria' => array(
 		'name' => 'Award -- Criteria',
 		'header' => 'Award Criteria',
 		'width' => 3.0,
-		'table' => 'award_awards.criteria' ),
-
+		'table' => 'award_awards.criteria'
+	),
+	'criteria_fr' => array(
+		'name' => 'Award -- Criteria (French)',
+		'header' => 'Award Criteria',
+		'width' => 3.0,
+		'table' => 'award_awards.criteria',
+		'exec_function' => 'report_awards_fr'
+	),
 	'presenter' => array(
 		'name' => 'Award -- Presenter',
 		'header' => 'Award Presenter',
 		'width' => 1.5,
-		'table' => 'award_awards.presenter' ),
-
+		'table' => 'award_awards.presenter'
+	),
 	'order' => array(
 		'name' => 'Award -- Order',
 		'header' => 'Award Order',
 		'width' => 0.5,
-		'table' => 'award_awards.order' ),
-
+		'table' => 'award_awards.order'
+	),
 	'cwsfaward' => array(
 		'name' => 'Award -- CWSF Award',
 		'header' => 'CWSF',
 		'width' => 0.5,
 		'table' => 'award_awards.cwsfaward',
-		'value_map' => array ('0' => 'No', '1' => 'Yes')),
-
+		'value_map' => array('0' => 'No', '1' => 'Yes')
+	),
 	'type' => array(
 		'name' => 'Award -- Type',
 		'header' => 'Award Type',
 		'width' => 1.0,
-		'table' => 'award_types.type' ),
-
+		'table' => 'award_types.type'
+	),
 	'empty_winner_box' => array(
 		'name' => 'Award -- Empty Winner Box (for hand entry on printed reports)',
 		'header' => 'Winner',
 		'width' => 1.0,
-		'table' => "CONCAT('')" ),
-
+		'table' => "CONCAT('')"
+	),
 	'sponsor_organization' => array(
 		'start_option_group' => 'Sponsor Information',
 		'name' => 'Sponsor -- Organization',
 		'header' => 'Sponsor Organization',
 		'width' => 2.0,
-		'table' => 'sponsors.organization' ),
-
+		'table' => 'sponsors.organization'
+	),
 	'sponsor_phone' => array(
 		'name' => 'Sponsor -- Phone',
 		'header' => 'Sp. Phone',
 		'width' => 1,
-		'table' => 'sponsors.phone' ),
-
+		'table' => 'sponsors.phone'
+	),
 	'sponsor_fax' => array(
 		'name' => 'Sponsor -- Fax',
 		'header' => 'Sp. Fax',
 		'width' => 1,
-		'table' => 'sponsors.fax' ),
-
+		'table' => 'sponsors.fax'
+	),
 	'sponsor_address' => array(
 		'name' => 'Sponsor -- Street Address',
 		'header' => 'Sponsor Address',
 		'width' => 2.0,
-		'table' => 'sponsors.address'),
-
+		'table' => 'sponsors.address'
+	),
 	'sponsor_city' => array(
 		'name' => 'Sponsor -- City',
 		'header' => 'Sp. City',
 		'width' => 1.5,
-		'table' => 'sponsors.city' ),
-
+		'table' => 'sponsors.city'
+	),
 	'sponsor_province' => array(
 		'name' => 'Sponsor -- ' . $config['provincestate'],
 		'header' => 'Sp. ' . $config['provincestate'],
 		'width' => 0.75,
-		'table' => 'sponsors.province_code' ),
-
+		'table' => 'sponsors.province_code'
+	),
 	'sponsor_postal' => array(
 		'name' => 'Sponsor -- ' . $config['postalzip'],
 		'header' => 'Sp. ' . $config['postalzip'],
 		'width' => 0.75,
-		'table' => 'sponsors.postalcode' ),
-
+		'table' => 'sponsors.postalcode'
+	),
 	'sponsor_notes' => array(
 		'name' => 'Sponsor -- Notes',
 		'header' => 'Sponsor Notes',
 		'width' => 3,
-		'table' => 'sponsors.notes' ),
-
+		'table' => 'sponsors.notes'
+	),
 	'sponsorship_status' => array(
 		'name' => 'Sponsorship -- Status',
 		'header' => 'Sp. Status',
-		'width' => .5,
+		'width' => 0.5,
 		'table' => 'sponsorships.status',
-		'value_map' => array ('pending' => 'Pending', 'confirmed' => 'Confirmed'), "received"=>"Received"),
-
+		'value_map' => array('pending' => 'Pending', 'confirmed' => 'Confirmed'), 'received' => 'Received'
+	),
 	'pcontact_salutation' => array(
 		'start_option_group' => 'Sponsor Primary Contact',
 		'name' => 'Primary Contact -- Salutation',
 		'header' => 'Cnct. Salutation',
 		'width' => 1.0,
-		'table' => 'PRIMARYCONTACTUSER.salutation' ),
-
+		'table' => 'PRIMARYCONTACTUSER.salutation'
+	),
 	'pcontact_last_name' => array(
 		'name' => 'Primary Contact -- Last Name',
 		'header' => 'Cnct. Last Name',
 		'width' => 1.0,
-		'table' => 'PRIMARYCONTACTUSER.lastname' ),
-
+		'table' => 'PRIMARYCONTACTUSER.lastname'
+	),
 	'pcontact_first_name' => array(
 		'name' => 'Primary Contact -- First Name',
 		'header' => 'Cnct. First Name',
 		'width' => 1.0,
-		'table' => 'PRIMARYCONTACTUSER.firstname' ),
-
+		'table' => 'PRIMARYCONTACTUSER.firstname'
+	),
 	'pcontact_name' => array(
 		'name' => 'Primary Contact -- Full Name (last, first)',
 		'header' => 'Contact Name',
 		'width' => 1.75,
 		'table' => "CONCAT(PRIMARYCONTACTUSER.lastname, ', ', PRIMARYCONTACTUSER.firstname)",
-		'table_sort'=> 'PRIMARYCONTACTUSER.lastname' ),
-		
+		'table_sort' => 'PRIMARYCONTACTUSER.lastname'
+	),
 	'pcontact_namefl' => array(
 		'name' => 'Primary Contact -- Full Name (salutation first last)',
 		'header' => 'Contact Name',
 		'width' => 1.75,
 		'table' => "CONCAT(PRIMARYCONTACTUSER.salutation, ' ', PRIMARYCONTACTUSER.firstname, ' ', PRIMARYCONTACTUSER.lastname)",
-		'table_sort'=> 'PRIMARYCONTACTUSER.lastname' ),
-
+		'table_sort' => 'PRIMARYCONTACTUSER.lastname'
+	),
 	'pcontact_position' => array(
 		'name' => 'Primary Contact -- Position',
 		'header' => 'Cnct. Position',
 		'width' => 1.25,
-		'table' => 'PRIMARYCONTACT.position'),
-
+		'table' => 'PRIMARYCONTACT.position'
+	),
 	'pcontact_email' => array(
 		'name' => 'Primary Contact -- Email',
 		'header' => 'Cnct. Email',
 		'width' => 2.0,
-		'table' => 'PRIMARYCONTACTUSER.email'),
-
+		'table' => 'PRIMARYCONTACTUSER.email'
+	),
 	'pcontact_hphone' => array(
 		'name' => 'Primary Contact -- Home Phone',
 		'header' => 'Cnct. Home',
 		'width' => 1,
-		'table' => 'PRIMARYCONTACTUSER.phonehome' ),
-
+		'table' => 'PRIMARYCONTACTUSER.phonehome'
+	),
 	'pcontact_wphone' => array(
 		'name' => 'Primary Contact -- Work Phone',
 		'header' => 'Cnct. Work',
 		'width' => 1,
-		'table' => 'PRIMARYCONTACTUSER.phonework' ),
-
+		'table' => 'PRIMARYCONTACTUSER.phonework'
+	),
 	'pcontact_cphone' => array(
 		'name' => 'Primary Contact -- Cell Phone',
 		'header' => 'Cnct. Cell',
 		'width' => 1,
-		'table' => 'PRIMARYCONTACTUSER.phonecell' ),
-
+		'table' => 'PRIMARYCONTACTUSER.phonecell'
+	),
 	'pcontact_fax' => array(
 		'name' => 'Primary Contact -- Fax',
 		'header' => 'Cnct. Fax',
 		'width' => 1,
-		'table' => 'PRIMARYCONTACTUSER.fax' ),
-		
+		'table' => 'PRIMARYCONTACTUSER.fax'
+	),
 	'pcontact_notes' => array(
 		'name' => 'Primary Contact -- Notes',
 		'header' => 'Contact Notes',
 		'width' => 3,
-		'table' => 'PRIMARYCONTACT.notes' ),
-
+		'table' => 'PRIMARYCONTACT.notes'
+	),
+	'pcontact_address' => array(
+		'name' => 'Primary Contact Address -- Street',
+		'header' => 'Address',
+		'width' => 2.0,
+		'table' => "CONCAT(PRIMARYCONTACTUSER.address, ' ', PRIMARYCONTACTUSER.address2)"
+	),
+	'pcontact_city' => array(
+		'name' => 'Primary Contact Address -- City',
+		'header' => 'City',
+		'width' => 1.5,
+		'table' => 'PRIMARYCONTACTUSER.city'
+	),
+	'pcontact_province' => array(
+		'name' => 'Primary Contact Address -- ' . $config['provincestate'],
+		'header' => $config['provincestate'],
+		'width' => 0.75,
+		'table' => 'PRIMARYCONTACTUSER.province'
+	),
+	'pcontact_postal' => array(
+		'name' => 'Primary Contact Address -- ' . $config['postalzip'],
+		'header' => $config['postalzip'],
+		'width' => 0.75,
+		'table' => 'PRIMARYCONTACTUSER.postalcode'
+	),
+	'pcontact_city_prov' => array(
+		'name' => 'Primary Contact Address -- City, ' . $config['provincestate'] . ' (for mailing)',
+		'header' => 'City',
+		'width' => 1.5,
+		'table' => "CONCAT(PRIMARYCONTACTUSER.city, ', ', PRIMARYCONTACTUSER.province)"
+	),
 	'judgeteamname' => array(
 		'start_option_group' => 'Judging Team',
 		'components' => array('judgingteam'),
 		'name' => 'Judging Team -- Name',
 		'header' => 'Judging Team',
 		'width' => 3.0,
-		'table' => 'judges_teams.name'),
-
+		'table' => 'judges_teams.name'
+	),
 	'judgeteamnum' => array(
 		'components' => array('judgingteam'),
 		'name' => 'Judging Team -- Number',
 		'header' => 'Team',
 		'width' => 0.5,
-		'table' => 'judges_teams.num'),
-
+		'table' => 'judges_teams.num'
+	),
 	'judgeteammembers_name' => array(
 		'components' => array('judgingteam', 'judgingteammembers'),
 		'name' => 'Judging Team -- Judge Name',
 		'header' => 'Judge Name',
 		'width' => 1.5,
-		'table' => "CONCAT(judges.firstname, ' ', judges.lastname)"),
-
+		'table' => "CONCAT(judges.firstname, ' ', judges.lastname)"
+	),
 	'judgeteammembers' => array(
 		'components' => array('judgingteam', 'judgingteammembers'),
 		'name' => 'Judging Team -- Members (REQUIRES MySQL 5.0)',
 		'header' => 'Team Members',
 		'width' => 3.0,
 		'table' => "GROUP_CONCAT(judges.firstname, ' ', judges.lastname ORDER BY judges.lastname SEPARATOR ', ')",
-		'group_by' => array('award_awards.id', 'judges_teams.num') ),
-
+		'group_by' => array('award_awards.id', 'judges_teams.num')
+	),
 	'prize_name' => array(
 		'start_option_group' => 'Prize Info (Duplicates award data for each prize, omits awards with no prizes)',
 		'name' => 'Prize -- Name',
 		'header' => 'Prize Name',
 		'width' => 2,
 		'table' => 'award_prizes.prize',
-		'components' => array('prizes')),
-
+		'components' => array('prizes')
+	),
 	'prize_cash' => array(
 		'name' => 'Prize --  Cash Amount',
 		'header' => 'Cash',
 		'width' => 0.5,
 		'table' => 'award_prizes.cash',
-		'components' => array('prizes')),
-
+		'components' => array('prizes')
+	),
+	'prize_cash_words' => array(
+		'name' => 'Prize --  Cash Amount In Words',
+		'header' => 'Cash',
+		'width' => 0.5,
+		'table' => 'award_prizes.cash',
+		'components' => array('prizes'),
+		'exec_function' => 'report_cash_words'
+	),
 	'prize_scholarship' => array(
 		'name' => 'Prize --  Scholarship Amount',
 		'header' => 'Scholarship',
 		'width' => 0.75,
 		'table' => 'award_prizes.scholarship',
-		'components' => array('prizes')),
-
+		'components' => array('prizes')
+	),
 	'prize_value' => array(
 		'name' => 'Prize --  Value Amount',
 		'header' => 'Value',
 		'width' => 0.5,
 		'table' => 'award_prizes.value',
-		'components' => array('prizes')),
+		'components' => array('prizes')
+	),
 
-/* Don't have projectcategories and projectdivisions
-	'prize_fullname' => array(
-		'name' => 'Prize --  Name, Category, Division',
-		'header' => 'Prize Name',
-		'width' => 4,
-		'table' => "CONCAT(award_prizes.prize,' in ',projectcategories.category,' ', projectdivisions.division)",
-		'table_sort' => 'award_prizes.order',
-		'components' => array('prizes')),
+	/*
+	 * Don't have projectcategories and projectdivisions
+	 * 	'prize_fullname' => array(
+	 * 		'name' => 'Prize --  Name, Category, Division',
+	 * 		'header' => 'Prize Name',
+	 * 		'width' => 4,
+	 * 		'table' => "CONCAT(award_prizes.prize,' in ',projectcategories.category,' ', projectdivisions.division)",
+	 * 		'table_sort' => 'award_prizes.order',
+	 * 		'components' => array('prizes')),
 	 */
 	'prize_trophy_any' => array(
-		'name' => 'Prize -- Trophy (\'Yes\' if the award has a trophy)',
+		'name' => "Prize -- Trophy ('Yes' if the award has a trophy)",
 		'header' => 'Trophy',
 		'width' => 0.5,
 		'table' => "IF ( award_prizes.trophystudentkeeper=1
 				OR award_prizes.trophystudentreturn=1
 				OR award_prizes.trophyschoolkeeper=1
 				OR award_prizes.trophyschoolreturn=1, 'Yes', 'No')",
-		'components' => array('prizes')),
-
+		'components' => array('prizes')
+	),
 	'prize_trophy_return' => array(
-		'name' => 'Prize -- Annual Trophy (\'Yes\' if the award has a school or student trophy that isn\'t a keeper)',
+		'name' => "Prize -- Annual Trophy ('Yes' if the award has a school or student trophy that isn't a keeper)",
 		'header' => 'Trophy',
 		'width' => 0.5,
 		'table' => "IF ( award_prizes.trophystudentreturn=1
 				OR award_prizes.trophyschoolreturn=1, 'Yes', 'No')",
-		'components' => array('prizes')),
-
+		'components' => array('prizes')
+	),
 	'prize_trophy_return_student' => array(
-		'name' => 'Prize -- Annual Student Trophy (\'Yes\' if the award has astudent trophy that isn\'t a keeper)',
+		'name' => "Prize -- Annual Student Trophy ('Yes' if the award has astudent trophy that isn't a keeper)",
 		'header' => 'Ind.',
 		'width' => 0.5,
 		'table' => "IF ( award_prizes.trophystudentreturn=1, 'Yes', 'No')",
-		'components' => array('prizes')),
-
+		'components' => array('prizes')
+	),
 	'prize_trophy_return_school' => array(
-		'name' => 'Prize -- Annual School Trophy (\'Yes\' if the award has a school trophy that isn\'t a keeper)',
+		'name' => "Prize -- Annual School Trophy ('Yes' if the award has a school trophy that isn't a keeper)",
 		'header' => 'Sch.',
 		'width' => 0.5,
 		'table' => "IF ( award_prizes.trophyschoolreturn=1, 'Yes', 'No')",
-		'components' => array('prizes')),
-
+		'components' => array('prizes')
+	),
 	'prize_all' => array(
 		'name' => 'Prize -- Lists all prize data (name, cash, scholarship, value, trophies)',
 		'header' => 'Prize',
 		'width' => 2,
 		'table' => "CONCAT(
-				IF(award_prizes.prize != '', CONCAT(award_prizes.prize,'\n', ''),''),
-				IF(award_prizes.cash != '', CONCAT('$',award_prizes.cash,'\n'), ''),
-				IF(award_prizes.scholarship != '', CONCAT('$',award_prizes.scholarship,' scholarship\n'), ''),
-				IF(award_prizes.value != '', CONCAT('$',award_prizes.value,' value\n'), ''),
-				IF(award_prizes.trophystudentkeeper != '', CONCAT('Student Keeper Trophy\n'), ''),
-				IF(award_prizes.trophystudentreturn != '', CONCAT('Student Annual-Return Trophy\n'), ''),
-				IF(award_prizes.trophyschoolkeeper != '', CONCAT('School Keeper Trophy\n'), ''),
-				IF(award_prizes.trophyschoolreturn != '', CONCAT('School Annual-Return Trophy\n'), '')
+				IF(award_prizes.prize != '', CONCAT(award_prizes.prize,'
+', ''),''),
+				IF(award_prizes.cash != '', CONCAT('\$',award_prizes.cash,'
+'), ''),
+				IF(award_prizes.scholarship != '', CONCAT('\$',award_prizes.scholarship,' scholarship
+'), ''),
+				IF(award_prizes.value != '', CONCAT('\$',award_prizes.value,' value
+'), ''),
+				IF(award_prizes.trophystudentkeeper != '', CONCAT('Student Keeper Trophy
+'), ''),
+				IF(award_prizes.trophystudentreturn != '', CONCAT('Student Annual-Return Trophy
+'), ''),
+				IF(award_prizes.trophyschoolkeeper != '', CONCAT('School Keeper Trophy
+'), ''),
+				IF(award_prizes.trophyschoolreturn != '', CONCAT('School Annual-Return Trophy
+'), '')
 				)",
-		'components' => array('prizes')),
-
-
+		'components' => array('prizes')
+	),
 );
 
 function report_awards_fromwhere($report, $components)
@@ -344,10 +420,12 @@ $report_awards_fields = array(
 	$prizes_join = '';
 	if (in_array('prizes', $components)) {
 		$prizes_join = 'LEFT JOIN award_prizes ON award_prizes.award_awards_id=award_awards.id';
-		/* Don't need a where filter, the prize is attached by unique ID to an award
-		 * that is already from the correct year. */
-	}
 
+		/*
+		 * Don't need a where filter, the prize is attached by unique ID to an award
+		 * that is already from the correct year.
+		 */
+	}
 
 	$q = "	FROM  award_awards 
 			LEFT JOIN sponsors ON (

admin/reports_ceremony.php

@@ -1,106 +1,109 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 require_once ('reports.inc.php');
 user_auth_required('committee', 'admin');
- send_header("Award Ceremony Scripts",
+send_header('Award Ceremony Scripts',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php'),
-            "print_awards_ceremony_scripts"
-			);
- echo "<br />";
- echo "<form action=\"reports_acscript.php\" method=\"get\">";
- echo "<table class=\"tableedit\">";
+	'print_awards_ceremony_scripts');
+echo '<br />';
+echo '<form action="reports_acscript.php" method="get">';
+echo '<table class="tableedit">';
 
- echo "<tr><td><b>".i18n("Year").":</b></td><td>";
+echo '<tr><td><b>' . i18n('Year') . ':</b></td><td>';
 
 // get the year information, use fairname since it should be there for all years[right?]
- $results = mysql_query("SELECT year FROM config WHERE var='fairname' AND year > 0 ORDER BY year DESC");
+$results = $pdo->prepare("SELECT year FROM config WHERE var='fairname' AND year > 0 ORDER BY year DESC");
+$results->execute();
 
- echo "<select name=\"year\" size=1>";
- while($r=mysql_fetch_object($results)) {
+echo '<select name="year" size=1>';
+while ($r = $results->fetch(PDO::FETCH_OBJ)) {
 	echo "<option>$r->year</option>";
 }
- echo "</select></td></tr>";
+echo '</select></td></tr>';
 
 // list output formats
 echo "<tr><td>
- 		<b>".i18n("Type").":</b>
-	   </td>
-	   <td>
-	   	<select name=\"type\" size=1>
+ \t\t<b>" . i18n('Type') . ":</b>
+\t   </td>
+\t   <td>
+\t   \t<select name=\"type\" size=1>
 			<option value=\"pdf\">PDF</option>
 			<option value=\"csv\">CSV</option>
 	</select></td>";
 
 echo "</td></tr>\n";
- echo "<tr>";
+echo '<tr>';
 // list award subsets to output
- echo "<td><b>".i18n("Award Type").":</b></td> <td> <select name=\"awardtype\" size=1>";
- $results = mysql_query("SELECT type FROM award_types WHERE year=".$config['FAIRYEAR']." ORDER BY type");
- echo "<option value=\"All\">".i18n("All")."</option>";
- while($r=mysql_fetch_object($results)) {
- 	echo "<option value=\"$r->type\">".i18n("$r->type")."</option>";
+echo '<td><b>' . i18n('Award Type') . ':</b></td> <td> <select name="awardtype" size=1>';
+$results = $pdo->prepare('SELECT type FROM award_types WHERE year=' . $config['FAIRYEAR'] . ' ORDER BY type');
+$results->execute();
+echo '<option value="All">' . i18n('All') . '</option>';
+while ($r = $results->fetch(PDO::FETCH_OBJ)) {
+	echo "<option value=\"$r->type\">" . i18n("$r->type") . '</option>';
 }
- echo "</select></td>";
+echo '</select></td>';
 echo "</td></tr>\n";
- echo "<tr>";
+echo '<tr>';
 
 // list award formats to output
- echo "<td>
-	<b>".i18n("Script Format").":</b>
+echo '<td>
+	<b>' . i18n('Script Format') . ":</b>
 	</td> 
 	<td> 
 		<select name=\"scriptformat\" size=1>
 			<option value=\"default\">Default</option>
 			<option value=\"formatted\">Formatted</option>
- 	</select></td></tr>";
+ \t</select></td></tr>";
 
- echo "<tr><td ><b>".i18n("Show awards without winners").":</b></td>";
- echo "<td><input name=\"show_unawarded_awards\" type=\"checkbox\" ".($config['reports_show_unawarded_awards'] == 'yes' ? "checked" : "")."/></td></tr>";
- echo "<tr><td ><b>".i18n("Show prizes without winners").":</b></td>";
- echo "<td><input name=\"show_unawarded_prizes\" type=\"checkbox\" ".($config['reports_show_unawarded_prizes'] == 'yes' ? "checked" : "")."/></td></tr>";
- echo "<tr><td ><b>".i18n("Show criteria for each award").":</b></td>";
- echo "<td><input name=\"show_criteria\" type=\"checkbox\" ".($config['reports_show_criteria'] == 'yes' ? "checked" : "")." value=\"on\"/></td></tr>";
- echo "<tr><td ><b>".i18n("Show student name pronunciation").":</b></td>";
- echo "<td><input name=\"show_pronunciation\" type=\"checkbox\" /></td></tr>";
- echo "<tr><td width=\"30%\"><b>".i18n("Group divisional results by Prize (instead of Award Name).  This groups all the honourable mentions in all divisions together, all the bronzes together, etc."). ":</b></td>";
- echo "<td><input name=\"group_by_prize\" type=\"checkbox\" /></td></tr>";
+echo '<tr><td ><b>' . i18n('Show awards without winners') . ':</b></td>';
+echo '<td><input name="show_unawarded_awards" type="checkbox" ' . ($config['reports_show_unawarded_awards'] == 'yes' ? 'checked' : '') . '/></td></tr>';
+echo '<tr><td ><b>' . i18n('Show prizes without winners') . ':</b></td>';
+echo '<td><input name="show_unawarded_prizes" type="checkbox" ' . ($config['reports_show_unawarded_prizes'] == 'yes' ? 'checked' : '') . '/></td></tr>';
+echo '<tr><td ><b>' . i18n('Show criteria for each award') . ':</b></td>';
+echo '<td><input name="show_criteria" type="checkbox" ' . ($config['reports_show_criteria'] == 'yes' ? 'checked' : '') . ' value="on"/></td></tr>';
+echo '<tr><td ><b>' . i18n('Show student name pronunciation') . ':</b></td>';
+echo '<td><input name="show_pronunciation" type="checkbox" /></td></tr>';
+echo '<tr><td width="30%"><b>' . i18n('Group divisional results by Prize (instead of Award Name).  This groups all the honourable mentions in all divisions together, all the bronzes together, etc.') . ':</b></td>';
+echo '<td><input name="group_by_prize" type="checkbox" /></td></tr>';
 
- echo "<tr><td><b>".i18n("Include the following age categories").":</b></td>";
- echo "<td>";
- $q=mysql_query("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
- while($r=mysql_fetch_object($q)) {
+echo '<tr><td><b>' . i18n('Include the following age categories') . ':</b></td>';
+echo '<td>';
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='{$config['FAIRYEAR']}' ORDER BY id");
+$q->execute();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	echo "<input name=\"show_category[{$r->id}]\" type=\"checkbox\" checked=\"checked\" />";
-	echo "".i18n($r->category)."<br />";
+	echo '' . i18n($r->category) . '<br />';
 }
 
- echo "</table>";
- echo "<input type=\"submit\" value=\"".i18n("Generate Script")."\" />";
- echo "</form>";
+echo '</table>';
+echo '<input type="submit" value="' . i18n('Generate Script') . '" />';
+echo '</form>';
 
 send_footer();
 ?>

admin/reports_committees.inc.php

@@ -1,24 +1,25 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
 $report_committees_fields = array(
@@ -27,93 +28,112 @@ $report_committees_fields = array(
 		'header' => 'Name',
 		'width' => 1.75,
 		'table' => "CONCAT(users.firstname, ' ', users.lastname)",
-		'table_sort' => 'users.lastname'),
-
+		'table_sort' => 'users.lastname'
+	),
 	'last_name' => array(
 		'name' => 'Committee Member -- Last Name',
 		'header' => 'Last Name',
 		'width' => 1.0,
-		'table' => 'users.lastname' ),
-
+		'table' => 'users.lastname'
+	),
 	'first_name' => array(
 		'name' => 'Committee Member -- First Name',
 		'header' => 'First Name',
 		'width' => 1.0,
-		'table' => 'users.firstname' ),
-
+		'table' => 'users.firstname'
+	),
 	'email' => array(
 		'name' => 'Committee Member -- Email',
 		'header' => 'Email',
 		'width' => 2.0,
-		'table' => 'users.email'),
-
+		'table' => 'users.email'
+	),
 	'phone_home' => array(
 		'name' => 'Committee Member -- Phone (Home)',
 		'header' => 'Phone(Home)',
 		'width' => 1,
-		'table' => 'users.phonehome'),
-
+		'table' => 'users.phonehome'
+	),
 	'phone_work' => array(
 		'name' => 'Committee Member -- Phone (Work)',
 		'header' => 'Phone(Work)',
 		'width' => 1.25,
-		'table' => 'users.phonework'),
-		
+		'table' => 'users.phonework'
+	),
 	'phone_cel' => array(
 		'name' => 'Committee Member -- Phone (Cel)',
 		'header' => 'Phone(Cel)',
 		'width' => 1,
-		'table' => 'users.phonecell'),
-
+		'table' => 'users.phonecell'
+	),
 	'address' => array(
 		'name' => 'Committee Member -- Address Street',
 		'header' => 'Address',
 		'width' => 2.0,
-		'table' => "CONCAT(users.address, ' ', users.address2)"),
-
+		'table' => "CONCAT(users.address, ' ', users.address2)"
+	),
 	'city' => array(
 		'name' => 'Committee Member -- Address City',
 		'header' => 'City',
 		'width' => 1.5,
-		'table' => 'users.city' ),
-
+		'table' => 'users.city'
+	),
 	'province' => array(
 		'name' => 'Committee Member -- Address ' . $config['provincestate'],
 		'header' => $config['provincestate'],
 		'width' => 0.75,
-		'table' => 'users.province' ),
-
+		'table' => 'users.province'
+	),
 	'postal' => array(
 		'name' => 'Committee Member -- Address ' . $config['postalzip'],
 		'header' => $config['postalzip'],
 		'width' => 0.75,
-		'table' => 'users.postalcode' ),
-
+		'table' => 'users.postalcode'
+	),
 	'organization' => array(
 		'name' => 'Committee Member -- Organization',
 		'header' => 'Organization',
 		'width' => 2,
-		'table' => 'users.organization'),
-
+		'table' => 'users.organization'
+	),
+	'committee' => array(
+		'name' => 'Committee Member -- Committee Name',
+		'header' => 'Committee',
+		'width' => 2,
+		'table' => 'committees.name'
+	),
+	'title' => array(
+		'name' => 'Committee Member -- Title on Committee',
+		'header' => 'Title',
+		'width' => 2,
+		'table' => 'committees_link.title'
+	),
+	'committeetitle' => array(
+		'name' => 'Committee Member -- Committee and Title',
+		'header' => 'Committee and Title',
+		'width' => 2,
+		'table' => "CONCAT(committees.name, ' - ', committees_link.title)"
+	),
 	'firstaid' => array(
 		'name' => 'Committee Member -- First Aid Training',
 		'header' => 'F.Aid',
 		'width' => 0.5,
 		'table' => 'users.firstaid',
-		'value_map' =>array ('no' => 'no', 'yes' => 'YES')),
-
+		'value_map' => array('no' => 'no', 'yes' => 'YES')
+	),
 	'cpr' => array(
 		'name' => 'Committee Member -- CPR Training',
 		'header' => 'CPR',
 		'width' => 0.5,
 		'table' => 'users.cpr',
-		'value_map' =>array ('no' => 'no', 'yes' => 'YES')),
-		
+		'value_map' => array('no' => 'no', 'yes' => 'YES')
+	),
 	'static_text' => array(
 		'name' => 'Static Text (useful for labels)',
 		'header' => '',
 		'width' => 0.1,
-		'table' => "CONCAT(' ')"),
+		'table' => "CONCAT(' ')"
+	),
 );
 
 function report_committees_fromwhere($report, $components)
@@ -124,20 +144,27 @@ $report_committees_fields = array(
 	$year = $report['year'];
 
 	/*
-	$teams_from = '';
-	$teams_where = '';
-	if(in_array('teams', $components)) {
-		$teams_from = ",committees_teams_link, committees_teams";
-		$teams_where = "AND committees_teams_link.committees_id=users.id
-                	        AND committees_teams_link.year='$year'
-                        	AND committees_teams.id=committees_teams_link.committees_teams_id
-				AND committees_teams.year='$year'";
-	}
+	 * $teams_from = '';
+	 * $teams_where = '';
+	 * if(in_array('teams', $components)) {
+	 *     $teams_from = ",committees_teams_link, committees_teams";
+	 *     $teams_where = "AND committees_teams_link.committees_id=users.id
+	 *                 	    AND committees_teams_link.year='$year'
+	 *                         AND committees_teams.id=committees_teams_link.committees_teams_id
+	 *             AND committees_teams.year='$year'";
+	 * }
 	 */
-	$q = "	FROM 
-			users
+	$q = "\tFROM 
+			committees_link
+			JOIN committees ON committees_link.committees_id=committees.id
+			JOIN users
+				ON committees_link.users_uid=users.uid
+			LEFT OUTER JOIN users u2
+				ON u2.uid=users.uid
+				AND u2.year>users.year
 		WHERE
 			users.types LIKE '%committee%'
+			AND u2.uid IS NULL
 		";
 
 	return $q;

admin/reports_editor.php

@@ -1,29 +1,31 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 
 require_once ('reports_students.inc.php');
@@ -46,25 +48,33 @@
 	global $fields;
 	$in_optgroup = false;
 	echo "<select name=\"$name\" id=\"$id\">";
-	echo "<option value=\"\" />-- None --</option>";
+	echo '<option value="" />-- None --</option>';
 	foreach ($fields as $k => $f) {
-		if($f['editor_disabled'] == true) continue;
+		if ($f['editor_disabled'] == true)
+			continue;
 		if (array_key_exists('start_option_group', $f)) {
-			if($in_optgroup) echo '</optgroup>';
+			if ($in_optgroup)
+				echo '</optgroup>';
 			echo '<optgroup label="' . i18n($f['start_option_group']) . '">';
 		}
+		if ($f['name'] == 'Project -- Type') {  // filter out if the configuration setting does not allow for the project type
+			global $config;
+			if ($config['project_type'] == 'no')
+				continue;
+		}
 		$sel = ($selected == $k) ? 'selected=\"selected\"' : '';
 		echo "<option value=\"$k\" $sel >{$f['name']}</option>";
 	}
-	if($in_optgroup) echo '</optgroup>';
-	echo "</select>"; 
+	if ($in_optgroup)
+		echo '</optgroup>';
+	echo '</select>';
 }
 
 function selector($name, $a, $selected, $onchange = '')
 {
 	echo "<select name=\"$name\" $onchange >";
 	foreach ($a as $v => $val) {
-		$sel = ($selected == $v) ? 'selected=\"selected\"' : '';
+		$sel = ($selected == $v) ? 'selected=selected' : '';
 		echo "<option value=\"$v\" $sel>$val</option>";
 	}
 	echo '</select>';
@@ -74,7 +84,8 @@
 {
 	global $locs;
 	$ret = array();
- 	if(!is_array($_POST[$f])) return array();
+	if (!is_array(get_value_from_array($_POST, $f)))
+		return array();
 	$x = 0;
 	foreach ($_POST[$f] as $o => $d) {
 		if (is_array($d)) {
@@ -86,7 +97,8 @@
 					$v = stripslashes($v);
 				} else if (in_array($l, $floatloc)) {
 					$v = floatval($v);
-					if($l == 'lines' && $v==0) $v=1;
+					if ($l == 'lines' && $v == 0)
+						$v = 1;
 				} else if ($l == 'face') {
 					$v = ($v == 'bold') ? 'bold' : '';
 				} else if ($l == 'align') {
@@ -104,22 +116,27 @@
 				}
 				$a[$l] = $v;
 			}
-			if(trim($a['field']) == '') continue;
+			if (trim($a['field']) == '')
+				continue;
 			$ret[$x] = $a;
 		} else {
-			if(trim($d) == '') continue;
+			if (trim($d) == '')
+				continue;
 			$ret[$x]['field'] = stripslashes($d);
 		}
 		$x++;
 	}
 	return $ret;
 }
+
 function parse_options($f)
 {
 	$ret = array();
- 	if(!is_array($_POST[$f])) return array();
+	if (!is_array(get_value_from_array($_POST, $f)))
+		return array();
 	foreach ($_POST[$f] as $c => $v) {
-		if(trim($c) == '') continue;
+		if (trim($c) == '')
+			continue;
 		$ret[$c] = stripslashes($v);
 	}
 	return $ret;
@@ -127,11 +144,11 @@
 
 /* Decode the report */
 $report = array();
- $report['id'] = intval($_POST['id']);
- $report['name'] = stripslashes($_POST['name']);
- $report['creator'] = stripslashes($_POST['creator']);
- $report['desc'] = stripslashes($_POST['desc']);
- $report['type'] = stripslashes($_POST['type']);
+$report['id'] = intval(get_value_from_array($_POST, 'id', ''));
+$report['name'] = stripslashes(get_value_from_array($_POST, 'name', ''));
+$report['creator'] = stripslashes(get_value_from_array($_POST, 'creator', ''));
+$report['desc'] = stripslashes(get_value_from_array($_POST, 'desc', ''));
+$report['type'] = stripslashes(get_value_from_array($_POST, 'type', ''));
 $report['col'] = parse_fields('col');
 $report['group'] = parse_fields('group');
 $report['sort'] = parse_fields('sort');
@@ -142,10 +159,10 @@
 // print("<pre>");print_r($_POST);print("</pre>");
 // print("<pre>");print_r($report);print("</pre>");
 
- $reloadaction = $_POST['reloadaction'];
- $loadaction = $_POST['loadaction'];
- $colaction = $_POST['colaction'];
- $repaction = $_POST['repaction'];
+$reloadaction = get_value_from_array($_POST, 'reloadaction', '');
+$loadaction = get_value_from_array($_POST, 'loadaction', '');
+$colaction = get_value_from_array($_POST, 'colaction', '');
+$repaction = get_value_from_array($_POST, 'repaction', '');
 
 $repaction_save = $repaction;
 
@@ -159,7 +176,8 @@
 if ($loadaction != '') {
 	$id = intval($_POST['id']);
 	$report = report_load($id);
-	if($id == 0) $report['type'] = 'student';
+	if ($id == 0)
+		$report['type'] = 'student';
 	$colaction = '';
 	$repaction = '';
 }
@@ -174,13 +192,10 @@
 	exit;
 }
 
-
- send_header("Reports Editor",
+send_header('Reports Editor',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php'),
-            "report_management"
-			);
-
+	'report_management');
 
 ?>
 <script type="text/javascript">
@@ -301,39 +316,40 @@ function createDataTCPDF(x,y,w,h,align,valign,fontname,fontstyle,fontsize,value)
 if ($repaction == 'save') {
 	/* Save the report */
 	$report['id'] = report_save($report);
-	echo happy(i18n("Report Saved"));
+	echo happy(i18n('Report Saved'));
 }
 
 if ($repaction == 'del') {
 	report_delete($report['id']);
-	echo happy(i18n("Report Deleted"));
+	echo happy(i18n('Report Deleted'));
 }
 
 if ($repaction == 'dupe') {
 	$report['id'] = 0;
 	$report['id'] = report_save($report);
-	echo happy(i18n("Report Duplicated"));
+	echo happy(i18n('Report Duplicated'));
 }
 
 if ($repaction == 'export') {
- 	echo "<pre>";
-	$q = mysql_query("SELECT system_report_id FROM reports WHERE 1 ORDER BY system_report_id DESC");
-	$r = mysql_fetch_assoc($q);
+	echo '<pre>';
+	$q = $pdo->prepare('SELECT system_report_id FROM reports WHERE 1 ORDER BY system_report_id DESC');
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_ASSOC);
 	$sid = $r['system_report_id'] + 1;
-	$n = mysql_escape_string($report['name']);
-	$c = mysql_escape_string($report['creator']);
-	$d = mysql_escape_string($report['desc']);
-	$t = mysql_escape_string($report['type']);
+	$n = $report['name'];
+	$c = $report['creator'];
+	$d = $report['desc'];
+	$t = $report['type'];
 
 	echo "INSERT INTO `reports` (`id`, `system_report_id`, `name`, `desc`, `creator`, `type`) VALUES\n";
-	echo "\t('', '$sid', '$n', '$d', '$c', '$t');\n";
+	echo "	('', '$sid', '$n', '$d', '$c', '$t');\n";
 
-	echo "INSERT INTO `reports_items` (`id`, `reports_id`, `type`, `ord`, `field`, `value`, `x`, `y`, `w`, `h`, `lines`, `face`, `align`) VALUES ";
+	echo 'INSERT INTO `reports_items` (`id`, `reports_id`, `type`, `ord`, `field`, `value`, `x`, `y`, `w`, `h`, `lines`, `face`, `align`) VALUES ';
 
 	/* Do the options */
 	$x = 0;
 	foreach ($report['option'] as $k => $v) {
-		echo "\n\t('', LAST_INSERT_ID(), 'option', $x, '$k', '$v', 0, 0, 0, 0, 0, '', ''),";
+		echo "\n\t('', LAST_INSERT_ID(), 'option', $x, '$k', '" . $v . "', 0, 0, 0, 0, 0, '', ''),";
 		$x++;
 	}
 	/* Do the fields */
@@ -347,38 +363,40 @@ function createDataTCPDF(x,y,w,h,align,valign,fontname,fontstyle,fontsize,value)
 			$vw = intval($v['w']);
 			$vh = intval($v['h']);
 			$vlines = intval($v['lines']);
-			if($vlines == 0) $vlines = 1;
+			if ($vlines == 0)
+				$vlines = 1;
 			$face = $v['face'];
 			$align = $v['align'] . ' ' . $v['valign'];
-			$value=mysql_escape_string(stripslashes($v['value']));
-			if(!$first) echo ',';
+			$value = stripslashes($v['value']);
+			if (!$first)
+				echo ',';
 			$first = false;
 			echo "\n\t('', LAST_INSERT_ID(), '$f', $x, '$k', '$value', $vx, $vy, $vw, $vh, $vlines, '$face', '$align')";
 		}
 	}
 	echo ";\n";
-	echo "</pre>";
+	echo '</pre>';
 }
 
-
-
 /* ---- Setup  ------ */
 
- $n_columns = intval($_POST['ncolumns']);
+$n_columns = intval(get_value_from_array($_POST, 'ncolumns'));
 $n = count($report['col']) + 1;
- if($n > $n_columns) $n_columns = $n;
- if($colaction == 'add') $n_columns+=3;
+if ($n > $n_columns)
+	$n_columns = $n;
+if ($colaction == 'add')
+	$n_columns += 3;
 
 $fieldvar = "report_{$report['type']}s_fields";
- if(isset($$fieldvar)) $fields = $$fieldvar;
+if (isset($$fieldvar))
+	$fields = $$fieldvar;
 
+echo '<br />';
 
- echo "<br />";
-
- echo "<form method=\"post\" name=\"reportload\" action=\"reports_editor.php\" onChange=\"document.reportload.submit()\">";
- echo "<input type=\"hidden\" name=\"loadaction\" value=\"load\" />";
- echo "<select name=\"id\" id=\"report\">";
- echo "<option value=\"0\">".i18n("Create New Report")."</option>\n";
+echo '<form method="post" name="reportload" action="reports_editor.php" onChange="document.reportload.submit()">';
+echo '<input type="hidden" name="loadaction" value="load" />';
+echo '<select name="id" id="report">';
+echo '<option value="0">' . i18n('Create New Report') . "</option>\n";
 
 $reports = report_load_all();
 $x = 0;
@@ -386,77 +404,76 @@ function createDataTCPDF(x,y,w,h,align,valign,fontname,fontstyle,fontsize,value)
 	$sel = ($report['id'] == $r['id']) ? 'selected=\"selected\"' : '';
 	echo "<option value=\"{$r['id']}\" $sel>{$r['name']}</option>\n";
 }
- echo "</select>";
- echo "<input type=\"submit\" value=\"Load\"></form>";
- echo "<hr />";
+echo '</select>';
+echo '<input type="submit" value="Load"></form>';
+echo '<hr />';
 
-
- echo "<form method=\"post\" name=\"report\" action=\"reports_editor.php\">";
+echo '<form method="post" name="report" action="reports_editor.php">';
 echo "<input type=\"hidden\" name=\"id\" value=\"{$report['id']}\" />";
 echo "<input type=\"hidden\" name=\"ncolumns\" value=\"$n_columns\" />";
 
- echo "<h4>Report Information</h4>";
- echo "<table>";
- echo "<tr><td>Name: </td>";
+echo '<h4>Report Information</h4>';
+echo '<table>';
+echo '<tr><td>Name: </td>';
 echo "<td><input type=\"text\" name=\"name\" size=\"80\" value=\"{$report['name']}\" /></td>";
- echo "</tr>";
- echo "<tr><td>Created By: </td>";
+echo '</tr>';
+echo '<tr><td>Created By: </td>';
 echo "<td><input type=\"text\" name=\"creator\" size=\"80\" value=\"{$report['creator']}\" /></td>";
- echo "</tr>";
- echo "<tr><td>Description: </td>";
+echo '</tr>';
+echo '<tr><td>Description: </td>';
 echo "<td><textarea name=\"desc\" rows=\"3\" cols=\"60\">{$report['desc']}</textarea></td>";
- echo "</tr>";
- echo "<tr><td>Type: </td>";
- echo "<td>";
+echo '</tr>';
+echo '<tr><td>Type: </td>';
+echo '<td>';
 selector('type', array('student' => 'Student Report', 'judge' => 'Judge Report',
 		'award' => 'Award Report', 'committee' => 'Committee Member Report',
 		'school' => 'School Report', 'volunteer' => 'Volunteer Report',
 		'tour' => 'Tour Report', 'fair' => 'Feeder Fair Report',
 		'fundraising' => 'Fundraising Report'),
 	$report['type'],
-		"onChange=\"reportReload();\"");
- echo "<input type=\"hidden\" name=\"reloadaction\" value=\"\">";
- echo "</td>";
- echo "</tr></table>";
+	'onChange="reportReload();"');
+echo '<input type="hidden" name="reloadaction" value="">';
+echo '</td>';
+echo '</tr></table>';
 
- echo "<h4>Report Data</h4>";
- echo "<table>";
+echo '<h4>Report Data</h4>';
+echo '<table>';
 $x = 0;
 // only go through the columns if there are columns to go through
 if (count($report['col'])) {
 	foreach ($report['col'] as $o => $d) {
-		echo "<tr><td>Column&nbsp;".($x + 1).": </td>";
-		echo "<td>";
+		echo '<tr><td>Column&nbsp;' . ($x + 1) . ': </td>';
+		echo '<td>';
 		if (intval($x) != intval($o)) {
-			echo ("WARNING, out of order!");
+			echo ('WARNING, out of order!');
 		}
 		field_selector("col[$o][field]", "col$o", $d['field']);
-		echo "</td></tr>"; 
+		echo '</td></tr>';
 		$x++;
 		$canvasLabels[] = $fields[$report['col'][$o]['field']]['name'];  // ['field'];
 	}
 }
 for (; $x < $n_columns; $x++) {
-	echo "<tr><td>Column&nbsp;".($x + 1).": </td>";
-	echo "<td>";
+	echo '<tr><td>Column&nbsp;' . ($x + 1) . ': </td>';
+	echo '<td>';
 	field_selector("col[$x][field]", "col$x", '');
-	echo "</td></tr>"; 
-
+	echo '</td></tr>';
 }
- echo "<tr><td></td>";
- echo "<td align=\"right\">";
- echo "<select name=\"colaction\"><option value=\"\"></option><option value=\"add\">Add more columns</option></select>";
- echo "<input type=\"submit\" value=\"Go\">";
- echo "</td></tr>";
+echo '<tr><td></td>';
+echo '<td align="right">';
+echo '<select name="colaction"><option value=""></option><option value="add">Add more columns</option></select>';
+echo '<input type="submit" value="Go">';
+echo '</td></tr>';
 echo "</table>\n";
 
 $doCanvasSample = false;
 $doCanvasSampletcpdf = false;
- $l_w=$report_stock[$report['option']['stock']]['label_width'];
- $l_h=$report_stock[$report['option']['stock']]['label_height'];
- if($l_w && $l_h && $report['option']['type']=="label") {
-     echo "<h4>Label Data Locations</h4>";
+$l_w = get_value_from_2d_array($report_stock, get_value_from_2d_array($report, 'option', 'stock', ''), 'label_width');
+$l_h = get_value_from_2d_array($report_stock, get_value_from_2d_array($report, 'option', 'stock', ''), 'label_height');
 
+if ($l_w && $l_h && $report['option']['type'] == 'label') {
+	echo '<h4>Label Data Locations</h4>';
+	pdf_begin_page;
 	$doCanvasSample = true;
 	$ratio = $l_h / $l_w;
 	$canvaswidth = 600;
@@ -466,8 +483,8 @@ $doCanvasSampletcpdf = false;
 	echo "<script type=\"text/javascript\">initCanvas($canvaswidth,$canvasheight,$l_w,$l_h)</script>\n";
 }
 
- if($l_w && $l_h && $report['option']['type']=="tcpdf_label") {
-     echo "<h4>Label Data Locations - TCPDF</h4>";
+if ($l_w && $l_h && $report['option']['type'] == 'tcpdf_label') {
+	echo '<h4>Label Data Locations - TCPDF</h4>';
 
 	$l_w *= 25.4;
 	$l_h *= 25.4;
@@ -480,24 +497,24 @@ $doCanvasSampletcpdf = false;
 	echo "<script type=\"text/javascript\">initCanvas($canvaswidth,$canvasheight,$l_w,$l_h)</script>\n";
 }
 
-
- echo "<table>";
+echo '<table>';
 $x = 0;
 
- 
- if($report['option']['type'] == 'label' || $report['option']['type'] == 'tcpdf_label') {
+if (get_value_from_2d_array($report, 'option', 'type') == 'label' || get_value_from_2d_array($report, 'option', 'type') == 'tcpdf_label') {
 	$fontlist = array('' => 'Default');
 	$fl = PDF::getFontList();
-	foreach($fl as $f) $fontlist[$f] = $f;
+	foreach ($fl as $f)
+		$fontlist[$f] = $f;
 	//	print_r($fl);
 
 	foreach ($report['col'] as $o => $d) {
 		$f = $d['field'];
-		echo "<tr><td align=\"right\">Loc ".($o+1).": </td>";
-		echo "<td>";
-		$script="";
+		echo '<tr><td align="right">Loc ' . ($o + 1) . ': </td>';
+		echo '<td>';
+		$script = '';
 		foreach ($locs as $k => $v) {
-			if($k=='Lines' && $report['option']['type'] != 'label') continue;
+			if ($k == 'Lines' && $report['option']['type'] != 'label')
+				continue;
 			echo "$k=<input type=\"text\" size=\"3\" name=\"col[$x][$v]\" value=\"{$d[$v]}\">";
 			$script .= "{$d[$v]},";
 		}
@@ -539,10 +556,11 @@ $doCanvasSampletcpdf = false;
 		$x++;
 	}
 	for (; $x < $n_columns; $x++) {
-		echo "<tr><td align=\"right\">Loc ".($x+1).": </td>";
-		echo "<td>";
+		echo '<tr><td align="right">Loc ' . ($x + 1) . ': </td>';
+		echo '<td>';
 		foreach ($locs as $k => $v) {
-			if($k=='Lines' && $report['option']['type'] != 'label') continue;
+			if ($k == 'Lines' && $report['option']['type'] != 'label')
+				continue;
 			echo "$k=<input type=\"text\" size=\"3\" name=\"col[$x][$v]\" value=\"0\">";
 		}
 		if ($report['option']['type'] == 'label') {
@@ -569,44 +587,44 @@ $doCanvasSampletcpdf = false;
 			selector("col[$x][on_overflow]", array('Truncate' => 'truncate', 'Add ...' => '...', 'Scale' => 'scale'), '');
 		}
 		echo "<input type=\"hidden\" name=\"col[$x][value]\" value=\"\">";
-		echo "</td></tr>"; 
+		echo '</td></tr>';
 	}
 }
 echo "</table>\n";
- echo "<h4>Grouping</h4>";
- for($x=0;$x<2;$x++) {
-	echo "Group By".($x + 1).": ";
-	$f = $report['group'][$x]['field'];
+echo '<h4>Grouping</h4>';
+for ($x = 0; $x < 3; $x++) {
+	echo 'Group By' . ($x + 1) . ': ';
+	$f = get_value_from_3d_array($report, 'group', $x, 'field');
 	field_selector("group[$x]", "group$x", $f);
-	echo "<br />"; 
+	echo '<br />';
 }
- echo "<h4>Sorting</h4>";
- for($x=0;$x<3;$x++) {
-	echo "Sort By".($x + 1).": ";
-	$f = $report['sort'][$x]['field'];
+echo '<h4>Sorting</h4>';
+for ($x = 0; $x < 5; $x++) {
+	echo 'Sort By' . ($x + 1) . ': ';
+	$f = get_value_from_3d_array($report, 'sort', $x, 'field');
 	field_selector("sort[$x]", "sort$x", $f);
-	echo "<br />"; 
+	echo '<br />';
 }
- echo "<h4>Distinct</h4>";
- echo "Distinct Column:   ";
+echo '<h4>Distinct</h4>';
+echo 'Distinct Column:   ';
 $x = 0;
- $f = $report['distinct'][$x]['field'];
- field_selector("distinct[$x]", "distinct0", $f);
+$f = get_value_from_3d_array($report, 'distinct', $x, 'field');
+field_selector("distinct[$x]", 'distinct0', $f);
 
- echo "<h4>Filtering</h4>";
- echo "<table>";
+echo '<h4>Filtering</h4>';
+echo '<table>';
 for ($x = 0; $x < 3; $x++) {
-	echo "<tr><td>Filter".($x + 1).":</td><td>";
-	field_selector("filter[$x][field]", "filter$x",$report['filter'][$x]['field']); 
-	echo "<br />";
-	selector("filter[$x][x]", $filter_ops,$report['filter'][$x]['x']); 
-	$v = $report['filter'][$x]['value'];
+	echo '<tr><td>Filter' . ($x + 1) . ':</td><td>';
+	field_selector("filter[$x][field]", "filter$x", get_value_from_3d_array($report, 'filter', $x, 'field'));
+	echo '<br />';
+	selector("filter[$x][x]", $filter_ops, get_value_from_3d_array($report, 'filter', $x, 'x'));
+	$v = get_value_from_3d_array($report, 'filter', $x, 'value');
 	echo "Text=<input type=\"text\" size=\"20\" name=\"filter[$x][value]\" value=\"$v\">";
-	echo "</td></tr>"; 
+	echo '</td></tr>';
 }
- echo "</table>";
+echo '</table>';
 
- echo "<h4>Options</h4>";
+echo '<h4>Options</h4>';
 foreach ($report_options as $ok => $o) {
 	echo "{$o['desc']}: <select name=\"option[$ok]\" id=\"$ok\">";
 	foreach ($o['values'] as $k => $v) {
@@ -616,32 +634,32 @@ $doCanvasSampletcpdf = false;
 	echo "</select><br />\n";
 }
 
- echo "<br />";
- if($report['system_report_id'] != 0) {
- 	echo notice(i18n('This is a system report, it cannot be changed or deleted.  To save changes you have made to it, please select the \'Save as a new report\' option.'));
+echo '<br />';
+if (get_value_from_array($report, 'system_report_id') != 0) {
+	echo notice(i18n("This is a system report, it cannot be changed or deleted.  To save changes you have made to it, please select the 'Save as a new report' option."));
 }
- echo "<select name=\"repaction\">";
+echo '<select name="repaction">';
 if ($report['system_report_id'] == 0) {
-	$sel = ($repaction_save == 'save') ? "selected=\"selected\"" : '';
+	$sel = ($repaction_save == 'save') ? 'selected="selected"' : '';
 	echo " <option value=\"save\" $sel>Save this report</option>";
-	$sel = ($repaction_save == 'try') ? "selected=\"selected\"" : '';
+	$sel = ($repaction_save == 'try') ? 'selected="selected"' : '';
 	echo " <option value=\"try\" $sel>Try this report</option>";
-	echo " <option value=\"export\">Export this report</option>";
-	echo " <option value=\"\" ></option>";
-	echo " <option value=\"dupe\" >Save as a new report(duplicate)</option>";
-	echo " <option value=\"\" ></option>";
-	echo " <option value=\"del\" >Delete this report</option>";
+	echo ' <option value="export">Export this report</option>';
+	echo ' <option value="" ></option>';
+	echo ' <option value="dupe" >Save as a new report(duplicate)</option>';
+	echo ' <option value="" ></option>';
+	echo ' <option value="del" >Delete this report</option>';
 } else {
- 	echo " <option value=\"dupe\" >Save as a new report(duplicate)</option>";
-	$sel = ($repaction_save == 'try') ? "selected=\"selected\"" : '';
+	echo ' <option value="dupe" >Save as a new report(duplicate)</option>';
+	$sel = ($repaction_save == 'try') ? 'selected="selected"' : '';
 	echo " <option value=\"try\" $sel>Try this report</option>";
-	echo " <option value=\"export\">Export this report</option>";
+	echo ' <option value="export">Export this report</option>';
 }
 
- echo "</select>";
- echo "<input type=\"submit\" value=\"Go\">";
+echo '</select>';
+echo '<input type="submit" value="Go">';
 
- echo "</form>";
+echo '</form>';
 
 send_footer();
 ?>

admin/reports_fairs.inc.php

@@ -1,400 +1,452 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 David Grant <dave@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 David Grant <dave@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
 $report_fairs_fields = array(
-
 	'fair_name' => array(
 		'name' => 'Fair -- Fair Name',
 		'header' => 'Name',
 		'width' => 1.5,
-		'table' => 'fairs.name'),
-
+		'table' => 'fairs.name'
+	),
 	'fairstats_year' => array(
 		'name' => 'Fair Stats -- Year',
 		'header' => 'Year',
 		'width' => 1,
 		'table' => 'fairs_stats.year',
-		'components' => array('fairs_stats')),
-
+		'components' => array('fairs_stats')
+	),
 	'fairstats_year' => array(
 		'name' => 'Fair Stats -- Year',
 		'header' => 'Year',
 		'width' => 1,
 		'table' => 'fairs_stats.year',
-		'components' => array('fairs_stats')),
-
+		'components' => array('fairs_stats')
+	),
 	'fairstats_start_date' => array(
 		'name' => 'Fair Stats -- Fair Start',
 		'header' => 'Fair Start',
 		'width' => 1,
 		'table' => 'fairs_stats.start_date',
-		'components' => array('fairs_stats')), 
-
+		'components' => array('fairs_stats')
+	),
 	'fairstats_end_date' => array(
 		'name' => 'Fair Stats -- Fair End',
 		'header' => 'Fair End',
 		'width' => 1,
 		'table' => 'fairs_stats.end_date',
-		'components' => array('fairs_stats')), 
-
+		'components' => array('fairs_stats')
+	),
 	'fairstats_budget' => array(
 		'name' => 'Fair Stats -- Budget',
 		'header' => 'Budget',
 		'width' => 1,
 		'table' => 'fairs_stats.budget',
-		'components' => array('fairs_stats')), 
-
+		'components' => array('fairs_stats')
+	),
 	'fairstats_address' => array(
 		'name' => 'Fair Stats -- Fair Location',
 		'header' => 'Fair Location',
 		'width' => 1,
 		'table' => 'fairs_stats.address',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_ysf_affiliation_complete' => array(
 		'name' => 'Fair Stats -- YSC Affilitation Complete',
 		'header' => 'YSC Affilitation Complete',
 		'width' => 1,
 		'table' => 'fairs_stats.ysf_affiliation_complete',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_charity' => array(
 		'name' => 'Fair Stats -- Charity Number/Info',
 		'header' => 'Charity Number/Info',
 		'width' => 1,
 		'table' => 'fairs_stats.charity',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_scholarships' => array(
 		'name' => 'Fair Stats -- Scholarship Info',
 		'header' => 'Scholarship Info',
 		'width' => 1,
 		'table' => 'fairs_stats.scholarships',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_male_1' => array(
 		'name' => 'Fair Stats -- Males Grade 1-3',
 		'header' => 'Males Grade 1-3',
 		'width' => 1,
 		'table' => 'fairs_stats.male_1',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_male_4' => array(
 		'name' => 'Fair Stats -- Males Grade 4-6',
 		'header' => 'Males Grade 4-6',
 		'width' => 1,
 		'table' => 'fairs_stats.male_4',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_male_7' => array(
 		'name' => 'Fair Stats -- Males Grade 7-8',
 		'header' => 'Males Grade 7-8',
 		'width' => 1,
 		'table' => 'fairs_stats.male_7',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_male_9' => array(
 		'name' => 'Fair Stats -- Males Grade 9-10',
 		'header' => 'Males Grade 9-10',
 		'width' => 1,
 		'table' => 'fairs_stats.male_9',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_male_11' => array(
 		'name' => 'Fair Stats -- Males Grade 11-12',
 		'header' => 'Males Grade 11-12',
 		'width' => 1,
 		'table' => 'fairs_stats.male_11',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_female_1' => array(
 		'name' => 'Fair Stats -- Females Grade 1-3',
 		'header' => 'Females Grade 1-3',
 		'width' => 1,
 		'table' => 'fairs_stats.female_1',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_female_4' => array(
 		'name' => 'Fair Stats -- Females Grade 4-6',
 		'header' => 'Females Grade 4-6',
 		'width' => 1,
 		'table' => 'fairs_stats.female_4',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_female_7' => array(
 		'name' => 'Fair Stats -- Females Grade 7-8',
 		'header' => 'Females Grade 7-8',
 		'width' => 1,
 		'table' => 'fairs_stats.female_7',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_female_9' => array(
 		'name' => 'Fair Stats -- Females Grade 9-10',
 		'header' => 'Females Grade 9-10',
 		'width' => 1,
 		'table' => 'fairs_stats.female_9',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_female_11' => array(
 		'name' => 'Fair Stats -- Females Grade 11-12',
 		'header' => 'Females Grade 11-12',
 		'width' => 1,
 		'table' => 'fairs_stats.female_11',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_projects_1' => array(
 		'name' => 'Fair Stats -- Projects Grade 1-3',
 		'header' => 'Projects Grade 1-3',
 		'width' => 1,
 		'table' => 'fairs_stats.projects_1',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_projects_4' => array(
 		'name' => 'Fair Stats -- Projects Grade 4-6',
 		'header' => 'Projects Grade 4-6',
 		'width' => 1,
 		'table' => 'fairs_stats.projects_4',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_projects_7' => array(
 		'name' => 'Fair Stats -- Projects Grade 7-8',
 		'header' => 'Projects Grade 7-8',
 		'width' => 1,
 		'table' => 'fairs_stats.projects_7',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_projects_9' => array(
 		'name' => 'Fair Stats -- Projects Grade 9-10',
 		'header' => 'Projects Grade 9-10',
 		'width' => 1,
 		'table' => 'fairs_stats.projects_9',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_projects_11' => array(
 		'name' => 'Fair Stats -- Projects Grade 11-12',
 		'header' => 'Projects Grade 11-12',
 		'width' => 1,
 		'table' => 'fairs_stats.projects_11',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_firstnations' => array(
 		'name' => 'Fair Stats -- First Nations Students',
 		'header' => 'First Nations Students',
 		'width' => 1,
 		'table' => 'fairs_stats.firstnations',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_students_atrisk' => array(
 		'name' => 'Fair Stats -- Inner City Students',
 		'header' => 'Inner City Students',
 		'width' => 1,
 		'table' => 'fairs_stats.students_atrisk',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_schools_atrisk' => array(
 		'name' => 'Fair Stats -- Inner City Schools',
 		'header' => 'Inner City Schools',
 		'width' => 1,
 		'table' => 'fairs_stats.schools_atrisk',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_students_total' => array(
 		'name' => 'Fair Stats -- Total Participants',
 		'header' => 'Total Participants',
 		'width' => 1,
 		'table' => 'fairs_stats.students_total',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_schools_total' => array(
 		'name' => 'Fair Stats -- Total Schools',
 		'header' => 'Total Schools',
 		'width' => 1,
 		'table' => 'fairs_stats.schools_total',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_schools_active' => array(
 		'name' => 'Fair Stats -- Active Schools',
 		'header' => 'Active Schools',
 		'width' => 1,
 		'table' => 'fairs_stats.schools_active',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_students_public' => array(
 		'name' => 'Fair Stats -- Participants from Public',
 		'header' => 'Participants from Public',
 		'width' => 1,
 		'table' => 'fairs_stats.students_public',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_schools_public' => array(
 		'name' => 'Fair Stats -- Public Schools',
 		'header' => 'Public Schools',
 		'width' => 1,
 		'table' => 'fairs_stats.schools_public',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_students_private' => array(
 		'name' => 'Fair Stats -- Participants from Independent',
 		'header' => 'Participants from Independent',
 		'width' => 1,
 		'table' => 'fairs_stats.students_private',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_schools_private' => array(
 		'name' => 'Fair Stats -- Independent Schools',
 		'header' => 'Independent Schools',
 		'width' => 1,
 		'table' => 'fairs_stats.schools_private',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_schools_districts' => array(
 		'name' => 'Fair Stats -- School Districts',
 		'header' => 'School Districts',
 		'width' => 1,
 		'table' => 'fairs_stats.schools_districts',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_studentsvisiting' => array(
 		'name' => 'Fair Stats -- Students Visiting',
 		'header' => 'Students Visiting',
 		'width' => 1,
 		'table' => 'fairs_stats.studentsvisiting',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_publicvisiting' => array(
 		'name' => 'Fair Stats -- Public Guests Visting',
 		'header' => 'Public Guests Visting',
 		'width' => 1,
 		'table' => 'fairs_stats.publicvisiting',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_teacherssupporting' => array(
 		'name' => 'Fair Stats -- Teachers Supporting Projects',
 		'header' => 'Teachers Supporting Projects',
 		'width' => 1,
 		'table' => 'fairs_stats.teacherssupporting',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_increasedinterest' => array(
 		'name' => 'Fair Stats -- Students Increased Interest in Science',
 		'header' => 'Students Increased Interest in Science',
 		'width' => 1,
 		'table' => 'fairs_stats.increasedinterest',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_consideringcareer' => array(
 		'name' => 'Fair Stats -- Students Considering Career in Science',
 		'header' => 'Students Considering Career in Science',
 		'width' => 1,
 		'table' => 'fairs_stats.consideringcareer',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_committee_members' => array(
 		'name' => 'Fair Stats -- Committee Members',
 		'header' => 'Committee Members',
 		'width' => 1,
 		'table' => 'fairs_stats.committee_members',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_judges' => array(
 		'name' => 'Fair Stats -- Judges',
 		'header' => 'Judges',
 		'width' => 1,
 		'table' => 'fairs_stats.judges',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_next_chair_name' => array(
 		'name' => 'Fair Stats -- Regional Chairperson Name',
 		'header' => 'Regional Chairperson Name',
 		'width' => 1,
 		'table' => 'fairs_stats.next_chair_name',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_next_chair_email' => array(
 		'name' => 'Fair Stats -- Email',
 		'header' => 'Email',
 		'width' => 1,
 		'table' => 'fairs_stats.next_chair_email',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_next_chair_hphone' => array(
 		'name' => 'Fair Stats -- Home Phone',
 		'header' => 'Home Phone',
 		'width' => 1,
 		'table' => 'fairs_stats.next_chair_hphone',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_next_chair_bphone' => array(
 		'name' => 'Fair Stats -- Business Phone',
 		'header' => 'Business Phone',
 		'width' => 1,
 		'table' => 'fairs_stats.next_chair_bphone',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_next_chair_fax' => array(
 		'name' => 'Fair Stats -- Fax',
 		'header' => 'Fax',
 		'width' => 1,
 		'table' => 'fairs_stats.next_chair_fax',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate1' => array(
 		'name' => 'Fair Stats -- Delegate 1',
 		'header' => 'Delegate 1',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate1',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate2' => array(
 		'name' => 'Fair Stats -- Delegate 2',
 		'header' => 'Delegate 2',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate2',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate3' => array(
 		'name' => 'Fair Stats -- Delegate 3',
 		'header' => 'Delegate 3',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate3',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate4' => array(
 		'name' => 'Fair Stats -- Delegate 4',
 		'header' => 'Delegate 4',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate4',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate1_email' => array(
 		'name' => 'Fair Stats -- Delegate 1 Email',
 		'header' => 'Delegate 1 Email',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate1_email',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate2_email' => array(
 		'name' => 'Fair Stats -- Delegate 2 Email',
 		'header' => 'Delegate 2 Email',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate2_email',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate3_email' => array(
 		'name' => 'Fair Stats -- Delegate 3 Email',
 		'header' => 'Delegate 3 Email',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate3_email',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate4_email' => array(
 		'name' => 'Fair Stats -- Delegate 4 Email',
 		'header' => 'Delegate 4 Email',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate4_email',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate1_size' => array(
 		'name' => 'Fair Stats -- Delegate 1 Jacket Size',
 		'header' => 'Delegate 1 Jacket Size',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate1_size',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate2_size' => array(
 		'name' => 'Fair Stats -- Delegate 2 Jacket Size',
 		'header' => 'Delegate 2 Jacket Size',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate2_size',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate3_size' => array(
 		'name' => 'Fair Stats -- Delegate 3 Jacket Size',
 		'header' => 'Delegate 3 Jacket Size',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate3_size',
-		'components' => array('fairs_stats')), 
+		'components' => array('fairs_stats')
+	),
 	'fairstats_delegate4_size' => array(
 		'name' => 'Fair Stats -- Delegate 4 Jacket Size',
 		'header' => 'Delegate 4 Jacket Size',
 		'width' => 1,
 		'table' => 'fairs_stats.delegate4_size',
-		'components' => array('fairs_stats')), 
-
-
+		'components' => array('fairs_stats')
+	),
 	'static_text' => array(
 		'name' => 'Static Text (useful for labels)',
 		'header' => '',
 		'width' => 0.1,
-		'table' => "CONCAT(' ')"),
-
+		'table' => "CONCAT(' ')"
+	),
 );
 
 function report_fairs_fromwhere($report, $components)
@@ -407,10 +459,9 @@ $report_fairs_fields = array(
 	if (in_array('fairs_stats', $components)) {
 		$fs_from = 'LEFT JOIN fairs_stats ON fairs_stats.fairs_id=fairs.id';
 		$fs_where = "fairs_stats.year='$year'";
-
 	}
 
-	$q = "	FROM 	fairs 
+	$q = "	FROM \tfairs 
 			$fs_from
 		WHERE
 			1 AND 
@@ -420,5 +471,4 @@ $report_fairs_fields = array(
 	return $q;
 }
 
-
 ?>

admin/reports_fundraising.inc.php

@@ -1,157 +1,160 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
-
-/* Take the language array in users_fundraising, unserialize it, and join it
- * with a space */
-function report_fundraisings_languages(&$report, $field, $text)
+/*
+ * Take the language array in users_fundraising, unserialize it, and join it
+ * with a space
+ */
+function report_fundraisings_languages($report, $field, $text)
 {
 	$l = unserialize($text);
 	return join(' ', $l);
 }
 
-
-
 /* Components: */
-/* Yes, fundraisings, the generator takes the report type (also the user.type in many cases) and
- * just adds an 's' to find the fields and the functions. */
+
+/*
+ * Yes, fundraisings, the generator takes the report type (also the user.type in many cases) and
+ * just adds an 's' to find the fields and the functions.
+ */
 $report_fundraisings_fields = array(
 	'fundraising_campaigns_id' => array(
 		'start_option_group' => 'Campaign ID',
 		'name' => 'Fundraising Campaign numerical ID',
 		'header' => 'ID',
 		'width' => 0.25,
-		'table' => "fundraising_campaigns.id"),
-	
+		'table' => 'fundraising_campaigns.id'
+	),
 	'salutation' => array(
 		'start_option_group' => 'Contact Information',
 		'name' => 'Contact -- Salutation (Mr., Mrs., etc.)',
 		'header' => 'Sal',
 		'width' => 0.5,
-		'table' => "users.salutation",
-		'components' => array('users') ),
-
+		'table' => 'users.salutation',
+		'components' => array('users')
+	),
 	'namefl' => array(
 		'name' => 'Contact -- Full Name (first last)',
 		'header' => 'Name',
 		'width' => 1.75,
 		'table' => "CONCAT(users.firstname, ' ', users.lastname)",
 		'table_sort' => 'users.lastname',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'email' => array(
 		'name' => 'Contact -- Email',
 		'header' => 'Email',
 		'width' => 2.0,
 		'table' => 'users.email',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'phone_home' => array(
 		'name' => 'Contact -- Phone (Home)',
 		'header' => 'Phone(Home)',
 		'width' => 1,
 		'table' => 'users.phonehome',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'phone_work' => array(
 		'name' => 'Contact -- Phone (Work)',
 		'header' => 'Phone(Work)',
 		'width' => 1.25,
-		'table' => "users.phonework",
-		'components' => array('users') ),
-
+		'table' => 'users.phonework',
+		'components' => array('users')
+	),
 	'organization' => array(
 		'name' => 'Contact -- Organization',
 		'header' => 'Organization',
 		'width' => 2,
 		'table' => 'users.organization',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'position' => array(
 		'name' => 'Contact -- Position',
 		'header' => 'Position',
 		'width' => 2,
 		'table' => 'users_sponsor.position',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'address' => array(
 		'start_option_group' => 'Contact Address',
 		'name' => 'Contact Address -- Street',
 		'header' => 'Address',
 		'width' => 2.0,
 		'table' => "CONCAT(users.address, ' ', users.address2)",
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'city' => array(
 		'name' => 'Contact Address -- City',
 		'header' => 'City',
 		'width' => 1.5,
 		'table' => 'users.city',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'province' => array(
 		'name' => 'Contact Address -- ' . $config['provincestate'],
 		'header' => $config['provincestate'],
 		'width' => 0.75,
 		'table' => 'users.province',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'postal' => array(
 		'name' => 'Contact Address -- ' . $config['postalzip'],
 		'header' => $config['postalzip'],
 		'width' => 0.75,
 		'table' => 'users.postalcode',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'city_prov' => array(
 		'name' => 'Contact Address -- City, ' . $config['provincestate'] . ' (for mailing)',
 		'header' => 'City',
 		'width' => 1.5,
 		'table' => "CONCAT(users.city, ', ', users.province)",
-		'components' => array('users') ),
-	
+		'components' => array('users')
+	),
 	'year' => array(
 		'start_option_group' => 'Miscellaneous',
 		'name' => 'Contact -- Year',
 		'header' => 'Year',
 		'width' => 0.5,
 		'table' => 'users.year',
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'user_filter' => array(
 		'name' => 'User Filter by MAX(year)',
 		'header' => '',
 		'width' => 0.1,
 		'table' => 'MAX(users.year)',
 		'group_by' => array('users.uid'),
-		'components' => array('users') ),
-
+		'components' => array('users')
+	),
 	'static_text' => array(
 		'name' => 'Static Text (useful for labels)',
 		'header' => '',
 		'width' => 0.1,
-		'table' => "CONCAT(' ')"),
-
+		'table' => "CONCAT(' ')"
+	),
 );
 
 function report_fundraisings_fromwhere($report, $components)
@@ -169,28 +172,28 @@ $report_fundraisings_fields = array(
 	}
 
 	/*
-	$teams_from = '';
-	$teams_where = '';
-	if(in_array('teams', $components)) {
-		$teams_from = "LEFT JOIN fundraisings_teams_link ON judges_teams_link.users_id=users.id
-				LEFT JOIN fundraisings_teams ON judges_teams.id=judges_teams_link.judges_teams_id";
-		$teams_where = "AND fundraisings_teams_link.year='$year'
-				AND fundraisings_teams.year='$year'";
-	}
-
-	$projects_from='';
-	$projects_where='';
-	if(in_array('projects', $components)) {
-		$projects_from = "LEFT JOIN fundraisings_teams_timeslots_projects_link ON
-					fundraisings_teams_timeslots_projects_link.judges_teams_id=judges_teams.id
-				LEFT JOIN projects ON projects.id=fundraisings_teams_timeslots_projects_link.projects_id
-				LEFT JOIN fundraisings_timeslots ON judges_timeslots.id=judges_teams_timeslots_projects_link.judges_timeslots_id";
-		$projects_where = "AND fundraisings_teams_timeslots_projects_link.year='$year'
-				AND projects.year='$year'";
-	}
+	 * $teams_from = '';
+	 * $teams_where = '';
+	 * if(in_array('teams', $components)) {
+	 * 	$teams_from = "LEFT JOIN fundraisings_teams_link ON judges_teams_link.users_id=users.id
+	 * 			LEFT JOIN fundraisings_teams ON judges_teams.id=judges_teams_link.judges_teams_id";
+	 * 	$teams_where = "AND fundraisings_teams_link.year='$year'
+	 * 			AND fundraisings_teams.year='$year'";
+	 * }
+	 *
+	 * $projects_from='';
+	 * $projects_where='';
+	 * if(in_array('projects', $components)) {
+	 * 	$projects_from = "LEFT JOIN fundraisings_teams_timeslots_projects_link ON
+	 * 				fundraisings_teams_timeslots_projects_link.judges_teams_id=judges_teams.id
+	 * 			LEFT JOIN projects ON projects.id=fundraisings_teams_timeslots_projects_link.projects_id
+	 * 			LEFT JOIN fundraisings_timeslots ON judges_timeslots.id=judges_teams_timeslots_projects_link.judges_timeslots_id";
+	 * 	$projects_where = "AND fundraisings_teams_timeslots_projects_link.year='$year'
+	 * 			AND projects.year='$year'";
+	 * }
 	 */
 
-	$q = "  FROM 	fundraising_campaigns
+	$q = "  FROM \tfundraising_campaigns
 			$users_from
 		WHERE
 			$users_where

admin/reports_gen.php

@@ -1,46 +1,48 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require_once("../common.inc.php");
- require_once("../user.inc.php");
+require_once ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
 require_once ('reports.inc.php');
 
- 
 $id = intval($_GET['id']);
 $type = stripslashes($_GET['type']);
 $stock = stripslashes($_GET['stock']);
 $year = intval($_GET['year']);
 $include_incomplete_registrations = ($_GET['include_incomplete_registrations'] == 'yes') ? 'yes' : '';
 $show_options = array_key_exists('show_options', $_GET);
- if($year < 1000) $year = $config['FAIRYEAR'];
+if ($year < 1000)
+	$year = $config['FAIRYEAR'];
 
 /* If it's a system report, turn that into the actual report id */
 if (array_key_exists('sid', $_GET)) {
 	$sid = intval($_GET['sid']);
- 	$q = mysql_query("SELECT id FROM reports WHERE system_report_id='$sid'");
-	$r = mysql_fetch_assoc($q);
+	$q = $pdo->prepare("SELECT id FROM reports WHERE system_report_id='$sid'");
+	$q->execute();
+	$r = $q->fetch(PDO::FETCH_OBJ);
 	$id = $r['id'];
 }
 
@@ -77,29 +79,30 @@ case 'dialog_gen':
 	<table class="editor" style="width:95%"><tr>
 		<td colspan="2"><br /><h3><?= i18n('Report Information') ?></h3><br /></td>
 	</tr><tr>
-		<td class="label"><b><?=i18n("Report Name")?></b>:</td>
+		<td class="label"><b><?= i18n('Report Name') ?></b>:</td>
 		<td class="input"><?= $report['name'] ?></b></td>
 	</tr><tr>
-		<td class="label"><b><?=i18n("Description")?></b>:</td>
+		<td class="label"><b><?= i18n('Description') ?></b>:</td>
 		<td class="input"><?= $report['desc'] ?></b></td>
 	</tr><tr>
-		<td class="label"><b><?=i18n("Created By")?></b>:</td>
+		<td class="label"><b><?= i18n('Created By') ?></b>:</td>
 		<td class="input"><?= $report['creator'] ?></td>
 	</tr><tr>
 	<?
 	/* See if the report is in this committee member's list */
-	$q = mysql_query("SELECT * FROM reports_committee 
- 				WHERE users_id='{$_SESSION['users_uid']}'
+	$q = $pd->prepare("SELECT * FROM reports_committee 
+ \t\t\t\tWHERE users_id='{$_SESSION['users_uid']}'
 				AND reports_id='{$report['id']}'");
-	if(mysql_num_rows($q) > 0) {
-		$i = mysql_fetch_assoc($q);
+	$q->execute();
+	if ($q->rowCount() > 0) {
+		$i = $q->fetch(PDO::FETCH_ASSOC);
 		?>
 		<td colspan="2"><hr /><h3><?= i18n('My Reports Info') ?></h3></td>
 		</tr><tr>
-			<td class="label"><b><?=i18n("Category")?></b>:</td>
+			<td class="label"><b><?= i18n('Category') ?></b>:</td>
 			<td class="input"><?= $i['category'] ?></b></td>
 		</tr><tr>
-			<td class="label"><b><?=i18n("Comment")?></b>:</td>
+			<td class="label"><b><?= i18n('Comment') ?></b>:</td>
 			<td class="input"><?= $i['comment'] ?></b></td>
 		</tr><tr>
 	<? } ?>
@@ -114,21 +117,23 @@ case 'dialog_gen':
 	/* Out of all the report optins, we really only want these ones */
 	$option_keys = array('type', 'stock');
 	foreach ($report_options as $ok => $o) {
- 		if(!in_array($ok, $option_keys)) continue;
+		if (!in_array($ok, $option_keys))
+			continue;
 
 		echo "<tr><td class=\"label\"><b>{$o['desc']}</b>:</td>";
 		echo "<td class=\"input\"><select name=\"$ok\" id=\"$ok\">";
 		foreach ($o['values'] as $k => $v) {
 			$sel = ($report['option'][$ok] == $k) ? 'selected="selected"' : '';
-			echo "<option value=\"$k\" $sel>".htmlspecialchars($v)."</option>";
+			echo "<option value=\"$k\" $sel>" . htmlspecialchars($v) . '</option>';
 		}
 		echo "</select></td></tr>\n";
 	}
 	/* Find all the years */
-	$q = mysql_query("SELECT DISTINCT year FROM config WHERE year>1000 ORDER BY year DESC");
-	echo "<tr><td  class=\"label\"><b>".i18n('Year')."</b>:</td>";
-	echo "<td class=\"input\"><select name=\"year\" id=\"year\">";
-	while($i = mysql_fetch_assoc($q)) {
+	$q = $pdo->prepare('SELECT DISTINCT year FROM config WHERE year>1000 ORDER BY year DESC');
+	$q->execute();
+	echo '<tr><td  class="label"><b>' . i18n('Year') . '</b>:</td>';
+	echo '<td class="input"><select name="year" id="year">';
+	while ($i = $q->fetch(PDO::FETCH_ASSOC)) {
 		$y = $i['year'];
 		$sel = ($config['FAIRYEAR'] == $y) ? 'selected="selected"' : '';
 		echo "<option value=\"$y\" $sel>$y</option>";
@@ -160,11 +165,11 @@ case 'dialog_gen':
 						$(this).dialog('destroy');
 						$('#report_dialog_gen').remove();
 					},
-				buttons: { "<?=i18n("Cancel")?>": function() {  
+				buttons: { "<?= i18n('Cancel') ?>": function() {  
 							$('#report_dialog_gen').dialog("close");
 							return false;
 						},
-					   "<?=i18n("Download Report")?>": function() { 
+					   "<?= i18n('Download Report') ?>": function() { 
 							var dlargs = $('#report_dialog_form').serialize()+"<?= $filter_args ?>";
 							var dlurl = "<?= $config['SFIABDIRECTORY'] ?>/admin/reports_gen.php?"+dlargs;
 							$('#debug').html(dlurl);
@@ -182,55 +187,58 @@ case 'dialog_gen':
 		exit;
 }
 
-
 if ($show_options == false) {
 	if ($id && $year) {
 		$report['year'] = $year;
-		if($type != '') $report['option']['type'] = $type;
-		if($stock != '') $report['option']['stock'] = $stock;
-		if($include_incomplete_registrations != '') $report['option']['include_incomplete_registrations'] = 'yes';
+		if ($type != '')
+			$report['option']['type'] = $type;
+		if ($stock != '')
+			$report['option']['stock'] = $stock;
+		if ($include_incomplete_registrations != '')
+			$report['option']['include_incomplete_registrations'] = 'yes';
 		report_gen($report);
 	} else {
 		exit;
- 		header("Location: reports.php");
+		header('Location: reports.php');
 	}
 	exit;
 }
 
-
 send_header('Report Options', array(
 	'Committee Main' => 'committee_main.php',
-		'My Reports' => 'admin/reports.php'));
+	'My Reports' => 'admin/reports.php'
+));
 
 echo '<form method=\"get\" action="reports_gen.php">';
 echo "<input type=\"hidden\" name=\"id\" value=\"$id\">";
 
 echo '<table class="tableedit">';
- echo "<tr><td><b>".i18n('Report&nbsp;Name')."</b>:</td>";
+echo '<tr><td><b>' . i18n('Report&nbsp;Name') . '</b>:</td>';
 echo "<td>{$report['name']}</td></tr>";
- echo "<tr><td><b>".i18n('Description')."</b>:</td>";
+echo '<tr><td><b>' . i18n('Description') . '</b>:</td>';
 echo "<td>{$report['desc']}</td></tr>";
- echo "<tr><td><b>".i18n('Created By')."</b>:</td>";
+echo '<tr><td><b>' . i18n('Created By') . '</b>:</td>';
 echo "<td>{$report['creator']}</td></tr>";
 
 echo '<tr><td colspan="2"><hr /></td></tr>';
 /* See if the report is in this committee member's list */
- $q = mysql_query("SELECT * FROM reports_committee 
- 			WHERE users_id='{$_SESSION['users_uid']}'
+$q = $pdo->prepare("SELECT * FROM reports_committee 
+ \t\t\tWHERE users_id='{$_SESSION['users_uid']}'
 			AND reports_id='{$report['id']}'");
- echo "<tr><td colspan=\"2\"><h3>".i18n('My Reports Info')."</h3></td></tr>";
- if(mysql_num_rows($q) > 0) {
+$q->execute();
+echo '<tr><td colspan="2"><h3>' . i18n('My Reports Info') . '</h3></td></tr>';
+if ($q->rowCount() > 0) {
 	/* Yes, it is */
-	$i = mysql_fetch_object($q);
-	echo "<tr><td><b>".i18n('Category')."</b>:</td>";
+	$i = $q->fetch(PDO::FETCH_OBJ);
+	echo '<tr><td><b>' . i18n('Category') . '</b>:</td>';
 	echo "<td>{$i->category}</td></tr>";
-	echo "<tr><td><b>".i18n('Comment')."</b>:</td>";
+	echo '<tr><td><b>' . i18n('Comment') . '</b>:</td>';
 	echo "<td>{$i->comment}</td></tr>";
 } else {
- 	echo "<tr><td></td><td>".i18n('This report is NOT in your \'My Reports\' list.')."</td></tr>";
+	echo '<tr><td></td><td>' . i18n("This report is NOT in your 'My Reports' list.") . '</td></tr>';
 }
 echo '<tr><td colspan="2"><hr /></td></tr>';
- echo "<tr><td colspan=\"2\"><h3>".i18n('Report Options')."</h3></td></tr>";
+echo '<tr><td colspan="2"><h3>' . i18n('Report Options') . '</h3></td></tr>';
 
 $format = $report['options']['type'];
 $stock = $report['options']['stock'];
@@ -239,34 +247,34 @@ case 'dialog_gen':
 /* Out of all the report optoins, we really only want these ones */
 $option_keys = array('type', 'stock');
 foreach ($report_options as $ok => $o) {
- 	if(!in_array($ok, $option_keys)) continue;
+	if (!in_array($ok, $option_keys))
+		continue;
 	echo "<tr><td><b>{$o['desc']}</b>:</td>";
 	echo "<td><select name=\"$ok\" id=\"$ok\">";
 	foreach ($o['values'] as $k => $v) {
 		$sel = ($report['option'][$ok] == $k) ? 'selected="selected"' : '';
 		echo "<option value=\"$k\" $sel>$v</option>";
 	}
-	echo "</select></td></tr>";
+	echo '</select></td></tr>';
 }
 /* Find all the years */
- $q = mysql_query("SELECT DISTINCT year FROM config WHERE year>1000 ORDER BY year DESC");
- echo "<tr><td><b>".i18n('Year')."</b>:</td>";
- echo "<td><select name=\"year\" id=\"year\">";
- while($i = mysql_fetch_assoc($q)) {
+$q = $pdo->prepare('SELECT DISTINCT year FROM config WHERE year>1000 ORDER BY year DESC');
+$q->execute();
+echo '<tr><td><b>' . i18n('Year') . '</b>:</td>';
+echo '<td><select name="year" id="year">';
+while ($i = $q->fetch(PDO::FETCH_ASSOC)) {
 	$y = $i['year'];
 	$sel = ($config['FAIRYEAR'] == $y) ? 'selected="selected"' : '';
 	echo "<option value=\"$y\" $sel>$y</option>";
 }
- echo "</select></td></tr>";
+echo '</select></td></tr>';
 
- echo "</table>";
+echo '</table>';
 
 echo '<br />';
- echo "<input type=\"submit\" value=\"".i18n('Generate Report')."\" />";
+echo '<input type="submit" value="' . i18n('Generate Report') . '" />';
 echo '</form>';
 
 send_footer();
 
- 
-
 ?>

admin/reports_judges.php

@@ -1,73 +1,73 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
- require("../lcsv.php");
- require("../questions.inc.php");
+require ('../lpdf.php');
+require ('../lcsv.php');
+require ('../questions.inc.php');
 
- if(!$_GET['type']) $type="csv";
- else $type=$_GET['type'];
+if (!$_GET['type'])
+	$type = 'csv';
+else
+	$type = $_GET['type'];
 
-if($type=="pdf")
-{
+if ($type == 'pdf') {
 	$rep = new lpdf(i18n($config['fairname']),
-			i18n("Judge List"),
-			$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-			);
+		i18n('Judge List'),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
 	$rep->newPage();
 	$rep->setFontSize(11);
-}
-else if($type=="csv")
-{
-	$rep=new lcsv(i18n("Judge List"));
+} else if ($type == 'csv') {
+	$rep = new lcsv(i18n('Judge List'));
 }
 
 $table = array();
 $table['header'] = array(
-			i18n("ID"),	
-			i18n("Unique ID"),	
-			i18n("Last Name"),
-			i18n("First Name"),
-			i18n("Email"),
-			i18n("Phone Home"),
-			i18n("Phone Work"),
-			i18n("Phone Work Ext"),
-			i18n("Phone Cell"),
-			i18n("Languages"),
-			i18n("Organization"),
-			i18n("Address 1"),
-			i18n("Address 2"),
-			i18n("City"),
+	i18n('ID'),
+	i18n('Unique ID'),
+	i18n('Last Name'),
+	i18n('First Name'),
+	i18n('Email'),
+	i18n('Phone Home'),
+	i18n('Phone Work'),
+	i18n('Phone Work Ext'),
+	i18n('Phone Cell'),
+	i18n('Languages'),
+	i18n('Organization'),
+	i18n('Address 1'),
+	i18n('Address 2'),
+	i18n('City'),
 	i18n($config['provincestate']),
 	i18n($config['postalzip']),
-			i18n("Highest PostSecDeg"),
-			i18n("Professional Quals"),
-			i18n("Expertise Other"));
+	i18n('Highest PostSecDeg'),
+	i18n('Professional Quals'),
+	i18n('Expertise Other')
+);
 
 /* Append headers for all the custom questions */
 $qs = questions_load_questions('judgereg', $config['FAIRYEAR']);
@@ -76,21 +76,20 @@ foreach($keys as $qid) {
 	$table['header'][] = i18n($qs[$qid]['db_heading']);
 }
 
-
 // grab the list of divisions, because the last fields of the table will be the sub-divisions
-$q=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-$numcats=mysql_num_rows($q);
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+$q->execute();
+$numcats = $q->rowCount();
 $catheadings = array();
-while($r=mysql_fetch_object($q))
-{
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$cats[] = $r->id;
 	$catheadings[] = "$r->category (out of 5)";
 }
 // grab the list of divisions, because the last fields of the table will be the sub-divisions
-$q=mysql_query("SELECT * FROM projectdivisions WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+$q->execute();
 $divheadings = array();
-while($r=mysql_fetch_object($q))
-{
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$divs[] = $r->id;
 	$divheadings[] = "$r->division (out of 5)";
 	$divheadings[] = "$r->division subdivisions";
@@ -99,12 +98,39 @@ while($r=mysql_fetch_object($q))
 // now append the arrays together
 $table['header'] = array_merge($table['header'], array_merge($catheadings, $divheadings));
 
+$times = array();
+$datetimeheadings = array();
+
+/* Load the judging rounds */
+$q = $pdo->prepare("SELECT date,starttime,endtime,name FROM judges_timeslots WHERE round_id='0' AND year='{$config['FAIRYEAR']}' ORDER BY starttime,type");
+$q->execute();
+$x = 0;
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	$found = false;
+	foreach ($times as $xx => $t) {
+		if ($t['date'] == $r->date && $t['starttime'] == $r->starttime && $t['endtime'] == $r->endtime) {
+			$times[$xx]['name'] .= ", {$r->name}";
+			$found = true;
+			break;
+		}
+	}
+	if (!$found) {
+		$times[$x] = array('date' => $r->date,
+			'starttime' => $r->starttime,
+			'endtime' => $r->endtime,
+			'name' => $r->name);
+		$datetimeheadings[] = $r->name;
+		$x++;
+	}
+}
+
+$table['header'] = array_merge($table['header'], $datetimeheadings);
 
 // fill these in if we ever make this PDFable
 $table['widths'] = array();
 $table['dataalign'] = array();
 
-$q=mysql_query("SELECT 
+$q = $pdo->prepare("SELECT 
 				users.*,
 				users_judge.*
 			FROM 
@@ -118,16 +144,21 @@ $q=mysql_query("SELECT
 			ORDER BY 
 				lastname,
 				firstname");
-echo mysql_error();
-while($r=mysql_fetch_object($q)) {
+$q->execute();
+show_pdo_errors_if_any($pdo);
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 	$u = user_load($r->id);
 
-	$expertise_other=str_replace("\n"," ",$r->expertise_other);
-	$expertise_other=str_replace("\r","",$expertise_other);
+	$expertise_other = str_replace("\n", ' ', $r->expertise_other);
+	$expertise_other = str_replace("\r", '', $expertise_other);
 
-	if(isset($divdata)) unset($divdata); $divdata=array();
-	if(isset($catdata)) unset($catdata); $catdata=array();
-	$languages="";
+	if (isset($divdata))
+		unset($divdata);
+	$divdata = array();
+	if (isset($catdata))
+		unset($catdata);
+	$catdata = array();
+	$languages = '';
 
 	foreach ($u['cat_prefs'] AS $c) {
 		$catdata[] = $c + 2;
@@ -136,7 +167,7 @@ while($r=mysql_fetch_object($q)) {
 	foreach ($u['div_prefs'] AS $d) {
 		$divdata[] = $d;
 		// FIXME: 2010-01-22 - James - get the sub divisions for now we use a placeholder
-		$divdata[]="";
+		$divdata[] = '';
 	}
 
 	foreach ($u['languages'] AS $k => $v) {
@@ -151,6 +182,27 @@ while($r=mysql_fetch_object($q)) {
 		$qarray[] = $qans[$qid];
 	}
 
+	$tq = $pdo->prepare('SELECT * FROM judges_availability WHERE users_id="' . $r->id . '" ORDER BY `start`');
+	$tq->execute();
+
+	$sel = array();
+	$timedata = array();
+	while ($tr = $tq->fetch(PDO::FETCH_OBJ)) {
+		foreach ($times as $x => $t) {
+			if ($tr->start == $t['starttime'] && $tr->end == $t['endtime'] && $tr->date == $t['date']) {
+				$sel[$x] = true;
+			}
+		}
+	}
+
+	foreach ($times as $x => $t) {
+		if (get_value_from_array($sel, $x) == true) {
+			$timedata[] = 'yes';
+		} else {
+			$timedata[] = 'no';
+		}
+	}
+
 	$tmp = array(
 		$r->id,
 		$r->uid,
@@ -159,7 +211,7 @@ while($r=mysql_fetch_object($q)) {
 		$r->email,
 		$r->phonehome,
 		$r->phonework,
-		$r->phoneworkext,
+		get_value_property_or_default($r, 'phoneworkext'),
 		$r->phonecell,
 		$languages,
 		$r->organization,
@@ -169,13 +221,13 @@ while($r=mysql_fetch_object($q)) {
 		$r->province,
 		$r->postalcode,
 		$r->highest_psd,
-		$r->professional_quals,
+		get_value_property_or_default($r, 'professional_quals'),
 		$expertise_other
 	);
 	$tmp = array_merge($tmp, $qarray);
 
 	$extradata = array_merge($catdata, $divdata);
-	$table['data'][]=array_merge($tmp,$extradata);
+	$table['data'][] = array_merge(array_merge($tmp, $extradata), $timedata);
 }
 
 $rep->addTable($table);

admin/reports_judges_allyears.php

@@ -0,0 +1,188 @@
+<?
+
+/*
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
+ */
+?>
+<?
+require ('../common.inc.php');
+require_once ('../user.inc.php');
+user_auth_required('committee', 'admin');
+require ('../lpdf.php');
+require ('../lcsv.php');
+require ('../questions.inc.php');
+
+if (!$_GET['type'])
+	$type = 'csv';
+else
+	$type = $_GET['type'];
+
+if ($type == 'pdf') {
+	$rep = new lpdf(i18n($config['fairname']),
+		i18n('Judge List'),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
+
+	$rep->newPage();
+	$rep->setFontSize(11);
+} else if ($type == 'csv') {
+	$rep = new lcsv(i18n('Judge List'));
+}
+
+$table = array();
+$table['header'] = array(
+	i18n('ID'),
+	i18n('Unique ID'),
+	i18n('Year'),
+	i18n('Last Name'),
+	i18n('First Name'),
+	i18n('Email'),
+	i18n('Phone Home'),
+	i18n('Phone Work'),
+	i18n('Phone Work Ext'),
+	i18n('Phone Cell'),
+	i18n('Languages'),
+	i18n('Organization'),
+	i18n('Address 1'),
+	i18n('Address 2'),
+	i18n('City'),
+	i18n($config['provincestate']),
+	i18n($config['postalzip']),
+	i18n('Highest PostSecDeg'),
+	i18n('Professional Quals'),
+	i18n('Expertise Other')
+);
+
+/* Append headers for all the custom questions */
+$qs = questions_load_questions('judgereg', $config['FAIRYEAR']);
+$keys = array_keys($qs);
+foreach ($keys as $qid) {
+	$table['header'][] = i18n($qs[$qid]['db_heading']);
+}
+
+// grab the list of divisions, because the last fields of the table will be the sub-divisions
+$q = $pdo->prepare("SELECT * FROM projectcategories WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+$q->execute();
+$numcats = $q->rowCount();
+$catheadings = array();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	$cats[] = $r->id;
+	$catheadings[] = "$r->category (out of 5)";
+}
+// grab the list of divisions, because the last fields of the table will be the sub-divisions
+$q = $pdo->prepare("SELECT * FROM projectdivisions WHERE year='" . $config['FAIRYEAR'] . "' ORDER BY id");
+$q->execute();
+$divheadings = array();
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	$divs[] = $r->id;
+	$divheadings[] = "$r->division (out of 5)";
+	$divheadings[] = "$r->division subdivisions";
+}
+
+// now append the arrays together
+$table['header'] = array_merge($table['header'], array_merge($catheadings, $divheadings));
+
+// fill these in if we ever make this PDFable
+$table['widths'] = array();
+$table['dataalign'] = array();
+
+$q = $pdo->prepare("SELECT 
+				users.*,
+				users_judge.*
+			FROM 
+				users
+				JOIN users_judge ON users.id=users_judge.users_id
+			WHERE 
+				users.deleted='no'
+				AND users.types LIKE '%judge%'
+			ORDER BY 
+				lastname,
+				firstname,
+				year");
+$q->execute();
+show_pdo_errors_if_any($pdo);
+while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+	$u = user_load($r->id);
+
+	$expertise_other = str_replace("\n", ' ', $r->expertise_other);
+	$expertise_other = str_replace("\r", '', $expertise_other);
+
+	if (isset($divdata))
+		unset($divdata);
+	$divdata = array();
+	if (isset($catdata))
+		unset($catdata);
+	$catdata = array();
+	$languages = '';
+
+	foreach ($u['cat_prefs'] AS $c) {
+		$catdata[] = $c + 2;
+	}
+
+	foreach ($u['div_prefs'] AS $d) {
+		$divdata[] = $d;
+		// FIXME: 2010-01-22 - James - get the sub divisions for now we use a placeholder
+		$divdata[] = '';
+	}
+
+	foreach ($u['languages'] AS $k => $v) {
+		$languages .= "$v/";
+	}
+	$languages = substr($languages, 0, -1);
+
+	$qarray = array();
+	$qans = questions_load_answers('judgereg', $r->id, $config['FAIRYEAR']);
+	$keys = array_keys($qans);
+	foreach ($keys as $qid) {
+		$qarray[] = $qans[$qid];
+	}
+
+	$tmp = array(
+		$r->id,
+		$r->uid,
+		$r->year,
+		$r->lastname,
+		$r->firstname,
+		$r->email,
+		$r->phonehome,
+		$r->phonework,
+		get_value_property_or_default($r, 'phoneworkext'),
+		$r->phonecell,
+		$languages,
+		$r->organization,
+		$r->address,
+		$r->address2,
+		$r->city,
+		$r->province,
+		$r->postalcode,
+		$r->highest_psd,
+		get_value_property_or_default($r, 'professional_quals'),
+		$expertise_other
+	);
+	$tmp = array_merge($tmp, $qarray);
+
+	$extradata = array_merge($catdata, $divdata);
+	$table['data'][] = array_merge($tmp, $extradata);
+}
+
+$rep->addTable($table);
+$rep->output();
+
+?>

admin/reports_judges_teams_projects.php

@@ -1,125 +1,119 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
- require("../lcsv.php");
- require("judges.inc.php");
+require ('../lpdf.php');
+require ('../lcsv.php');
+require ('judges.inc.php');
 
 $type = $_GET['type'];
 
-	if($type=="pdf")
-	{
-
+if ($type == 'pdf') {
 	$rep = new lpdf(i18n($config['fairname']),
-				i18n("Judging Team Project Assignments"),
-				$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-				);
+		i18n('Judging Team Project Assignments'),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
 	$rep->newPage();
 	$rep->setFontSize(11);
-	}
-	else if($type=="csv")
-	{
-		$rep=new lcsv(i18n("Judging Team Project Assignments"));
+} else if ($type == 'csv') {
+	$rep = new lcsv(i18n('Judging Team Project Assignments'));
 }
 
 $teams = getJudgingTeams();
 
-	$q=mysql_query("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='".$config['FAIRYEAR']."'");
-	if(mysql_num_rows($q)>1)
+$q = $pdo->prepare("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='" . $config['FAIRYEAR'] . "'");
+$q->execute();
+if ($q->rowCount() > 1)
 	$show_date = true;
 else
 	$show_date = false;
 
-	foreach($teams AS $team)
-	{
+foreach ($teams AS $team) {
 	$table = array();
-		$table['header']=array(i18n("Timeslot"),i18n("Proj #"),i18n("Project Title"));
+	$table['header'] = array(i18n('Timeslot'), i18n('Proj #'), i18n('Project Title'));
 	if ($show_date)
-			$table['widths']=array(		2.25,		0.75, 		4.00);
+		$table['widths'] = array(2.5, 0.75, 3.75);
 	else
 		$table['widths'] = array(1.5, 0.75, 4.75);
 
-		$table['dataalign']=array("center","center","left");
+	$table['dataalign'] = array('center', 'center', 'left');
 
-		$rep->heading($team['name']." (".$team['num'].")");
+	$rep->heading($team['name'] . ' (' . $team['num'] . ')');
 
-		$memberlist="";
-		if(count($team['members']))
-		{
-			foreach($team['members'] AS $member)
-			{
-				$memberlist.=$member['firstname']." ".$member['lastname'];
-				if($member['captain']=="yes")
-					$memberlist.="*";
-				$memberlist.=", ";
+	$memberlist = '';
+	if (count(get_value_from_array($team, 'members', []))) {
+		foreach ($team['members'] AS $member) {
+			$memberlist .= $member['firstname'] . ' ' . $member['lastname'];
+			if ($member['captain'] == 'yes')
+				$memberlist .= '*';
+			$memberlist .= ', ';
 		}
 		$memberlist = substr($memberlist, 0, -2);
 	}
 	$rep->addText($memberlist);
 
-		if(count($team['awards']))
-		{
-			$rep->heading(i18n("Awards that this team judges").":");
-			foreach($team['awards'] AS $award)
-			{
+	if (count($team['awards'])) {
+		$rep->heading(i18n('Awards that this team judges') . ':');
+		foreach ($team['awards'] AS $award) {
 			$rep->addText($award['name']);
-				$rep->addText(i18n("Criteria").": ".$award['criteria']);
+			$rep->addText(i18n('Criteria') . ': ' . $award['criteria']);
 
 			// get category eligibility
-				$q=mysql_query("SELECT projectcategories.category FROM projectcategories, award_awards_projectcategories WHERE award_awards_projectcategories.projectcategories_id=projectcategories.id AND award_awards_projectcategories.award_awards_id='{$award['id']}' AND award_awards_projectcategories.year='{$config['FAIRYEAR']}' AND projectcategories.year='{$config['FAIRYEAR']}' ORDER BY category");
-				echo mysql_error();
-				$cats="";
-				while($r=mysql_fetch_object($q))
-				{
-					if($cats) $cats.=", ".i18n($r->category);
-					else $cats=i18n($r->category);
+			$q = $pdo->prepare("SELECT projectcategories.category FROM projectcategories, award_awards_projectcategories WHERE award_awards_projectcategories.projectcategories_id=projectcategories.id AND award_awards_projectcategories.award_awards_id='{$award['id']}' AND award_awards_projectcategories.year='{$config['FAIRYEAR']}' AND projectcategories.year='{$config['FAIRYEAR']}' ORDER BY category");
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
+			$cats = '';
+			while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+				if ($cats)
+					$cats .= ', ' . i18n($r->category);
+				else
+					$cats = i18n($r->category);
 			}
-				$rep->addText(i18n("Categories").": $cats");
-
+			$rep->addText(i18n('Categories') . ": $cats");
 
 			// get division eligibility
-				$q=mysql_query("SELECT projectdivisions.division_shortform FROM projectdivisions, award_awards_projectdivisions WHERE award_awards_projectdivisions.projectdivisions_id=projectdivisions.id AND award_awards_projectdivisions.award_awards_id='{$award['id']}' AND award_awards_projectdivisions.year='{$config['FAIRYEAR']}' AND projectdivisions.year='{$config['FAIRYEAR']}' ORDER BY division_shortform");
-				echo mysql_error();
-				$divs="";
-				while($r=mysql_fetch_object($q))
-				{
-					if($divs) $divs.=", ".i18n($r->division_shortform);
-					else $divs=i18n($r->division_shortform);
+			$q = $pdo->prepare("SELECT projectdivisions.division_shortform FROM projectdivisions, award_awards_projectdivisions WHERE award_awards_projectdivisions.projectdivisions_id=projectdivisions.id AND award_awards_projectdivisions.award_awards_id='{$award['id']}' AND award_awards_projectdivisions.year='{$config['FAIRYEAR']}' AND projectdivisions.year='{$config['FAIRYEAR']}' ORDER BY division_shortform");
+			$q->execute();
+			show_pdo_errors_if_any($pdo);
+			$divs = '';
+			while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+				if ($divs)
+					$divs .= ', ' . i18n($r->division_shortform);
+				else
+					$divs = i18n($r->division_shortform);
 			}
-				$rep->addText(i18n("Divisions").": $divs");
+			$rep->addText(i18n('Divisions') . ": $divs");
 		}
-
 	}
 
 	$rep->nextLine();
 
 	// get the timeslots that this team has.
-		$q=mysql_query("SELECT 
+	$q = $pdo->prepare("SELECT 
 					judges_timeslots.id,
 					judges_timeslots.date,
 					judges_timeslots.starttime,
@@ -135,17 +129,17 @@
 				ORDER BY
 					date,starttime
 				");
-		$numslots=mysql_num_rows($q);
+	$q->execute();
+	$numslots = $q->rowCount();
 
-		while($r=mysql_fetch_object($q))
-		{
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		if ($show_date)
-				$timeslot=$r->date." ";
+			$timeslot = format_date($r->date) . ' ';
 		else
-				$timeslot="";
-			$timeslot.=format_time($r->starttime)." - ".format_time($r->endtime);
+			$timeslot = '';
+		$timeslot .= format_time($r->starttime) . ' - ' . format_time($r->endtime);
 
-			$projq=mysql_query("SELECT
+		$projq = $pdo->prepare("SELECT
 					projects.projectnumber,
 					projects.id,
 					projects.title
@@ -160,12 +154,12 @@
 				ORDER BY
 					projectnumber
 				");
+		$projq->execute();
 
-			while($proj=mysql_fetch_object($projq))
-			{
+		while ($proj = $projq->fetch(PDO::FETCH_OBJ)) {
 			$table['data'][] = array($timeslot, $proj->projectnumber, $proj->title);
 			// make the timeslot empty so we dont list it each time if there's more than one project in the timeslot
-				$timeslot="";
+			$timeslot = '';
 		}
 	}
 	$rep->addTable($table);

admin/reports_mailinglabels.php

@@ -1,35 +1,35 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- send_header("Mailing Label Generator",
+send_header('Mailing Label Generator',
 	array('Committee Main' => 'committee_main.php',
 		'Administration' => 'admin/index.php',
-			'Reports' => 'admin/reports.php')
-			);
+		'Reports' => 'admin/reports.php'));
 
 ?>
 
@@ -58,42 +58,41 @@ function reportChange()
 </script>
 
 <?
- echo "<br />";
+echo '<br />';
 
- echo "<form method=\"get\" name=\"mailinglabels\" action=\"reports_mailinglabels_generator.php\">";
- echo "<input type=\"hidden\" name=\"type\" value=\"pdf\">";
- echo "<input type=\"hidden\" name=\"report\" value=\"pdf\">";
- echo "<input type=\"hidden\" name=\"reportname\" value=\"pdf\">";
+echo '<form method="get" name="mailinglabels" action="reports_mailinglabels_generator.php">';
+echo '<input type="hidden" name="type" value="pdf">';
+echo '<input type="hidden" name="report" value="pdf">';
+echo '<input type="hidden" name="reportname" value="pdf">';
 
- echo "<select name=\"reportselect\" onchange=\"reportChange()\">";
- echo "<option value=\"\">".i18n("Choose which labels")."</option>\n";
- echo "<option value=\"sponsors:Award Sponsors\">".i18n("Award Sponsors")."</option>\n";
- echo "<option value=\"judges:Judges\">".i18n("Judges")."</option>\n";
- echo "<option value=\"schools:Schools\">".i18n("Schools")."</option>\n";
- echo "</select>";
- echo "<br />";
+echo '<select name="reportselect" onchange="reportChange()">';
+echo '<option value="">' . i18n('Choose which labels') . "</option>\n";
+echo '<option value="sponsors:Award Sponsors">' . i18n('Award Sponsors') . "</option>\n";
+echo '<option value="judges:Judges">' . i18n('Judges') . "</option>\n";
+echo '<option value="schools:Schools">' . i18n('Schools') . "</option>\n";
+echo '</select>';
+echo '<br />';
 
-
- echo "<select name=\"stock\" onchange=\"stockChange()\">";
- echo "<option value=\"Custom::::::\">".i18n("Choose label stock")."</option>\n";
+echo '<select name="stock" onchange="stockChange()">';
+echo '<option value="Custom::::::">' . i18n('Choose label stock') . "</option>\n";
 echo "<option value=\"Avery #05161:1:4:0.00:0.25:10:0.5:pdf\">Avery #05161 1\"x4\"</option>\n";
 echo "<option value=\"Avery #05162:1.3333:4:0.00:0.25:10:0.75:pdf\">Avery #05162 1 1/3\"x4\"</option>\n";
 echo "<option value=\"Avery #05163:2:4:0.0:0.25:12:0:pdf\">Avery #05163 2\"x4\"</option>\n";
 echo "<option value=\"Custom:::::::pdf\">Custom</option>\n";
 echo "<option value=\"CSV:::::::csv\">CSV (Plain Text)</option>\n";
- echo "</select>";
+echo '</select>';
 
- echo "<table>";
- echo "<tr><td>Label Height:</td><td><input size=\"5\" type=\"text\" name=\"height\" id=\"height\">\"</td></tr>";
- echo "<tr><td>Label Width:</td><td><input size=\"5\" type=\"text\" name=\"width\" id=\"width\">\"</td></tr>";
- echo "<tr><td>Label Y-Space:</td><td><input size=\"5\" type=\"text\" name=\"yspacer\" id=\"yspacer\">\"</td></tr>";
- echo "<tr><td>Label X-Space:</td><td><input size=\"5\" type=\"text\" name=\"xspacer\" id=\"xspacer\">\"</td></tr>";
- echo "<tr><td>Font Size:</td><td><input size=\"5\" type=\"text\" name=\"fontsize\" id=\"fontsize\">pt</td></tr>";
- echo "<tr><td>Top Padding:</td><td><input size=\"5\" type=\"text\" name=\"toppadding\" id=\"toppadding\">\"</td></tr>";
- echo "</table>";
- echo "<input type=\"submit\" value=\"Generate Mailing Labels\">";
+echo '<table>';
+echo '<tr><td>Label Height:</td><td><input size="5" type="text" name="height" id="height">"</td></tr>';
+echo '<tr><td>Label Width:</td><td><input size="5" type="text" name="width" id="width">"</td></tr>';
+echo '<tr><td>Label Y-Space:</td><td><input size="5" type="text" name="yspacer" id="yspacer">"</td></tr>';
+echo '<tr><td>Label X-Space:</td><td><input size="5" type="text" name="xspacer" id="xspacer">"</td></tr>';
+echo '<tr><td>Font Size:</td><td><input size="5" type="text" name="fontsize" id="fontsize">pt</td></tr>';
+echo '<tr><td>Top Padding:</td><td><input size="5" type="text" name="toppadding" id="toppadding">"</td></tr>';
+echo '</table>';
+echo '<input type="submit" value="Generate Mailing Labels">';
 
- echo "</form>";
+echo '</form>';
 
 send_footer();
 ?>

admin/reports_mailinglabels_generator.php

@@ -1,73 +1,79 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
- require("../lcsv.php");
+require ('../lpdf.php');
+require ('../lcsv.php');
 
-
-if($_GET['report']) $report=$_GET['report'];
-if($_GET['reportname']) $reportname=$_GET['reportname']; else $reportname=$_GET['report'];
-if($report)
-{
-	if($_GET['type']=="pdf")
- 	{
-		$card_width=4.00;
-		$card_height=2.00;
+if ($_GET['report'])
+	$report = $_GET['report'];
+if ($_GET['reportname'])
+	$reportname = $_GET['reportname'];
+else
+	$reportname = $_GET['report'];
+if ($report) {
+	if ($_GET['type'] == 'pdf') {
+		$card_width = 4.0;
+		$card_height = 2.0;
 		$xspacer = 0.125;
 		$yspacer = 0.125;
 		$fontsize = 10;
 		$toppadding = 0;
 
-		if($_GET['width']) $card_width=$_GET['width'];
-		if($_GET['height']) $card_height=$_GET['height'];
-		if($_GET['xspacer']) $xspacer=$_GET['xspacer'];
-		if($_GET['yspacer']) $yspacer=$_GET['yspacer'];
-		if($_GET['fontsize']) $fontsize=$_GET['fontsize'];
-		if($_GET['toppadding']) $toppadding=$_GET['toppadding'];
+		if ($_GET['width'])
+			$card_width = $_GET['width'];
+		if ($_GET['height'])
+			$card_height = $_GET['height'];
+		if ($_GET['xspacer'])
+			$xspacer = $_GET['xspacer'];
+		if ($_GET['yspacer'])
+			$yspacer = $_GET['yspacer'];
+		if ($_GET['fontsize'])
+			$fontsize = $_GET['fontsize'];
+		if ($_GET['toppadding'])
+			$toppadding = $_GET['toppadding'];
 
 		$rep = new lpdf(i18n($config['fairname']),
 			"$reportname Mailing Labels",
-				$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-				);
+			$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
-		$rep->setPageStyle("labels");
+		$rep->setPageStyle('labels');
 		$rep->newPage(8.5, 11);
 		$rep->setLabelDimensions($card_width, $card_height, $xspacer, $yspacer, $fontsize, $toppadding);
- 	}
- 	else if($_GET['type']=="csv") {
+	} else if ($_GET['type'] == 'csv') {
 		$rep = new lcsv(i18n("$reportname Mailing Labels"));
 	}
 
-	switch($report)
-	{
+	switch ($report) {
 		// IF(schools.sciencehead=\"\",\"Science Department Head\",schools.sciencehead) AS co,
-		case "schools":
-				$q=mysql_query("SELECT  
+		case 'schools':
+			$q = $pdo->prepare("SELECT  
 							schools.school AS name,
+							schools.board AS board,
 							schools.schoollang,
 							schools.sciencehead AS co,
 							schools.address AS address,
@@ -81,11 +87,11 @@ if($report)
 						ORDER BY
 							school
 						");
+			$q->execute();
 			break;
 
-		case "sponsors":
-
-				$q=mysql_query("SELECT  
+		case 'sponsors':
+			$q = $pdo->prepare("SELECT  
 							award_sponsors.organization AS name,
 							award_sponsors.address AS address,
 							award_sponsors.city AS city,
@@ -104,10 +110,11 @@ if($report)
 						ORDER BY
 							organization
 						");
+			$q->execute();
 			break;
 
-			case "judges":
-				$q=mysql_query("SELECT  
+		case 'judges':
+			$q = $pdo->prepare("SELECT  
 							CONCAT(judges.firstname,' ',judges.lastname) AS name,
 							IF(judges.address2=\"\",
 								judges.address,
@@ -126,51 +133,51 @@ if($report)
 						ORDER BY
 							lastname,firstname
 						");
+			$q->execute();
 			break;
-
 	}
 
-
-	if($_GET['type']=="csv") 
-	{
+	if ($_GET['type'] == 'csv') {
 		$table = array();
 		$table['header'] = array(
-					i18n("Name"),
-					i18n("C/O"),
-					i18n("Address"),
-					i18n("City"),
+			i18n('Name'),
+			i18n('C/O'),
+			i18n('Address'),
+			i18n('City'),
 			i18n($config['provincestate']),
-					i18n($config['postalzip']));
+			i18n($config['postalzip'])
+		);
 	}
 
-	while($r=mysql_fetch_object($q))
-	{
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		// handle C/O differently for schools, becuase, well, french schools are picky!
-		if($report=="schools") {
+		if ($report == 'schools') {
 			if ($r->sciencehead)
 				$coname = $r->sciencehead;
 			else
-				$coname=i18n("Science Department Head",array(),array(),$r->schoollang);
+				$coname = i18n('Science Department Head', array(), array(), $r->schoollang);
 
-			$co=i18n("C/O %1",array($coname),array("Name of person"),$r->schoollang);
+			$co = i18n('C/O %1', array($coname), array('Name of person'), $r->schoollang);
+
+			$name = $r->name;
+			if ($r->board)
+				$name .= ' [' . $r->board . ']';
+		} else {
+			$co = "C/O $r->co";
+			$name = $r->name;
 		}
-		else $co="C/O $r->co";
 
-		if($_GET['type']=="pdf")
-		{
+		if ($_GET['type'] == 'pdf') {
 			$rep->newLabel();
-			$rep->mailingLabel($r->name,$co,$r->address,$r->city,$r->province,$r->postalcode);
-		}
-		else if($_GET['type']=="csv")
-		{
-			$table['data'][]=array($r->name,$co,$r->address,$r->city,$r->province,$r->postalcode);
+			$rep->mailingLabel($name, $co, $r->address, $r->city, $r->province, $r->postalcode);
+		} else if ($_GET['type'] == 'csv') {
+			$table['data'][] = array($name, $co, $r->address, $r->city, $r->province, $r->postalcode);
 		}
 	}
 
-	if($_GET['type']=="csv") 
+	if ($_GET['type'] == 'csv')
 		$rep->addTable($table);
 
 	$rep->output();
-
 }
 ?>

admin/reports_old.php

@@ -1,170 +1,168 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 require_once ('reports.inc.php');
 user_auth_required('committee', 'admin');
- send_header("Reports",
+send_header('Reports',
     array('Committee Main' => 'committee_main.php',
-			'Administration' => 'admin/index.php')
-			);
- echo "<br />";
- echo error('This page will no longer be available after Summer 2008.  Please use the new \'My Reports\' interface. ');
+        'Administration' => 'admin/index.php'));
+echo '<br />';
+echo error("This page will no longer be available after Summer 2008.  Please use the new 'My Reports' interface. ");
 
 $id = intval($_POST['id']);
- echo "<h4>".i18n("All Reports")."</h4>";
- echo "<form method=\"get\" name=\"reportgen\" action=\"reports_gen.php\">";
- echo "<select name=\"id\" id=\"report\">";
- echo "<option value=\"0\">".i18n("Select a Report")."</option>\n";
+echo '<h4>' . i18n('All Reports') . '</h4>';
+echo '<form method="get" name="reportgen" action="reports_gen.php">';
+echo '<select name="id" id="report">';
+echo '<option value="0">' . i18n('Select a Report') . "</option>\n";
 $reports = report_load_all();
 $x = 0;
 foreach ($reports as $r) {
     $sel = ($id == $r['id']) ? 'selected=\"selected\"' : '';
     echo "<option value=\"{$r['id']}\" $sel>{$r['name']}</option>\n";
 }
- echo "</select>";
- echo "<select name=\"type\"><option value=\"\">Default Format</option>";
- echo "<option value=\"pdf\">PDF</option>";
- echo "<option value=\"csv\">CSV</option>";
- echo "<option value=\"label\">Label</option>";
- echo "</select>";
+echo '</select>';
+echo '<select name="type"><option value="">Default Format</option>';
+echo '<option value="pdf">PDF</option>';
+echo '<option value="csv">CSV</option>';
+echo '<option value="label">Label</option>';
+echo '</select>';
 echo "<input type=\"text\" value=\"{$config['FAIRYEAR']}\" size=\"5\" name=\"year\" />";
- echo "<input type=\"submit\" value=\"Generate Report\"></form>";
- echo "<br />";
- echo "<hr />";
+echo '<input type="submit" value="Generate Report"></form>';
+echo '<br />';
+echo '<hr />';
 
-			   
- echo "<h4>".i18n("Custom Reports")."</h4>";
+echo '<h4>' . i18n('Custom Reports') . '</h4>';
 
 /*
- echo i18n("Day of Fair Registration/Checkin Forms (All Categories)").": ";
- echo "<a href=\"reports_gen.php?id=9&type=pdf\">PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?id=9&type=csv\">CSV</a> &nbsp; ";
+ * echo i18n("Day of Fair Registration/Checkin Forms (All Categories)").": ";
+ * echo "<a href=\"reports_gen.php?id=9&type=pdf\">PDF</a> &nbsp; ";
+ * echo "<a href=\"reports_gen.php?id=9&type=csv\">CSV</a> &nbsp; ";
  */
 
 // lets split this up by age category,
-/*
-$catq=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
-while($catr=mysql_fetch_object($catq))
-{
-	echo "<td>";
-	echo "<a href=\"reports_checkin.php?type=pdf&cat=$catr->id\">$catr->category (PDF)</a> &nbsp; ";
-	echo "<br>";
-	echo "<a href=\"reports_checkin.php?type=csv&cat=$catr->id\">$catr->category (CSV)</a> &nbsp; ";
-	echo "</td>";
-}
-*/
- echo "<br />";
- echo i18n("Mailing Labels").": ";
- echo "<a href=\"reports_mailinglabels.php\">".i18n("Mailing Label Generator")."</a>";
 
- echo "<br />";
- echo "<br />";
- echo i18n("School Access Codes").": ";
- echo "<a href=\"reports_gen.php?sid=36&type=pdf\">PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=36&type=csv\">CSV</a> &nbsp; ";
+/*
+ * $catq=mysql_query("SELECT * FROM projectcategories WHERE year='".$config['FAIRYEAR']."' ORDER BY id");
+ * while($catr=mysql_fetch_object($catq))
+ * {
+ * 	echo "<td>";
+ * 	echo "<a href=\"reports_checkin.php?type=pdf&cat=$catr->id\">$catr->category (PDF)</a> &nbsp; ";
+ * 	echo "<br>";
+ * 	echo "<a href=\"reports_checkin.php?type=csv&cat=$catr->id\">$catr->category (CSV)</a> &nbsp; ";
+ * 	echo "</td>";
+ * }
+ */
+echo '<br />';
+echo i18n('Mailing Labels') . ': ';
+echo '<a href="reports_mailinglabels.php">' . i18n('Mailing Label Generator') . '</a>';
+
+echo '<br />';
+echo '<br />';
+echo i18n('School Access Codes') . ': ';
+echo '<a href="reports_gen.php?sid=36&type=pdf">PDF</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=36&type=csv">CSV</a> &nbsp; ';
 // echo "<a href=\"reports_schoolaccesscodes.php?type=pdf\">PDF</a> &nbsp; ";
 // echo "<a href=\"reports_schoolaccesscodes.php?type=csv\">CSV</a> &nbsp; ";
 
- echo "<br />";
- echo i18n("Student Emergency Contact Names/Numbers").": ";
- echo "<a href=\"reports_gen.php?sid=17&type=pdf\">PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=17&type=csv\">CSV</a> &nbsp; ";
- echo "<br />";
- echo i18n("Students/Projects From Each School").": ";
- echo "<a href=\"reports_gen.php?sid=19&type=pdf\">PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=19&type=csv\">CSV</a> &nbsp; ";
+echo '<br />';
+echo i18n('Student Emergency Contact Names/Numbers') . ': ';
+echo '<a href="reports_gen.php?sid=17&type=pdf">PDF</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=17&type=csv">CSV</a> &nbsp; ';
+echo '<br />';
+echo i18n('Students/Projects From Each School') . ': ';
+echo '<a href="reports_gen.php?sid=19&type=pdf">PDF</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=19&type=csv">CSV</a> &nbsp; ';
 
- echo "<br />";
- echo i18n("Project Logistical Requirements (tables, electricity)").": ";
- echo "<a href=\"reports_gen.php?sid=16&type=pdf\">PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=16&type=csv\">CSV</a> &nbsp; ";
- echo "<br />";
+echo '<br />';
+echo i18n('Project Logistical Requirements (tables, electricity)') . ': ';
+echo '<a href="reports_gen.php?sid=16&type=pdf">PDF</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=16&type=csv">CSV</a> &nbsp; ';
+echo '<br />';
 
- echo i18n("Project Table Labels").": ";
- echo "<a href=\"reports_gen.php?sid=30\">PDF</a> &nbsp; ";
- echo "<br />";
+echo i18n('Project Table Labels') . ': ';
+echo '<a href="reports_gen.php?sid=30">PDF</a> &nbsp; ';
+echo '<br />';
 
-  echo i18n("Project Summary Details").": ";
- echo "<a href=\"reports_projects_details.php?type=pdf\">PDF</a> &nbsp; ";
- echo "<br />";
- echo i18n("Nametags").": ";
- echo "<a href=\"reports_gen.php?sid=26\">Students PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=26&type=csv\">Students CSV</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=27\">Judges PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=27&type=csv\">Judges CSV</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=28\">Committee PDF</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=28&type=csv\">Committee CSV</a> &nbsp; ";
+echo i18n('Project Summary Details') . ': ';
+echo '<a href="reports_projects_details.php?type=pdf">PDF</a> &nbsp; ';
+echo '<br />';
+echo i18n('Nametags') . ': ';
+echo '<a href="reports_gen.php?sid=26">Students PDF</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=26&type=csv">Students CSV</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=27">Judges PDF</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=27&type=csv">Judges CSV</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=28">Committee PDF</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=28&type=csv">Committee CSV</a> &nbsp; ';
 
- echo "<br />";
- echo "<br />";
- echo i18n("Judges List").": ";
- echo "<a href=\"reports_judges.php?type=csv\">Judge List (CSV)</a> &nbsp; ";
+echo '<br />';
+echo '<br />';
+echo i18n('Judges List') . ': ';
+echo '<a href="reports_judges.php?type=csv">Judge List (CSV)</a> &nbsp; ';
 
- echo "<br />";
- echo i18n("Judging Teams").": ";
- echo "<a href=\"reports_gen.php?sid=21&type=csv\">List (CSV)</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=21&type=pdf\">List (PDF)</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=22&type=csv\">Team Awards (CSV)</a> &nbsp; ";
- echo "<a href=\"reports_gen.php?sid=22&type=pdf\">Team Awards (PDF)</a> &nbsp; ";
+echo '<br />';
+echo i18n('Judging Teams') . ': ';
+echo '<a href="reports_gen.php?sid=21&type=csv">List (CSV)</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=21&type=pdf">List (PDF)</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=22&type=csv">Team Awards (CSV)</a> &nbsp; ';
+echo '<a href="reports_gen.php?sid=22&type=pdf">Team Awards (PDF)</a> &nbsp; ';
 
- echo "<br />";
- echo i18n("Judging Teams Project Assignments").": ";
- echo "<a href=\"reports_judges_teams_projects.php?type=csv\">CSV</a> &nbsp; ";
- echo "<a href=\"reports_judges_teams_projects.php?type=pdf\">PDF</a> &nbsp; ";
+echo '<br />';
+echo i18n('Judging Teams Project Assignments') . ': ';
+echo '<a href="reports_judges_teams_projects.php?type=csv">CSV</a> &nbsp; ';
+echo '<a href="reports_judges_teams_projects.php?type=pdf">PDF</a> &nbsp; ';
 
- echo "<br />";
- echo i18n("Projects Judging Team Assignments").": ";
- echo "<a href=\"reports_projects_judges_teams.php?type=csv\">CSV</a> &nbsp; ";
- echo "<a href=\"reports_projects_judges_teams.php?type=pdf\">PDF</a> &nbsp; ";
+echo '<br />';
+echo i18n('Projects Judging Team Assignments') . ': ';
+echo '<a href="reports_projects_judges_teams.php?type=csv">CSV</a> &nbsp; ';
+echo '<a href="reports_projects_judges_teams.php?type=pdf">PDF</a> &nbsp; ';
 
- echo "<br />";
- echo i18n("Project Identification Labels (for judging sheets)").": ";
- echo "<a href=\"reports_gen.php?sid=29\">PDF</a> &nbsp; ";
- echo "<br />";
- echo "<br />";
+echo '<br />';
+echo i18n('Project Identification Labels (for judging sheets)') . ': ';
+echo '<a href="reports_gen.php?sid=29">PDF</a> &nbsp; ';
+echo '<br />';
+echo '<br />';
 
+echo i18n('Awards list for Program') . ': ';
+echo '<a href="reports_program_awards.php?type=csv">CSV</a> &nbsp; ';
 
- echo i18n("Awards list for Program").": ";
- echo "<a href=\"reports_program_awards.php?type=csv\">CSV</a> &nbsp; ";
-
-  
- echo "<br />";
- echo i18n("Award Ceremony Script").": ";
- echo "<a href=\"reports_acscript.php?type=pdf\">FULL PDF</a> &nbsp;";
- echo "<a href=\"reports_acscript.php?type=pdf&awardtype=Divisional\">(Divisional)</a> &nbsp; ";
- echo "<a href=\"reports_acscript.php?type=pdf&awardtype=Special\">(Special)</a> &nbsp; ";
- echo "<a href=\"reports_acscript.php?type=pdf&awardtype=Interdisciplinary\">(Interdisciplinary)</a> &nbsp; ";
- echo "<a href=\"reports_acscript.php?type=pdf&awardtype=Other\">(Other)</a> &nbsp; ";
- echo "<a href=\"reports_acscript.php?type=pdf&awardtype=Grand\">(Grand)</a> &nbsp; ";
- echo "<br />";
- echo i18n("Award Ceremony Script").": ";
- echo "<a href=\"reports_acscript.php?type=csv\">CSV</a> &nbsp; ";
- echo "<br />";
- echo "<a href=\"reports_gen.php?sid=42\">Award Winners CSV</a> &nbsp; ";
- echo "<br />";
+echo '<br />';
+echo i18n('Award Ceremony Script') . ': ';
+echo '<a href="reports_acscript.php?type=pdf">FULL PDF</a> &nbsp;';
+echo '<a href="reports_acscript.php?type=pdf&awardtype=Divisional">(Divisional)</a> &nbsp; ';
+echo '<a href="reports_acscript.php?type=pdf&awardtype=Special">(Special)</a> &nbsp; ';
+echo '<a href="reports_acscript.php?type=pdf&awardtype=Interdisciplinary">(Interdisciplinary)</a> &nbsp; ';
+echo '<a href="reports_acscript.php?type=pdf&awardtype=Other">(Other)</a> &nbsp; ';
+echo '<a href="reports_acscript.php?type=pdf&awardtype=Grand">(Grand)</a> &nbsp; ';
+echo '<br />';
+echo i18n('Award Ceremony Script') . ': ';
+echo '<a href="reports_acscript.php?type=csv">CSV</a> &nbsp; ';
+echo '<br />';
+echo '<a href="reports_gen.php?sid=42">Award Winners CSV</a> &nbsp; ';
+echo '<br />';
 
 send_footer();
 ?>

admin/reports_program_awards.php

@@ -1,29 +1,25 @@
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
- require("../lcsv.php");
+require ('../lpdf.php');
+require ('../lcsv.php');
 
 $type = $_GET['type'];
- if(!$type) $type="pdf";
-
-	if($type=="pdf")
-	{
+if (!$type)
+	$type = 'pdf';
 
+if ($type == 'pdf') {
 	$rep = new lpdf(i18n($config['fairname']),
-				i18n("Program Awards"),
-				$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-				);
+		i18n('Program Awards'),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
 	$rep->newPage();
 	$rep->setFontSize(11);
+} else if ($type == 'csv') {
+	$rep = new lcsv(i18n('Program Awards'));
 }
-	else if($type=="csv")
-	{
-		$rep=new lcsv(i18n("Program Awards"));
-	}
-	$q=mysql_query("SELECT 
+$q = $pdo->prepare("SELECT 
 				award_awards.id,
 				award_awards.name,
 				award_awards.criteria,
@@ -35,32 +31,31 @@
 				award_types
 			WHERE 
 					award_awards.year='" . $config['FAIRYEAR'] . "'
-				AND	award_types.year='".$config['FAIRYEAR']."'
-				AND	award_awards.award_types_id=award_types.id
-				AND	award_awards.excludefromac='0'
-				AND	(award_types.type='special' OR award_types.type='grand')
+				AND\taward_types.year='" . $config['FAIRYEAR'] . "'
+				AND\taward_awards.award_types_id=award_types.id
+				AND\taward_awards.excludefromac='0'
+				AND\t(award_types.type='special' OR award_types.type='grand')
 			ORDER BY awards_order");
+$q->execute();
 
-	echo mysql_error();
+show_pdo_errors_if_any($pdo);
 
-	if(mysql_num_rows($q))
-	{
-		while($r=mysql_fetch_object($q))
-		{
+if ($q->rowCount()) {
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		$rep->heading(i18n($r->name));
 
 		// get teh age categories
-			$acq=mysql_query("SELECT projectcategories.category FROM projectcategories, award_awards_projectcategories  WHERE projectcategories.year='".$config['FAIRYEAR']."' AND award_awards_projectcategories.year='".$config['FAIRYEAR']."' AND award_awards_projectcategories.award_awards_id='$r->id' AND award_awards_projectcategories.projectcategories_id=projectcategories.id ORDER BY projectcategories.id");
-			echo mysql_error();
-			$cats="";
-			while($acr=mysql_fetch_object($acq))
-			{
-				$cats.=i18n($acr->category).", ";
+		$acq = $pdo->prepare("SELECT projectcategories.category FROM projectcategories, award_awards_projectcategories  WHERE projectcategories.year='" . $config['FAIRYEAR'] . "' AND award_awards_projectcategories.year='" . $config['FAIRYEAR'] . "' AND award_awards_projectcategories.award_awards_id='$r->id' AND award_awards_projectcategories.projectcategories_id=projectcategories.id ORDER BY projectcategories.id");
+		$acq->execute();
+		show_pdo_errors_if_any($pdo);
+		$cats = '';
+		while ($acr = $acq->fetch(PDO::FETCH_OBJ)) {
+			$cats .= i18n($acr->category) . ', ';
 		}
 		$cats = substr($cats, 0, -2);
 		$rep->addText("$cats: " . i18n($r->criteria));
 
-			$pq=mysql_query("SELECT 
+		$pq = $pdo->prepare("SELECT 
 						award_prizes.prize,
 						award_prizes.number,
 						award_prizes.id,
@@ -74,34 +69,30 @@
 						AND award_prizes.excludefromac='0'
 					ORDER BY 
 						`order`");
-					echo mysql_error();
+		$pq->execute();
+		show_pdo_errors_if_any($pdo);
 		$prevprizeid = -1;
-			while($pr=mysql_fetch_object($pq))
-			{
-				if($prevprizeid!=$pr->id)
-				{
-					$prizetext="";
+		while ($pr = $pq->fetch(PDO::FETCH_OBJ)) {
+			if ($prevprizeid != $pr->id) {
+				$prizetext = '';
 				if ($pr->number > 1)
-						$prizetext.=i18n("%1 prizes of",array($pr->number))." ";
+					$prizetext .= i18n('%1 prizes of', array($pr->number)) . ' ';
 
 				if ($pr->prize)
 					$prizetext .= i18n($pr->prize);
 
-					if($pr->cash || $pr->scholarship)
-					{
+				if ($pr->cash || $pr->scholarship) {
 					if ($pr->prize)
-							$prizetext.=" (";
+						$prizetext .= ' (';
 					if ($pr->cash && $pr->scholarship)
-							$prizetext.="\$$pr->cash / \$$pr->scholarship ".i18n("scholarship");
+						$prizetext .= "\$$pr->cash / \$$pr->scholarship " . i18n('scholarship');
 					else if ($pr->cash)
 						$prizetext .= "\$$pr->cash";
 					else if ($pr->scholarship)
-							$prizetext.= "\$$pr->scholarship ".i18n("scholarship");
+						$prizetext .= "\$$pr->scholarship " . i18n('scholarship');
 
 					if ($pr->prize)
-							$prizetext.= ")";
-
-					
+						$prizetext .= ')';
 				}
 				$rep->addText($prizetext);
 

admin/reports_projects_details.php

@@ -1,53 +1,49 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the 'Science Fair In A Box' project
+ * SFIAB Website: http://www.sfiab.ca
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
- require("../lcsv.php");
- require("judges.inc.php");
+require ('../lpdf.php');
+require ('../lcsv.php');
+require ('judges.inc.php');
 
 $type = $_GET['type'];
 
-	if($type=="pdf")
-	{
-
+if ($type == 'pdf') {
 	$rep = new lpdf(i18n($config['fairname']),
-				i18n("Project Details"),
-				$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-				);
+		i18n('Project Details'),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
 	$rep->newPage();
 	$rep->setFontSize(11);
-	}
-	else if($type=="csv")
-	{
-		$rep=new lcsv(i18n("Project Details"));
+} else if ($type == 'csv') {
+	$rep = new lcsv(i18n('Project Details'));
 }
 
-	$projq=mysql_query("SELECT  
+$projq = $pdo->prepare("SELECT  
 				registrations.id AS reg_id,
 				registrations.num AS reg_num,
 				projects.id,
@@ -73,73 +69,69 @@
 				AND projectdivisions.year='" . $config['FAIRYEAR'] . "'
 				AND projectcategories.year='" . $config['FAIRYEAR'] . "'
 				AND ( registrations.status='complete'
-				 OR registrations.status='paymentpending' )
+			\t OR registrations.status='paymentpending' )
 			ORDER BY
 				projects.projectnumber
 			");
-			echo mysql_error();
+show_pdo_errors_if_any($pdo);
 
-	$totalprojects=mysql_num_rows($projq);
+$totalprojects = $projq->rowCount();
 $projectcount = 0;
 
-	while($proj=mysql_fetch_object($projq))
-	{
+while ($proj = $projq->fetch(PDO::FETCH_OBJ)) {
 	$projectcount++;
-		$sq=mysql_query("SELECT students.firstname,
+	$sq = $pdo->prepare("SELECT students.firstname,
 					students.lastname
 				FROM
 					students
 				WHERE
 					students.registrations_id='$proj->reg_id'
 				");
-
-		$students="";
+	$sq->execute();
+	$students = '';
 	$studnum = 0;
-		while($studentinfo=mysql_fetch_object($sq))
-		{
-			if($studnum>0) $students.=", ";
+	while ($studentinfo = $sq->fetch(PDO::FETCH_OBJ)) {
+		if ($studnum > 0)
+			$students .= ', ';
 		$students .= "$studentinfo->firstname $studentinfo->lastname";
 		$studnum++;
 	}
-		$rep->heading(i18n("Project Information"));
+	$rep->heading(i18n('Project Information'));
 	$rep->nextline();
 
 	$table = array();
 	//		$table['header']=array(i18n("Timeslot"),i18n("Judging Team"));
 	$table['widths'] = array(1.25, 4.75);
-		$table['dataalign']=array("left","left");
-		$table['data'][]=array(i18n("Project Number"),$proj->projectnumber);
-		$table['data'][]=array(i18n("Project Title"),$proj->title);
-		$table['data'][]=array(i18n("Age Category"),$proj->category);
-		$table['data'][]=array(i18n("Division"),$proj->division);
-		$table['data'][]=array(i18n("Students"),$students);
-		$table['data'][]=array(i18n("Table?"),$proj->req_table);
-		$table['data'][]=array(i18n("Electricity?"),$proj->req_electricity);
-		$table['data'][]=array(i18n("Special Requests"),$proj->req_special);
-		$table['data'][]=array(i18n("Language"),$proj->language);
+	$table['dataalign'] = array('left', 'left');
+	$table['data'][] = array(i18n('Project Number'), $proj->projectnumber);
+	$table['data'][] = array(i18n('Project Title'), $proj->title);
+	$table['data'][] = array(i18n('Age Category'), $proj->category);
+	$table['data'][] = array(i18n('Division'), $proj->division);
+	$table['data'][] = array(i18n('Students'), $students);
+	$table['data'][] = array(i18n('Table?'), $proj->req_table);
+	$table['data'][] = array(i18n('Electricity?'), $proj->req_electricity);
+	$table['data'][] = array(i18n('Special Requests'), $proj->req_special);
+	$table['data'][] = array(i18n('Language'), $proj->language);
 	$rep->addTable($table);
 	unset($table);
 
-		$q=mysql_query("SELECT * FROM mentors WHERE registrations_id='".$proj->reg_id."'");
+	$q = $pdo->prepare("SELECT * FROM mentors WHERE registrations_id='" . $proj->reg_id . "'");
+	$q->execute();
 	$rep->nextline();
-		$rep->heading(i18n("Mentor Information"));
+	$rep->heading(i18n('Mentor Information'));
 	$rep->nextline();
 
-		if(mysql_num_rows($q))
-		{
-		while($r=mysql_fetch_object($q))
-		{
-			$rep->addText(i18n("%1 %2 from %3",array($r->firstname,$r->lastname,$r->organization)));
-			$rep->addText(i18n("Phone: %1 Email: %2",array($r->phone,$r->email)));
+	if ($q->rowCount()) {
+		while ($r = $q->fetch(PDO::FETCH_OBJ)) {
+			$rep->addText(i18n('%1 %2 from %3', array($r->firstname, $r->lastname, $r->organization)));
+			$rep->addText(i18n('Phone: %1 Email: %2', array($r->phone, $r->email)));
 		}
-		}
-		else
-		{
-			$rep->addText(i18n("No mentors"));
+	} else {
+		$rep->addText(i18n('No mentors'));
 	}
 
 	$rep->nextline();
-		$rep->heading(i18n("Project Summary"));
+	$rep->heading(i18n('Project Summary'));
 	$rep->nextline();
 	$rep->addText($proj->summary);
 

admin/reports_projects_judges_teams.php

@@ -1,62 +1,62 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the Science-ation project
+ * Science-ation Website: https://science-ation.ca
+ *
+ * This file was part of the 'Science Fair In A Box' project
+ *
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ * Copyright (C) 2024 AlgoLibre Inc. <science-ation@algolibre.io>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 ?>
 <?
- require("../common.inc.php");
- require_once("../user.inc.php");
+require ('../common.inc.php');
+require_once ('../user.inc.php');
 user_auth_required('committee', 'admin');
- require("../lpdf.php");
- require("../lcsv.php");
- require("judges.inc.php");
+require ('../lpdf.php');
+require ('../lcsv.php');
+require ('judges.inc.php');
 
 $type = $_GET['type'];
 
-	if($type=="pdf")
-	{
-
+if ($type == 'pdf') {
 	$rep = new lpdf(i18n($config['fairname']),
-				i18n("Project Judging Team Assignments"),
-				$_SERVER['DOCUMENT_ROOT'].$config['SFIABDIRECTORY']."/data/logo-200.gif"
-				);
+		i18n('Project Judging Team Assignments'),
+		$_SERVER['DOCUMENT_ROOT'] . $config['SFIABDIRECTORY'] . '/data/logo-200.gif');
 
 	$rep->newPage();
 	$rep->setFontSize(11);
-	}
-	else if($type=="csv")
-	{
-		$rep=new lcsv(i18n("Project Judging Team Assignments"));
+} else if ($type == 'csv') {
+	$rep = new lcsv(i18n('Project Judging Team Assignments'));
 }
 
 $teams = getJudgingTeams();
 
-	$q=mysql_query("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='".$config['FAIRYEAR']."'");
-	if(mysql_num_rows($q)>1)
+$q = $pdo->prepare("SELECT DISTINCT(date) AS d FROM judges_timeslots WHERE year='" . $config['FAIRYEAR'] . "'");
+$q->execute();
+if ($q->rowCount() > 1)
 	$show_date = true;
 else
 	$show_date = false;
 
-
-	$projq=mysql_query("SELECT  
+$projq = $pdo->prepare("SELECT  
 				registrations.id AS reg_id,
 				registrations.num AS reg_num,
 				projects.id,
@@ -77,30 +77,30 @@
 				AND projectdivisions.year='" . $config['FAIRYEAR'] . "'
 				AND projectcategories.year='" . $config['FAIRYEAR'] . "'
 				AND ( registrations.status='complete'
-				 OR registrations.status='paymentpending' )
+			\t OR registrations.status='paymentpending' )
 			ORDER BY
 				projects.projectnumber
 			");
-			echo mysql_error();
+$projq->execute();
+show_pdo_errors_if_any($pdo);
 
-	while($proj=mysql_fetch_object($projq))
-	{
-		$rep->heading("(".$proj->projectnumber.") ".$proj->title);
+while ($proj = $projq->fetch(PDO::FETCH_OBJ)) {
+	$rep->heading('(' . $proj->projectnumber . ') ' . $proj->title);
 
-		$sq=mysql_query("SELECT students.firstname,
+	$sq = $pdo->prepare("SELECT students.firstname,
 					students.lastname
 				FROM
 					students
 				WHERE
 					students.registrations_id='$proj->reg_id'
 				");
+	$sq->execute();
 
-
-		$students="";
+	$students = '';
 	$studnum = 0;
-		while($studentinfo=mysql_fetch_object($sq))
-		{
-			if($studnum>0) $students.=", ";
+	while ($studentinfo = $sq->fetch(PDO::FETCH_OBJ)) {
+		if ($studnum > 0)
+			$students .= ', ';
 		$students .= "$studentinfo->firstname $studentinfo->lastname";
 		$studnum++;
 	}
@@ -108,16 +108,16 @@
 	$rep->nextLine();
 
 	$table = array();
-		$table['header']=array(i18n("Timeslot"),i18n("Judging Team"));
+	$table['header'] = array(i18n('Timeslot'), i18n('Judging Team'));
 	if ($show_date)
-			$table['widths']=array(		2.25,		4.75);
+		$table['widths'] = array(2.5, 4.5);
 	else
-			$table['widths']=array(		1.5,		5.50);
+		$table['widths'] = array(1.5, 5.5);
 
-		$table['dataalign']=array("center","left");
+	$table['dataalign'] = array('center', 'left');
 
 	// get the timeslots that this project has assigned to been judged.
-		$q=mysql_query("SELECT 
+	$q = $pdo->prepare("SELECT 
 					judges_timeslots.date,
 					judges_timeslots.starttime,
 					judges_timeslots.endtime,
@@ -132,15 +132,15 @@
 				ORDER BY
 					date,starttime
 				");
-		$numslots=mysql_num_rows($q);
+	$q->execute();
+	$numslots = $q->rowCount();
 
-		while($r=mysql_fetch_object($q))
-		{
+	while ($r = $q->fetch(PDO::FETCH_OBJ)) {
 		if ($show_date)
-				$timeslot=format_date($r->date)." ";
+			$timeslot = format_date($r->date) . ' ';
 		else
-				$timeslot="";
-			$timeslot.=format_time($r->starttime)." - ".format_time($r->endtime);
+			$timeslot = '';
+		$timeslot .= format_time($r->starttime) . ' - ' . format_time($r->endtime);
 
 		$table['data'][] = array($timeslot, $r->name);
 	}

admin/reports_schools.inc.php

@@ -1,37 +1,32 @@
 <?
+
 /*
-   This file is part of the 'Science Fair In A Box' project
-   SFIAB Website: http://www.sfiab.ca
-
-   Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
-   Copyright (C) 2005 James Grant <james@lightbox.org>
-
-   This program is free software; you can redistribute it and/or
-   modify it under the terms of the GNU General Public
-   License as published by the Free Software Foundation, version 2.
-
-   This program is distributed in the hope that it will be useful,
-   but WITHOUT ANY WARRANTY; without even the implied warranty of
-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-    General Public License for more details.
-
-   You should have received a copy of the GNU General Public License
-   along with this program; see the file COPYING.  If not, write to
-   the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
-   Boston, MA 02111-1307, USA.
+ * This file is part of the Science-ation project
+ * Science-ation Website: https://science-ation.ca
+ *
+ * This file was part of the 'Science Fair In A Box' project
+ *
+ *
+ * Copyright (C) 2005 Sci-Tech Ontario Inc <info@scitechontario.org>
+ * Copyright (C) 2005 James Grant <james@lightbox.org>
+ * Copyright (C) 2024 AlgoLibre Inc. <science-ation@algolibre.io>
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+ *  General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  */
 
-
-function reports_schools_principal(&$report, $field, $text)
-{
-	$year = $report['year'];
-	if($text > 0) { /* text is the uid */
-		$u = user_load_by_uid_year($text, $year);
-		return $u['name'];
-	}
-	return '';
-}
-function reports_schools_sciencehead(&$report, $field, $text)
+function reports_schools_principal($report, $field, $text)
 {
 	$year = $report['year'];
 	if ($text > 0) {  /* text is the uid */
@@ -41,7 +36,17 @@ function reports_schools_sciencehead(&$report, $field, $text)
 	return '';
 }
 
-function reports_schools_shphone(&$report, $field, $text)
+function reports_schools_sciencehead($report, $field, $text)
+{
+	$year = $report['year'];
+	if ($text > 0) {  /* text is the uid */
+		$u = user_load_by_uid_year($text, $year);
+		return i18n('%1 or Science Department Head', array($u['name']));
+	}
+	return i18n('Science Department Head');
+}
+
+function reports_schools_shphone($report, $field, $text)
 {
 	$year = $report['year'];
 	if ($text > 0) {  /* text is the uid */
@@ -51,7 +56,7 @@ function reports_schools_shphone(&$report, $field, $text)
 	return '';
 }
 
-function reports_schools_shemail(&$report, $field, $text)
+function reports_schools_shemail($report, $field, $text)
 {
 	$year = $report['year'];
 	if ($text > 0) {  /* text is the uid */
@@ -66,138 +71,138 @@ $report_schools_fields = array(
 		'name' => 'School -- Name',
 		'header' => 'School Name',
 		'width' => 2.25,
-		'table' => 'schools.school' ),
-
+		'table' => 'schools.school'
+	),
 	'schooladdr' => array(
 		'name' => 'School -- Full Address',
 		'header' => 'School Address',
 		'width' => 3.0,
-		'table' => "CONCAT(schools.address, ', ', schools.city, ', ', schools.province_code, ', ', schools.postalcode)" ),
-
+		'table' => "CONCAT(schools.address, ', ', schools.city, ', ', schools.province_code, ', ', schools.postalcode)"
+	),
 	'school_phone' => array(
 		'name' => 'School -- Phone',
 		'header' => 'School Phone',
 		'width' => 1,
-		'table' => 'schools.phone' ),
-
+		'table' => 'schools.phone'
+	),
 	'school_fax' => array(
 		'name' => 'School -- Fax',
 		'header' => 'School Fax',
 		'width' => 1,
-		'table' => 'schools.fax' ),
-
+		'table' => 'schools.fax'
+	),
 	'school_email' => array(
 		'name' => 'School -- Email',
 		'header' => 'School Email',
 		'width' => 1,
-		'table' => 'schools.schoolemail' ),
-
+		'table' => 'schools.schoolemail'
+	),
 	'school_address' => array(
 		'name' => 'School Address -- Street Address',
 		'header' => 'Address',
 		'width' => 2.0,
-		'table' => 'schools.address'),
-
+		'table' => 'schools.address'
+	),
 	'school_city' => array(
 		'name' => 'School Address -- City',
 		'header' => 'City',
 		'width' => 1.5,
-		'table' => 'schools.city' ),
-
+		'table' => 'schools.city'
+	),
 	'school_province' => array(
 		'name' => 'School Address -- ' . $config['provincestate'],
 		'header' => $config['provincestate'],
 		'width' => 0.75,
-		'table' => 'schools.province_code' ),
-
+		'table' => 'schools.province_code'
+	),
 	'school_city_prov' => array(
 		'name' => 'School Address -- City, ' . $config['provincestate'] . ' (for mailing)',
 		'header' => 'City',
 		'width' => 1.5,
-		'table' => "CONCAT(schools.city, ', ', schools.province_code)" ),
-
+		'table' => "CONCAT(schools.city, ', ', schools.province_code)"
+	),
 	'school_postal' => array(
 		'name' => 'School Address -- ' . $config['postalzip'],
 		'header' => $config['postalzip'],
 		'width' => 0.75,
-		'table' => 'schools.postalcode' ),
-
+		'table' => 'schools.postalcode'
+	),
 	'school_lang' => array(
 		'name' => 'School -- Language Code',
 		'header' => 'Lang',
 		'width' => 0.5,
-		'table' => 'schools.schoollang' ),
-
+		'table' => 'schools.schoollang'
+	),
 	'school_level' => array(
 		'name' => 'School -- Grade Levels',
 		'header' => 'Level',
 		'width' => 1.0,
-		'table' => 'schools.schoollevel' ),
-
+		'table' => 'schools.schoollevel'
+	),
 	'school_board' => array(
 		'name' => 'School -- Board',
 		'header' => 'Board',
 		'width' => 1.0,
-		'table' => 'schools.board' ),
-
+		'table' => 'schools.board'
+	),
 	'school_district' => array(
 		'name' => 'School -- District',
 		'header' => 'District',
 		'width' => 1.0,
-		'table' => 'schools.district' ),
-
+		'table' => 'schools.district'
+	),
 	'school_principal' => array(
 		'name' => 'School -- Principal',
 		'header' => 'Principal',
 		'width' => 1.25,
 		'table' => 'schools.principal_uid',
-		'exec_function' => 'reports_schools_principal'),
-
+		'exec_function' => 'reports_schools_principal'
+	),
 	'school_sh' => array(
 		'name' => 'School -- Science Head',
 		'header' => 'Science Head',
 		'width' => 1.25,
 		'table' => 'schools.sciencehead_uid',
-		'exec_function' => 'reports_schools_sciencehead'),
-
+		'exec_function' => 'reports_schools_sciencehead'
+	),
 	'school_shphone' => array(
 		'name' => 'School -- Science Head Phone',
 		'header' => 'Science Hd Phone',
 		'width' => 1,
 		'table' => 'schools.sciencehead_uid',
-		'exec_function' => 'reports_schools_shphone'),
-
+		'exec_function' => 'reports_schools_shphone'
+	),
 	'school_shemail' => array(
 		'name' => 'School -- Science Head Email',
 		'header' => 'Science Head Email',
 		'width' => 1.5,
 		'table' => 'schools.sciencehead_uid',
-		'exec_function' => 'reports_schools_shemail'),
-
+		'exec_function' => 'reports_schools_shemail'
+	),
 	'school_accesscode' => array(
 		'name' => 'School -- Access Code',
 		'header' => 'Access Code',
 		'width' => 1.1,
-		'table' => 'schools.accesscode' ),
-
+		'table' => 'schools.accesscode'
+	),
 	'school_registration_password' => array(
 		'name' => 'School -- Registration Password',
 		'header' => 'Reg Pass',
 		'width' => 0.75,
-		'table' => 'schools.registration_password' ),
-
+		'table' => 'schools.registration_password'
+	),
 	'school_project_limit' => array(
 		'name' => 'School -- Project Limit',
 		'header' => 'Limit',
 		'width' => 0.75,
-		'table' => 'schools.projectlimit' ),
-
+		'table' => 'schools.projectlimit'
+	),
 	'school_project_limit_per' => array(
 		'name' => 'School -- Project Limit Per',
 		'header' => 'Limit Per',
 		'width' => 1.0,
-		'table' => 'schools.projectlimitper' ),
-
+		'table' => 'schools.projectlimitper'
+	),
 );
 
 function report_schools_fromwhere($report, $components)