<?php
if (!isset($_SESSION)) {
  session_start();
}
?>
<?php require_once('Connections/xmasdb.php'); ?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  if (PHP_VERSION < 6) {
    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
  }

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);
  $theValue = trim($theValue);
  
  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
  $insertSQL = sprintf("INSERT INTO xmas09 (`Buyers First Name`, `Buyers Surname`, `Buyers Address 1`, `Buyers Address 2`, `Buyers Town`, `Buyers Address 3`, `Buyers Postcode`, `Buyers Country`, `Buyers Email`, Relationship, `Recipient First Name`, `Recipient Surname`, `Recipient Address 1`, `Recipient Address 2`, `Recipient Town`, `Recipient Address 3`, `Recipient Postcode`, `Recipient Country`, Letterhead, `Recipient Best Friend`, Pseudonym, `Recipient Gender`, `Recipient DOB`) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['buyerfirstname'], "text"),
                       GetSQLValueString($_POST['buyersurname'], "text"),
                       GetSQLValueString($_POST['buyeraddress1'], "text"),
                       GetSQLValueString($_POST['buyeraddress2'], "text"),
                       GetSQLValueString($_POST['buyertown'], "text"),
                       GetSQLValueString($_POST['buyeraddress3'], "text"),
                       GetSQLValueString($_POST['buyerpostcode'], "text"),
                       GetSQLValueString($_POST['buyercountry'], "text"),
                       GetSQLValueString($_POST['buyeremail'], "text"),
                       GetSQLValueString($_POST['relationship'], "text"),
                       GetSQLValueString($_POST['recipientfirstname'], "text"),
                       GetSQLValueString($_POST['recipientsurname'], "text"),
                       GetSQLValueString($_POST['recipientaddress1'], "text"),
                       GetSQLValueString($_POST['recipientaddress2'], "text"),
                       GetSQLValueString($_POST['recipienttown'], "text"),
                       GetSQLValueString($_POST['recipientaddress3'], "text"),
                       GetSQLValueString($_POST['recipientpostcode'], "text"),
                       GetSQLValueString($_POST['recipientcountry'], "text"),
                       GetSQLValueString($_POST['letterhead'], "text"),
                       GetSQLValueString($_POST['recipientbestfriend'], "text"),
					   GetSQLValueString($_POST['pseudonym'], "text"),
                       GetSQLValueString($_POST['recipientgender'], "text"),
                       GetSQLValueString($_POST['dobyear'].$_POST['dobmonth'].$_POST['dobday'], "text"));

  mysql_select_db($database_xmasdb, $xmasdb);
  $Result1 = mysql_query($insertSQL, $xmasdb) or die(mysql_error()); $_SESSION["id"] = mysql_insert_id();
  $insertGoTo = "stage2.php";
  if (isset($_SERVER['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $_SERVER['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $insertGoTo));
}

if ((isset($_POST["MM_update"])) && ($_POST["MM_update"] == "form1")) {
  $updateSQL = sprintf("UPDATE xmas09 SET `Buyers First Name`=%s, `Buyers Surname`=%s, `Buyers Address 1`=%s, `Buyers Address 2`=%s, `Buyers Town`=%s, `Buyers Address 3`=%s, `Buyers Postcode`=%s, `Buyers Country`=%s, `Buyers Email`=%s, Relationship=%s, `Recipient First Name`=%s, `Recipient Surname`=%s, `Recipient Address 1`=%s, `Recipient Address 2`=%s, `Recipient Town`=%s, `Recipient Address 3`=%s, `Recipient Postcode`=%s, `Recipient Country`=%s, Letterhead=%s, `Recipient Best Friend`=%s, Pseudonym=%s, `Recipient Gender`=%s WHERE id=%s",
                       GetSQLValueString($_POST['buyerfirstname'], "text"),
                       GetSQLValueString($_POST['buyersurname'], "text"),
                       GetSQLValueString($_POST['buyeraddress1'], "text"),
                       GetSQLValueString($_POST['buyeraddress2'], "text"),
                       GetSQLValueString($_POST['buyertown'], "text"),
                       GetSQLValueString($_POST['buyeraddress3'], "text"),
                       GetSQLValueString($_POST['buyerpostcode'], "text"),
                       GetSQLValueString($_POST['buyercountry'], "text"),
                       GetSQLValueString($_POST['buyeremail'], "text"),
                       GetSQLValueString($_POST['relationship'], "text"),
                       GetSQLValueString($_POST['recipientfirstname'], "text"),
                       GetSQLValueString($_POST['recipientsurname'], "text"),
                       GetSQLValueString($_POST['recipientaddress1'], "text"),
                       GetSQLValueString($_POST['recipientaddress2'], "text"),
                       GetSQLValueString($_POST['recipienttown'], "text"),
                       GetSQLValueString($_POST['recipientaddress3'], "text"),
                       GetSQLValueString($_POST['recipientpostcode'], "text"),
                       GetSQLValueString($_POST['recipientcountry'], "text"),
                       GetSQLValueString($_POST['letterhead'], "text"),
                       GetSQLValueString($_POST['recipientbestfriend'], "text"),
                       GetSQLValueString($_POST['pseudonym'], "text"),
                       GetSQLValueString($_POST['recipientgender'], "text"),
                       GetSQLValueString($_POST['hiddenField'], "int"));

  mysql_select_db($database_xmasdb, $xmasdb);
  $Result1 = mysql_query($updateSQL, $xmasdb) or die(mysql_error());

  $updateGoTo = "stage2.php";
  if (isset($_SERVER['QUERY_STRING'])) {
    $updateGoTo .= (strpos($updateGoTo, '?')) ? "&" : "?";
    $updateGoTo .= $_SERVER['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $updateGoTo));
}
$id_Recordset1 = "0";
if (isset($_SESSION['id'])) {
  $id_Recordset1 = $_SESSION['id'];
}
		  if (isset($_POST["edit"])) { 
mysql_select_db($database_xmasdb, $xmasdb);
$query_Recordset1 = sprintf("SELECT * FROM xmas09 WHERE id = %s", GetSQLValueString($id_Recordset1, "int"));
$Recordset1 = mysql_query($query_Recordset1, $xmasdb) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);
		  }
?>
<?php include_once('header.html'); ?>
        <SCRIPT LANGUAGE="JAVASCRIPT">
<!--
function capitalizeMe(obj) {
        val = obj.value;
        newVal = '';
        val = val.split(' ');
        for(var c=0; c < val.length; c++) {
                newVal += val[c].substring(0,1).toUpperCase() +
val[c].substring(1,val[c].length) + ' ';
        }
        obj.value = newVal;
}
function sameAddress(objId,objId2) { 
  with (document){ 
  if (getElementById){ var obj = getElementById(objId);} 
  if (obj) obj.value = getElementById(objId2).value;
  }	

}
//-->
</SCRIPT>
        <form name="form1" action="<?php echo $editFormAction; ?>" id="form1" method="POST">
          <table width="500" border="0" align="center" cellpadding="5" cellspacing="0">
            <tr>
              <td width="630" align="right"><div align="left"></div>                
                <h3 align="center" style="font-family: Geneva, Arial, Helvetica, sans-serif; font-size: 12px; color: #121870">Father Christmas Post is now closed for 2021.</h3>
                <p align="center" style="font-family: Geneva, Arial, Helvetica, sans-serif; font-size: 12px; color: #121870">If you have any queries relating to an order placed, please email us at <a href='mailto:support@fatherchristmaspost.co.uk'>support@fatherchristmaspost.co.uk</a></p>
                <p align="center" style="font-family: Geneva, Arial, Helvetica, sans-serif; font-size: 12px; color: #121870">We would like to take this opportunity to thank you for your custom and wish you all a very <span style="font-weight: bold">Merry Christmas and a Happy New Year</span></p>
              <p align="center" style="font-family: Geneva, Arial, Helvetica, sans-serif; font-size: 12px; color: #121870">Please come back and visit us again on the 1st of October 2022 when we will be open again for Christmas. </p></td>
            </tr>
          </table>
          <?php 
		  if (isset($_POST["edit"])) { ?>
          <input type="hidden" name="MM_update" value="form1" />
          <?php
mysql_free_result($Recordset1);
?>
		  <?php } else { ?>
		  <input type="hidden" name="MM_insert" value="form1" />
          <?php } ?>
        </form>
        <script type="text/javascript">
<!--

var sprytextfield1 = new Spry.Widget.ValidationTextField("sprytextfield1");
var sprytextfield2 = new Spry.Widget.ValidationTextField("sprytextfield2");
var sprytextfield3 = new Spry.Widget.ValidationTextField("sprytextfield3");
var sprytextfield4 = new Spry.Widget.ValidationTextField("sprytextfield4", "none", {isRequired:false});
var sprytextfield5 = new Spry.Widget.ValidationTextField("sprytextfield5");
var sprytextfield6 = new Spry.Widget.ValidationTextField("sprytextfield6");
var sprytextfield7 = new Spry.Widget.ValidationTextField("sprytextfield7", "email");
var sprytextfield8 = new Spry.Widget.ValidationTextField("sprytextfield8");
var sprytextfield9 = new Spry.Widget.ValidationTextField("sprytextfield9");
var sprytextfield10 = new Spry.Widget.ValidationTextField("sprytextfield10");
var sprytextfield11 = new Spry.Widget.ValidationTextField("sprytextfield11", "none", {isRequired:false});
var sprytextfield12 = new Spry.Widget.ValidationTextField("sprytextfield12");
var sprytextfield13 = new Spry.Widget.ValidationTextField("sprytextfield13");
var sprytextfield14 = new Spry.Widget.ValidationTextField("sprytextfield14");
var sprytextfield15 = new Spry.Widget.ValidationTextField("sprytextfield15", "none", {isRequired:false});
var sprytextfield16 = new Spry.Widget.ValidationTextField("sprytextfield16", "none", {isRequired:false});
var spryselect1 = new Spry.Widget.ValidationSelect("spryselect1");
var spryselect2 = new Spry.Widget.ValidationSelect("spryselect2");
var spryselect5 = new Spry.Widget.ValidationSelect("spryselect5");
var spryselect6 = new Spry.Widget.ValidationSelect("spryselect6");
var spryselect7 = new Spry.Widget.ValidationSelect("spryselect7");
var spryselect8 = new Spry.Widget.ValidationSelect("spryselect8");
var spryselect4 = new Spry.Widget.ValidationSelect("spryselect4");
var spryselect9 = new Spry.Widget.ValidationSelect("spryselect9");
var spryselect3 = new Spry.Widget.ValidationSelect("spryselect3");
//-->
</script>
        <?php include_once('footer.html'); ?>