One Hat Cyber Team

Edit File: view_essay_app.php

<?
include("inc/header.php");

include("inc/fxn.php");

?>
<?
$clear_id=$_GET['clear_id'];
if($clear_id){
	$update=mysql_query("UPDATE clearance_status SET dean_verify='1',branch_verify='1' WHERE clear_id='$clear_id'");
	if($update){
		echo "Student Approved";
		include("inc/footer.php");
		
		$student_id=GetAny("clearance_status",$clear_id,"clear_id","stud_id");
		$row_details=GetMany("reg_profile",$student_id,"stud_id");
		$surname=$row_details['surname'];
		$othernames=$row_details['othernames'];
		$name= $surname." ".$othernames;
		$auth_num=$row_details['auth_num'];
		
		//send mail
		$email=$row_details['email']; 
		$str = "Nigerian Society of Engineers: 2012 Essay Competition Application Approval";
		 $html_data = '<html><head><title>'.$str.'</title></head><body bgcolor="#fff0ff" text="#990000"><table width="100%" align="center" border="0" cellspacing="0" cellpadding="0" bgcolor="#A2A1A6">
		  <tr>
    <td width="47%" bgcolor="#944B2A"><H1  ><span style="color:#ffffff">NSE 2012 INTER-UNIVERSITY ESSAY COMPETITION</span></H1>      </td>
  </tr>
</table></td></tr></table><h4>Dear '.$name.' </h4><h5>This is to acknowledge your application for the 2012 Inter-University Essay Competition.  Your application has been approved and you are qualified to take part in the competition  at a date and venue to be communicated to you in due course.<br> Your Registration Details are as follows<br>
<table width="100%" border="0" cellspacing="4" cellpadding="3">
 
<tr>
<td><strong>Surname </strong></td>
<td> '.$surname.' </td>
</tr>
<tr>
<td width="32%"><strong>Othernames</strong></td>
<td width="43%">'.$othernames.'  </td>
</tr>
<tr>
<td width="32%"><strong>Email</strong></td>
<td width="43%">'.$email.'  </td>
</tr>
<tr>
<td width="32%"><strong>Transaction Id</strong></td>
<td width="43%">'.$auth_num.'  </td>
</tr>
';
$html_data .= '<tr>
<td><strong>You can check your application status with your Surname and the Transaction id listed below</td>
<td><strong>:</strong></td>
</tr>
<tr>
<td><strong>Surname:</strong></td>
<td>'.$surname.'</td>
</tr>
<tr>
<td><strong>Transaction Id:</strong></td>
<td>'.$auth_num.'</td>
</tr>
</table>
<p> 
<br>Wishing you all the best.<br>
<br>This is an auto generated mail, please do not reply. </font></h6></body></html>';

include("mimemail/MIME.class");
$mime = new MIME_mail("info@nse.org.ng", $email, $str);
$mime->attach($html_data, "", HTML, BASE64);
$mime->send_mail();

header("refresh: 2; url=view_essay_app.php");
		
	}
}
elseif(!$clear_id){
	?>
<? include("search_form.php"); ?>
<?
if($_POST['uni']){
	$uni="AND reg_profile.school='$uni'";
}
else{
	$uni='';
}

switch ($_POST['status']){
	default:
		//$link="<a href=\"view_essay_app.php?clear_id=$clear_id\">Approve Application</a>";
		$status="AND (dean_verify='0' OR branch_verify='0')";
		break;
		
		case "1":
		$status="AND dean_verify='1' AND branch_verify='1'";
	$link="<font color=\"#FF0000\">Approved</font>";
	break;
	
	case "2":
	$status="AND (dean_verify='0' OR branch_verify='0')";
	//$link="<a href=\"view_essay_app.php?clear_id=$clear_id\">Approve Application</a>";
	break;
}
/*if($_POST['status']=='1'){
	$status="AND dean_verify='1' AND branch_verify='1'";
	$link="<font color=\"#FF0000\">Approved</font>";
}elseif($_POST['status']=='2'){
	$status="AND (dean_verify='0' OR branch_verify='0')";
	$link="<a href=\"view_essay_app.php?clear_id=$clear_id\">Approve Application</a>";
}
elseif($_POST['status']==''){
	$status="";
	$link="<font color=\"#FF0000\">Approved</font>";
}*/
?>
		
<p style="background-color:#CCC; width:180px; height:20px;"><strong>APPLICANTS</strong></p>
<table cellspacing="0" cellpadding="5" class="mytable" border="1" width="100%">
<th align="left">S/No</th><th align="left">Names</th><th align="left">School</th><th align="left">State</th><th align="left">NSE Branch</th><th>Approve Application</th>
<?
$sql="SELECT * FROM clearance_status,reg_profile WHERE clearance_status.stud_id=reg_profile.stud_id $uni $status";
$result=mysql_query($sql);
$count=mysql_num_rows($result);
if(!$count){
	echo "No record found";
}
$sno=0;
while ($row=mysql_fetch_array($result)){
	$sno++;
	$surname=$row['surname'];
	$othernames=$row['othernames'];
	$fullnames="$surname $othernames";
	$school_name=GetAny("universities",$row['school'],"id","name");
	$state_name=GetAny("state",$row['state_id'],"stateid","state_name");
	$branch_name=GetAny("branch",$row['branch_id'],"branchid","branch_name");
	$clear_id=$row['clear_id'];
	
?>
<tr id="myrow">
<td><? echo $sno ?></td><td><? echo $fullnames ?></td><td><? echo $school_name ?></td><td><? echo $state_name ?></td><td><? echo $branch_name ?></td><td>
<?
switch ($_POST['status']){
	default:
		$link="<a href=\"view_essay_app.php?clear_id=$clear_id\">Approve Application</a>";
		break;
		
		case "1":
		
	$link="<font color=\"#FF0000\">Approved</font>";
	break;
	
	case "2":
	
	$link="<a href=\"view_essay_app.php?clear_id=$clear_id\">Approve Application</a>";
	break;
}
echo $link;
?>
</td>
</tr>
<? } ?>
</table>

<? include("inc/footer.php"); ?>
	
<? }  ?>