\n"; }
if (!@$_REQUEST['project']) { $errorsAndAlerts .= "You must select your project!
\n"; }
if (!@$_REQUEST['category']) { $errorsAndAlerts .= "You must select your category!
\n"; }
// Email Form Fields
// Get project name, rather than number
$listOptions = getListOptions('accounts', 'project');
$emailProject = "";
if (@$_REQUEST['project']) {
$emailProject = $listOptions[@$_REQUEST['project']];}
// Get category name, rather than number
$listOptions = getListOptions('accounts', 'category');
$emailCategory = "";
if (@$_REQUEST['category']) {
$emailCategory = $listOptions[@$_REQUEST['category']];}
// Get email list of those members with notifications on, and access to the project
$accounts = mysql_query_fetch_all_assoc("SELECT * FROM `{$TABLE_PREFIX}accounts` WHERE notifications = '1' AND project LIKE '%\t".intval(@$_REQUEST['project'])."\t%'");
$emailList = join(",", array_pluck($accounts, 'email'));
$emailTitle = @$_REQUEST['title'];
$emailContent = @$_REQUEST['content'];
$emailBy = @$CURRENT_USER['fullname'];
$emailSend = @$CURRENT_USER['email'];
// update record
if (!@$errorsAndAlerts) {
mysqlStrictMode(false); // disable Mysql strict errors for when a field isn't defined below (can be caused when fields are added later)
$query = "INSERT INTO `{$TABLE_PREFIX}$tableName` SET
createdDate = NOW(),
createdByUserNum = '" .intval( @$CURRENT_USER['num'] ). "',
updatedDate = NOW(),
updatedByUserNum = '" .intval( @$CURRENT_USER['num'] ). "',
title = '".mysql_escape( $_REQUEST['title'] )."',
project = '".mysql_escape( $_REQUEST['project'] )."',
category = '".mysql_escape( $_REQUEST['category'] )."',
content = '".mysql_escape( $_REQUEST['content'] )."'";
mysql_query($query) or die("MySQL Error:
\n". htmlspecialchars(mysql_error()) . "\n");
$newRecordNum = mysql_insert_id();
// adopt temp uploads (IMPORTANT - DON'T FORGET THIS STEP!!!)
adoptUploads($tableName, $preSaveTempId, $newRecordNum);
removeExpiredUploads(); // erase old expired uploads
// display thanks message and clear form
$errorsAndAlerts = "Thanks, we've added your record!";
$_REQUEST = array();
// Send email
$headers = 'From: noreply@murrays.com.au' . "\r\n" .
'MIME-Version: 1.0' . "\r\n" .
'Content-type: text/plain; charset=UTF-8' . "\r\n" .
'X-Mailer: PHP/' . phpversion();
$to = "$emailList";
$subject = "[PORTAL ITEM ADDED] - {$_SERVER['HTTP_HOST']}";
$message = "Hi,\n"
. "$emailBy ($emailSend) just added an item to the portal.\n"
. "\n"
. "$emailTitle \n"
. "$emailContent \n"
. "\n"
. "Status: $emailProject \n"
. "\n"
. "Category: $emailCategory \n"
. "\n"
. "{$_SERVER['HTTP_HOST']}\n";
$mailResult = @mail($to, $subject, $message, $headers);
if (!$mailResult) { die("Mail Error: $php_errormsg"); }
}
}
?>
Add Record