<?php include('_mod_security.php'); ?>
<?php
	switch($_GET['func']) :
		case 'primary' :	
			mysqli_query($GLOBALS['con'], 'START TRANSACTION');
			$sql = "INSERT INTO guests (user_id, event_id, guest_type, salutation, last_name, first_name, middle_name, suffix, street, street2, city, state, zip, country, phone, mobile, email) ".
					"SELECT i.user_id, i.event_id, 'P', i.salutation, i.last_name, i.first_name, i.middle_name, i.suffix, i.street, i.street2, i.city, i.state, i.zip, i.country, i.phone, i.mobile, i.email ".
					 "FROM import_guests i WHERE i.id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
							"AND i.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND i.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (!$result) :
				mysqli_query($GLOBALS['con'], 'ROLLBACK');
				echo 'Error!';
			else :
				$sql = "DELETE FROM import_guests WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
								"AND user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
				$result = mysqli_query($GLOBALS['con'], $sql);
				if (!$result) :
					mysqli_query($GLOBALS['con'], 'ROLLBACK');
					echo 'Error!';
				else :
					mysqli_query($GLOBALS['con'], 'COMMIT');
					echo 'Success!';
				endif;
			endif;
			break;
		case 'secondary' :	
			mysqli_query($GLOBALS['con'], 'START TRANSACTION');
			$sql = "INSERT INTO guests (user_id, event_id, guest_type, salutation, last_name, first_name, middle_name, suffix, street, street2, city, state, zip, country, phone, mobile, email, primary_guest_id) ".
					"SELECT i.user_id, i.event_id, 'S', i.salutation, i.last_name, i.first_name, i.middle_name, i.suffix, i.street, i.street2, i.city, i.state, i.zip, i.country, i.phone, i.mobile, i.email, ".
					mysqli_real_escape_string($GLOBALS['con'], $_GET['primary_id'])." ".
					 "FROM import_guests i WHERE i.id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
							"AND i.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND i.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (!$result) :
				mysqli_query($GLOBALS['con'], 'ROLLBACK');
				echo 'Error!';
			else :
				$sql = "DELETE FROM import_guests WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
								"AND user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
				$result = mysqli_query($GLOBALS['con'], $sql);
				if (!$result) :
					mysqli_query($GLOBALS['con'], 'ROLLBACK');
					echo 'Error!';
				else :
					mysqli_query($GLOBALS['con'], 'COMMIT');
					echo 'Success!';
				endif;
			endif;
			break;
		case 'child' :	
			mysqli_query($GLOBALS['con'], 'START TRANSACTION');
			$sql = "INSERT INTO guests (user_id, event_id, guest_type, salutation, last_name, first_name, middle_name, suffix, street, street2, city, state, zip, country, phone, mobile, email, primary_guest_id) ".
					"SELECT i.user_id, i.event_id, 'C', i.salutation, i.last_name, i.first_name, i.middle_name, i.suffix, i.street, i.street2, i.city, i.state, i.zip, i.country, i.phone, i.mobile, i.email, ".
					mysqli_real_escape_string($GLOBALS['con'], $_GET['primary_id'])." ".
					 "FROM import_guests i WHERE i.id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
							"AND i.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND i.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (!$result) :
				mysqli_query($GLOBALS['con'], 'ROLLBACK');
				echo 'Error!';
			else :
				$sql = "DELETE FROM import_guests WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
								"AND user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
				$result = mysqli_query($GLOBALS['con'], $sql);
				if (!$result) :
					mysqli_query($GLOBALS['con'], 'ROLLBACK');
					echo 'Error!';
				else :
					mysqli_query($GLOBALS['con'], 'COMMIT');
					echo 'Success!';
				endif;
			endif;
			break;
		case 'child_individual' :	
			mysqli_query($GLOBALS['con'], 'START TRANSACTION');
			$sql = "INSERT INTO guests (user_id, event_id, guest_type, salutation, last_name, first_name, middle_name, suffix, street, street2, city, state, zip, country, phone, mobile, email) ".
					"SELECT i.user_id, i.event_id, 'C', i.salutation, i.last_name, i.first_name, i.middle_name, i.suffix, i.street, i.street2, i.city, i.state, i.zip, i.country, i.phone, i.mobile, i.email ".
					 "FROM import_guests i WHERE i.id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
							"AND i.user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND i.event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (!$result) :
				mysqli_query($GLOBALS['con'], 'ROLLBACK');
				echo 'Error!';
			else :
				$sql = "DELETE FROM import_guests WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
								"AND user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
				$result = mysqli_query($GLOBALS['con'], $sql);
				if (!$result) :
					mysqli_query($GLOBALS['con'], 'ROLLBACK');
					echo 'Error!';
				else :
					mysqli_query($GLOBALS['con'], 'COMMIT');
					echo 'Success!';
				endif;
			endif;
			break;
		case 'discard' :	
			$sql = "DELETE FROM import_guests WHERE id = ".mysqli_real_escape_string($GLOBALS['con'], $_GET['id'])." ".
							"AND user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (!$result) :
				echo 'Error!';
			else :
				echo 'Success!';
			endif;
			break;
		case 'load_primary' :	
			$sql = "SELECT * FROM guests WHERE guest_type = 'P' ".
							"AND user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event'])." ".
							"ORDER BY last_name, first_name, state, city, zip";
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (mysqli_num_rows($result) > 0) :
				while ($row = mysqli_fetch_object($result)) :
					echo '<a href="javascript:set_primary_guest('.$row->id.');">'.format_guest_name_string($row->salutation, $row->first_name, $row->last_name, $row->suffix).' ('.$row->city.' '.$row->state.')</a><br />';
				endwhile;
			else :
				echo 'No Primary guests found!';
			endif;
			break;
		case 'discard_all' :	
			$sql = "DELETE FROM import_guests WHERE ".
							" user_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['user_id'])." AND event_id = ".mysqli_real_escape_string($GLOBALS['con'], $_SESSION['active_event']);
			$result = mysqli_query($GLOBALS['con'], $sql);
			if (!$result) :
				echo 'Error!';
			else :
				echo 'Success!';
			endif;
			break;
	endswitch;
	
?>