';
echo '';
echo '| Room ID | ';
echo 'Room Name | ';
echo 'Owner | ';
echo '
';
while($b = mysql_fetch_assoc($sql)){
echo '';
echo '| '.$b['id'].' | ';
echo ''.htmlspecialchars($b['roomname']).' | ';
if($_POST['type'] == "roomname"){
echo ''.gebruiker($b['ownerid']).' | ';
}else{
echo ''.htmlspecialchars($_POST['search']).' | ';
}
echo '
';
}
echo '';
}
}
}else{
echo '';
}
}else{
echo $acc_denied;
}
}elseif($_GET['do'] == "edit"){
if(min_fuse('housekeeping_roommanagement', $my_id)){
if($_GET['editid']){
if($_POST['submit']){
$a = mysql_query("SELECT * FROM rooms WHERE id = '".beveilig($_GET['editid'])."' AND ccts IS NULL LIMIT 1");
$b = mysql_num_rows($a);
if($b < 1){
echo 'This room does not exist';
}else{
if(empty($_GET['editid'])){
echo 'Please enter a room ID';
}elseif(!is_numeric($_GET['editid'])){
echo 'A room ID is a number';
}elseif(empty($_POST['roomname'])){
echo 'Enter a Room Name';
}elseif(empty($_POST['visitors_max'])){
echo 'Enter Max Visitors to the room';
}elseif(!is_numeric($_POST['visitors_max'])){
echo 'De maximale aantal bezoekers in een nummer.';
}else{
mysql_query("UPDATE rooms SET roomname = '".beveilig(fix($_POST['roomname']))."' WHERE id = '".beveilig($_GET['editid'])."'");
mysql_query("UPDATE rooms SET description = '".beveilig(fix($_POST['description']))."' WHERE id = '".beveilig($_GET['editid'])."'");
mysql_query("UPDATE rooms SET showname = '".beveilig(fix($_POST['showname']))."' WHERE id = '".beveilig($_GET['editid'])."'");
mysql_query("UPDATE rooms SET superusers = '".beveilig(fix($_POST['superusers']))."' WHERE id = '".beveilig($_GET['editid'])."'");
mysql_query("UPDATE rooms SET accesstype = '".beveilig(fix($_POST['accesstype']))."' WHERE id = '".beveilig($_GET['editid'])."'");
mysql_query("UPDATE rooms SET password = '".beveilig(fix($_POST['password']))."' WHERE id = '".beveilig($_GET['editid'])."'");
mysql_query("UPDATE rooms SET visitors_max = '".beveilig(fix($_POST['visitors_max']))."' WHERE id = '".beveilig($_GET['editid'])."'");
echo 'Room Updated.';
}
}
}elseif($_POST['deleteroom']){
$a = mysql_query("SELECT * FROM rooms WHERE id = '".beveilig($_GET['editid'])."' AND ccts IS NULL LIMIT 1");
$b = mysql_num_rows($a);
if($b < 1){
echo 'The room does not exist';
}else{
if($_POST['sure'] == "0"){
echo '';
}elseif($_POST['sure'] == "1"){
mysql_query("DELETE FROM rooms WHERE id = '".beveilig($_GET['editid'])."' AND ccts IS NULL LIMIT 1");
echo 'Room deleted.';
}else{
echo $acc_denied;
}
}
}else{
$a = mysql_query("SELECT * FROM rooms WHERE id = '".beveilig($_GET['editid'])."' AND ccts IS NULL LIMIT 1");
$b = mysql_num_rows($a);
if($b < 1){
echo 'Deze kamer bestaat niet.';
}else{
$cc = mysql_fetch_assoc($a);
echo '';
}
}
}else{
if($_POST['submit']){
if(empty($_POST['search'])){
echo 'Enter a query';
}else{
if($_POST['type'] == "roomname"){
$sql = mysql_query("SELECT * FROM rooms WHERE roomname LIKE '%".beveilig($_POST['search'])."%' AND ccts IS NULL ORDER BY id");
}else{
$user = gebruikerid($_POST['search']);
$sql = mysql_query("SELECT * FROM rooms WHERE ownerid = '".beveilig($user)."' AND ccts IS NULL ORDER BY id");
}
if(mysql_num_rows($sql) < 1){
echo mysql_error();
if($_POST['type'] == "roomname"){
echo 'Er is geen kamer gevonden met een naam als deze!';
}else{
echo 'No rooms with that owner: '.htmlspecialchars($_POST['search']);
}
}else{
echo '';
echo '';
echo '| Room ID | ';
echo 'Room Naam | ';
echo 'Owner | ';
echo 'Edit | ';
echo '
';
while($b = mysql_fetch_assoc($sql)){
echo '';
echo '| '.$b['id'].' | ';
echo ''.htmlspecialchars($b['roomname']).' | ';
if($_POST['type'] == "roomname"){
echo ''.gebruiker($b['ownerid']).' | ';
}else{
echo ''.htmlspecialchars($_POST['search']).' | ';
}
echo ' | ';
echo '
';
}
echo '
';
}
}
}else{
echo '';
}
}
}else{
echo $acc_denied;
}
}else{
echo $acc_denied;
}
include('inc/footer.php');
?>