ajax_updatebooking.php

<?php
  require_once("shared.php");

  global $gConfig;

  $rc = -1;
  $msg = "";
  $bookingcode = "";
  $bookingid = 0;

  try
  {
    if (isset($_POST['bookingcode']) && isset($_POST['uuid']))
    {
      $bookingcode = $_POST['bookingcode'];
      $uuid = $_POST['uuid'];

      $custfirstname = $_POST['custfirstname'];
      $custlastname = $_POST['custlastname'];
      $custemail = $_POST['custemail'];
      $custmobile = $_POST['custmobile'];
      $custphone = $_POST['custphone'];
      $custaddress1 = $_POST['custaddress1'];
      $custaddress2 = $_POST['custaddress2'];
      $custcity = $_POST['custcity'];
      $custpostcode = $_POST['custpostcode'];
      $custstate = $_POST['custstate'];

      $hasbudget = false;
      $hascommission = false;
	  $hastravel = false;
	  $hasspotter = false;
	  
      $budget = null;
      $commission = null;
	  $travel = null;
	  $spotter = null;

      $vars1 = "";
      $vars2 = "";
	  $vars3 = "";
	  $vars4 = "";

      if (isset($_POST['budget']))
        $vars1 = "budget=" . SharedNullOrQuoted($_POST['budget'], 50, $dblink) . ",";

      if (isset($_POST['commission']))
        $vars2 = "commission=" . SharedNullOrQuoted($_POST['commission'], 50, $dblink) . ",";
		
		if (isset($_POST['travel']))
        $vars3 = "travel=" . SharedNullOrQuoted($_POST['travel'], 50, $dblink) . ",";
		
		if (isset($_POST['spotter']))
        $vars4 = "spotter=" . SharedNullOrQuoted($_POST['spotter'], 50, $dblink) . ",";

      $reportid = $_POST['reportid'];
      $notes = $_POST['notes'];

      $numstories = $_POST['numstories'];
      $numbedrooms = $_POST['numbedrooms'];
      $numbathrooms = $_POST['numbathrooms'];
      $numrooms = $_POST['numrooms'];
      $numbuildings = $_POST['numbuildings'];
      $address1 = $_POST['address1'];
      $address2 = $_POST['address2'];
      $city = $_POST['city'];
      $postcode = $_POST['postcode'];
      $state = $_POST['state'];
      $construction = $_POST['construction'];
      $age = $_POST['age'];
      $meetingonsite = $_POST['meetingonsite'];
      $renoadvice = $_POST['renoadvice'];
      $pestinspection = $_POST['pestinspection'];

      $estateagentcompany = $_POST['estateagentcompany'];
      $estateagentcontact = $_POST['estateagentcontact'];
      $estateagentmobile = $_POST['estateagentmobile'];
      $estateagentphone = $_POST['estateagentphone'];

      $userid = SharedGetUserIdFromUuid($uuid, $dblink);

      $dbinsert = "update bookings set " .
                  "custfirstname=" . SharedNullOrQuoted($custfirstname, 50, $dblink) . "," .
                  "custlastname=" . SharedNullOrQuoted($custlastname, 50, $dblink) . "," .
                  "custemail=" . SharedNullOrQuoted($custemail, 50, $dblink) . "," .
                  "custmobile=" . SharedNullOrQuoted($custmobile, 50, $dblink) . "," .
                  "custphone=" . SharedNullOrQuoted($custphone, 50, $dblink) . "," .
                  "custaddress1=" . SharedNullOrQuoted($custaddress1, 50, $dblink) . "," .
                  "custaddress2=" . SharedNullOrQuoted($custaddress2, 50, $dblink) . "," .
                  "custcity=" . SharedNullOrQuoted($custcity, 50, $dblink) . "," .
                  "custpostcode=" . SharedNullOrQuoted($custpostcode, 50, $dblink) . "," .
                  "custstate=" . SharedNullOrQuoted($custstate, 50, $dblink) . "," .

                  "itype=" . SharedNullOrQuoted($reportid, 50, $dblink) . "," .
                  $vars1 .
                  $vars2 .
				  $vars3 .
				  $vars4 .
                  "notes=" . SharedNullOrQuoted($notes, 50, $dblink) . "," .

                  "numstories=" . SharedNullOrNum($numstories, $dblink) . "," .
                  "numbedrooms=" . SharedNullOrNum($numbedrooms, $dblink) . "," .
                  "numbathrooms=" . SharedNullOrNum($numbathrooms, $dblink) . "," .
                  "numrooms=" . SharedNullOrNum($numrooms, $dblink) . "," .
                  "numoutbuildings=" . SharedNullOrNum($numbuildings, $dblink) . "," .

                  "address1=" . SharedNullOrQuoted($address1, 50, $dblink) . "," .
                  "address2=" . SharedNullOrQuoted($address2, 50, $dblink) . "," .
                  "city=" . SharedNullOrQuoted($city, 50, $dblink) . "," .
                  "state=" . SharedNullOrQuoted($state, 50, $dblink) . "," .
                  "postcode=" . SharedNullOrQuoted($postcode, 50, $dblink) . "," .
                  "construction=" . SharedNullOrQuoted($construction, 100, $dblink) . "," .
                  "age=" . SharedNullOrQuoted($age, 50, $dblink) . "," .
                  "meetingonsite=" . SharedNullOrNum($meetingonsite, $dblink) . "," .
                  "renoadvice=" . SharedNullOrNum($renoadvice, $dblink) . "," .
                  "pestinspection=" . SharedNullOrNum($pestinspection, $dblink) . "," .

                  "estateagentcompany=" . SharedNullOrQuoted($estateagentcompany, 50, $dblink) . "," .
                  "estateagentcontact=" . SharedNullOrQuoted($estateagentcontact, 50, $dblink) . "," .
                  "estateagentmobile=" . SharedNullOrQuoted($estateagentmobile, 20, $dblink) . "," .
                  "estateagentphone=" . SharedNullOrQuoted($estateagentphone, 20, $dblink) . "," .

                  "datemodified=CURRENT_TIMESTAMP," .
                  "usersmodified_id=$userid " .
                  "where " .
                  "id=$bookingcode";
      error_log($dbinsert);
      if ($dbresult = SharedQuery($dbinsert, $dblink))
      {
        $msg = "Successfully updated booking [$bookingid]";
        $rc = 0;
      }
      else
        $msg = "Error updating booking please try again...";
    }
    else
      $msg = "Missing parameters...";
  }

  catch (Exception $e)
  {
    $msg = "Unable to update booking...";
  }

  $response = array("rc" => $rc, "msg" => $msg);
  $json = json_encode($response);
  echo $json;
?>