Code:
<? require("../glimpse.php"); securezone();
if(!$exodus_dkp) { redirect("main.php"); exit(); }
$database = new Psql("dbname=exodus user=bleach");
$id = $addslashes($_GET[id]); if(!$id) redirect("events.php");
$event = new Result($database, "select e.id, r.name as \"type\", e.description,
e.date, e. time, e.creator, e.dkp, e.results from tbl_event e, tbl_raid r where
e.id = '$id' and e.raid = r.id order by e.date");
if (!$event->fetcharray())
{
redirect("events.php");
exit();
}
if(clicked("addattendie"))
{
if($_POST[attendiename] && $_POST[attendiedkp])
{
$database->exec("insert into tbl_dkp (event, dkp, member, note) values ('$id
','" . addslashes($_POST[attendiedkp]) . "','" . addslashes($_POST[attendiename]
) . "','Attendence')");
$database->exec("update tbl_event set creator='" . $_SESSION[exodus_username
] . "' where id='$id'");
}
redirect("viewevent.php?id=$id"); exit();
}
if(clicked("adddrop"))
{
if($_POST[dropitem] && $_POST[dropmember])
{
$dkp = new Result($database, "select name, dkp from tbl_item where id='" . $
_POST[dropitem] . "'");
$dkp->fetcharray();
if($_POST[dropvalue]) $dkp->row[dkp] = addslashes($_POST[dropvalue]);
$database->exec("insert into tbl_dkp (event, dkp, member, note) values ('$id
','-" . $dkp->row[dkp] . "','" . addslashes($_POST[dropmember]) . "','" . addsla
shes($dkp->row[name]) . "')");
$database->exec("update tbl_event set creator='" . $_SESSION[exodus_username
] . "' where id='$id'");
}
redirect("viewevent.php?id=$id"); exit();
}
if($_GET[delete_attendie])
{
$database->exec("delete from tbl_dkp where id='".addslashes($_GET[delete_atten
die])."'");
$database->exec("update tbl_event set creator='" . $_SESSION[exodus_username]
. "' where id='$id'");
redirect("viewevent.php?id=$id"); exit();
}
if($_GET[delete_drop])
{
$database->exec("delete from tbl_dkp where id='".addslashes($_GET[delete_drop]
)."'");
$database->exec("update tbl_event set creator='" . $_SESSION[exodus_username]
. "' where id='$id'");
redirect("viewevent.php?id=$id"); exit();
}
if(clicked("updatedetails"))
{
$database->exec("update tbl_event set creator='" . $_SESSION[exodus_username]
. "', results='" . addslashes(htmlentities($_POST[results])) . "' where id='$id'
");
redirect("viewevent.php?id=$id"); exit();
}
$webpage = new Html();
$webpage->start("view event");
$webpage->formstart("viewevent.php?id=$id");
echo "<a href=\"main.php\">Return to main</a>
\n";
echo "<a href=\"events.php\">Return to events</a>
\n";
echo "<input type=\"hidden\" name=\"id\" value=\"$id\">\n";
echo "Event: " . $event->row[id] . "
\n";
echo "Type: " . $event->row[type] . "
\n";
echo "Time: " . $event->row[date] . " " . $event->row[time] . "
\n";
echo "Description: " . $event->row[description] . "
\n";
echo "Last Modified By: " . $event->row[creator] . "
\n";
$attendies = new Table($database, "select d.id as \"reference\", m.name as \"mem
ber\", d.dkp from tbl_dkp d, tbl_member m where d.dkp > 0 and d.event='$id' and
d.member=m.id order by m.name");
$attendies->title="<center>attendies</center>";
$attendies->tableopts="border=\"1\"";
$attendies->addcommand("delete","viewevent.php?id=$id&delete_attendie=","\$this-
>row[reference]");
$attendies->display();
echo "
\n";
$members = new Result($database, "select * from tbl_member where active='true' o
rder by name");
echo $webpage->selectstart("attendiename");
$webpage->selectoption("attendiename","","--Select Member--");
while ($members->fetcharray())
$webpage->selectoption("attendiename",$members->row[id],$members->row[name]);
echo $webpage->selectend() . " Member
\n";
echo $webpage->formtext("attendiedkp") . " DKP Awarded
\n";
echo $webpage->formsubmit("Add Attendie","addattendie") . "
\n";
$drops = new Table($database, "select d.id as \"reference\", m.name as \"member\
", d.dkp, d.note as \"item\" from tbl_member m, tbl_dkp d where d.dkp < 1 and d.
event = $id and d.member=m.id order by m.name");
$drops->title = "<center>drops</center>";
$drops->tableopts = "border=\"1\"";
$drops->addcommand("delete","viewevent.php?id=$id&delete_drop=","\$this->row[ref
erence]");
$drops->display();
echo "
\n";
$drops = new Result($database,"select * from tbl_item order by name");
echo $webpage->selectstart("dropitem");
$webpage->selectoption("dropitem","","--Select Item--");
while ($drops->fetcharray())
$webpage->selectoption("dropitem",$drops->row[id],$drops->row[name]." (".$drop
s->row[dkp]." dkp)");
echo $webpage->selectend() . " Item
\n";
$members = new Result($database, "select * from tbl_member where active='true' o
rder by name");
echo $webpage->selectstart("dropmember");
$webpage->selectoption("dropmember","","--Select Member--");
while ($members->fetcharray())
$webpage->selectoption("dropmember",$members->row[id],$members->row[name]);
echo $webpage->selectend() . " Member Received
\n";
echo $webpage->formtext("dropvalue") . " Dkp value if different from listed.
\n";
echo $webpage->formsubmit("Add Drop","adddrop");
echo "
\nDetails
\n<textarea name=\"results\" cols=80 rows=10>";
echo $event->row[results];
echo "</textarea>";
echo "\n
" . $webpage->formsubmit("Update Details","updatedetails");
$webpage->formend();
$webpage->end();
The page itself looks something like this..