PageRenderTime 73ms CodeModel.GetById 35ms RepoModel.GetById 0ms app.codeStats 1ms

/app/controllers/tickets_controller.php

https://bitbucket.org/fxrialab/tickets
PHP | 2446 lines | 1956 code | 386 blank | 104 comment | 390 complexity | f9da7d3a0251fbe1f880afa9337551a7 MD5 | raw file
Possible License(s): LGPL-2.1, AGPL-1.0, GPL-2.0, MIT

Large files files are truncated, but you can click here to view the full file

    

  1. <?

    2. 

  2. class TicketsController extends AppController {

    3. 

  3.     var $name='Tickets';

    4. 

  4.     var $helpers = array('Html','javascript','error','Ajax','common','Phoogle', 'Form','Friendsurl','Newexcel');

    5. 

  5.     var $components = array('Thumbnail','Thumbnailc','Upload','Sendmail','Mysqllocker','Download');

    6. 

  6.     var $uses=array('Ticket','User','Ticket_carts','PaymentTransaction');

    7. 

  7. 

    8. 

  8.     function index($uid=null,$keyuserId=null) {

    9. 

  9.         $this->pageTitle = 'Tickets Home';

    10. 

  10.         $this->layout = 'tickethome';

    11. 

  11.         if(!isset($_SESSION['UserId']) && $keyuserId && $uid ) {

    12. 

  12.             $uid = base64_decode($uid);

    13. 

  13.             if(md5('checklogin'.$uid)==$keyuserId) {

    14. 

  14.                 $this->login_again($uid);

    15. 

  15.             }

    16. 

  16.         }

    17. 

  17. 

    18. 

  18.         $this->homepageslideInfo('Tickets');

    19. 

  19.         $this->ticketCategory();

    20. 

  20. 

    21. 

  21.         ################################## Event Location ##########################

    22. 

  22.         /* Turn oN the session for the project state and country*/

    23. 

  23.         if(isset($_SESSION['UserId'])) {

    24. 

  24. 

    25. 

  25.             $sql = "SELECT * FROM ticket_carts WHERE user_id='".$_SESSION['UserId']."' AND pay_status='0'";

    26. 

  26. 

    27. 

  27.             $result = mysql_query($sql);

    28. 

  28.             while($row = mysql_fetch_array($result)) {

    29. 

  29.                 //delete cart

    30. 

  30.                 mysql_query("DELETE FROM ticket_cart_details WHERE cart_id='".$row['id']."'") or die(mysql_error());

    31. 

  31.                 mysql_query("DELETE FROM ticket_seat_booked WHERE cart_id='".$row['id']."'") or die(mysql_error());

    32. 

  32.                 mysql_query("DELETE FROM ticket_carts WHERE id='".$row['id']."'") or die(mysql_error());

    33. 

  33.             }

    34. 

  34. 

    35. 

  35.             $userCountry = "select  user_details.c_id  , countries.country_name ,state.Name, user_details.state, user_details.city , CONCAT_WS(',',city_master.city_name,state.Name,countries.country_name) as CurrentLocation  from user_details LEFT JOIN  countries On  countries.id = user_details.c_id  LEFT JOIN state ON state.id = user_details.state LEFT JOIN city_master ON  user_details.city = city_master.city_id where user_details.user_id= ".$_SESSION['UserId']." ";

    36. 

  36.             $userCountry_res = mysql_query($userCountry);

    37. 

  37.             if(($userCountry_arr = mysql_fetch_array($userCountry_res))) {

    38. 

  38.                 if(!isset($_SESSION['PrjUserCityName'])) {

    39. 

  39.                     $this->Session->write('PrjUserCityName', $userCountry_arr['city']);

    40. 

  40.                     $this->Session->write('PrjUserCityId', $userCountry_arr['city']);

    41. 

  41.                 }

    42. 

  42. 

    43. 

  43.                 if(!isset($_SESSION['PrjUserStateId'])) {

    44. 

  44.                     $this->Session->write('PrjUserStateId', $userCountry_arr['state']);

    45. 

  45.                     $this->Session->write('PrjUserStateName', $userCountry_arr['Name']);

    46. 

  46.                 }

    47. 

  47. 

    48. 

  48.                 if(!isset($_SESSION['PrjUserCountryId'])) {

    49. 

  49.                     $this->Session->write('PrjUserCountryId', $userCountry_arr['c_id']);

    50. 

  50.                     $this->Session->write('PrjUserCountryName', $userCountry_arr['country_name']);

    51. 

  51.                 }

    52. 

  52. 

    53. 

  53.                 if(!isset($_SESSION['PrjUserLocation'])) {

    54. 

  54.                     $locstr=$userCountry_arr['CurrentLocation'];

    55. 

  55.                     //							$locstr='';

    56. 

  56.                     //							if($_SESSION['PrjUserStateName']!="")

    57. 

  57.                     //								$locstr.=$_SESSION['PrjUserStateName'].',' ;

    58. 

  58.                     //

    59. 

  59.                     //							if($_SESSION['PrjUserCountryName']!="")

    60. 

  60.                     //								$locstr.= $_SESSION['PrjUserCountryName'].',' ;

    61. 

  61.                     $this->Session->write('PrjUserLocation',substr($locstr,0,(strlen($locstr)-1)));

    62. 

  62.                 }

    63. 

  63.             }

    64. 

  64.         }

    65. 

  65.         else {

    66. 

  66.             $check = false;

    67. 

  67.             if(!isset($_SESSION['PrjUserCountryId'])) {

    68. 

  68.                 $this->Session->write('PrjUserCityId', 14967);

    69. 

  69.                 $this->Session->write('PrjUserStateId', 168);

    70. 

  70.                 $this->Session->write('PrjUserCountryId', 254);

    71. 

  71.             }

    72. 

  72. 

    73. 

  73.             if(isset($_SESSION['PrjUserCityId']) && isset($_SESSION['PrjUserStateId']) && isset($_SESSION['PrjUserCountryId'])) {

    74. 

  74.                 $sql = "SELECT CONCAT_WS(', ',city_master.city_name,state.Name,countries.country_name) as CurrentLocation, city_master.city_name as CityName, state.Name as StateName,countries.country_name

    75. 

  75.                         FROM countries

    76. 

  76.                         LEFT JOIN state ON (state.id='".$_SESSION['PrjUserStateId']."' AND state.c_id=countries.id)

    77. 

  77.                         LEFT JOIN city_master ON (city_master.city_id='".$_SESSION['PrjUserCityId']."' AND city_master.CountryID=countries.id AND city_master.state_id=state.id)

    78. 

  78.                         WHERE countries.id='".$_SESSION['PrjUserCountryId']."' ";

    79. 

  79.                 $userCountry_res = mysql_query($sql);

    80. 

  80.                 if(($userCountry_arr = mysql_fetch_array($userCountry_res))) {

    81. 

  81.                     $this->Session->write('PrjUserCityName', $userCountry_arr['CityName']);

    82. 

  82.                     $this->Session->write('PrjUserStateName', $userCountry_arr['StateName']);

    83. 

  83.                     $this->Session->write('PrjUserCountryName', $userCountry_arr['country_name']);

    84. 

  84.                     $this->Session->write('PrjUserLocation',$userCountry_arr['CurrentLocation']);

    85. 

  85.                     $check = true;

    86. 

  86.                 }

    87. 

  87.             }

    88. 

  88. 

    89. 

  89.             if(!$check) {

    90. 

  90.                 $userCountry = "select  countries.id  , countries.country_name from countries Where countries.id = '6'";

    91. 

  91.                 $userCountry_res = mysql_query($userCountry);

    92. 

  92.                 if(($userCountry_arr = mysql_fetch_array($userCountry_res))) {

    93. 

  93.                     if(!isset($_SESSION['PrjUserCityName'])) {

    94. 

  94.                         $this->Session->write('PrjUserCityName', '');

    95. 

  95.                         $this->Session->write('PrjUserCityId', 0);

    96. 

  96.                     }

    97. 

  97. 

    98. 

  98.                     if(!isset($_SESSION['PrjUserStateId'])) {

    99. 

  99.                         $this->Session->write('PrjUserStateId', 0);

    100. 

  100.                         $this->Session->write('PrjUserStateName', '');

    101. 

  101.                     }

    102. 

  102.                     if(!isset($_SESSION['PrjUserCountryId'])) {

    103. 

  103.                         $this->Session->write('PrjUserCountryId', $userCountry_arr['id']);

    104. 

  104.                         $this->Session->write('PrjUserCountryName', $userCountry_arr['country_name']);

    105. 

  105.                     }

    106. 

  106. 

    107. 

  107. 

    108. 

  108.                     $locstr='';

    109. 

  109. 

    110. 

  110.                     if(isset($_SESSION['PrjUserCityName']) && $_SESSION['PrjUserCityName']!="")

    111. 

  111.                         $locstr.=$_SESSION['PrjUserCityName'] ;

    112. 

  112. 

    113. 

  113.                     if(isset($_SESSION['PrjUserStateName']) && $_SESSION['PrjUserStateName']!="")

    114. 

  114.                         $locstr.=', '.$_SESSION['PrjUserStateName'] ;

    115. 

  115. 

    116. 

  116.                     if(isset($_SESSION['PrjUserCountryName']) && $_SESSION['PrjUserCountryName']!="")

    117. 

  117.                         $locstr.= $_SESSION['PrjUserCountryName'] ;

    118. 

  118. 

    119. 

  119. 

    120. 

  120.                     $this->Session->write('PrjUserLocation',$locstr);

    121. 

  121.                 }

    122. 

  122.             }

    123. 

  123. 

    124. 

  124. 

    125. 

  125.         }

    126. 

  126.         ###########################################################################

    127. 

  127.     }

    128. 

  128. 

    129. 

  129.     function changelocation() {

    130. 

  130.         /* Turn oN the session for the project state and country*/

    131. 

  131.         $userCountry = "select  IFNULL(countries.id,0) as countryId  ,  IFNULL(countries.country_name,'') as countryName  ,IFNULL(state.Name,'')as StateName, IFNULL(state.id,0) as StateId, IFNULL(city_master.city_id,0) as CityId , IFNULL(city_master.city_name,'')as CityName from countries LEFT JOIN state ON  state.c_id = countries.id  and state.id = ".$_REQUEST['province']." LEFT JOIN city_master ON  state_id = state.id and city_id = ".$_REQUEST['city']." where countries.id = ".$_REQUEST['country']."";

    132. 

  132.         $userCountry_res = mysql_query($userCountry)or die(mysql_error());

    133. 

  133.         if(($userCountry_arr = mysql_fetch_array($userCountry_res))) {

    134. 

  134.             $this->Session->write('PrjUserCityName', $userCountry_arr['CityName']);

    135. 

  135.             $this->Session->write('PrjUserCityId', $userCountry_arr['CityId']);

    136. 

  136. 

    137. 

  137.             $this->Session->write('PrjUserStateId', $userCountry_arr['StateId']);

    138. 

  138.             $this->Session->write('PrjUserStateName', $userCountry_arr['StateName']);

    139. 

  139. 

    140. 

  140.             $this->Session->write('PrjUserCountryId', $userCountry_arr['countryId']);

    141. 

  141.             $this->Session->write('PrjUserCountryName', $userCountry_arr['countryName']);

    142. 

  142. 

    143. 

  143.             $strloc = '';

    144. 

  144.             if($userCountry_arr['CityName']!='') {

    145. 

  145.                 $strloc .= $userCountry_arr['CityName'].', ' ;

    146. 

  146.             }

    147. 

  147.             if($userCountry_arr['StateName']!='') {

    148. 

  148.                 $strloc .= $userCountry_arr['StateName'].', ' ;

    149. 

  149.             }

    150. 

  150.             if($userCountry_arr['countryName']!='') {

    151. 

  151.                 $strloc .= $userCountry_arr['countryName'] ;

    152. 

  152.             }

    153. 

  153. 

    154. 

  154.             $this->Session->write('PrjUserLocation',$strloc);

    155. 

  155.         }

    156. 

  156.         $this->redirect('tickets');

    157. 

  157.     }

    158. 

  158.     

    159. 

  159.     function ticketCategory() {

    160. 

  160.         $evtcat = array();

    161. 

  161.         $evtcat['0']="Select Category";

    162. 

  162.         $select_ticket_cat = mysql_query("Select * from ticket_event_category");

    163. 

  163.         while($select_ticket_cat_arr = mysql_fetch_array($select_ticket_cat)) {

    164. 

  164.             $evtcat[$select_ticket_cat_arr['id']] = $select_ticket_cat_arr['cat_name'];

    165. 

  165.         }

    166. 

  166.         $this->set('ticketcat',$evtcat);

    167. 

  167.     }

    168. 

  168. 

    169. 

  169.     function recentticket() {

    170. 

  170.         $this->layout = 'profile_blank';

    171. 

  171.         $this->ticketCategory();

    172. 

  172.         $curDate=date("Y-m-d");

    173. 

  173. 

    174. 

  174.         if(isset($_SESSION['PrjUserCityId']))

    175. 

  175.             $city=$_SESSION['PrjUserCityId'];

    176. 

  176. 

    177. 

  177.         if(isset($_SESSION['PrjUserStateId']))

    178. 

  178.             $state=$_SESSION['PrjUserStateId'];

    179. 

  179. 

    180. 

  180.         if(isset($_SESSION['PrjUserCountryId']))

    181. 

  181.             $country=$_SESSION['PrjUserCountryId'];

    182. 

  182. 

    183. 

  183. 

    184. 

  184.         $pageFlag=null;

    185. 

  185.         $select="SELECT T.* ,TV.id tvId,TV.venue_name venueName,USR.username,USR.id as postedbyuser,TCAT.id as ticketcategoryId ,TCAT.cat_name as ticketcategory";

    186. 

  186.         $from=" FROM tickets T

    187. 

  187. 				LEFT JOIN ticket_event_venue TV ON (T.ticket_venue_section_id=TV.id)

    188. 

  188. 				LEFT JOIN ticket_event_category TCAT  ON (T.ticket_category_id=TCAT.id)

    189. 

  189. 				LEFT JOIN users USR ON (T.user_id=USR.id)

    190. 

  190. 				";

    191. 

  191.         $where="WHERE  T.is_temp='0' AND (NOW() < ticevent_enddate) AND parent_id=0";

    192. 

  192. 

    193. 

  193.         if(isset($city) && $city!=0)

    194. 

  194.             $where.=" AND TV.venue_city_id='".$city."'";

    195. 

  195. 

    196. 

  196.         if(isset($state) && $state!=0)

    197. 

  197.             $where.=" AND TV.venue_state_id='".$state."'";

    198. 

  198. 

    199. 

  199.         if(isset($country) && $country!=0)

    200. 

  200.             $where.=" AND TV.venue_country_id='".$country."'";

    201. 

  201. 

    202. 

  202.         $where.="  ORDER BY T.ticevent_startdate ";

    203. 

  203. 

    204. 

  204.         $CountField='T.id';

    205. 

  205. 

    206. 

  206. 

    207. 

  207.         $SelectRecord = mysql_query("$select $from $where LIMIT 12") or die('Line no '.__LINE__ . mysql_error());

    208. 

  208.         $this->set("ticketQry",$SelectRecord);

    209. 

  209. 

    210. 

  210.         $this->render('hotticket','ajax');

    211. 

  211. 

    212. 

  212.     }

    213. 

  213. 

    214. 

  214.     function category() {

    215. 

  215.         $catid=0;

    216. 

  216.         $searchpass ='';

    217. 

  217.         $this->layout = 'ticketdetail';

    218. 

  218.         $this->ticketCategory();

    219. 

  219.         $curDate=date("Y-m-d");

    220. 

  220. 

    221. 

  221.         $select="SELECT T.* ,TV.id tvId,TV.venue_name venueName,USR.username,USR.id as postedbyuser,TCAT.id as ticketcategoryId ,TCAT.cat_name as ticketcategory";

    222. 

  222.         $from=" FROM tickets T

    223. 

  223. 				LEFT JOIN ticket_event_venue TV ON (T.ticket_venue_section_id=TV.id)

    224. 

  224. 				LEFT JOIN ticket_event_category TCAT  ON (T.ticket_category_id=TCAT.id)

    225. 

  225. 				LEFT JOIN users USR ON (T.user_id=USR.id)

    226. 

  226. 				";

    227. 

  227.         $where="WHERE  T.is_temp='0' AND (NOW() < ticevent_enddate) AND parent_id>0";

    228. 

  228. 

    229. 

  229.         if(isset($this->params['pass']['0'])) {

    230. 

  230.             $catid=base64_decode($this->params['pass']['0']);

    231. 

  231.         }

    232. 

  232.         if(isset($this->data['Ticket']['ticketcat']) && $this->data['Ticket']['ticketcat']>0) {

    233. 

  233.             $catid = $this->data['Ticket']['ticketcat'];

    234. 

  234.         }

    235. 

  235.         if(isset($_REQUEST['catid']) && $_REQUEST['catid']!='') {

    236. 

  236.             $catid = $_REQUEST['catid'];

    237. 

  237.         }

    238. 

  238. 

    239. 

  239.         if(isset($this->data['Ticket']['srchtect']) && $this->data['Ticket']['srchtect']!="" && $this->data['Ticket']['srchtect']!="Event name or zip") {

    240. 

  240.             $srchtect = addslashes($this->data['Ticket']['srchtect']);

    241. 

  241.         }

    242. 

  242.         if(isset($_REQUEST['srchtect']) && $_REQUEST['srchtect']!='') {

    243. 

  243.             $srchtect = addslashes($_REQUEST['srchtect']);

    244. 

  244.         }

    245. 

  245. 

    246. 

  246.         if(isset($this->data['Ticket']['srchdate']) && $this->data['Ticket']['srchdate']!=0) {

    247. 

  247.             $ticDate =  $this->data['Ticket']['srchdate'];

    248. 

  248.         }

    249. 

  249.         if(isset($_REQUEST['ticDate']) && $_REQUEST['ticDate']!='') {

    250. 

  250.             $ticDate = $_REQUEST['ticDate'];

    251. 

  251.         }

    252. 

  252. 

    253. 

  253.         if(isset($_SESSION['PrjUserCityId']))

    254. 

  254.             $city=$_SESSION['PrjUserCityId'];

    255. 

  255. 

    256. 

  256.         if(isset($_SESSION['PrjUserStateId']))

    257. 

  257.             $state=$_SESSION['PrjUserStateId'];

    258. 

  258. 

    259. 

  259.         if(isset($_SESSION['PrjUserCountryId']))

    260. 

  260.             $country=$_SESSION['PrjUserCountryId'];

    261. 

  261. 

    262. 

  262. 

    263. 

  263.         if(isset($catid) && $catid>0) {

    264. 

  264.             $where.= " AND T.ticket_category_id='".$catid."' ";

    265. 

  265.         }

    266. 

  266. 

    267. 

  267.         if(isset($city) && $city!=0)

    268. 

  268.             $where.=" AND TV.venue_city_id='".$city."'";

    269. 

  269. 

    270. 

  270.         if(isset($state) && $state!=0)

    271. 

  271.             $where.=" AND TV.venue_state_id='".$state."'";

    272. 

  272. 

    273. 

  273.         if(isset($country) && $country!=0)

    274. 

  274.             $where.=" AND TV.venue_country_id='".$country."'";

    275. 

  275. 

    276. 

  276.         if(isset($srchtect) && $srchtect!='') {

    277. 

  277.             $where.= " AND ( T.ticevent_name LIKE '%".$srchtect."%' OR (TV.venue_zip!=0 AND TV.venue_zip='".$srchtect."')) ";

    278. 

  278.             $searchpass .= '&srchtect='.$srchtect;

    279. 

  279.         }

    280. 

  280. 

    281. 

  281.         if(isset($ticDate) && $ticDate!='') {

    282. 

  282.             $where.=" AND T.ticevent_startdate<='".$ticDate."'";

    283. 

  283.             $searchpass .= '&ticDate='.$ticDate;

    284. 

  284.         }

    285. 

  285. 

    286. 

  286.         $others = 'ORDER BY T.ticevent_startdate';

    287. 

  287. 

    288. 

  288.         $this->set('catid',$catid);

    289. 

  289. 

    290. 

  290.         $PassParameter='catid='.$catid.$searchpass;

    291. 

  291. 

    292. 

  292.         $CountField="T.id";

    293. 

  293.         $this->set("controller","tickets");

    294. 

  294.         $this->set("action","category");

    295. 

  295.         $this->set("parameter",$PassParameter);

    296. 

  296. 

    297. 

  297.         $this->set('elementsUpdate',array('backdroplist','relatedevent'));

    298. 

  298.         $this->pagination($select,$from,$where,$others,$CountField,$this->params['url'],$PassParameter);

    299. 

  299.         if(isset($this->params['url']['Page']) || isset($_REQUEST['form_ajax']) ) {

    300. 

  300.             $this->render("category2","ajax");

    301. 

  301.         }

    302. 

  302. 

    303. 

  303.     }

    304. 

  304.    

    305. 

  305.     function saveperformer() {

    306. 

  306.         $inserintoperfomer_id =0;

    307. 

  307.         if(isset($_POST['add']) && $_POST['add']==1) {

    308. 

  308.             $sql =  "INSERT INTO ticket_event_performer SET user_id='".$_SESSION['UserId']."'";

    309. 

  309.             mysql_query($sql);

    310. 

  310.             $inserintoperfomer_id = mysql_insert_id();

    311. 

  311.         }else if(isset($_POST['deleteorg']) && isset($_POST['oid']) && $_POST['deleteorg']==1) {

    312. 

  312.             $sql =  "DELETE FROM ticket_event_performer WHERE id='".$_POST['oid']."'";

    313. 

  313.             mysql_query($sql);

    314. 

  314.             $inserintoperfomer_id = $_POST['oid'];

    315. 

  315.         }

    316. 

  316.         else if(isset($_POST['editorg']) && isset($_POST['oid']) && $_POST['editorg']==1 && $_POST['oid']!=0) {

    317. 

  317.             $sql =  "UPDATE ticket_event_performer SET performer_name='".addslashes($_POST['name'])."' , perfomer_desc = '".addslashes($_POST['description'])."', performer_phone = '".addslashes($_POST['phone'])."', performer_email = '".addslashes($_POST['email'])."'

    318. 

  318.                      , performer_address = '".addslashes($_POST['address'])."', performer_zip = '".addslashes($_POST['zip'])."', performer_country='".$_POST['country']."', performer_state='".$_POST['state']."', performer_city='".$_POST['city']."'

    319. 

  319.                      WHERE id='".addslashes($_POST['oid'])."' AND user_id='".$_SESSION['UserId']."'";

    320. 

  320.             mysql_query($sql) or die($sql);

    321. 

  321.             $inserintoperfomer_id = $_POST['oid'];

    322. 

  322.         }

    323. 

  323. 

    324. 

  324.         $this->set('id',$inserintoperfomer_id);

    325. 

  325.     }

    326. 

  326. 

    327. 

  327.     function create($tidCopy=null) {

    328. 

  328.         //$this->checkSession();

    329. 

  329.         $this->layout = 'ticket_create';

    330. 

  330.         if(!isset($_SESSION['UserId'])) {

    331. 

  331.             //$this->Session->write('actContinue','tickets/create');

    332. 

  332.         }else {

    333. 

  333. 

    334. 

  334.             $this->set('countrylist',$this->getCountryList());

    335. 

  335.             $sql = "SELECT * FROM ticket_event_performer WHERE user_id='".$_SESSION['UserId']."' AND blocked='0'";

    336. 

  336.             $this->set('performerlist',mysql_query($sql));

    337. 

  337.             $this->ticketCategory();

    338. 

  338.             $this->set('stateList',array('0'=>'Select State'));

    339. 

  339.             $this->set('cityList',array('0'=>'Select City'));

    340. 

  340. 

    341. 

  341.             $ticketsql_id=0;

    342. 

  342. 

    343. 

  343. 

    344. 

  344.             if(isset($_POST['t']) && md5(md5('save'))==$_POST['t']) {

    345. 

  345.                 

    346. 

  346.                 if(isset($_POST['tid']) && $_POST['tid']!='') {

    347. 

  347.                     $ticketsql_id = base64_decode($_POST['tid']);

    348. 

  348.                     $sql = 'SELECT * FROM tickets WHERE id="'.$ticketsql_id.'" AND user_id="'.$_SESSION['UserId'].'"';

    349. 

  349.                     $result = mysql_query($sql);

    350. 

  350.                     if(($row=mysql_fetch_array($result))) {

    351. 

  351.                         //update ticket_event_venue

    352. 

  352.                         $ticket_venue_section_id = $row['ticket_venue_section_id'];

    353. 

  353.                         $sql = "UPDATE ticket_event_venue SET venue_name='".addslashes($_REQUEST['venue_name'])."' , venue_desc = '',venue_address='".addslashes($_REQUEST['address_1'])."',

    354. 

  354.                             venue_city_id='".$_REQUEST['city']."',venue_state_id='".$_REQUEST['province']."',venue_country_id='".$_REQUEST['country']."',venue_zip='".$_REQUEST['postal_code']."', venue_phone='".$_REQUEST['phone']."'

    355. 

  355.                              WHERE id='".$ticket_venue_section_id."'";

    356. 

  356.                         mysql_query($sql) or die(mysql_error());

    357. 

  357.                     }

    358. 

  358.                 }

    359. 

  359.                 if(!isset($ticket_venue_section_id) || $ticket_venue_section_id==0) {

    360. 

  360.                     //save venue

    361. 

  361.                     $sql = "Insert Into ticket_event_venue SET user_id='".$_SESSION['UserId']."' , venue_name='".addslashes($_REQUEST['venue_name'])."' , venue_desc = '',venue_address='".addslashes($_REQUEST['address_1'])."',

    362. 

  362.                             venue_city_id='".$_REQUEST['city']."',venue_state_id='".$_REQUEST['province']."',venue_country_id='".$_REQUEST['country']."',venue_zip='".$_REQUEST['postal_code']."', venue_phone='".$_REQUEST['phone']."' ";

    363. 

  363.                     mysql_query($sql) or die(mysql_error());

    364. 

  364. 

    365. 

  365.                     $ticket_venue_section_id = mysql_insert_id();

    366. 

  366.                 }

    367. 

  367. 

    368. 

  368.                 if($ticketsql_id!='' && $ticketsql_id!=0) {

    369. 

  369.                     $ticketsql = "UPDATE tickets SET

    370. 

  370.                             ticevent_name = '".addslashes($_POST['evname'])."', paypal_email = '".addslashes($_POST['paypal_email'])."',

    371. 

  371.                             ticket_category_id='".$_POST['channels']."',

    372. 

  372.                             ticevent_desc='".addslashes($_POST['description'])."', ticevent_terms='".addslashes($_POST['terms'])."',

    373. 

  373.                             ticket_event_performer_id='".$_POST['savedOrganizers']."', ticket_venue_section_id='".$ticket_venue_section_id."',

    374. 

  374.                             ticket_ship_master_id='1', user_id='".$_SESSION['UserId']."',

    375. 

  375.                             ticevent_image='".addslashes($_POST['image'])."', ticevent_logoimage='".addslashes($_POST['logo'])."',                            

    376. 

  376.                             is_featured='0', is_hotlisted='0',

    377. 

  377.                             timezone_id='".addslashes($_POST['timezone'])."',

    378. 

  378.                             ticket_tags='".addslashes($_POST['tags'])."', is_show_remaining='".(isset($_POST['show_remaining'])?1:0)."',

    379. 

  379.                             is_temp='".$_POST['is_temp']."', seating_type='".$_POST['seating_type']."', is_public='".(isset($_POST['show_public'])?1:0)."' 

    380. 

  380.                             ".(!isset($_POST['show_public']) ? ", password_private='".$_POST['password_private']."'" : '')."

    381. 

  381.                             WHERE id='".$ticketsql_id."' ";

    382. 

  382.                     //ticevent_startdate='".$start_date."', ticevent_enddate='".$end_date."', ticket_dooropen='".$dooropen."',

    383. 

  383.                     mysql_query($ticketsql) or die($ticketsql);

    384. 

  384.                 }else {

    385. 

  385.                     $ticketsql = "INSERT INTO tickets SET

    386. 

  386.                             ticevent_name = '".addslashes($_POST['evname'])."', paypal_email = '".addslashes($_POST['paypal_email'])."',

    387. 

  387.                             ticket_category_id='".$_POST['channels']."',

    388. 

  388.                             ticevent_desc='".addslashes($_POST['description'])."', ticevent_terms='".addslashes($_POST['terms'])."',

    389. 

  389.                             ticket_event_performer_id='".$_POST['savedOrganizers']."', ticket_venue_section_id='".$ticket_venue_section_id."',

    390. 

  390.                             ticket_ship_master_id='1', user_id='".$_SESSION['UserId']."',

    391. 

  391.                             ticevent_image='".addslashes($_POST['image'])."', ticevent_logoimage='".addslashes($_POST['logo'])."',

    392. 

  392.                             is_featured='0', is_hotlisted='0', 

    393. 

  393.                             timezone_id='".addslashes($_POST['timezone'])."', 

    394. 

  394.                             ticket_tags='".addslashes($_POST['tags'])."', is_show_remaining='".(isset($_POST['show_remaining'])?1:0)."',

    395. 

  395.                             is_temp='".$_POST['is_temp']."', seating_type='".$_POST['seating_type']."', is_public='".(isset($_POST['show_public'])?1:0)."'

    396. 

  396.                             ".(!isset($_POST['show_public']) ? ", password_private='".$_POST['password_private']."'" : '');

    397. 

  397.                    

    398. 

  398.                     mysql_query($ticketsql) or die($ticketsql);

    399. 

  399.                     $ticketsql_id = mysql_insert_id();

    400. 

  400.                 }

    401. 

  401. 

    402. 

  402.                 //update datetime

    403. 

  403.                 foreach($_REQUEST['customDates'] as $key=>$value){

    404. 

  404.                     $customDates = split('startDate', $value);

    405. 

  405.                     $start_date = $customDates[0];

    406. 

  406. 

    407. 

  407.                     $customDates = $customDates[1];

    408. 

  408.                     $customDates = split('startTime', $customDates);

    409. 

  409.                     $start_time = $customDates[0];

    410. 

  410. 

    411. 

  411.                     $customDates = $customDates[1];

    412. 

  412.                     $customDates = split('endDate', $customDates);

    413. 

  413.                     $end_date = $customDates[0];

    414. 

  414. 

    415. 

  415.                     $customDates = $customDates[1];

    416. 

  416.                     $customDates = split('endTime', $customDates);

    417. 

  417.                     $end_time = $customDates[0];

    418. 

  418. 

    419. 

  419.                     $dooropen = $customDates[1];

    420. 

  420. 

    421. 

  421.                     $start_date = split('/', $start_date);

    422. 

  422.                     $start_date = $start_date[2].'-'.$start_date[0].'-'.$start_date[1].' '.$start_time;

    423. 

  423. 

    424. 

  424.                     $end_date = split('/', $end_date);

    425. 

  425.                     $end_date = $end_date[2].'-'.$end_date[0].'-'.$end_date[1].' '.$end_time;

    426. 

  426.                     $sql = "UPDATE tickets SET ticevent_startdate='".$start_date."', ticevent_enddate='".$end_date."', ticket_dooropen='".$dooropen."' 

    427. 

  427.                             WHERE id='".$key."'";

    428. 

  428.                     mysql_query($sql) or die($sql);

    429. 

  429.                 }

    430. 

  430. 

    431. 

  431.                 //update for children

    432. 

  432.                 //get list id children

    433. 

  433.                 $sql = "SELECT id FROM tickets WHERE parent_id='".$ticketsql_id."'";

    434. 

  434.                 $result = mysql_query($sql);

    435. 

  435.                 $listid = array();

    436. 

  436.                 while($row=mysql_fetch_array($result)){

    437. 

  437.                     $listid[] = $row['id'];

    438. 

  438.                 }

    439. 

  439.                 if(count($listid)>0){

    440. 

  440.                     //info ticket parent

    441. 

  441.                     $sql = "SELECT * FROM tickets WHERE id='".$ticketsql_id."'";

    442. 

  442.                     $result = mysql_query($sql);

    443. 

  443.                     $parent = mysql_fetch_array($result);

    444. 

  444.                     //update information public

    445. 

  445.                     $ticketsql = "UPDATE tickets SET

    446. 

  446.                             ticevent_name = '".$parent['ticevent_name']."', paypal_email = '".$parent['paypal_email']."',

    447. 

  447.                             ticket_category_id='".$parent['ticket_category_id']."',

    448. 

  448.                             ticevent_desc='".$parent['ticevent_desc']."', ticevent_terms='".$parent['ticevent_terms']."',

    449. 

  449.                             ticket_event_performer_id='".$parent['ticket_event_performer_id']."', ticket_venue_section_id='".$parent['ticket_venue_section_id']."',

    450. 

  450.                             ticket_ship_master_id='1', user_id='".$parent['user_id']."',

    451. 

  451.                             ticevent_image='".$parent['ticevent_image']."', ticevent_logoimage='".$parent['ticevent_logoimage']."',

    452. 

  452.                             is_featured='0', is_hotlisted='0',

    453. 

  453.                             timezone_id='".$parent['timezone_id']."', 

    454. 

  454.                             ticket_tags='".$parent['ticket_tags']."', is_show_remaining='".$parent['is_show_remaining']."',

    455. 

  455.                             is_temp='".$parent['is_temp']."', seating_type='".$parent['seating_type']."', is_public='".$parent['is_public']."',

    456. 

  456.                             password_private='".$parent['password_private']."'

    457. 

  457.                             WHERE id IN (".join(',',$listid).") ";

    458. 

  458.                     mysql_query($ticketsql) or die($ticketsql);

    459. 

  459.                     //update product

    460. 

  460.                     if($parent['seating_type']==0){

    461. 

  461.                         $sql = "SELECT * FROM tickets_product WHERE tickets_id='".$parent['id']."'";

    462. 

  462.                         $result = mysql_query($sql) or die($sql);

    463. 

  463.                         while($p = mysql_fetch_array($result)){

    464. 

  464.                             foreach($listid as $ticket_child){

    465. 

  465.                                 $sql = "SELECT * FROM tickets_product WHERE tickets_id='".$ticket_child."' AND seat_name='".$p['seat_name']."' ";

    466. 

  466.                                 $result_p = mysql_query($sql) or die($sql);

    467. 

  467.                                 if(!($row=mysql_fetch_array($result_p))){

    468. 

  468.                                     $sql = "INSERT tickets_product SET tickets_id='".$ticket_child."', seat_name='".$p['seat_name']."',

    469. 

  469.                                             seat_qty='".$p['seat_qty']."', seat_price='".$p['seat_price']."',color='".$p['color']."',

    470. 

  470.                                             enabled='".$p['enabled']."', handicap='".$p['handicap']."' ";

    471. 

  471.                                     mysql_query($sql) or die($sql);

    472. 

  472.                                 }

    473. 

  473.                             }

    474. 

  474.                         }

    475. 

  475.                         

    476. 

  476.                     }

    477. 

  477.                 }

    478. 

  478.                 if(isset($_POST['is_temp'])) {

    479. 

  479.                     $this->redirect('tickets/index');

    480. 

  480.                 }

    481. 

  481. 

    482. 

  482.                 $this->set('updated',1);

    483. 

  483.             }

    484. 

  484. 

    485. 

  485.             if(isset($_REQUEST['tid']) && $_REQUEST['tid']!='') {

    486. 

  486.                 $ticketsql_id = base64_decode($_REQUEST['tid']);

    487. 

  487.             }

    488. 

  488. 

    489. 

  489.             if(isset($_POST['is_preview']) && $_POST['is_preview']==1) {

    490. 

  490.                 $this->redirect('tickets/previewevent/'.base64_encode($ticketsql_id));

    491. 

  491.             }

    492. 

  492. 

    493. 

  493.             if($tidCopy!=null) {

    494. 

  494.                 $tidCopy = base64_decode($tidCopy);

    495. 

  495.                 $sql = "SELECT * FROM tickets

    496. 

  496.                         WHERE id='".addslashes($tidCopy)."' AND user_id='".$_SESSION['UserId']."' ";

    497. 

  497.                 $result = mysql_query($sql);

    498. 

  498.                 if(($row=mysql_fetch_array($result))) {

    499. 

  499.                     //Insert ticket_event_venue

    500. 

  500.                     $sql = "INSERT INTO ticket_event_venue(`venue_name`,`venue_address`,`venue_phone`,`venue_city_id`,`venue_state_id`,`venue_country_id`,`user_id`,`venue_desc`,`venue_zip`)

    501. 

  501.                         SELECT `venue_name`,`venue_address`,`venue_phone`,`venue_city_id`,`venue_state_id`,`venue_country_id`,`user_id`,`venue_desc`,`venue_zip`

    502. 

  502.                         FROM ticket_event_venue WHERE id=".$row['ticket_venue_section_id'];

    503. 

  503. 

    504. 

  504.                     mysql_query($sql)or die(mysql_errno());

    505. 

  505.                     $ticket_venue_section_id = mysql_insert_id();

    506. 

  506.                     

    507. 

  507.                     $ticketsql = "INSERT INTO tickets SET

    508. 

  508.                             ticevent_name = '".$row['ticevent_name']." copy', paypal_email='".$row['paypal_email']."',

    509. 

  509.                             ticevent_startdate='".$row['ticevent_startdate']."', ticevent_enddate='".$row['ticevent_enddate']."',  ticket_dooropen='".$row['ticket_dooropen']."',

    510. 

  510.                             ticket_category_id='".$row['ticket_category_id']."',

    511. 

  511.                             ticevent_desc='".$row['ticevent_desc']."', ticevent_terms='".$row['ticevent_terms']."',

    512. 

  512.                             ticket_event_performer_id='".$row['ticket_event_performer_id']."', ticket_venue_section_id='".$ticket_venue_section_id."',

    513. 

  513.                             ticket_ship_master_id='1', user_id='".$_SESSION['UserId']."',

    514. 

  514.                             ticevent_image='".$row['ticevent_image']."', ticevent_logoimage='".$row['ticevent_logoimage']."',                            

    515. 

  515.                             is_featured='0', is_hotlisted='0',                           

    516. 

  516.                             timezone_id='".$row['timezone_id']."', 

    517. 

  517.                             ticket_tags='".$row['ticket_tags']."', is_show_remaining='".$row['is_show_remaining']."',

    518. 

  518.                             is_temp='1', seating_type='".$row['seating_type']."',

    519. 

  519.                             is_public='".$row['is_public']."',password_private='".$row['password_private']."'";

    520. 

  520. 

    521. 

  521.                     mysql_query($ticketsql) or die(mysql_errno());

    522. 

  522.                     $ticketsql_id = mysql_insert_id();

    523. 

  523. 

    524. 

  524.                     $seatsxml = $row['seatsxml'];

    525. 

  525.                     $seatsxml_new = $seatsxml;

    526. 

  526. 

    527. 

  527.                     //insert tickets_product

    528. 

  528.                     $sql = "SELECT * FROM tickets_product WHERE tickets_id='".$row['id']."' ";

    529. 

  529.                     $result = mysql_query($sql)or die($sql);

    530. 

  530.                     $listp = array();

    531. 

  531.                     while($row = mysql_fetch_array($result)) {

    532. 

  532.                         $listp[] = $row;

    533. 

  533.                         $sql = "INSERT INTO tickets_product SET tickets_id='".$ticketsql_id."', seat_name='".$row['seat_name']."', seat_qty='".$row['seat_qty']."', seat_price='".$row['seat_price']."',

    534. 

  534.                                         color='".$row['color']."', enabled='".$row['enabled']."',handicap='".$row['handicap']."' ";

    535. 

  535.                         mysql_query($sql)or die(mysql_errno());

    536. 

  536.                         if($seatsxml_new!=''){

    537. 

  537.                             $product_id_new = mysql_insert_id();

    538. 

  538.                             //update id for product

    539. 

  539.                             $old = '/id="'.$row['id'].'"/';

    540. 

  540.                             $new = 'id="'.$product_id_new.'"';

    541. 

  541.                             $seatsxml_new = preg_replace($old,$new , $seatsxml_new);

    542. 

  542. 

    543. 

  543.                             //update group_id for seat, shape

    544. 

  544.                             $old = '/group_id="'.$row['id'].'"/';

    545. 

  545.                             $new = 'group_id="'.$product_id_new.'"';

    546. 

  546. 

    547. 

  547.                             $seatsxml_new = preg_replace($old,$new , $seatsxml_new);

    548. 

  548.                         }

    549. 

  549.                     }

    550. 

  550. 

    551. 

  551.                     $sql= "UPDATE tickets SET seatsxml='".$seatsxml_new."' WHERE id='".$ticketsql_id."'";

    552. 

  552.                     mysql_query($sql)or die(mysql_errno());

    553. 

  553. 

    554. 

  554.                     //check add children

    555. 

  555.                     $sql = "SELECT * FROM tickets WHERE parent_id='".addslashes($tidCopy)."' AND user_id='".$_SESSION['UserId']."' ";

    556. 

  556.                     $result = mysql_query($sql);

    557. 

  557.                     while($child=mysql_fetch_array($result)){

    558. 

  558.                         //insert ticket

    559. 

  559.                         $ticketsql = "INSERT INTO tickets SET

    560. 

  560.                             parent_id='".$ticketsql_id."',

    561. 

  561.                             ticevent_name = '".$child['ticevent_name']." copy', paypal_email='".$child['paypal_email']."',

    562. 

  562.                             ticevent_startdate='".$child['ticevent_startdate']."', ticevent_enddate='".$child['ticevent_enddate']."',  ticket_dooropen='".$child['ticket_dooropen']."',

    563. 

  563.                             ticket_category_id='".$child['ticket_category_id']."',

    564. 

  564.                             ticevent_desc='".$child['ticevent_desc']."', ticevent_terms='".$child['ticevent_terms']."',

    565. 

  565.                             ticket_event_performer_id='".$child['ticket_event_performer_id']."', ticket_venue_section_id='".$ticket_venue_section_id."',

    566. 

  566.                             ticket_ship_master_id='1', user_id='".$_SESSION['UserId']."',

    567. 

  567.                             ticevent_image='".$child['ticevent_image']."', ticevent_logoimage='".$child['ticevent_logoimage']."',

    568. 

  568.                             is_featured='0', is_hotlisted='0',

    569. 

  569.                             timezone_id='".$child['timezone_id']."', 

    570. 

  570.                             ticket_tags='".$child['ticket_tags']."', is_show_remaining='".$child['is_show_remaining']."',

    571. 

  571.                             is_temp='1', seating_type='".$child['seating_type']."',

    572. 

  572.                             is_public='".$child['is_public']."', password_private='".$child['password_private']."'";

    573. 

  573. 

    574. 

  574.                         mysql_query($ticketsql) or die(mysql_errno());

    575. 

  575.                         $child_new_id = mysql_insert_id();

    576. 

  576.                         //insert product

    577. 

  577.                         $seatsxml_new = $seatsxml;

    578. 

  578.                         foreach($listp as $p){

    579. 

  579.                             $sql = "INSERT INTO tickets_product SET tickets_id='".$child_new_id."', seat_name='".$p['seat_name']."', seat_qty='".$p['seat_qty']."', seat_price='".$p['seat_price']."',

    580. 

  580.                                         color='".$p['color']."', enabled='".$p['enabled']."',handicap='".$p['handicap']."' ";

    581. 

  581.                             mysql_query($sql)or die(mysql_errno());

    582. 

  582.                             if($seatsxml_new!=''){

    583. 

  583.                                 $product_id_new = mysql_insert_id();

    584. 

  584.                                 //update id for product

    585. 

  585.                                 $old = '/id="'.$p['id'].'"/';

    586. 

  586.                                 $new = 'id="'.$product_id_new.'"';

    587. 

  587.                                 $seatsxml_new = preg_replace($old,$new , $seatsxml_new);

    588. 

  588. 

    589. 

  589.                                 //update group_id for seat, shape

    590. 

  590.                                 $old = '/group_id="'.$p['id'].'"/';

    591. 

  591.                                 $new = 'group_id="'.$product_id_new.'"';

    592. 

  592. 

    593. 

  593.                                 $seatsxml_new = preg_replace($old,$new , $seatsxml_new);

    594. 

  594.                             }

    595. 

  595.                         }

    596. 

  596.                         $sql= "UPDATE tickets SET seatsxml='".$seatsxml_new."' WHERE id='".$child_new_id."'";

    597. 

  597.                         mysql_query($sql)or die(mysql_errno());

    598. 

  598.                     }

    599. 

  599.                 }

    600. 

  600.             }

    601. 

  601. 

    602. 

  602.             if($ticketsql_id>0) {

    603. 

  603.                 $sql = "SELECT tickets.*,tickets.id as tid,Venue.* FROM tickets

    604. 

  604.                         LEFT JOIN ticket_event_venue Venue ON (Venue.id=tickets.ticket_venue_section_id)

    605. 

  605.                         WHERE tickets.id='".addslashes($ticketsql_id)."' AND tickets.user_id='".$_SESSION['UserId']."' ";

    606. 

  606.                 $result = mysql_query($sql);

    607. 

  607.                 if(($row=mysql_fetch_array($result))) {

    608. 

  608.                     $this->set('data',$row);

    609. 

  609.                     if($row['seating_type']=='0') {

    610. 

  610.                         //get ticket product

    611. 

  611.                         $sql = "SELECT * FROM tickets_product WHERE tickets_id='".$row['tid']."'";

    612. 

  612.                         $this->set('tickets_seat', mysql_query($sql));

    613. 

  613.                     }

    614. 

  614. 

    615. 

  615.                     if($row['venue_country_id']>=0) {

    616. 

  616.                         $this->set('stateList',$this->getStateList($row['venue_country_id']));

    617. 

  617.                     }

    618. 

  618.                     if($row['venue_state_id']>=0) {

    619. 

  619.                         $this->set('cityList',$this->getCityList($row['venue_state_id']));

    620. 

  620.                     }

    621. 

  621.                    

    622. 

  622.                     $this->set('tid',$ticketsql_id);

    623. 

  623.                     

    624. 

  624.                     //get datetime children

    625. 

  625.                     $sql = "SELECT id,ticevent_startdate,ticevent_enddate,ticket_dooropen FROM tickets WHERE parent_id='".$ticketsql_id."'";

    626. 

  626.                     $result = mysql_query($sql);

    627. 

  627.                     $datetimes = array();

    628. 

  628.                     while($row=mysql_fetch_array($result)){

    629. 

  629.                         $datetimes[] = $row;

    630. 

  630.                     }

    631. 

  631.                     if(count($datetimes)>0)

    632. 

  632.                         $this->set('datetimes',$datetimes);

    633. 

  633.                 }

    634. 

  634.             }else {//new

    635. 

  635.                 //delete all tickets is_temp='1' and title=''

    636. 

  636.                 $sql = "SELECT id FROM tickets WHERE is_temp='1' AND ticevent_name='' AND user_id='".$_SESSION['UserId']."'";

    637. 

  637.                 $result = mysql_query($sql);

    638. 

  638.                 while($row=mysql_fetch_array($result)){

    639. 

  639.                     mysql_query("DELETE FROM tickets WHERE id='".$row['id']."'");

    640. 

  640.                     mysql_query("DELETE FROM tickets_product WHERE tickets_id='".$row['id']."'");

    641. 

  641.                 }

    642. 

  642.                 //insert tickets empty

    643. 

  643.                 $query = "INSERT tickets SET is_temp='1', user_id='".$_SESSION['UserId']."'";

    644. 

  644.                 mysql_query($query);

    645. 

  645.                 $ticketsql_id = mysql_insert_id();

    646. 

  646.                 $this->set('tid',$ticketsql_id);

    647. 

  647.             }

    648. 

  648.         }

    649. 

  649.     }

    650. 

  650. 

    651. 

  651.     function ajax_saveticketseat() {

    652. 

  652.         $this->layout = 'blank';

    653. 

  653.         if(isset($_POST['tic_action']) && $_POST['tic_action']!='') {

    654. 

  654.             if(isset($_POST['tic_id']) && $_POST['tic_id']>0) {

    655. 

  655.                 if(isset($_POST['tic_action'])) {

    656. 

  656.                     if($_POST['tic_action']=='delete') {

    657. 

  657.                         $sql = "SELECT * FROM tickets_product WHERE id='".$_POST['tic_id']."'";

    658. 

  658.                         $result = mysql_query($sql);

    659. 

  659.                         if(($row=mysql_fetch_array($result))){

    660. 

  660.                             $seat_name = $row['seat_name'];

    661. 

  661.                             $sql = "SELECT P.id FROM tickets_product as P

    662. 

  662.                                     RIGHT JOIN tickets as T ON P.tickets_id=T.id

    663. 

  663.                                     WHERE T.parent_id='".$_POST['tictickets_id']."'";

    664. 

  664.                             $result = mysql_query($sql);

    665. 

  665.                             $listid = array();

    666. 

  666.                             while($row=mysql_fetch_array($result)){

    667. 

  667.                                 $listid[] = $row['id'];

    668. 

  668.                             }

    669. 

  669.                             if(count($listid)>0){

    670. 

  670.                                 $sql = "DELETE FROM tickets_product WHERE id='".$_POST['tic_id']."' OR (id IN (".join(',',$listid).") AND seat_name='".$seat_name."')";

    671. 

  671.                             }else{

    672. 

  672.                                 $sql = "DELETE FROM tickets_product WHERE id='".$_POST['tic_id']."'";

    673. 

  673.                             }

    674. 

  674.                             mysql_query($sql) or die(mysql_error());

    675. 

  675.                         }                        

    676. 

  676.                         

    677. 

  677.                         $id = $_POST['tic_id'];

    678. 

  678.                         $out ='{"action":"delete","id" : "'.$id.'"}';

    679. 

  679.                     }

    680. 

  680.                     else {

    681. 

  681.                         $sql = "SELECT * FROM tickets_product WHERE id='".$_POST['tic_id']."'";

    682. 

  682.                         $result = mysql_query($sql);

    683. 

  683.                         if(($row=mysql_fetch_array($result))){

    684. 

  684.                             $seat_name = $row['seat_name'];

    685. 

  685.                             //check

    686. 

  686.                             $query = "SELECT count(id) as _count FROM tickets_product WHERE tickets_id='".$_POST['tictickets_id']."' AND id<>'".$_POST['tic_id']."' AND seat_name='".$_POST['ticcat']."'";

    687. 

  687.                             $result = mysql_query($query);

    688. 

  688.                             $row= mysql_fetch_array($result);

    689. 

  689.                             if($row['_count']>0){

    690. 

  690.                                 $out ='{"error":"Ticket Name Unavailable"}';

    691. 

  691.                             }else if($_POST['ticprice']<5){

    692. 

  692.                                 $out ='{"error":"Minimum price is $5"}';

    693. 

  693.                             }else{

    694. 

  694.                                 $sql = "SELECT P.id FROM tickets_product as P

    695. 

  695.                                     RIGHT JOIN tickets as T ON P.tickets_id=T.id

    696. 

  696.                                     WHERE T.parent_id='".$_POST['tictickets_id']."'";

    697. 

  697.                                 $result = mysql_query($sql);

    698. 

  698.                                 $listid = array();

    699. 

  699.                                 while($row=mysql_fetch_array($result)){

    700. 

  700.                                     $listid[] = $row['id'];

    701. 

  701.                                 }

    702. 

  702.                                 if(count($listid)>0){

    703. 

  703.                                     $sql = "UPDATE tickets_product SET seat_name='".$_POST['ticcat']."', seat_qty='".$_POST['ticquantity']."', seat_price='".$_POST['ticprice']."'

    704. 

  704.                                             WHERE id='".$_POST['tic_id']."' OR (id IN (".join(',',$listid).") AND seat_name='".$seat_name."')";

    705. 

  705.                                 }else{

    706. 

  706.                                     $sql = "UPDATE tickets_product SET seat_name='".$_POST['ticcat']."', seat_qty='".$_POST['ticquantity']."', seat_price='".$_POST['ticprice']."'

    707. 

  707.                                         WHERE id='".$_POST['tic_id']."'";

    708. 

  708.                                 }

    709. 

  709.                                 mysql_query($sql);

    710. 

  710.                                 $id = $_POST['tic_id'];

    711. 

  711.                                 $out ='{"action":"update","id" : "'.$id.'","ticcat": "'.$_POST['ticcat'].'", "ticquantity": "'.$_POST['ticquantity'].'", "ticprice": "'.$_POST['ticprice'].'"}';

    712. 

  712.                             }

    713. 

  713.                         }

    714. 

  714.                     }

    715. 

  715.                 }

    716. 

  716.             }else {

    717. 

  717.                 //check seat_name

    718. 

  718.                 $query = "SELECT count(id) as _count FROM tickets_product WHERE tickets_id='".$_POST['tictickets_id']."' AND seat_name='".$_POST['ticcat']."'";

    719. 

  719.                 $result = mysql_query($query);

    720. 

  720.                 $row= mysql_fetch_array($result);

    721. 

  721.                 if($row['_count']>0){

    722. 

  722.                     $out ='{"error":"Ticket Name Unavailable"}';

    723. 

  723.                 }else if($_POST['ticprice']<5){

    724. 

  724.                     $out ='{"error":"Minimum price is $5"}';

    725. 

  725.                 }else{

    726. 

  726.                     $sql = "INSERT INTO tickets_product SET tickets_id='".$_POST['tictickets_id']."', seat_name='".$_POST['ticcat']."', seat_qty='".$_POST['ticquantity']."', seat_price='".$_POST['ticprice']."',enabled=1 ";

    727. 

  727.                     mysql_query($sql);

    728. 

  728.                     $id = mysql_insert_id();

    729. 

  729.                     $out ='{"action":"insert","id" : "'.$id.'","ticcat": "'.$_POST['ticcat'].'", "ticquantity": "'.$_POST['ticquantity'].'", "ticprice": "'.$_POST['ticprice'].'"}';

    730. 

  730. 

    731. 

  731.                     $query = "SELECT id FROM tickets WHERE parent_id='".$_POST['tictickets_id']."' ";

    732. 

  732.                     $result = mysql_query($query);

    733. 

  733.                     while($row = mysql_fetch_array($result)){

    734. 

  734.                         $sql = "INSERT INTO tickets_product SET tickets_id='".$row['id']."', seat_name='".$_POST['ticcat']."', seat_qty='".$_POST['ticquantity']."', seat_price='".$_POST['ticprice']."',enabled=1 ";

    735. 

  735.                         mysql_query($sql);

    736. 

  736.                     }

    737. 

  737.                 }

    738. 

  738.             }

    739. 

  739.         }

    740. 

  740. 

    741. 

  741.         if(!isset($out))

    742. 

  742.             $out = '{"action":""}';

    743. 

  743. 

    744. 

  744.         $this->set('out',$out);

    745. 

  745.     }

    746. 

  746. 

    747. 

  747.     function ajax_showticketproduct() {

    748. 

  748.         $out = '';

    749. 

  749.         if(isset($_POST['tickets_id'])) {

    750. 

  750.             $query = "SELECT * FROM tickets_product WHERE tickets_id='".$_POST['tickets_id']."' ";

    751. 

  751.             $result = mysql_query($query);

    752. 

  752. 

    753. 

  753.             while($row=mysql_fetch_array($result)) {

    754. 

  754.                 if($out!='') $out .=",";

    755. 

  755.                 $out .= '{ "id":"'.$row['id'].'", "ticcat":"'.$row['seat_name'].'", "ticquantity":"'.$row['seat_qty'].'", "ticprice":"'.$row['seat_price'].'" }';

    756. 

  756.             }

    757. 

  757.         }

    758. 

  758.         $out = '{"data":['.$out.']}';

    759. 

  759. 

    760. 

  760.         $this->set('out',$out);

    761. 

  761.     }

    762. 

  762. 

    763. 

  763.     function ajax_resetSeatProduct() {

    764. 

  764.         $this->layout='blank';

    765. 

  765.         if(isset($_POST['id'])) {

    766. 

  766.             $sql = "SELECT id FROM tickets WHERE id='".$_POST['id']."' or parent_id='".$_POST['id']."'";

    767. 

  767.             $result = mysql_query($sql);

    768. 

  768.             $listid = array();              

    769. 

  769.             while($row=mysql_fetch_array($result)){

    770. 

  770.                 $listid[] = $row['id'];

    771. 

  771.             }

    772. 

  772. 

    773. 

  773.             if(count($listid)>0){

    774. 

  774.                 $sql= "DELETE FROM tickets_product WHERE tickets_id IN (".join(',',$listid).")";

    775. 

  775.                 mysql_query($sql) or die(mysql_error());

    776. 

  776.                 $sql = "UPDATE tickets SET seatsxml='', chart_id=0 WHERE id IN (".join(',',$listid).")";

    777. 

  777.                 mysql_query($sql) or die(mysql_error());

    778. 

  778.             }            

    779. 

  779.         }

    780. 

  780.         $this->render('blank_page');

    781. 

  781.     }

    782. 

  782. 

    783. 

  783.     function ajax_adddatetime() {

    784. 

  784.         $this->layout='blank';

    785. 

  785.         $out = '';

    786. 

  786.         if(isset($_POST['action'])){

    787. 

  787.             if( isset($_POST['parent_id']) && $_POST['action']=='insert'){

    788. 

  788.                 $parent_ticketid = $_POST['parent_id'];

    789. 

  789.                 if($_POST['action']=='insert'){

    790. 

  790.                     $ticket['Ticket']['parent_id'] = $parent_ticketid;

    791. 

  791.                     $ticket['Ticket']['user_id'] = $_SESSION['UserId'];

    792. 

  792.                     $ticket['Ticket']['is_temp'] = 1;

    793. 

  793.                     $this->Ticket->create();

    794. 

  794.                     $this->Ticket->save($ticket);

    795. 

  795.                     $id = $this->Ticket->id;

    796. 

  796.                 }

    797. 

  797.                 $out = '"action":"insert","id":"'.$id.'"';

    798. 

  798.             }else if(isset($_POST['id']) && $_POST['action']=='delete'){

    799. 

  799.                 $sql = "DELETE FROM tickets WHERE id='".$_POST['id']."'";

    800. 

  800.                 mysql_query($sql);

    801. 

  801.                 $out = '"action":"delete","id":"'.$_POST['id'].'"';

    802. 

  802.             }

    803. 

  803.         }

    804. 

  804. 

    805. 

  805.         $out = '{'.$out.'}';

    806. 

  806.         $this->set('out',$out);

    807. 

  807.      }

    808. 

  808. 

    809. 

  809.     function ajax_checkeventname(){

    810. 

  810.         $this->layout='blank';

    811. 

  811.         $out = '"check":"error"';

    812. 

  812.         if(isset($_POST['id']) && isset($_POST['evname'])){

    813. 

  813.             $id = base64_decode($_POST['id']);

    814. 

  814.             $sql = 'SELECT count(id) as _count FROM tickets WHERE id<>"'.$id.'" AND ticevent_name="'.addslashes($_POST['evname']).'" AND parent_id=0 ';

    815. 

  815.             $result = mysql_query($sql);

    816. 

  816.             $row = mysql_fetch_array($result) or die(mysql_error());

    817. 

  817.             if($row['_count']==0){

    818. 

  818.                 $out = '"check":"ok"';

    819. 

  819.             }

    820. 

  820.         }

    821. 

  821.         $out = '{'.$out.'}';

    822. 

  822.         $this->set('out',$out);

    823. 

  823.     }

    824. 

  824. 

    825. 

  825.     function eventlogoupload() {

    826. 

  826.         $this->layout='blank';

    827. 

  827. 

    828. 

  828.         $uploadstatus = 0;

    829. 

  829.         $imagefilename= 0;

    830. 

  830.         if(!isset($_REQUEST['type'])) $_REQUEST['type']='image';

    831. 

  831.         $type= $_REQUEST['type'];

    832. 

  832. 

    833. 

  833.         if (isset($_FILES['filedata'])) {

    834. 

  834.             $this->cleanUpFields();

    835. 

  835. 

    836. 

  836.             // grab the file

    837. 

  837.             $file = $_FILES['filedata'];

    838. 

  838.             // upload the image using the upload component

    839. 

  839.             //	pr($_FILES);

    840. 

  840.             $file_info = getimagesize($file['tmp_name']);

    841. 

  841.             if(!empty($file_info)) {

    842. 

  842. 

    843. 

  843.                 $des = "webroot/ticket_images/";

    844. 

  844.                 if(!file_exists($des))

    845. 

  845.                     mkdir($des);

    846. 

  846. 

    847. 

  847.                 $this->Upload->upload($file,$des);

    848. 

  848.                 if($this->Upload->errors!=null) {

    849. 

  849.                     $this->set('errors',join('<br/>',$this->Upload->errors));

    850. 

  850.                 }

    851. 

  851.                 else {

    852. 

  852.                     $uploadstatus = 1;

    853. 

  853.                     $filesrc = str_replace($des, '', $this->Upload->_name);

    854. 

  854.                     $file['tmp_name'] = $this->Upload->_name;

    855. 

  855.                     if($type=="image") {

    856. 

  856.                         $des = "webroot/ticket_images/medium/";

    857. 

  857.                         if(!file_exists($des))

    858. 

  858.                             mkdir($des);

    859. 

  859. 

    860. 

  860.                         $this->Upload->_name = $des.$filesrc;

    861. 

  861.                         $this->Upload->image($file,'resizemin',array(200,200),'jpg');

    862. 

  862. 

    863. 

  863.                         $des = "webroot/ticket_images/thumb/";

    864. 

  864.                         if(!file_exists($des))

    865. 

  865.                             mkdir($des);

    866. 

  866. 

    867. 

  867.                         $this->Upload->_name = $des.$filesrc;

    868. 

  868.                         $this->Upload->image($file,'resizemin',array(45,45),'jpg');

    869. 

  869.                     }else if($type=="logo") {

    870. 

  870.                         $des = "webroot/ticket_images/logo/";

    871. 

  871.                         if(!file_exists($des))

    872. 

  872.                             mkdir($des);

    873. 

  873. 

    874. 

  874.                         $this->Upload->_name = $des.$filesrc;

    875. 

  875.                         $this->Upload->image($file,'resizemin',array(100,100),'jpg');

    876. 

  876.                     }

    877. 

  877. 

    878. 

  878.                     $filethumb = str_replace($des, '', $this->Upload->_name);

    879. 

  879. 

    880. 

  880.                     //$this->set('filesrc' , $filesrc);

    881. 

  881.                     $this->set('filethumb' , $filethumb);

    882. 

  882.                 }

    883. 

  883.             }else {

    884. 

  884.                 $this->set('errors','Required file image.');

    885. 

  885.             }

    886. 

  886.         }

    887. 

  887. 

    888. 

  888.         if(isset($_REQUEST['filesrc']) && $_REQUEST['filesrc']!='') {

    889. 

  889.             $this->set('filethumb' , $_REQUEST['filesrc']);

    890. 

  890.         }

    891. 

  891.         $maxwidth = $type=='logo'?100:200;

    892. 

  892.         $this->set('maxwidth',$maxwidth);

    893. 

  893.         $this->set('maxdimension',"$maxwidth x $maxwidth");

    894. 

  894.         $this->set('uploadstatus',$uploadstatus);

    895. 

  895.     }

    896. 

  896. 

    897. 

  897.     function venueinfo($venueid=null) {

    898. 

  898.         $this->checkSession();

    899. 

  899.         $this->layout = 'ticketcategoryinner';

    900. 

  900.         $this->ticketCategory();

    901. 

  901. 

    902. 

  902.         $this->pageTitle = 'View venue';

    903. 

  903.         $this->set('venueid',$venueid);

    904. 

  904.     }

    905. 

  905. 

    906. 

  906.     function perfomerinfo($perfomerid = null) {

    907. 

  907.         $this->checkSession();

    908. 

  908.         $this->layout = 'ticketcategoryinner';

    909. 

  909.         $this->ticketCategory();

    910. 

  910.         $this->pageTitle = 'View Perfomer';

    911. 

  911.         $…
    912.

Large files files are truncated, but you can click here to view the full file