HOME

Mini Shell 1.0
DIR:/home/dna1981/public_html/SMB/admin/school/php/
Current File : /home/dna1981/public_html/SMB/admin/school/php/add.php
<?php require_once('../../../php/connect.php'); ?>
<?php 
date_default_timezone_set("America/Chicago");
$todaydate = date("Y-m-d");

//Add Training Videos
if ((isset($_POST["Video"])) && ($_POST["Video"] == "Add")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $vid = $_POST['vid'];
  $mid = $_POST['MID'];
  $video = $_POST['video'];
  $duration = $_POST['duration'];
  $type = $_POST['type'];
      

 mysqli_query($SMB, "INSERT INTO School_Media (name, video, duration, date, MID, type) VALUES ('$name', '$video', '$duration', '$todaydate', '$mid', '$type')"); 
   
   $AddGoTo = "../media.php";
   header("Location: $AddGoTo");
   }
 //Add Course
if ((isset($_POST["Course"])) && ($_POST["Course"] == "Add")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price = $_POST['price'];
  $CE = $_POST['CE'];
  $Test = $_POST['Test'];
  $Status = $_POST['status'];
  $DurationDays = $_POST['duration_days'];
  $DurationDescription = $_POST['duration_description'];
 
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMBDU_Courses (name, description, price, Test, CE, status, duration_days, duration_description) VALUES ('$name', '$description', '$price', '$Test', '$CE', '$Status', '$DurationDays', '$DurationDescription')"); 
   
   $AddGoTo = "../course.php";
   header("Location: $AddGoTo");
   }
   
   //Add Teaser
if ((isset($_POST["Teaser"])) && ($_POST["Teaser"] == "Add")) {
  $VID = $_POST['vid'];
  $Site = $_POST['site'];
  $Required = 1; 
 
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMBDU_Teasers (vid, site, register_only) VALUES ('$VID', '$Site', '$Required')"); 
   
   $AddGoTo = "../manage-teasers.php";
   header("Location: $AddGoTo");
   }
   
  //Add Module to Course
if ((isset($_POST["CourseModule"])) && ($_POST["CourseModule"] == "Add")) {
  $cid = $_POST['cid'];
  $mid = $_POST['mid'];
  $sort = $_POST['sort']; 
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMBDU_CourseModules (cid, mid, sort) VALUES ('$cid', '$mid', '$sort')"); 
   
   $AddGoTo = "../course-edit.php?id=$cid";
   header("Location: $AddGoTo");
   }
   
 //Add Subscription
if ((isset($_POST["Subscription"])) && ($_POST["Subscription"] == "Add")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price = $_POST['price'];
  $access = $_POST['access_months'];
  $discount_course = $_POST['discount_course'];
  $discount_claiming = $_POST['discount_claiming'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMBDU_Subscription (name, description, price, access_months, discount_course, discount_claiming) VALUES ('$name', '$description', '$price', '$access', '$discount_course', '$discount_claiming')"); 
   
   $AddGoTo = "../subscription.php";
   header("Location: $AddGoTo");
   }
   
  //Add Module
if ((isset($_POST["Module"])) && ($_POST["Module"] == "Add")) {
  $title = mysqli_real_escape_string($SMB, $_POST['title']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price = $_POST['price'];
  $ModuleID = $_POST['ModuleID'];
  $CE = $_POST['CE'];
  $CE_Credits = $_POST['CE_Credits'];
  $CE_Template = $_POST['CE_Template'];
  $Status = $_POST['status'];
  $DurationDays = $_POST['duration_days'];
  $DurationDescription = $_POST['duration_description'];
      

 mysqli_query($SMB, "INSERT INTO School_Modules (ModuleID, title, description, price, CE, CE_Credits, CE_Template, status, duration_days, duration_description, date) VALUES ('$ModuleID', '$title', '$description', '$price', '$CE', '$CE_Credits', '$CE_Template', '$Status', '$DurationDays', '$DurationDescription', '$todaydate')"); 
   
   $AddGoTo = "../modules.php";
   header("Location: $AddGoTo");
   }

//Add Video to Module
if ((isset($_POST["ModuleVideo"])) && ($_POST["ModuleVideo"] == "Add")) {
  $mid = $_POST['mid'];
  $vid = $_POST['vid'];
  $sort = $_POST['sort'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO School_ModuleVideos (mid, vid, sort) VALUES ('$mid', '$vid', '$sort')"); 
   
   $AddGoTo = "../modules-edit.php?module=$mid";
   header("Location: $AddGoTo");
   }
   
 //Add Images
if ((isset($_POST["Image"])) && ($_POST["Image"] == "Add")) {
  $file = ""; $file = $file . basename( $_FILES['video']['name']); 
  $vid = $_POST['vid'];
  $ext = pathinfo($file, PATHINFO_EXTENSION);
  $NewName = "SMBDU-".$vid.".".$ext;
  $type = "image"; 
  $ModuleImg = $_POST['ModuleImg'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO School_Media (video, type, ModuleImg) VALUES ('$NewName', '$type', '$ModuleImg')"); 
 
 if(move_uploaded_file($_FILES['video']['tmp_name'], "../img/" .$NewName));
   
   $AddGoTo = "../images.php";
   header("Location: $AddGoTo");
   }
   
 //Add Materials
if ((isset($_POST["Material"])) && ($_POST["Material"] == "Add")) {
  $type = $_POST['type'];
  $name = $_POST['name'];
  $MID = $_POST['MID'];
  $Video = $_POST['video'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO School_Media (video, name, type, MID) VALUES ('$Video', '$name', '$type', '$MID')"); 
   
   $AddGoTo = "../materials.php";
   header("Location: $AddGoTo");
   }
   
 //Add Page Section
if ((isset($_POST["PageSection"])) && ($_POST["PageSection"] == "Add")) {
  $pid = $_POST['pid'];
  $section = $_POST['section'];
  $sort = $_POST['sort'];
  $type = 'main';

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMBDU_PageSections (pid, section, type, sort) VALUES ('$pid', '$section', '$type', '$sort')"); 
   
   $AddGoTo = "../content-main-edit.php?page=$pid";
   header("Location: $AddGoTo");
   }
   
   //Add Page Section
if ((isset($_POST["UserSection"])) && ($_POST["UserSection"] == "Add")) {
  $pid = $_POST['pid'];
  $section = $_POST['section'];
  $sort = $_POST['sort'];
  $type = 'user';

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMBDU_PageSections (pid, section, type, sort) VALUES ('$pid', '$section', '$type', '$sort')"); 
   
   $AddGoTo = "../content-user-edit.php?page=$pid";
   header("Location: $AddGoTo");
   }
   
  //Add Testimonial
if ((isset($_POST["Testimonial"])) && ($_POST["Testimonial"] == "Add")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $testimonial = mysqli_real_escape_string($SMB, $_POST['testimonial']);

 mysqli_query($SMB, "INSERT INTO Testimonials (name, testimonial, date) VALUES ('$name', '$testimonial', '$todaydate')"); 
   
   $AddGoTo = "../testimonials.php";
   header("Location: $AddGoTo");
   }
   
   //Add Service/ Add On Product
if ((isset($_POST["Service"])) && ($_POST["Service"] == "Add")) {
  $title = mysqli_real_escape_string($SMB, $_POST['title']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price = $_POST['price'];
  $disclaimer = mysqli_real_escape_string($SMB, $_POST['disclaimer']);
  $email_1 = $_POST['email_1'];
  $email_2 = $_POST['email_2'];
  $image = 'default.jpg'; 
  $course = $_POST['course'];
  $module = $_POST['module'];
  $book = $_POST['book'];
  $ClaimingWheels = $_POST['claiming_wheels'];
  $PhoneSupport = $_POST['phone_support'];
  $type = $_POST['type'];
      

 mysqli_query($SMB, "INSERT INTO SMBDU_AddOns (title, description, price, disclaimer, email_1, email_2, image, course, module, book, claiming_wheels, phone_support, type) VALUES ('$title', '$description', '$price', '$disclaimer', '$email_1', '$email_2', '$image', '$course', '$module', '$book', '$ClaimingWheels', '$PhoneSupport', '$type')"); 
   
   $AddGoTo = "../services.php";
   header("Location: $AddGoTo");
   }

 //Add Service/ Add On Product
if ((isset($_POST["AddOnBook"])) && ($_POST["AddOnBook"] == "Add")) {
  $BID = $_POST['BID'];
  $price = $_POST['price'];
  $email_1 = $_POST['email_1'];
  $email_2 = $_POST['email_2'];
  $course = $_POST['course'];
  $module = $_POST['module'];
  $type = $_POST['type'];


$query_Book = "SELECT * FROM Books WHERE id='$BID'";
$Book = mysqli_query($SMB, $query_Book, $SMB) or die(mysqli_error());
$row_Book = mysqli_fetch_assoc($Book);
$totalRows_Book = mysqli_num_rows($Book);
$Title = $row_Book['title'];
$IMG = $row_Book['image'];

 mysqli_query($SMB, "INSERT INTO SMBDU_AddOns (BID, price, email_1, email_2, course, module, type, title, image) VALUES ('$BID', '$price', '$email_1', '$email_2', '$course', '$module', '$type', '$Title', '$IMG')"); 
   
   $AddGoTo = "../services.php";
   header("Location: $AddGoTo");
   }

  //Add Promo
if ((isset($_POST["Promo"])) && ($_POST["Promo"] == "Add")) {
  $promo = $_POST['promo'];
  $Course = $_POST['Course'];
  $Module = $_POST['Module'];
  $Book = $_POST['Book'];
  $Service = $_POST['Service'];
  $discount = $_POST['discount'];
  $start = date('Y-m-d', strtotime($_POST['start_date']));
  $end = date('Y-m-d', strtotime($_POST['end_date']));


 mysqli_query($SMB, "INSERT INTO SMBDU_Promo (promo, discount, start_date, end_date, Course, Module, Book, Service) VALUES ('$promo', '$discount', '$start', '$end', '$Course', '$Module', '$Book', '$Service')"); 
   
   $AddGoTo = "../manage-promos.php";
   header("Location: $AddGoTo");
   }

  //Add On Course Book
if ((isset($_POST["Course_Book"])) && ($_POST["Course_Book"] == "Yes")) {
  $CID = $_POST['CID'];
  $BID = $_POST['BID'];
  $Price = $_POST['price'];
  $Type = $_POST['type'];

 mysqli_query($SMB, "INSERT INTO Cart_AddOns (CID, BID, price, type) VALUES ('$CID', '$BID', '$Price', '$Type')"); 
   
   $AddGoTo = "../course-edit.php?id=$CID";
   header("Location: $AddGoTo");
   }

  //Add On Course Service
if ((isset($_POST["Course_Service"])) && ($_POST["Course_Service"] == "Yes")) {
  $CID = $_POST['CID'];
  $SID = $_POST['SID'];
  $Price = $_POST['price'];
  $Type = $_POST['type'];

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Cart_AddOns (CID, SID, price, type) VALUES ('$CID', '$SID', '$Price', '$Type')"); 
   
   $AddGoTo = "../course-edit.php?id=$CID";
   header("Location: $AddGoTo");
   }

  //Add On Module Book
if ((isset($_POST["Module_Book"])) && ($_POST["Module_Book"] == "Yes")) {
  $MID = $_POST['MID'];
  $BID = $_POST['BID'];
  $Price = $_POST['price'];
  $Type = $_POST['type'];

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Cart_AddOns (MID, BID, price, type) VALUES ('$MID', '$BID', '$Price', '$Type')"); 
   
   $AddGoTo = "../modules-edit.php?module=$MID";
   header("Location: $AddGoTo");
   }

  //Add On Module Service
if ((isset($_POST["Module_Service"])) && ($_POST["Module_Service"] == "Yes")) {
  $MID = $_POST['MID'];
  $SID = $_POST['SID'];
  $Price = $_POST['price'];
  $Type = $_POST['type'];

 mysqli_query($SMB, "INSERT INTO Cart_AddOns (MID, SID, price, type) VALUES ('$MID', '$SID', '$Price', '$Type')"); 
   
   $AddGoTo = "../modules-edit.php?module=$MID";
   header("Location: $AddGoTo");
   }

  //Add On Materials to Modules
if ((isset($_POST["AttachMaterial"])) && ($_POST["AttachMaterial"] == "Yes")) {
  $MID_array = $_POST['MID'];
  $ID = $_POST['id'];
  $count = count($MID_array);
  
for($i = 0; $i < $count; $i++) {
	$mid = mysqli_real_escape_string($SMB, $MID_array[$i]);
	

mysqli_query($SMB, "INSERT INTO SMBDU_ModuleHandouts (ModuleID, HandoutID) VALUES ('$mid', '$ID')"); 
	}

   
   $AddGoTo = "../materials-edit.php?file=$ID";
   header("Location: $AddGoTo");
   }

  //Add On Materials to Modules
if ((isset($_POST["TestQuestion"])) && ($_POST["TestQuestion"] == "Yes")) {
  $ModuleID = $_POST['MID'];
  $Question = mysqli_real_escape_string($SMB, $_POST['Question']);
  $AnswerOne = mysqli_real_escape_string($SMB, $_POST['Answer_1']);
  $AnswerTwo = mysqli_real_escape_string($SMB, $_POST['Answer_2']);
  $AnswerThree = mysqli_real_escape_string($SMB, $_POST['Answer_3']);
  $AnswerFour = mysqli_real_escape_string($SMB, $_POST['Answer_4']);
  $CorrectOne = $_POST['Correct_1'];
  $CorrectTwo = $_POST['Correct_2'];
  $CorrectThree = $_POST['Correct_3'];
  $CorrectFour = $_POST['Correct_4'];
  
	

mysqli_query($SMB, "INSERT INTO SMBDU_TestQuestions (ModuleID, Question, Answer_1, Answer_2, Answer_3, Answer_4, Correct_1, Correct_2, Correct_3, Correct_4) VALUES ('$ModuleID', '$Question', '$AnswerOne', '$AnswerTwo', '$AnswerThree', '$AnswerFour', '$CorrectOne', '$CorrectTwo', '$CorrectThree', '$CorrectFour')"); 


   
   $AddGoTo = "../modules-edit.php?module=$ModuleID";
   header("Location: $AddGoTo");
   }

  //Add On Test Answer
if ((isset($_POST["TestAnswer"])) && ($_POST["TestAnswer"] == "Yes")) {
  $QuestionID = $_POST['QID'];
  $Answer = mysqli_real_escape_string($SMB, $_POST['Answer']);
  $Correct = $_POST['Correct'];
  
	

mysqli_query($SMB, "INSERT INTO SMBDU_TestAnswers (QuestionID, Answer, correct) VALUES ('$QuestionID', '$Answer', '$Correct')"); 


   
   $AddGoTo = "../test-edit.php?id=$QuestionID";
   header("Location: $AddGoTo");
   }

 //CE Template
if ((isset($_POST["Add"])) && ($_POST["Add"] == "CE")) {
  $file = ""; $file = $file . basename( $_FILES['TextIMG']['name']); 
  $signature = ""; $signature = $signature . basename( $_FILES['SignatureImg']['name']); 
  $vid = $_POST['vid'];
  $ext_1 = pathinfo($file, PATHINFO_EXTENSION);
  $ext_2 = pathinfo($signature, PATHINFO_EXTENSION);
  $TextImg = "SMBDU-TextImg-".$vid.".".$ext_1;
  $SignImg = "SMBDU-SignImg-".$vid.".".$ext_2; 
  $TemplateName = mysqli_real_escape_string($SMB, $_POST['TemplateName']);
  $hdr = mysqli_real_escape_string($SMB, $_POST['hdr']);
  $topText = mysqli_real_escape_string($SMB, $_POST['topText']);
  $sponsor = mysqli_real_escape_string($SMB, $_POST['sponsor']);
  $sponsor_code = mysqli_real_escape_string($SMB, $_POST['sponsor_code']);
  $state_delivered = mysqli_real_escape_string($SMB, $_POST['state_delivered']);
  $FooterText = mysqli_real_escape_string($SMB, $_POST['FooterText']);
  $SignatureTitle = mysqli_real_escape_string($SMB, $_POST['SignatureTitle']);
  $disclaimer = mysqli_real_escape_string($SMB, $_POST['disclaimer']);
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO CElayout (TemplateName, hdr, topText, sponsor, sponsor_code, state_delivered, FooterText, SignatureTitle, disclaimer, TextIMG, SignatureImg) VALUES ('$TemplateName', '$hdr', '$topText', '$sponsor', '$sponsor_code', '$state_delivered', '$FooterText', '$SignatureTitle', '$disclaimer', '$TextImg', '$SignImg')"); 
 
 if(move_uploaded_file($_FILES['TextIMG']['tmp_name'], "../videos/" .$TextImg));
 if(move_uploaded_file($_FILES['SignatureImg']['tmp_name'], "../videos/" .$SignImg));
   
   $AddGoTo = "../manage-CE-template.php";
   header("Location: $AddGoTo");
   }

?>