createnewperson.php

一个页面界面的邮件程序

<?php
require_once("../inc/constants.inc.php");
require_once("../inc/properties.inc.php");
require_once("../inc/tools.inc.php");
require_once("../inc/db.inc.php");

header('Content-type: text/xml;');

if (!isset($_SESSION['user'])) {
	die();
}

if (isset($_POST['firstname']))
	$param = $_POST;
else if (isset($_GET['firstname']))
	$param = $_GET;
else
	die("Attribute 'firstname' not found ! Can't create somebody");

$idgroup = prepSqlValue($param['idgroup']);
$firstname = prepSqlValue($param['firstname']);
$lastname = strtoupper(prepSqlValue($param['lastname']));
$title = prepSqlValue($param['title']);
$note = ((isset($param['note'])) ? prepSqlValue($param['note']) : "NULL");

$birthdate = $param['birthdate'];
if (isset($birthdate) && $birthdate != "") {
	$dte = split("/", $birthdate);
	if (sizeof($dte) == 3) {
		$birthdate = "\"" . $dte[2] . "-" . $dte[1] . "-" . $dte[0] . "\"";
	}
} else {
	$birthdate = "\"\"";
}

$sql = "INSERT INTO person (idgroup, firstname, lastname, birthdate, title, note) " .
		"VALUES ($idgroup, $firstname, $lastname, $birthdate, $title, $note)";
$result = mysql_query($sql) or die("Error in SQL : " . $sql);

$idPerson = mysql_insert_id();

$sql = "INSERT INTO user_person (idperson, iduser, role) " .
		"VALUES ($idPerson, '". $_SESSION['user'] ."', ". KNOWS .")";
$result = mysql_query($sql) or die("Error in SQL : " . $sql);


$dom = new DOMDocument('1.0', ENCODING);
$root = $dom->appendChild(new DOMElement('response'));

addGroups($root);
addContactTypes($root);
addAddressTitles($root);

$sql = "SELECT P.id as personID, P.*, UP.*, G.id as groupID, G.* FROM `person` P, `user` U, `user_person` UP, `group` G" .
		" WHERE UP.idperson = P.id AND UP.iduser = U.id AND P.idgroup = G.id AND G.iduser = U.id  AND U.id='" . $_SESSION['user'] . "' AND P.id =". $idPerson;

$result = mysql_query($sql);

$root->setAttribute("sql", prepShowValue($sql));

$root->setAttribute("createdPerson", "true");

if ($result && mysql_num_rows($result) > 0) {
	while ($line = mysql_fetch_assoc($result)) {
		addPersonNodeToXml($root, $line);
	}
}

echo $dom->saveXML();
?>