class AuthenticationFailedException extends Exception {} class CaptchaMismatchException extends Exception {} ?> include_once 'connection.inc.php'; class DB { function __construct() { global $db_host, $db_username, $db_password, $db_schema; $db = mysql_connect($db_host, $db_username, $db_password); mysql_select_db($db_schema); } function get_member_from_db($id) { $query = 'select m.MedlemID, m.Navn, m.Addresse1 Adresse1, m.Addresse2 Adresse2, truncate(m.Postnr,0) Postnr, p.Poststed, m.`e-mail` email, elektronisk_medlemsblad, elektronisk_faktura from Medlemmer m left join Poststed p on m.Postnr = p.Postnr where MedlemID=' . mysql_real_escape_string($id); $result = mysql_query($query); if($result) { $row = mysql_fetch_array($result); $member = new Member(); $member->name = $row['Navn']; $member->id = $row['MedlemID']; $member->address_1 = $row['Adresse1']; $member->address_2 = $row['Adresse2']; $member->zip_code = $row['Postnr']; $member->city = $row['Poststed']; $member->email = $row['email']; $member->electronic_magazine = $row['elektronisk_medlemsblad']; $member->electronic_invoice = $row['elektronisk_faktura']; } mysql_free_result($result); return $member; } function null_or_string($value) { $value = trim($value); if($value == "") return "null"; return "'$value'"; } function update_member($member) { $address_1 = $this->null_or_string(mysql_real_escape_string($member->address_1)); $address_2 = $this->null_or_string(mysql_real_escape_string($member->address_2)); $zip_code = $this->null_or_string(mysql_real_escape_string($member->zip_code)); $email = $this->null_or_string(mysql_real_escape_string($member->email)); $id = $this->null_or_string(mysql_real_escape_string($member->id)); $electronic_invoice = $this->null_or_string(mysql_real_escape_string($member->electronic_invoice)); $electronic_magazine = $this->null_or_string(mysql_real_escape_string($member->electronic_magazine)); $query = "update Medlemmer set Addresse1 = $address_1, Addresse2 = $address_2, Postnr = $zip_code, `e-mail` = $email, elektronisk_faktura = $electronic_invoice, elektronisk_medlemsblad = $electronic_magazine where MedlemID = $id"; $result = mysql_query($query); } function validate_zip_code($zip_code) { $zip_code = mysql_real_escape_string($zip_code); $rows = mysql_query("select count(*) from Poststed where Postnr = '$zip_code'"); $row = mysql_fetch_array($rows); return $row[0]; } } class Member { public $id; public $name; public $address_1; public $address_2; public $zip_code; public $city; public $email; public $electronic_magazine; public $electronic_invoice; } ?>