[insert_php]

session_start();
include_once ‘/home/wtsave32/public_html/check-gsp.php’;
include_once ‘/home/wtsave32/public_html/dbo.php’;

echo ‘

Add Guest Bypass

‘;

$uid = $_SESSION[‘user’];
$res=mysqli_query($con, “SELECT * FROM gspusers WHERE uid=’$uid'”);
$userRow=mysqli_fetch_array($res);

//bad mac message
if(isset($_GET[‘invalid’]))
{
echo ‘

The MAC you entered appears to be invalid. Please try again.

‘;
}

//show success message
if(isset($_GET[‘add’]))
{
echo ‘

‘;
echo ‘Your bypass has been added.’;
echo ‘

‘;
echo ‘Add another bypass
‘;
echo ‘Logout‘;

} elseif (isset($_GET[‘prop’])) { //else show add menu if clicked

$propuid = $_GET[‘prop’];
$query2=”SELECT * FROM gspproperties WHERE propuid=’$propuid'”;
$result2=mysqli_query($con, $query2);
while($row = mysqli_fetch_assoc($result2))
{
echo ‘Adding bypass for ‘;
echo $row[‘propname’];
echo ‘ – ‘;
echo $row[‘propcity’];
echo ‘,’;
echo $row[‘propstate’];
echo ‘:
‘;
echo ‘<-- Choose a different property‘;

echo ‘

MAC address (no spaces, colons or dashes):

‘;
}

} else { //show property list

echo ‘

Please choose a property to add a bypass:

‘;

//get uids for properties
$query1=”SELECT * FROM gspassocs WHERE usersuid=’$uid'”;
$result1=mysqli_query($con, $query1);
while($row = mysqli_fetch_assoc($result1))
{

//get prop detail from uid
$propuid = $row[‘propuid’];
$query2=”SELECT * FROM gspproperties WHERE propuid=’$propuid'”;
$result2=mysqli_query($con, $query2);
while($row = mysqli_fetch_assoc($result2))
{
echo $row[‘propname’];
echo ‘ | ‘;
echo $row[‘propcity’];
echo ‘,’;
echo $row[‘propstate’];
echo ‘ – ‘;
echo ‘Add bypass
‘;
} //get prop detail from uid

} //get uids for properties

} //else
[/insert_php]