HOME

Mini Shell 1.0
DIR:/home/dna1981/public_html/SMB/php/
Current File : /home/dna1981/public_html/SMB/php/add.php
<?php require_once ('connect.php'); ?>
<?php 
error_reporting(E_ALL);
ini_set('display_errors', 1);

//Add Book Bundle
if ((isset($_POST["BundleBooks"])) && ($_POST["BundleBooks"] == "Yes")) {
  $bid =$_POST['bid'];
  $book =$_POST['book'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO BookBundles (bid, book) VALUES ('$bid', '$book')"); 
   
   $AddGoTo = "../admin/edit-book.php?book=$bid";
   header("Location: $AddGoTo");
   }

//Add Evaluation Question
if ((isset($_POST["EvalQuestion"])) && ($_POST["EvalQuestion"] == "Add")) {
  $typeID = $_POST['typeID'];
  $question = mysqli_real_escape_string($SMB, $_POST['question']);
  $sort = $_POST['sort'];
  $type = $_POST['type'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMB_EvalQuestions (typeID, question, sort, type) VALUES ('$typeID', '$question', '$sort', '$type')"); 
   
   $AddGoTo = "../admin/edit-course-types.php?id=$typeID";
   header("Location: $AddGoTo");
   }
//Add Support
if ((isset($_POST["Add"])) && ($_POST["Add"] == "Support")) {
  $practice = mysqli_real_escape_string($SMB, $_POST['practice']);
  $dentist = mysqli_real_escape_string($SMB, $_POST['dentist']);
  $phone =$_POST['phone_number'];
  $email =$_POST['email_address'];
  $Start = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['start_date'])));
  $Charge =$_POST['charge'];
  $Option = $_POST['ClaimOption'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Support (practice, dentist, phone_number, email_address, ClaimOption, start_date, charge) VALUES ('$practice', '$dentist', '$phone', '$email', '$Option', '$Start', '$Charge')"); 
   
   $AddGoTo = "../admin/manage-support.php";
   header("Location: $AddGoTo");
   }
   
//Add Attendee Portal File
if ((isset($_POST["AddMaterial"])) && ($_POST["AddMaterial"] == "Yes")) {
  $file = ""; $file = $file . basename( $_FILES['file']['name']); 
  $image = ""; $image = $image . basename( $_FILES['image']['name']); 
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $type = "HO"; 
  $vid = $_POST['vid'];
  $ext = pathinfo($file, PATHINFO_EXTENSION);
  $NewName = "Successful-Medical-Billing-".$vid.".".$ext;
  $ImgName = "Successful-Medical-Billing-Img-".$vid.".".$ext;
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO AttendeePortal_Files (name, description, file, image) VALUES ('$name', '$description', '$NewName', '$ImgName')"); 
  mysqli_query($SMB, "INSERT INTO School_Media (video, name, type) VALUES ('$NewName', '$name', '$type')"); 
 
 if(move_uploaded_file($_FILES['file']['tmp_name'], "../admin/school/videos/" .$NewName));
 if(move_uploaded_file($_FILES['image']['tmp_name'], "../admin/school/videos/" .$ImgName));
   
   $AddGoTo = "../admin/manage-portal.php";
   header("Location: $AddGoTo");
   }
   
 //Add Attendee Portal Home Page
if ((isset($_POST["PortalHome"])) && ($_POST["PortalHome"] == "Yes")) {
  $Header = mysqli_real_escape_string($SMB, $_POST['header']);
  $Content = mysqli_real_escape_string($SMB, $_POST['content']);
  $type = $_POST['type'];  
  
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO AttendeePortal_Home (type, header, content) VALUES ('$type', '$Header', '$Content')"); 
 
   
   $AddGoTo = "../admin/manage-portal.php";
   header("Location: $AddGoTo");
   }
  
  //Add Attendee Portal
if ((isset($_POST["PortalPage"])) && ($_POST["PortalPage"] == "Yes")) {
  $name = mysqli_real_escape_string($SMB, $_POST['title']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $sort = $_POST['sort'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO AttendeePortal_Pages (title, description, sort) VALUES ('$name', '$description', '$sort')"); 
   
   $AddGoTo = "../admin/manage-portal.php";
   header("Location: $AddGoTo");
   }
   
//Add Course Type
if ((isset($_POST["CourseType"])) && ($_POST["CourseType"] == "Yes")) {
  $name = mysqli_real_escape_string($SMB, $_POST['name']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $dentist =$_POST['price_dentist'];
  $staff =$_POST['price_staff'];
  $prerequisite =$_POST['prerequisite'];
  $group_discount = $_POST['group_discount'];
  $group_qty = $_POST['group_qty'];
  $group_rate = $_POST['group_rate'];
  $refresher_dentist = $_POST['refresher_dentist'];
  $refresher_staff = $_POST['refresher_staff'];
  $active = $_POST['active'];
  $CE = $_POST['CE'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMB_Courses (name, description, dentist, staff, prerequisite, group_discount, group_qty, group_rate, refresher_dentist, refresher_staff, active, CE) VALUES ('$name', '$description', '$dentist', '$staff', '$prerequisite', '$group_discount', '$group_qty', '$group_rate', '$refresher_dentist', '$refresher_staff', '$active', '$CE')"); 
 $GetID = mysqli_insert_id($SMB);

   
   $AddGoTo = "../admin/edit-course-types.php?id=$GetID";
   header("Location: $AddGoTo");
   }
   
 //AddOn Book to Course Type
if ((isset($_POST["AddOnBook"])) && ($_POST["AddOnBook"] == "Yes")) {
  $tid =$_POST['tid'];
  $bid =$_POST['bid'];
  $sale =$_POST['sale_price'];
  $type =$_POST['type'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMB_AddBooks (tid, bid, sale_price, type) VALUES ('$tid', '$bid', '$sale', '$type')"); 
   
   $AddGoTo = "../admin/edit-course-types.php?id=$tid";
   header("Location: $AddGoTo");
   }
   
  //Add Hotels
if ((isset($_POST["Hotels"])) && ($_POST["Hotels"] == "Yes")) {
  $eid =$_POST['eid'];
  $name =$_POST['name'];
  $address =$_POST['address'];
  $city =$_POST['city'];
  $state =$_POST['state'];
  $zip =$_POST['zip'];
  $phone =$_POST['phone'];
  $website =$_POST['website'];
  $description =$_POST['description'];
  $code =$_POST['group_code'];
  $image =$_POST['image'];

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Hotels (eid, name, address, city, state, zip, phone, website, description, group_code, image) VALUES ('$eid', '$name', '$address', '$city', '$state', '$zip', '$phone', '$website', '$description', '$code', '$image')"); 
   
   $AddGoTo = "../admin/edit-SMB-courses.php?course=$eid";
   header("Location: $AddGoTo");
   }

//Add Practice
if ((isset($_POST["Practice"])) && ($_POST["Practice"] == "Yes")) {
  $practice = mysqli_real_escape_string($SMB, $_POST['practice']);
  $dentist = mysqli_real_escape_string($SMB, $_POST['dentist']);
  $address = mysqli_real_escape_string($SMB, $_POST['street_address']);
  $city = mysqli_real_escape_string($SMB, $_POST['city']);
  $state =$_POST['state'];
  $zip =$_POST['zip_code'];
  $phone =$_POST['phone_number'];
  $email =$_POST['email_address'];
  $license =$_POST['license'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Registration (practice, dentist, street_address, city, state, zip_code, phone_number, email_address, license) VALUES ('$practice', '$dentist', '$address', '$city', '$state', '$zip', '$phone', '$email', '$license')"); 
   
   $AddGoTo = "../admin/registered.php";
   header("Location: $AddGoTo");
   }
 
 //Add Practice
if ((isset($_POST["Attendees"])) && ($_POST["Attendees"] == "Yes")) {
  $rid = $_POST['rid'];
  $date = $_POST['date'];
  $eid =$_POST['event_id'];
  $type =$_POST['type'];
  $status =$_POST['status'];
  $degree =$_POST['degree'];
  $FirstName = mysqli_real_escape_string($SMB, $_POST['first_name']);
  $LastName = mysqli_real_escape_string($SMB, $_POST['last_name']);
  $book =$_POST['book'];
  $charge =$_POST['price'];
  $email =$_POST['email_address'];
  $days =$_POST['days'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO AddPeople (eid, rid, first_name, last_name, degree, status, type, book, price, email_address, date, days) VALUES ('$eid', '$rid', '$FirstName', '$LastName', '$degree', '$status', '$type', '$book', '$charge', '$email', '$date', '$days')"); 
//Writes the photo to the server
   
   $AddGoTo = "../admin/manage-attendees.php?id=$rid";
   header("Location: $AddGoTo");
   }

//Add Book
if ((isset($_POST["Book"])) && ($_POST["Book"] == "Yes")) {
  $image = ""; $image = $image . basename( $_FILES['image']['name']); 
  $title = mysqli_real_escape_string($SMB, $_POST['title']);
  $edition = mysqli_real_escape_string($SMB, $_POST['edition']);
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $price =$_POST['price'];
  $stock =$_POST['stock'];
  $newImage = "Successful-Medical-Billing-".$image;
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Books (title, edition, description, price, stock, image) VALUES ('$title', '$edition', '$description', '$price', '$stock', '$newImage')"); 
//Writes the photo to the server
	if(move_uploaded_file($_FILES['image']['tmp_name'], "../images/" .$newImage));
   
   $AddGoTo = "../admin/books.php";
   header("Location: $AddGoTo");
   }

//Add Menu Item
if ((isset($_POST["type"])) && ($_POST["type"] == "Sirona Summit")) {
  $start_date = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['start_date'])));
  $end_date = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['end_date'])));
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $type = $_POST['type'];  
  $location = mysqli_real_escape_string($SMB, $_POST['location']); 
  $street_address = mysqli_real_escape_string($SMB, $_POST['street_address']); 
  $city =$_POST['city']; 
  $state =$_POST['state']; 
  $zip =$_POST['zip_code']; 
  $link =$_POST['event_link']; 
  $Place = $_POST['city'].", ".$_POST['state'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Courses (start_date, end_date, type, description, location, street_address, city, state, zip_code, event_link) VALUES ('$start_date', '$end_date', '$type', '$description', '$location', '$street_address', '$city', '$state', '$zip', '$link')"); 
 $GetID = mysqli_insert_id($SMB);
 
  mysqli_query($SMB, "INSERT INTO Schedule (eid, start_date, end_date, title, location) VALUES ('$GetID', '$start_date', '$end_date', '$type', '$Place')"); 
//Writes the photo to the server
   
   $AddGoTo = "../admin/sironia-summits.php";
   header("Location: $AddGoTo");
   }
  
 //Add Calender Event
if ((isset($_POST["Calendar"])) && ($_POST["Calendar"] == "Yes")) {
  $start_date = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['start_date'])));
  $end_date = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['end_date'])));
  $title = mysqli_real_escape_string($SMB, $_POST['title']);  
  $EID = $_POST['eid']; 
  $Place = mysqli_real_escape_string($SMB, $_POST['city']).", ".$_POST['state'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Schedule (start_date, end_date, title, location, eid) VALUES ('$start_date', '$end_date', '$title', '$Place', '$EID')"); 
   
   $AddGoTo = "../admin/manage-calendar.php";
   header("Location: $AddGoTo");
   } 
   
//Add Other Event
if ((isset($_POST["type"])) && ($_POST["type"] == "Other")) {
  $start_date = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['start_date'])));
  $end_date = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['end_date'])));
  $description = mysqli_real_escape_string($SMB, $_POST['description']);
  $type =$_POST['type'];  
  $title = mysqli_real_escape_string($SMB, $_POST['title']);  
  $location = mysqli_real_escape_string($SMB, $_POST['location']); 
  $street_address = mysqli_real_escape_string($SMB, $_POST['street_address']); 
  $city = mysqli_real_escape_string($SMB, $_POST['city']); 
  $state =$_POST['state']; 
  $zip =$_POST['zip_code']; 
  $Host =$_POST['host']; 
  $Primary =$_POST['primary_contact']; 
  $Secondary =$_POST['secondary_contact']; 
  $Primary_Email =$_POST['primary_email']; 
  $Secondary_Email =$_POST['secondary_email']; 
  $Phone =$_POST['phone_number']; 
  $Time =$_POST['time']; 
  $link =$_POST['event_link']; 
  $Place = mysqli_real_escape_string($SMB, $_POST['city']).", ".$_POST['state'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Courses (start_date, end_date, type, description, location, street_address, city, state, zip_code, event_link, title, host, primary_contact, primary_email, phone_number, secondary_contact, secondary_email, time) VALUES ('$start_date', '$end_date', '$type', '$description', '$location', '$street_address', '$city', '$state', '$zip', '$link', '$title', '$Host', '$Primary', '$Primary_Email', '$Phone', '$Secondary', '$Secondary_Email', '$Time')"); 
 
 $GetID = mysqli_insert_id($SMB);
 
  mysqli_query($SMB, "INSERT INTO Schedule (eid, start_date, end_date, title, location) VALUES ('$GetID','$start_date', '$end_date', '$title', '$Place')"); 
//Writes the photo to the server
   
   $AddGoTo = "../admin/other-events.php";
   header("Location: $AddGoTo");
   }
   
  
   
   //Add SMB Course
if ((isset($_POST["type"])) && ($_POST["type"] == "SMB Course") && ($_POST["Add"] == "SMB Course")) {
  $start_date = date('Y-m-d', strtotime(str_replace('-', '/', $_POST['start_date'])));
  $type =$_POST['type'];  
  $location = mysqli_real_escape_string($SMB, $_POST['location']); 
  $street_address = mysqli_real_escape_string($SMB, $_POST['street_address']); 
  $city = mysqli_real_escape_string($SMB, $_POST['city']); 
  $state =$_POST['state']; 
  $zip =$_POST['zip_code']; 
  $RefresherQty =$_POST['refresher_qty'];
  $stock =$_POST['stock']; 
  $CE =$_POST['CE']; 
  $Host =$_POST['host']; 
  $Primary =$_POST['primary_contact']; 
  $Secondary =$_POST['secondary_contact']; 
  $Primary_Email =$_POST['primary_email']; 
  $Secondary_Email =$_POST['secondary_email']; 
  $Phone =$_POST['phone_number']; 
  $Time =$_POST['time']; 
  $Level =$_POST['level'];
  $Place = mysqli_real_escape_string($SMB, $_POST['city']).", ".$_POST['state'];
  $portal_password = $_POST['portal_password']; 
  $pre_register = $_POST['pre_register']; 
  $status = $_POST['status']; 
  $honorarium = $_POST['honorarium'];
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Courses (start_date, end_date, type, location, street_address, city, state, zip_code, refresher_qty, stock, CE, host, primary_contact, primary_email, phone_number, secondary_contact, secondary_email, time, level, portal_password, pre_register, status, honorarium) VALUES ('$start_date', '$start_date', '$type', '$location', '$street_address', '$city', '$state', '$zip', '$RefresherQty', '$stock', '$CE', '$Host', '$Primary', '$Primary_Email', '$Phone', '$Secondary', '$Secondary_Email', '$Time', '$Level', '$portal_password', '$pre_register', '$status', '$honorarium')"); 
//Writes the photo to the server
$GetID = mysqli_insert_id($SMB);

  mysqli_query($SMB, "INSERT INTO Schedule (eid, start_date, end_date, title, location) VALUES ('$GetID', '$start_date', '$start_date', '$type', '$Place')"); 
   
   $AddGoTo = "../admin/SMB-courses.php";
   header("Location: $AddGoTo");
   }
   
//Add 2 Day SMB Course
if ((isset($_POST["Add"])) && ($_POST["Add"] == "2 Day")) {
  $type = 'SMB Course';  
  $days = '2'; 
  $day_1 = $_POST['day_1']; 
  $day_2 = $_POST['day_2'];   
  $status = $_POST['status'];
  $level = $_POST['level'];
  $CE = $_POST['CE'];
  $CE_Hours = $_POST['CE_Hours'];
  $CE_VideoHrs = $_POST['CE_VideoHrs'];
  $portal_password = $_POST['portal_password'];
	

$query_Day1 = "SELECT * FROM Courses WHERE id='$day_1'";
$Day1 = mysqli_query($SMB, $query_Day1, $SMB) or die(mysqli_error());
$row_Day1 = mysqli_fetch_assoc($Day1);
$totalRows_Day1 = mysqli_num_rows($Day1);
$StartDate = $row_Day1['start_date'];
$Day1_Venue = $row_Day1['location'];
$Day1_Location = $row_Day1['city'].','.$row_Day1['state'];
	

$query_Day2 = "SELECT * FROM Courses WHERE id='$day_2'";
$Day2 = mysqli_query($SMB, $query_Day2, $SMB) or die(mysqli_error());
$row_Day2 = mysqli_fetch_assoc($Day2);
$totalRows_Day2 = mysqli_num_rows($Day2);
$EndDate = $row_Day2['start_date'];
$Day2_Venue = $row_Day2['location'];
$Day2_City = $row_Day2['city'];
$Day2_State = $row_Day2['state'];
	
if($Day1_Venue == $Day2_Venue){
$Location = $Day1_Venue;
}
	else {
		$Location = $Day1_Venue.'/'.$Day2_Venue;
	}
	

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Courses (type, status, level, days, day_1, day_2, start_date, end_date, location, city, state, CE, CE_Hours, CE_VideoHrs, portal_password) VALUES ('$type', '$status', '$level', '$days', '$day_1', '$day_2', '$StartDate', '$EndDate', '$Location', '$Day2_City', '$Day2_State', '$CE', '$CE_Hours', '$CE_VideoHrs', '$portal_password')");
 
   
   $AddGoTo = "../admin/SMB-courses.php";
   header("Location: $AddGoTo");
   }
   
//Add Support Option
if ((isset($_POST["Support"])) && ($_POST["Support"] == "Yes")) {
  $name =$_POST['name'];
  $description = mysqli_real_escape_string($SMB, $_POST['description']);  
  $price =$_POST['price']; 

// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SupportOptions (name, description, price) VALUES ('$name', '$description', '$price')"); 
//Writes the photo to the server
   
   $AddGoTo = "../admin/manage-support.php";
   header("Location: $AddGoTo");
   }
   
   //Add Admin
if ((isset($_POST["Password"])) && ($_POST["Password"] == "Yes")) {
  $username = mysqli_real_escape_string($SMB, $_POST['username']);
  $password = mysqli_real_escape_string($SMB, $_POST['password']);  

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Admin (username, password) VALUES ('$username', '$password')"); 
//Writes the photo to the server
   
   $AddGoTo = "../admin/admin.php";
   header("Location: $AddGoTo");
   }
   
   //Add Portal Admin
if ((isset($_POST["PortalAdmin"])) && ($_POST["PortalAdmin"] == "Yes")) {
  $username = mysqli_real_escape_string($SMB, $_POST['username']);
  $password = mysqli_real_escape_string($SMB, $_POST['password']);
  $start = date('Y-m-d', strtotime($_POST['start_date']));  
  $end = date('Y-m-d', strtotime($_POST['end_date'])); 
  $type = $_POST['type'];
  $admin = $_POST['admin'];     

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO users (username, password, start_date, end_date, type, admin) VALUES ('$username', '$password', '$start', '$end', '$type', '$admin')"); 
//Writes the photo to the server
  
   $AddGoTo = "../admin/admin.php";
   header("Location: $AddGoTo");
   }
   
     //Add Portal Admin
if ((isset($_POST["AddFile"])) && ($_POST["AddFile"] == "Yes")) {
  $pid = $_POST['pid'];
  $fid = $_POST['fid'];
  $tid = $_POST['tid']; 
  $sort = $_POST['sort'];        

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO AttendeePortal_Show (pid, fid, tid, sort) VALUES ('$pid', '$fid', '$tid', '$sort')"); 
//Writes the photo to the server
  
   $AddGoTo = "../admin/edit-portal-page.php?id=$pid";
   header("Location: $AddGoTo");
   }
   
       //Add Portal Admin
if ((isset($_POST["AddVideo"])) && ($_POST["AddVideo"] == "Yes")) {
  $pid = $_POST['pid'];
  $vid = $_POST['vid'];
  $tid = $_POST['tid']; 
  $sort = $_POST['sort'];

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO AttendeePortal_Show (pid, vid, tid, sort) VALUES ('$pid', '$vid', '$tid', '$sort')"); 
//Writes the photo to the server
  
   $AddGoTo = "../admin/edit-portal-page.php?id=$pid";
   header("Location: $AddGoTo");
   }
   
//Add Course Promo
if ((isset($_POST["CoursePromo"])) && ($_POST["CoursePromo"] == "Yes")) {
  $eid = $_POST['eid'];
  $start = date('Y-m-d', strtotime($_POST['start_date']));  
  $end = date('Y-m-d', strtotime($_POST['end_date'])); 
  $code = $_POST['code'];   
  $type = $_POST['type'];   
  $amount = $_POST['amount']; 
  $percent = $_POST['percent'];     

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO DiscountCodes (eid, start_date, end_date, code, type, amount, percent) VALUES ('$eid', '$start', '$end', '$code', '$type', '$amount', '$percent')"); 
//Writes the photo to the server
  
   $AddGoTo = "../admin/edit-SMB-courses.php?course=$eid";
   header("Location: $AddGoTo");
   }

//Add Course Promo for 2 day Courses
if ((isset($_POST["CoursePromo2"])) && ($_POST["CoursePromo2"] == "Yes")) {
  $eid = $_POST['eid'];
  $start = date('Y-m-d', strtotime($_POST['start_date']));  
  $end = date('Y-m-d', strtotime($_POST['end_date'])); 
  $code = $_POST['code'];   
  $type = $_POST['type'];   
  $amount = $_POST['amount']; 
  $percent = $_POST['percent'];     

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO DiscountCodes (eid, start_date, end_date, code, type, amount, percent) VALUES ('$eid', '$start', '$end', '$code', '$type', '$amount', '$percent')"); 
//Writes the photo to the server
  
   $AddGoTo = "../admin/edit-2-day-course.php?course=$eid";
   header("Location: $AddGoTo");
   }
   
  //Add Course Promo
if ((isset($_POST["BookPromo"])) && ($_POST["BookPromo"] == "Yes")) {
  $bid = $_POST['bid'];
  $start = date('Y-m-d', strtotime($_POST['start_date']));  
  $end = date('Y-m-d', strtotime($_POST['end_date'])); 
  $code = $_POST['code'];   
  $type = $_POST['type'];   
  $amount = $_POST['amount']; 
  $percent = $_POST['percent'];     

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO DiscountCodes (bid, start_date, end_date, code, type, amount, percent) VALUES ('$bid', '$start', '$end', '$code', '$type', '$amount', '$percent')"); 
//Writes the photo to the server
  
   $AddGoTo = "../admin/edit-book.php?book=$bid";
   header("Location: $AddGoTo");
   }

 //Add Universal Promo
if ((isset($_POST["UniversalPromo"])) && ($_POST["UniversalPromo"] == "Yes")) {
  $start = date('Y-m-d 00:00:00', strtotime($_POST['promo_start']));  
  $end = date('Y-m-d 23:59:00', strtotime($_POST['promo_end'])); 
  $code = $_POST['promo'];   
  $type = $_POST['type'];   
  $amount = $_POST['amount']; 
  $percent = $_POST['percent'];
  $today = date('Y-m-d');
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMB_Promo_Code (start_date, end_date, promo, type, amount, percent, date) VALUES ('$start', '$end', '$code', '$type', '$amount', '$percent', '$today')"); 
//Writes the photo to the server
 $PromoID = mysqli_insert_id($SMB);
  
   $AddGoTo = "../admin/promo-items.php?promo=$PromoID";
   header("Location: $AddGoTo");
   }
//Add Universal Promo Items
if ((isset($_POST["UniversalPromo_Items"])) && ($_POST["UniversalPromo_Items"] == "Yes")) {  
  $type = $_POST['type'];   
  $amount = $_POST['amount']; 
  $percent = $_POST['percent'];
  $today = date('Y-m-d');
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO SMB_Promo_Code (start_date, end_date, promo, type, amount, percent, date) VALUES ('$start', '$end', '$code', '$type', '$amount', '$percent', '$today')"); 
//Writes the photo to the server
 $PromoID = mysqli_insert_id($SMB);
  
   $AddGoTo = "../admin/promo-items.php?promo=$PromoID";
   header("Location: $AddGoTo");
   }
   
  //Add Practice
if ((isset($_POST["Prospect"])) && ($_POST["Prospect"] == "Yes")) {
  $practice = mysqli_real_escape_string($SMB, (stripslashes($_POST['practice'])));
  $dentist = mysqli_real_escape_string($SMB, (stripslashes($_POST['dentist'])));
  $address = mysqli_real_escape_string($SMB, (stripslashes($_POST['address'])));
  $city = mysqli_real_escape_string($SMB, (stripslashes($_POST['city'])));
  $state =$_POST['state'];
  $zip =$_POST['zip'];
  $phone =$_POST['phone_number'];
  $email =$_POST['email_address'];
  $Now = date('Y-m-d'); 
      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Prospects (practice, dentist, address, city, state, zip_code, phone_number, email_address, date_added) VALUES ('$practice', '$dentist', '$address', '$city', '$state', '$zip', '$phone', '$email', '$Now')"); 
   
   $AddGoTo = "../admin/manage-prospects.php";
   header("Location: $AddGoTo");
   }

//Add Portal User
if ((isset($_POST["PortalUser"])) && ($_POST["PortalUser"] == "Yes")) {
  $username = mysqli_real_escape_string($SMB, $_POST['username']);
  $password = mysqli_real_escape_string($SMB, $_POST['password']);
  $start = date('Y-m-d', strtotime($_POST['start_date']));  
  $end = date('Y-m-d', strtotime($_POST['end_date'])); 
  $type = $_POST['type'];
$Other = 1;

      
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO users (username, password, start_date, end_date, type, Other) VALUES ('$username', '$password', '$start', '$end', '$type', '$Other')"); 
//Writes the photo to the server
  
   $AddGoTo = "../admin/manage-portal.php";
   header("Location: $AddGoTo");
   }

//Add Host A Course Type
if ((isset($_POST["Host_Type"])) && ($_POST["Host_Type"] == "Add")) { 
  $title = mysqli_real_escape_string($SMB, $_POST['title']);  
  $length = mysqli_real_escape_string($SMB, $_POST['length']); 
  
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Host_Event_Types (title, length) VALUES ('$title', '$length')"); 

   $AddGoTo = "../admin/host-a-course.php";
   header("Location: $AddGoTo");
   }

 //Add Affiliates
if ((isset($_POST["Affiliates"])) && ($_POST["Affiliates"] == "Add")) {
  $title = mysqli_real_escape_string($SMB, $_POST['title']);  
  $content = mysqli_real_escape_string($SMB, $_POST['content']); 
  $sort = $_POST['sort'];
  $GetSMB = $_POST['SMB'];
  $GetSMBDU = $_POST['SMBDU'];	
// Connects to your Database

//Writes the information to the database
 mysqli_query($SMB, "INSERT INTO Affiliates (title, content, sort, SMB, SMBDU) VALUES ('$title', '$content', '$sort', '$GetSMB', '$GetSMBDU')"); 
   $AddGoTo = "../admin/affiliates.php";
   header("Location: $AddGoTo");      
   }
?>