session_start(); $manage=0; if (session_is_registered("LLC")) { $manage=1; $user = $_SESSION['UNAME']; } else if (!session_is_registered("SR")) { // if session check fails, invoke error handler header("Location: reservation.php"); exit(); } $ID = $_SESSION['FID']; $Semester = isset($_GET['semester']) ? $_GET['semester'] : ""; list ($semester, $syear) = split (' ', $Semester); $Room = isset($_GET['rm']) ? $_GET['rm'] : "LLC263"; $Date = isset($_GET['d']) ? $_GET['d'] : ""; $Time = isset($_GET['t']) ? $_GET['t'] : ""; include("../include/dbconfig.php"); $connection = mysql_connect($db_host, $db_user, $db_pass) or die ("Unable to connect!"); mysql_select_db($db_name); /* if ($manage == 1) { $query = "SELECT FirstName, LastName from userlist WHERE UserName = '$user'"; } else { $query = "SELECT FirstName, LastName from SR_instructor WHERE InstructorID = '$ID'"; } $result = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error()); $row = mysql_fetch_array($result); $FirstName = $row[0]; $LastName = $row[1]; $query = "SELECT Title from SR_room where RoomNo='$Room'"; $result = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error()); $row = mysql_fetch_array($result); $Title = $row[0]; */ ?>
if ($manage == 1)
{
print <<
END;
}
else
{
print <<Edit this reservationEND; if ($Date <> '') { $query = "SELECT SR_reservation.EndTime, CourseID, FirstName, LastName, SR_reservation.ClassID, Home, Cell, Extension, Email, SR_reservation.StudentNum, Tasks, SpecialNeeds, CourseTitle, Days, SR_course.BeginTime, SR_course.EndTime, SR_reservation.InstructorID from SR_reservation, SR_instructor, SR_course WHERE Date = '$Date' and "; $query .= "StartTime='$Time' and SR_reservation.RoomNo='$Room' and SR_reservation.ClassID=SR_course.ClassID and SR_reservation.InstructorID=SR_instructor.InstructorID and CONCAT(SR_course.Semester, ' ', SR_course.Year) = '$Semester'"; $result = mysql_query($query, $connection) or die ("Error in query: $query. " . mysql_error()); $row = mysql_fetch_row($result); if ($manage == 0 && $ID != $row[16]) { print "You can not edit this reservation. |