tmp.php

<?php
session_start();
include_once 'dbconnect.php';
connectDB();
#phpinfo();
parse_str($_SERVER["QUERY_STRING"], $data);
$data['client'] = $data['customerName']; // FIXME hack

$chars = '23456789ABCDEFGHJKLMNPQRSTUVWXYZ';
$data['hash'] = substr(str_shuffle($chars), 0, 5);

## Get the username from the userId
#$q1 = "select name from users where id = '" . $data['userId'] . "'";
$q1 = "select name from users where id = '" . $_SESSION['usr_id'] . "'";
$res = mysqli_query($db, $q1);
$row = mysqli_fetch_assoc($res);
$data['user'] = $row['name'];


$fields = array('user','client','rhEmail','country','lob','o1','o2','o3','o4','o5','d1','d2','d3','d4','d5','hash','share','project','comments','comments_automation','comments_wayOfWorking','comments_architecture','comments_environment','comments_visionLeadership');
foreach ($fields as $field) {
	$$field = mysqli_real_escape_string($db, $data[$field]);
}

if (!isset ($share)) {
	$share = "off";
}

$qq = "INSERT INTO data (" . implode(',', $fields).") VALUES ('$user','$client','$rhEmail','$country','$lob',$o1,$o2,$o3,$o4,$o5,$d1,$d2,$d3,$d4,$d5,'$hash','$share','$project','$comments','$comments_automation','$comments_wayOfWorking','$comments_architecture','$comments_environment','$comments_visionLeadership')";
#print $qq;
$result = mysqli_query($db, $qq);

#if (!$result) {
#    printf("Errormessage: %s\n", mysqli_error($db));
#}

#print_r($result);

// TODO check $result

header("Location: results.php?hash=$hash");
?>