<?php
	require_once('check_login.php');

	$id = (int)$_POST["id"];

	$message = "";

	if (empty($_POST["course_category_id"]) || (int)($_POST["course_category_id"]) < 0) {
		$message .= "Please select a course name.\\n\\n";
	}

	if (empty($_POST["course_id"]) || (int)($_POST["course_id"]) < 0) {
		$message .= "Please select a course code.\\n\\n";
	}

	if (empty($_POST["title"])) {
		$message .= "Please select your title.\\n\\n";
	}

	if (empty($_POST["participant_name"])) {
		$message .= "Please enter your name.\\n\\n";
	}

	if (empty($_POST["identity_id"])) {
		$message .= "Please enter your HKID/Passport No.\\n\\n";
	}

	if (empty($_POST["company_name"])) {
		$message .= "Please enter your company name.\\n\\n";
	}

	if (empty($_POST["company_address"])) {
		$message .= "Please enter your company address.\\n\\n";
	}

	if (empty($_POST["position"])) {
		$message .= "Please enter your position.\\n\\n";
	}

	if (empty($_POST["tel"])) {
		$message .= "Please enter your telephone.\\n\\n";
	} else {
		if (!is_numeric($_POST["tel"])) {
			$message .= "Invalid telephone format\\n\\n";
		}
	}

	if (empty($_POST["mobile"])) {
		$message .= "Please enter your mobile number.\\n\\n";
	} else {
		if (!is_numeric($_POST["mobile"])) {
			$message .= "Invalid mobile number format\\n\\n";
		}
	}

	if (empty($_POST["email"])) {
		$message .= "Please enter your email.\\n\\n";
	} else {
		if (!filter_var($_POST["email"], FILTER_VALIDATE_EMAIL)) {
			$message .= "Invalid email format\\n\\n";
		}
	}

	if (!empty($_POST["cc_email"]) && !filter_var($_POST["cc_email"], FILTER_VALIDATE_EMAIL)) {
		$message .= "Invalid cc email format\\n\\n";
	}

	/*if (!empty($_POST["fax"]) && !is_numeric($_POST["fax"])) {
		$message .= "Invalid fax number format\\n\\n";
	}*/

	if (empty($_POST["exp_air_cargo"])) {
		$message .= "Please select your experience in air cargo industry.\\n\\n";
	}

	if (empty($_POST["education_level"])) {
		$message .= "Please select your education level.\\n\\n";
	}

	if (!empty($_POST["date_obtain_pre_cert"]) && !validateDate($_POST["date_obtain_pre_cert"], "Y-m-d")) {
		$message .= "Please enter correct format of obtain previous certificate.\\n\\n";
	}

	if (empty($_POST["course_fee"]) || (int)$_POST["course_fee"] <= 0) {
		$message .= "Course fee should be digital number.\\n\\n";
	}

	if (!empty($_POST["payment_date"]) && !validateDate($_POST["payment_date"], "Y-m-d")) {
		$message .= "Please enter correct format of payment date.\\n\\n";
	}

	if (!empty($message)) {
		echo "<script>alert('" . $message . "'); history.back();</script>";
		exit;
	}

	//insert record into enrollment
	if (isset($_POST["ra_code"])) {
		$sql          = "select * from ra_code where deleted = ? and code = ?";
		$parameters   = array(0, $_POST["ra_code"]);
		$ra_code_info = bind_pdo($sql, $parameters, "selectone");

		if ($ra_code_info["company_name_" . $langcode] != $_POST["company_name"]) {
			$company_name_diff = 1;
		} else {
			$company_name_diff = 0;
		}

		if ($ra_code_info["company_address_" . $langcode] != $_POST["company_address"]) {
			$company_address_diff = 1;
		} else {
			$company_address_diff = 0;
		}
	}

	$sql        = "update enrollment set company_name_diff=?, company_address_diff=?, lastupdate=?, lastupby=?, ";
	$parameters = array($company_name_diff, $company_address_diff, $nowdate, 0);

	foreach ($_POST as $key => $value) {
		if($key == "id")
			continue;

		$sql .= $key . "=?, ";

		if ($key == "participant_name" || $key == "identity_id" || $key == "tel" || $key == "mobile" || $key == "email" || $key == "cc_email") {
			$parameters[] = rsa_crypt($value, 1);

		} else {
			$parameters[] = $value;
		}
	}

	$sql = substr_replace($sql, "", -2);

	$sql .= " where id = ?";
	$parameters[] = $id;
	bind_pdo($sql, $parameters);

	header("Location: enrollment_modifyform.php?id=".$id."&msg=2");