<?php

define('ALLOWED_REFERRER', '');
define('LOG_RECORD',true);
define('LOG_FILE','temp.log');

if (ALLOWED_REFERRER !== ''
&& (!isset($_SERVER['HTTP_REFERER']) || strpos(strtoupper($_SERVER['HTTP_REFERER']),strtoupper(ALLOWED_REFERRER)) === false)
) {
  die("Internal server error. Please contact system administrator.");
}

set_time_limit(0);

// set headers
header("Pragma: public");
header("Expires: 0");
header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
header("Cache-Control: public");
header("Content-Description: ex-office");
//header("Content-Type: $mtype");
//header("Content-Transfer-Encoding: binary");

$con = mysql_connect("mysql", $usid, $upwd);
//mysql_set_charset('utf8',$con);

if (!$con)
  {
  echo "<br />";
  echo "Connection failed. ";
  die(mysql_error());
  }

if (!mysql_select_db('exdb', $con)) {
    die("Selecting DB failed: " . mysql_error());
}

mysql_query("SET NAMES utf8");

$rec1 = $_POST["fld_sid"]; 
$rec2 = $_POST["fld_telno"]; 
$rec3 = $_POST["fld_sname"]; 
$rec4 = $_POST["fld_regdate"]; 
$rec5 = $_POST["fld_reginvent"]; 
$rec6 = $_POST["fld_type"]; 
$rec7 = $_POST["fld_accid"]; 
$rec8 = $_POST["fld_uplevel"]; 
$rec9 = $_POST["fld_creditlimit"]; 
$rec10 = $_POST["fld_discount"]; 
$rec11 = $_POST["fld_contactid"]; 
$rec12 = $_POST["fld_identityid"]; 
$rec13 = $_POST["fld_comments"]; 

// data check
if ($rec1==NULL) {

  echo "<P id='Succeed' style='display:none;'>" . "0" . "</p>";
  echo "<P id='ErrDesc' style='display:none;'>" . "Missing Field" . "</p>";

  echo "<br />";
  die('Error: field SID is empty ');
}

// database access

$sql = 'INSERT INTO `exdb`.`tblclnt` (`sid`, `telno`, `sname`, `regdate`, `reginvent`, `type`, `accid`, `uplevel`, `creditlimit`, `discount`, `contactid`, `identityid`, `comments`) VALUES ("' . $rec1 . '", "' . $rec2 . '" ,"' . $rec3 . '" ,"' . $rec4 . '" ,"' . $rec5 . '" ,"' . $rec6 . '" ,"' . $rec7 . '" ,"' . $rec8 . '" ,"' . $rec9 . '" ,"' . $rec10 . '" ,"' . $rec11 . '" ,"' . $rec12 . '" ,"' . $rec13 . '");';

echo "<br />";
echo $sql;

if (!mysql_query($sql,$con))
  {

  echo "<P id='Succeed' style='display:none;'>" . "0" . "</p>";
  echo "<P id='ErrDesc' style='display:none;'>" . mysql_error() . "</p>";

  echo "<br />";
  die('Error: ' . mysql_error());
  }

mysql_close($con);

  echo "<P id='Succeed' style='display:none;'>" . "-1" . "</p>";
  echo "<P id='ErrDesc' style='display:none;'>" . "no errors" . "</p>";

 
?>