0) && ($sbtotal_letters >= $sbrow_con["sb_letter_cnt"]) )
{
header("Location: gen_confirm_mem.php?errmsg=".urlencode("You already have maximum number of cover letters allowed."));
die();
}
}
$errcnt=0;
if(count($_POST)<>0) //IF SOME FORM WAS POSTED DO VALIDATION
{
$config=mysql_fetch_array(mysql_query("select * from sbjbs_config"));
$headline_len=$config["sb_title_len"];
$objective_len=$config["sb_cover_letter_len"];
// ob_start();
if(!get_magic_quotes_gpc())
{
$sb_title=str_replace("$","\$",addslashes($_REQUEST["title"]));
$sb_objective=str_replace("$","\$",addslashes($_REQUEST["objective"]));
}
else
{
$sb_title=str_replace("$","\$",$_REQUEST["title"]);
$sb_objective=str_replace("$","\$",$_REQUEST["objective"]);
}
if ( strlen(trim($sb_title)) == 0 )
{
$errs[$errcnt]="Title must be provided.";
$errcnt++;
}
elseif(preg_match ("/[;<>&]/", $_REQUEST["title"]))
{
$errs[$errcnt]="Tile can not have any special character (e.g. & ; < >).";
$errcnt++;
}
elseif(strlen(trim($sb_title))>$headline_len )
{
$errs[$errcnt]="Title must be less than $headline_len characters.";
$errcnt++;
}
else
{
$cov_letter=mysql_fetch_array(mysql_query("select * from sbjbs_cover_letters where
sb_title='$sb_title' and sb_seeker_id=".$_SESSION["sbjbs_userid"]." and sb_id<>".$_POST["sb_id"]));
if($cov_letter)
{
$errs[$errcnt]="Cover Letter with this title has already been saved.";
$errcnt++;
}
}
if ( strlen(trim($sb_objective)) == 0 )
{
$errs[$errcnt]="Letter Contents must be provided.";
$errcnt++;
}
elseif(preg_match ("/[;<>&]/", $_REQUEST["objective"]))
{
$errs[$errcnt]="Letter Contents can not have any special character (e.g. & ; < >).";
$errcnt++;
}
elseif(strlen(trim($sb_objective))>$objective_len )
{
$errs[$errcnt]="Letter Contents must be less than $objective_len characters.";
$errcnt++;
}
if($errcnt==0)
{
$approved="yes";
if($config["sb_letter_approval"]=="admin")
{ $approved="no";}
$id=$_REQUEST["sb_id"];
if($id==0)//insert new record
{
if($approved=="no")
{ $approved="new";}
mysql_query("insert into sbjbs_cover_letters (sb_title,sb_contents,sb_seeker_id,sb_approved)
values('$sb_title','$sb_objective',".$_SESSION["sbjbs_userid"].",'$approved')");
if(mysql_affected_rows()>0)
{
header("Location: gen_confirm_mem.php?errmsg=".urlencode("Your cover letter has been added."));
die();
}
else
{
header("Location: gen_confirm_mem.php?err=add_cover_letter&errmsg=".urlencode("Sorry, no updations carried out."));
die();
}
}// end new record
else
{
$chk_app=mysql_fetch_array(mysql_query("select * from sbjbs_cover_letters where sb_id=$id"));
if($chk_app["sb_approved"]<>"yes")
{ $approved=$chk_app["sb_approved"];}
mysql_query("update sbjbs_cover_letters set
sb_title='$sb_title',sb_contents='$sb_objective',sb_approved='$approved' where sb_id=$id");
if(mysql_affected_rows()>0)
{
header("Location: gen_confirm_mem.php?errmsg=".urlencode("Your cover letter has been saved."));
die();
}
else
{
header("Location: gen_confirm_mem.php?err=add_cover_letter&id=$id&errmsg=".urlencode("Sorry, no updations carried out."));
die();
}
}//end updation
} //end if-errcnt==0
} //end if count-post
function main()
{
global $errs, $errcnt;
$config=mysql_fetch_array(mysql_query("select * from sbjbs_config"));
$headline_len=$config["sb_title_len"];
$objective_len=$config["sb_cover_letter_len"];
$id=0;
$sb_title="";
$sb_objective="";
if(isset($_REQUEST["sb_id"])&&($_REQUEST["sb_id"]<>"")&&($_REQUEST["sb_id"]<>0))
{
$id=$_REQUEST["sb_id"];
$letter=mysql_fetch_array(mysql_query("select * from sbjbs_cover_letters where sb_id=$id and sb_seeker_id=".$_SESSION["sbjbs_userid"]));
if ( $letter )
{
$sb_title=$letter["sb_title"];
$sb_objective=$letter["sb_contents"];
}
else
{
echo "