<%
response.buffer = true
On Error Resume Next
IF (checkPermission("drivers")="FAILED") THEN
response.write("You do not have permission to view this page")
response.end
END IF
%>
<%
Function Qpad(tval)
IF len(tval)=1 THEN
Qpad="0"&tval
ELSE
Qpad=tval
END IF
End Function
Function activeDriverCount(tcID)
IF CStr(tcID) <> "" AND IsNumeric(tcID) THEN
SET rsADC=dbCBK.Execute("SELECT COUNT(*) As adc from cbk_drivers WHERE `active`='1' limit 1")
IF rsADC.EOF THEN
activeDriverCount="0"
END IF
DO WHILE NOT rsADC.EOF
activeDriverCount=rsADC("adc")
rsADC.MoveNext
loop
rsADC.Close
SET rsADC = Nothing
ELSE
activeDriverCount="0"
END IF
End Function
curdc=CInt(activeDriverCount("1"))
StrError="None"
IF REQUEST("add")="driver.account" THEN
str_school_id=sanitizeRequest("schoolID","form")
acc_active=sanitizeRequest("active","form")
IF acc_active="1" THEN
IF curdc+1 > strDRVLMT THEN
StrError = "You have reached your active driver limit"
END IF
END IF
drivername=sanitizeRequest("driverNAME","form")
IF LEN(drivername) < 2 THEN StrError = "The Drivers Name Is A Required Field" END IF
driverEMAIL=sanitizeRequest("driverEMAIL","form")
IF LEN(driverEMAIL) < 6 OR LEN(driverEMAIL) > 150 OR NOT(Instr(driverEMAIL,"@") > 0) OR NOT(Instr(driverEMAIL,".") > 0) THEN
StrError = "The Email Address Appears Invalid"
ELSE
driverEMAIL=lcase(driverEMAIL)
END IF
IF (checkDrvEmailExists(driverEMAIL,str_company_id) = "EXISTS") THEN
StrError = "The Email Address Is Already In Use"
END IF
driverMOBILE=sanitizeRequest("driverMOBILE","form")
IF driverMOBILE <> "" AND NOT(IsNull(driverMOBILE)) THEN
driverMOBILE=sanitizeN(driverMOBILE)
END IF
IF LEN(driverMOBILE) < 11 OR LEN(driverMOBILE) > 14 THEN StrError = "The Mobile Number Appears Invalid" END IF
vehicleTYPE=""
vehicleMAKE=""
vehicleMODEL=""
vehicleREG=""
userNAME=sanitizeRequest("userNAME","form")
acpwd=sanitizeRequest("acp","form")
IF acpwd <> "" AND NOT(IsNull(acpwd)) THEN
ecpwd=DRVEncryptAndEncode(acpwd)
ELSE
ecpwd=""
END IF
address1=sanitizeRequest("address1","form")
IF LEN(address1) > 100 THEN StrError = "Address 1 is too long" END IF
address2=sanitizeRequest("address2","form")
IF LEN(address2) > 100 THEN StrError = "Address 2 is too long" END IF
address3=sanitizeRequest("address3","form")
IF LEN(address3) > 100 THEN StrError = "Address 3 is too long" END IF
countystate=sanitizeRequest("countystate","form")
IF LEN(countystate) > 50 THEN StrError = "The County / State Is too long" END IF
postcode=sanitizeRequest("postcode","form")
IF LEN(postcode) > 50 THEN StrError = "The Postcode Is too long" & VbCrLf & "If you do not have a postcode enter 000" END IF
driverTEL=sanitizeContent("driverTEL","form")
IF driverTEL <> "" AND NOT(IsNull(driverTEL)) THEN
driverTEL=sanitizeN(driverTEL)
END IF
driverNOTES=sanitizeContent("driverNOTES","form")
ht_type=sanitizeRequest("testT","form")
ht_DATE_posted=sanitizeRequest("testDATE","form")
IF ht_DATE_posted <> "" AND (IsDate(ht_DATE_posted)) THEN
'ok
f=formatDateTime(CDate(ht_DATE_posted),2)
'format for mysql
ht_DATE=year(f)&"-"&Qpad(month(f))&"-"&Qpad(day(f))&" 23:59:59"
ht_DATE_SQL1=", `healthtestDATE`"
ht_DATE_SQL2=", '"&ht_DATE&"'"
ELSE
ht_DATE=""
ht_DATE_SQL1=""
ht_DATE_SQL2=""
END IF
ht_RESULT=sanitizeRequest("testRESULT","form")
ht_CODE=sanitizeRequest("testCODE","form")
ht_DATENEXTDUE_posted=sanitizeRequest("testdateNEXTDUE","form")
IF ht_DATENEXTDUE_posted <> "" AND (IsDate(ht_DATENEXTDUE_posted)) THEN
'ok
t=formatDateTime(CDate(ht_DATENEXTDUE_posted),2)
'format for mysql
ht_DATENEXTDUE=year(t)&"-"&Qpad(month(t))&"-"&Qpad(day(t))&" 23:59:59"
ht_DATENEXTDUE_SQL1=", `healthtestNEXTDATEDUE`"
ht_DATENEXTDUE_SQL2=", '"&ht_DATENEXTDUE&"'"
ELSE
ht_DATENEXTDUE=""
ht_DATENEXTDUE_SQL1=""
ht_DATENEXTDUE_SQL2=""
END IF
IF StrError <> "None" THEN
'print the errors
ELSE
'add the account
aSQL = "INSERT INTO cbk_drivers "
aSQL = aSQL & "(`schoolID`,`driverNAME`,`driverUSERNAME`,`driverPWD`,`driverEMAIL`,`driverMOBILE`,`driverADDRESS1`,`driverADDRESS2`,`driverADDRESS3`,`driverCOUNTYSTATE`,`driverPOSTCODE`,`driverTEL`,`vehicleTYPE`,`vehicleMAKE`,`vehicleMODEL`,`vehicleREG`,`active`,`driverNOTES`,`dateADDED`,`healthtestT`"&ht_DATE_SQL1&",`healthtestRESULT`,`healthtestBARCODE`"&ht_DATENEXTDUE_SQL1&")"
aSQL = aSQL & " VALUES"
aSQL = aSQL & "('"&str_school_id&"', '"&driverNAME&"', '"&userNAME&"', '"&ecpwd&"', '"&driverEMAIL&"', '"&driverMOBILE&"', '"&address1&"', '"&address2&"', '"&address3&"', '"&countystate&"', '"&postcode&"', '"&driverTEL&"', '"&vehicleTYPE&"', '"&vehicleMAKE&"', '"&vehicleMODEL&"', '"&vehicleREG&"', '1', '"&driverNOTES&"', '"&year(now())&"-"&month(now())&"-"&day(now())&"', '"&ht_type&"'"&ht_DATE_SQL2&",'"&ht_RESULT&"','"&ht_CODE&"'"&ht_DATENEXTDUE_SQL2&")"
dbCBK.Execute(aSQL)
pfSQL = "SELECT @@IDENTITY AS 'Identity'"
Set rsSelectResultpf = dbCBK.Execute( pfSQL )
If rsSelectResultpf.EOF Then
StrError = "An error occurred, please try again" & vbCrLf
Else
StrError = "None"
nDID=rsSelectResultpf(0).value
response.redirect("/super-user/control-panel/?go=drivers&drivers=view&view="&nDID&"¬ify=New+driver+added+successfuly&nact=success")
End If
END IF
END IF
Function checkDrvEmailExists(str_email,str_cid)
IF str_email <> "" THEN
str_email=trim(str_email)
SET rsEChk = dbCBK.Execute("SELECT `driverEMAIL` FROM cbk_drivers WHERE `driverEMAIL` = '"&str_email&"' limit 1")
IF rsEChk.EOF THEN
checkDrvEmailExists = "NOTFOUND"
ELSE
checkDrvEmailExists = "EXISTS"
END IF
rsEChk.Close
SET rsEChk = Nothing
ELSE
checkDrvEmailExists = "FAILED"
END IF
End Function
Function sanitizeN(requestVariable)
Set regEx = New RegExp
regEx.Global = true
regEx.Pattern = "[^0-9]"
sanitizeN = regEx.Replace(requestVariable, "")
End Function
%>
<%IF StrError <> "None" THEN%>
<%=StrError%>
<%END IF%>
<%
If Err.Number <> 0 THEN response.write(Err.Description) END IF
%>