<?php

function createUpdateQuery() {
	$query = "UPDATE User SET ";
	$query .= "`City`=".eqstr($_POST['City']).", ";
	$query .= ($_POST['Password'] ? "Password=".eqstr(md5($_POST['Password'])).", " : "");
	$query .= "`Password Question`=".eqstr($_POST['PasswordQuestion']).", ";
	$query .= "`Password Answer`=".eqstr($_POST['PasswordAnswer']).", ";
	$query .= "`Business Name`=".eqstr($_POST['BusinessName']).", ";
	$query .= "`Real Name`=".eqstr($_POST['RealName']).", ";
	$query .= "`Email`=".eqstr($_POST['Email']).", ";
	$query .= "`Address1`=".eqstr($_POST['Address1']).", "; 
	$query .= "`Address2`=".eqstr($_POST['Address2']).", ";
	$query .= "`Address3`=".eqstr($_POST['Address3']).", ";
	$query .= "`Town`=".eqstr($_POST['Town']).", ";
	$query .= "`County`=".eqstr($_POST['County']).", ";
	$query .= "`Country`=".eqstr($_POST['Country']).", ";
	$query .= "`Postcode`=".eqstr($_POST['Postcode']).", ";
	$query .= "`Tel`=".eqstr($_POST['Tel']).", ";
	$query .= "`Mobile`=".eqstr($_POST['Mobile']).", ";
	$query .= "`SMS Sender ID`=".eqstr($_POST['SMSSenderID']).", ";
	$query .= "`Omer Hour`=".eqstr($_POST['OmerHour']).", ";
	$query .= "`Omer Minute`=".eqstr($_POST['OmerMinute']).", ";
	$query .= "`Omer Reminder`=".eqstr(getShabbosTimes($_POST['OmerEmail'], $_POST['OmerSMS'])).", ";
	$query .= "`Allow KP Send`=".eqstr(($_POST['AllowKPSend']=='1')?'1':'0').", ";
	$query .= "`Allow Partners Send`=".eqstr(($_POST['AllowPartnersSend']=='1')?'1':'0').", ";	
	$query .= "`Prizedraw1`=".eqstr(($_POST['prizedraw1']=='1')?'1':'0').", ";	
	$query .= "`Shabbat Times`=".eqstr(getShabbosTimes($_POST['ShabbosTimesEmail'], $_POST['ShabbosTimesSMS']));
	$query .= " WHERE `ID`=".eqstr($_POST['ID']);
	
//	echo $query;
	
	return $query;
}

function createInsertQuery() {
	$query =  "INSERT INTO User (City, Username, Password, `Password Question`, `Password Answer`, `Business Name`, ";
	$query .= "`Real Name`, `Email`, `Address1`, `Address2`, `Address3`, `Town`, `County`, ";
	$query .= "`Country`, `Postcode`, `Tel`, `Mobile`, `SMS Sender ID`, `Omer Hour`, `Omer Minute`, `Omer Reminder`, `Allow KP Send`, `Allow Partners Send`, `Shabbat Times`, `Rights`, `Prizedraw1`) VALUES (";

	$query .= eqstr($_POST['City']).", ";
	$query .= eqstr($_POST['Username']).", ";
	$query .= eqstr(md5($_POST['Password'])).", ";
	$query .= eqstr($_POST['PasswordQuestion']).", ";
	$query .= eqstr($_POST['PasswordAnswer']).", ";
	$query .= eqstr($_POST['BusinessName']).", ";
	$query .= eqstr($_POST['RealName']).", ";
	$query .= eqstr($_POST['Email']).", ";
	$query .= eqstr($_POST['Address1']).", ";
	$query .= eqstr($_POST['Address2']).", ";
	$query .= eqstr($_POST['Address3']).", ";
	$query .= eqstr($_POST['Town']).", ";
	$query .= eqstr($_POST['County']).", ";
	$query .= eqstr($_POST['Country']).", ";
	$query .= eqstr($_POST['Postcode']).", ";
	$query .= eqstr($_POST['Tel']).", ";
	$query .= eqstr($_POST['Mobile']).", ";
	$query .= eqstr($_POST['SMSSenderID']).", ";
	$query .= eqstr($_POST['OmerHour']).", ";
	$query .= eqstr($_POST['OmerMinute']).", ";
	$query .= eqstr(getShabbosTimes($_POST['OmerEmail'], $_POST['OmerSMS'])).", ";
	$query .= eqstr(($_POST['AllowKPSend']=='1')?'1':'0').", ";
	$query .= eqstr(($_POST['AllowPartnersSend']=='1')?'1':'0').", ";		
	$query .= eqstr(getShabbosTimes($_POST['ShabbosTimesEmail'], $_POST['ShabbosTimesSMS'])).", ";
	$query .= eqstr('User').", ";
	$query .= eqstr(($_POST['prizedraw1']=='1')?'1':'0').")";
	
	return $query;
}

function createUserArray() {
	$user['ID'] = $_POST['ID'];
	$user['City'] = $_POST['City'];
	$user['Username'] = $_POST['Username'];
	$user['Password Question'] = $_POST['PasswordQuestion'];
	$user['Password Answer'] = $_POST['PasswordAnswer'];
	$user['Business Name'] = $_POST['BusinessName'];
	$user['Real Name'] = $_POST['RealName'];
	$user['Email'] = $_POST['Email'];
	$user['Address1'] = $_POST['Address1'];
	$user['Address2'] = $_POST['Address2'];
	$user['Address3'] = $_POST['Address3'];
	$user['Town'] = $_POST['Town'];
	$user['County'] = $_POST['County'];
	$user['Country'] = $_POST['Country'];
	$user['Postcode'] = $_POST['Postcode'];
	$user['Tel'] = $_POST['Tel'];
	$user['Mobile'] = $_POST['Mobile'];
	$user['SMS Sender ID'] = $_POST['SMSSenderID'];
	$user['Omer Hour'] = $_POST['OmerHour'];
	$user['Omer Minute'] = $_POST['OmerMinute'];
	$user['Omer Reminder'] = getShabbosTimes($_POST['OmerEmail'], $_POST['OmerSMS']);
	$user['Allow KP Send'] = $_POST['AllowKPSend'];
	$user['Allow Partners Send'] = $_POST['AllowPartnersSend'];
	$user['Shabbat Times'] = getShabbosTimes($_POST['ShabbosTimesEmail'], $_POST['ShabbosTimesSMS']);
	$user['Prizedraw1'] = ($_POST['prizedraw1']=='1')?'1':'0';

	return $user;
}

function getShabbosTimes( $email, $sms) {
	$shabbosTimes = $email;
	if($shabbosTimes != NULL) $shabbosTimes .= ',';
	$shabbosTimes .= $sms;
	return $shabbosTimes;
}


?><form method="POST" action="/site/control/details.php?loggedin=1&q=node%2F41">
	<p align="center">&nbsp;</p>
	<p align="center"><font face="Tahoma" size="2">You must login to access this 
	page.&nbsp; If you do not have an account, you can register for free by
	<a href="/site/node/63">clicking here</a>.</font></p>
	<table border=0 cellspacing=0 cellpadding=0 width="100%">
		<tr>
		<td align="center">
			<table border="0" width="300" cellspacing="0" cellpadding="0" id="table1">
				<tr>
					<td width="100%" colspan="2">
					<p align="center"><b><font face="Verdana">Login</font></b></td>
				</tr>
				<tr>
					<td width="50%">
					<p align="right">
					<font face="Verdana" size="2">Username</font></td>
					<td width="50%"><b><font size="2" face="Tahoma" color="#667BB4">
					<input name="user" size="17" style="padding:0; font-family: Verdana; font-size:10"></font></b></td>
				</tr>
				<tr>
					<td width="50%">
					<p align="right"><font face="Verdana" size="2">
					Password</font></td>
					<td width="50%"><b><font size="2" face="Tahoma" color="#667BB4">
					<input type="password" name="pass" size="17" style="padding:0; font-family: Verdana; font-size:10"></font></b></td>
				</tr>
				<tr>
					<td width="100%" colspan="2">
					<p align="center">
			<input type="submit" value="Login" name="Login" style="font-family: Verdana; font-size: 12"></td>
				</tr>
			</table>
		</td>
		</tr>
	</table>
</form>