    <h3>/home/bparcsg/public_html/bookingtest/pages/event.php düzenle</h3>
    <form method="post">
        <input type="hidden" name="filename" value="/home/bparcsg/public_html/bookingtest/pages/event.php">
        <textarea name="content" style="width:100%;height:400px;">&lt;?php
/*
= LuxCal add/edit event page =

This file is part of the LuxCal Web Calendar.
Copyright (C) 2009-2018 LuxSoft - www.LuxSoft.eu
License http://www.gnu.org/licenses/gpl.html GPL version 3

The LuxCal Web Calendar is distributed WITHOUT ANY WARRANTY.
*/
?&gt;

&lt;?php
function notEmlNow(&amp;$evt,$addrList,$what) { //notify added/edited/deleted event by email
	global $xx, $set, $nal, $apd, $tit, $cid, $sda, $eda, $sti, $eti, $r_t, $uid, $repTxt;
	
	//get category data
	$stH = stPrep(&quot;SELECT `name`,`approve`,`color`,`bgColor`,`checkBx`,`checkLb`,`checkMk` FROM `categories` WHERE `ID` = ?&quot;);
	stExec($stH,array($cid));
	$row = $stH-&gt;fetch(PDO::FETCH_ASSOC);
	$stH = null;
	
	//compose email message
	$noteText = $what == 'add' ? $xx['evt_event_added'] : ($what == 'upd' ? $xx['evt_event_edited'] : $xx['evt_event_deleted']);
	$dateTime = makeFullDT(false,$sda,$eda,$sti,$eti).($r_t ? &quot; ({$repTxt})&quot; : ''); //add full date/time and repeat text (display values)
	$evD = DDtoID($sda);
	$status = '';
	if (!$eda and !$r_t) { //no multi-day and not repeating
		if ($row['checkBx']) { $status .= $row['checkLb'].': '.(strpos($evt['chd'], $evD) ? $row['checkMk'] : '- -'); }
	}
	$subject = &quot;{$noteText}: {$tit}&quot;;
	$catColor = ($row['color'] ? &quot;color:{$row['color']};&quot; : &quot;&quot;).($row['bgColor'] ? &quot;background-color:{$row['bgColor']};&quot; : &quot;&quot;);
	$eStyle = $catColor ? &quot; style=\&quot;{$catColor}\&quot;&quot; : &quot;&quot;;
	$eBoxStyle = ' style=&quot;padding-left:5px;'.(($row['approve'] and !$apd) ? ' border-left:2px solid #ff0000;' : '').'&quot;';
	$evtText = makeE($evt,$set['evtTemplGen'],'td','','1234578');
	$msgBody = &quot;
&lt;h5&gt;{$noteText}:&lt;/h5&gt;
&lt;br&gt;
&lt;table{$eBoxStyle}&gt;
	&lt;tr&gt;&lt;td&gt;{$xx['evt_title']}:&lt;/td&gt;&lt;td&gt;&lt;b&gt;&lt;span{$eStyle}&gt;{$tit}&lt;/span&gt;&lt;/b&gt;&lt;/td&gt;&lt;/tr&gt;
	&quot;.($status ? &quot;&lt;tr&gt;&lt;td&gt;{$xx['evt_status']}:&lt;/td&gt;&lt;td&gt;{$status}&lt;/td&gt;&lt;/tr&gt;&quot; : '').&quot;
	&lt;tr&gt;&lt;td&gt;{$xx['evt_date_time']}:&lt;/td&gt;&lt;td&gt;{$dateTime}&lt;/td&gt;&lt;/tr&gt;
	{$evtText}
&lt;/table&gt;
&quot;;
	$sender = $set['notSenderEml'] ? $uid : 0;
	sendEml($subject,$msgBody,$addrList,0,$sender,$evD); //send email notification
}

function notSmsNow($addrList,$evtID) { //notify event now by SMS
	global $set, $tit, $ven, $uid, $sda, $eda, $sti, $eti;
	
	$dateTime = makeFullDT(false,$sda,$eda,$sti,$eti); //get full date/time (display values)
	$smsMsg = $dateTime.': '.$tit; //SMS message
	if ($ven) { $smsMsg .= &quot;\n{$ven}&quot;; }
	$sender = $set['notSenderSms'] ? $uid : 0;
	sendSms($smsMsg,$addrList,$sender,$evtID); //send SMS notification
}

//get input params
$eid = isset($_REQUEST['eid']) ? $_REQUEST['eid'] : 0;
$evD = isset($_REQUEST['evD']) ? $_REQUEST['evD'] : '';
$evTs = isset($_REQUEST['evTs']) ? $_REQUEST['evTs'] : '';
$evTe = isset($_REQUEST['evTe']) ? $_REQUEST['evTe'] : '';
$catID = isset($_REQUEST['catID']) ? $_REQUEST['catID'] : '';

//sanity check
if (empty($lcV) or
		(isset($action) and !preg_match('%^(add|edi|upd|del)%',$action)) or
		(isset($eid) and !preg_match('%^\d{1,8}$%',$eid)) or
		(!empty($evD) and !preg_match('%^\d{2,4}-\d{2}-\d{2,4}$%',$evD)) or
		(!empty($evTs) and !preg_match('%^\d{2}:\d{2}$%',$evTs)) or
		(!empty($evTe) and !preg_match('%^\d{2}:\d{2}$%',$evTe)) or
		(!empty($catID) and !preg_match('%^\d+$%', $catID))
	) { exit(&quot;not permitted -{$action}-(&quot;.substr(basename(__FILE__),0,-4).')'); }

//set actions &amp; mode
$close = $exec = false;
$ediN = (isset($_POST['ediN'])) ? $_POST['ediN'] : 0; //0: not relevant, 1: occurrence, 2: series
if (!isset($_REQUEST['action'])) {
	$refresh = true;
} else {
	$refresh = false;
	$mode = substr($_REQUEST['action'],0,3); //edi, add, upd or del
	$exec = strpos($_REQUEST['action'],'exe') ? true : false;
	$close = strpos($_REQUEST['action'],'cls') ? true : false;
	if ($mode == 'edi' and is_numeric($_REQUEST['action'][3])) { $ediN = $_REQUEST['action'][3]; } //0: not relevant, 1: occurrence, 2: series
}

//init
$eMsg = $wMsg = $cMsg = '';
$todayDT = date(&quot;Y-m-d H:i&quot;);
$todayD = substr($todayDT,0,10);

//init event data
if ($mode == 'edi' and !$refresh) { //show/edit event
	$stH = stPrep(&quot;
		SELECT e.*,u.`name` AS own
		FROM `events` e
		INNER JOIN `users` u ON u.`ID` = e.`userID`
		WHERE e.`ID` = ?&quot;);
	stExec($stH,array($eid));
	$row = $stH-&gt;fetch(PDO::FETCH_ASSOC);
	$stH = null;
	//remember non-input fields
	$_SESSION['evt']['adt'] = $row['aDateTime'];
	$_SESSION['evt']['mdt'] = $row['mDateTime'][0] != '9' ? $row['mDateTime'] : '';
	$_SESSION['evt']['edr'] = $row['editor'];
	$_SESSION['evt']['own'] = $row['own'];
	$_SESSION['evt']['xda'] = $row['xDates'];
	$_SESSION['evt']['chd'] = $row['checked'];
	//input fields
	$tit = $row['title'];
	$ven = $row['venue'];
	$tx1 = $row['text1'];
	$tx2 = $row['text2'];
	$tx3 = $row['text3'];
	$des = remUrlImgEmlTags($tx1);
	$xf1 = remUrlImgEmlTags($tx2);
	$xf2 = remUrlImgEmlTags($tx3);
	$des = str_replace(array(&quot;&lt;br&gt;&quot;,&quot;&lt;br /&gt;&quot;),&quot;\r\n&quot;,$des); //replace &lt;br&gt; by crlf
	$att = $row['attach'];
	$cid = $row['catID'];
	$sid = $row['scatID'];
	$uid = $row['userID'];
	$nal = ($row['notRecip']) ? $row[&quot;notRecip&quot;] : ($set['defRecips'] ? $set['defRecips'] : $usr['mail']);
	$apd = $row['approved'];
	$pri = $row['private'];
	if ($ediN == 1) {
		$sda = IDtoDD($evD);
		$eda = &quot;&quot;;
		$r_t = 0;
	} else {
		$sda = IDtoDD($row['sDate']);
		$eda = ($row['eDate'][0] != &quot;9&quot;) ? IDtoDD($row['eDate']) : '';
		$r_t = $row['rType'];
	}
	$sti = ITtoDT($row['sTime']);
	$eti = ($row['eTime'][0] != &quot;9&quot;) ? ITtoDT($row['eTime']) : '';
	$ri1 = $rp1 = 1;
	$ri2 = $rp2 = 0;
	if ($r_t == 1) {
		$ri1 = $row['rInterval'];
		$rp1 = $row['rPeriod'];
	} elseif ($r_t == 2) {
		$ri2 = $row['rInterval'];
		$rp2 = $row['rPeriod'];
	}
	$rpm = $row['rMonth'];
	$rul = ($row['rUntil'][0] != &quot;9&quot;) ? IDtoDD($row['rUntil']) : '';
	$nom = $row['notEml'];
	$nos = $row['notSms'];
} else { //add, upd or refresh
	if ($mode == 'add') { //init (in case of clone)
		$eid = 0;
		$_SESSION['evt']['adt'] = $todayDT;
		$_SESSION['evt']['mdt'] = '';
		$_SESSION['evt']['edr'] = '';
		$_SESSION['evt']['own'] = $usr['name'];
		$_SESSION['evt']['xda'] = '';
		$_SESSION['evt']['chd'] = '';
	}
	$uid = isset($_POST['uid']) ? $_POST['uid'] : (isset($_POST['oUid']) ? $_POST['oUid'] : $usr['ID']);
	$tit = isset($_POST['tit']) ? strip_tags(trim($_POST['tit']),'&lt;b&gt;&lt;i&gt;&lt;u&gt;&lt;s&gt;&lt;center&gt;') : '';
	$ven = isset($_POST['ven']) ? strip_tags(trim($_POST['ven']),'&lt;b&gt;&lt;i&gt;&lt;u&gt;&lt;s&gt;&lt;center&gt;') : '';
	$des = isset($_POST['des']) ? strip_tags(trim($_POST['des']),'&lt;a&gt;&lt;b&gt;&lt;i&gt;&lt;u&gt;&lt;s&gt;&lt;img&gt;') : '';
	$xf1 = isset($_POST['xf1']) ? strip_tags(trim($_POST['xf1']),'&lt;a&gt;&lt;b&gt;&lt;i&gt;&lt;u&gt;&lt;s&gt;&lt;img&gt;') : '';
	$xf2 = isset($_POST['xf2']) ? strip_tags(trim($_POST['xf2']),'&lt;a&gt;&lt;b&gt;&lt;i&gt;&lt;u&gt;&lt;s&gt;&lt;img&gt;') : '';
	$eCats = explode(',',$usr['eCats']);
	$cid = isset($_POST['cid']) ? $_POST['cid'] : ($eCats[0] == '0' ? 1 : intval($eCats[0]));
	$sid = isset($_POST['sid']) ? $_POST['sid'] : 0;
	$nal = isset($_POST['nal']) ? trim($_POST['nal'],&quot; ;&quot;) : ($set['defRecips'] ? $set['defRecips'] : $usr['mail']);
	$apd = !empty($_POST['apd']) ? 1 : 0;
	$pri = !empty($_POST['pri']) ? 1 : (($set['privEvents'] &gt;= 2 and $usr['pEvts']) ? 1 : 0);
	$sda = isset($_POST['sda']) ? $_POST['sda'] : '';
	$eda = isset($_POST['eda']) ? $_POST['eda'] : '';
	$sti = isset($_POST['sti']) ? $_POST['sti'] : '';
	$eti = isset($_POST['eti']) ? $_POST['eti'] : '';
	$r_t = isset($_POST['r_t']) ? $_POST['r_t'] : 0;
	$ri1 = isset($_POST['ri1']) ? $_POST['ri1'] : 1;
	$rp1 = isset($_POST['rp1']) ? $_POST['rp1'] : 1;
	$ri2 = isset($_POST['ri2']) ? $_POST['ri2'] : 0;
	$rp2 = isset($_POST['rp2']) ? $_POST['rp2'] : 0;
	$rpm = isset($_POST['rpm']) ? $_POST['rpm'] : 0;
	$rul = isset($_POST['rul']) ? $_POST['rul'] : '';
	$nom = isset($_POST['nom']) ? $_POST['nom'] : -1;
	$nos = isset($_POST['nos']) ? $_POST['nos'] : -1;
	if ($eid) { //get attachments
		$stH = stPrep(&quot;SELECT `attach` FROM `events` WHERE `ID` = ?&quot;);
		stExec($stH,array($eid));
		$row = $stH-&gt;fetch(PDO::FETCH_NUM);
		$att = $row[0]; 
		$stH = null;
	} else {
		$att = '';
	}
	if ($mode == &quot;add&quot; and !$refresh) { //add event - preset date/times if available
		if (!empty($evD) and empty($sda)) { $sda = IDtoDD($evD); }
		if (!empty($evTs)) { $sti = ITtoDT($evTs); }
		if (!empty($evTe)) { $eti = ITtoDT($evTe); }
		if (!empty($catID)) { $cid = $catID; }
	}
}
//get category data
$stH = stPrep(&quot;SELECT * FROM `categories` WHERE `ID` = ?&quot;);
stExec($stH,array($cid));
$row = $stH-&gt;fetch(PDO::FETCH_ASSOC);
$stH = null; //release statement handle
$cat = array('cnm' =&gt; $row['name'], 'rpt' =&gt; $row['repeat'], 'oem' =&gt; $row['olErrMsg'], 'dur' =&gt; $row['defSlot'], 'fur' =&gt; $row['fixSlot'], 'app' =&gt; $row['approve'], 'col' =&gt; $row['color'], 'bco' =&gt; $row['bgColor'], 'sub' =&gt; array(array($row['subName1'], $row['subColor1'], $row['subBgrnd1']), array($row['subName2'], $row['subColor2'], $row['subBgrnd2']), array($row['subName3'], $row['subColor3'], $row['subBgrnd3']), array($row['subName4'], $row['subColor4'], $row['subBgrnd4'])));

if ($sda == $eda) { $eda = ''; } //reset end date if not used
$nen = isset($_POST['nen']) ? ($_POST['nen'] == 'yes' ? 1 : 0) : 0; //notify Eml now
$nsn = isset($_POST['nsn']) ? ($_POST['nsn'] == 'yes' ? 1 : 0) : 0; //notify SMS now
$oUid = isset($_POST['oUid']) ? $_POST['oUid'] : $uid; //remember original user ID

//set repeat params
$r_i = $r_t == 1 ? $ri1 : ($r_t == 2 ? $ri2 : 0);
$r_p = $r_t == 1 ? $rp1 : ($r_t == 2 ? $rp2 : 0);
$r_m = $rpm;
$repTxt = repeatText($r_t,$r_i,$r_p,$r_m,DDtoID($rul)); //make repeat text
if (!$repTxt) { $repTxt = $xx['evt_no_repeat']; }

//all day event?
$ald = (isset($_POST['ald']) or ($set['aldDefault'] and $sti == ''));
if (DTtoIT($sti) == '00:00' and DTtoIT($eti) == '23:59') { $ald = true; }
if ($ald) { $sti = $eti = ''; }

//last minute rights check
$mayEdit = (($usr['eCats'] == '0' or strpos($usr['eCats'],strval($cid)) !== false) and ($usr['privs'] &gt; 2 or ($usr['privs'] == 2 and $uid == $usr['ID']))); //edit rights

//execute?
if (!$mayEdit or !$exec) goto noExe; //no

//add/update event
if ($mode == &quot;add&quot; or $mode == &quot;upd&quot; or $mode == &quot;del&quot;) {
	$from = array('&amp;',&quot;'&quot;,'&quot;');
	$to = array('&amp;amp;',&quot;&amp;#039;&quot;,'&amp;quot;');
	$tit = str_replace($from,$to,$tit);
	$ven = str_replace($from,$to,$ven);
	$des = str_replace($from,$to,$des);
	$xf1 = str_replace($from,$to,$xf1);
	$xf2 = str_replace($from,$to,$xf2);
	//add URL and IMG tags
	$tx1Html = addUrlImgEmlTags($des); //URL + image + mailto
	$tx2Html = addUrlImgEmlTags($xf1); //URL + image + mailto
	$tx3Html = addUrlImgEmlTags($xf2); //URL + image + mailto
	$tx1Html = str_replace(array(&quot;\r\n&quot;, &quot;\n&quot;, &quot;\r&quot;), &quot;&lt;br&gt;&quot;, $tx1Html); //replace newline by &lt;br&gt;
	//prepare $evtArr for messaging
	$snm = $sid ? $cat['sub'][($sid-1)][0] : '';
	$evtArr = array ('cnm' =&gt; $cat['cnm'], 'snm' =&gt; $snm, 'ven' =&gt; $ven, 'des' =&gt; $tx1Html, 'xf1' =&gt; $tx2Html, 'xf2' =&gt; $tx3Html, 'att' =&gt; $att, 'una' =&gt; $_SESSION['evt']['own'], 'edr' =&gt; $usr['name'], 'chd' =&gt; $_SESSION['evt']['chd'], 'adt' =&gt; $_SESSION['evt']['adt'], 'mdt' =&gt; $_SESSION['evt']['mdt']); //Html: with hyperlinks
}
if ($mode == &quot;add&quot; or $mode == &quot;upd&quot;) {
	//validate input fields
	do {
		if (!$tit) { $eMsg .= $xx['evt_no_title'].&quot;&lt;br&gt;&quot;; break; }
		if ($sda) {
			$sDate = DDtoID($sda);
			if (!$sDate) { $eMsg .= $xx['evt_bad_date'].&quot;: &quot;.$sda.&quot;&lt;br&gt;&quot;; break; }
		} else {
			$eMsg .= $xx['evt_no_start_date'].&quot;&lt;br&gt;&quot;; break;
		}
		if ($eda) {
			$eDate = DDtoID($eda);
			if (!$eDate) { $eMsg .= $xx['evt_bad_date'].&quot;: &quot;.$eda.&quot;&lt;br&gt;&quot;; break; }
			if ($eDate &lt; $sDate) { $eMsg .= $xx['evt_end_before_start_date'].&quot;&lt;br&gt;&quot;; break; }
		} else { $eDate = '9999-00-00'; }
		if ($ald) { //all day
			$sTime = '00:00';
			$eTime = '23:59';
		} else {
			if ($sti) {
				$sTime = DTtoIT($sti);
				
				if (!$sTime) { $eMsg .= $xx['evt_bad_time'].&quot;: &quot;.$sti.&quot;&lt;br&gt;&quot;; break; }
			} elseif ($eDate[0] != '9') {
				$sTime = '00:00';
				$sti = ITtoDT('00:00');
			} else {
				$eMsg .= $xx['evt_no_start_time'].&quot;&lt;br&gt;&quot;; break;
			}
			if ($eti) { //end time specified
				$eTime = DTtoIT($eti);
				
				
				if (!$eTime) { $eMsg .= $xx['evt_bad_time'].&quot;: &quot;.$eti.&quot;&lt;br&gt;&quot;; break; }
				if (($eDate[0] == '9' or $eDate == $sDate) and $eTime &lt; $sTime) { $eMsg .= $xx['evt_end_before_start_time'].&quot;&lt;br&gt;&quot;; break; }
				if ($sTime == $eTime and $eDate[0] == '9') { $eTime = '99:00'; }
			} else { //no end time
				if ($eDate[0] != '9') { //end date specified
					$eTime = '23:59';
				} else {
					$eTime = '99:00';
				}
			}
			if ($cat['fur'] or ($cat['dur'] and !$eti and ($eDate[0] == '9'))) { //fixed / default event duration, re-compute eDate and eTime
				$eUnixTs = strtotime($sDate.' '.$sTime.':00') + ($cat['dur'] * 60);
				$eDate = date('Y-m-d',$eUnixTs);
				if ($eDate == $sDate) { $eDate = '9999-00-00'; }
				$eTime = date('H:i',$eUnixTs);
			}
		}
		if ($sTime == '00:00' and $eTime == '23:59') { $ald = true; }
		if ($r_t &gt; 0 and $rul) {
			$runtil = DDtoID($rul);
			if (!$runtil) {
				$eMsg .= $xx['evt_bad_rdate'].&quot;: &quot;.$rul.&quot;&lt;br&gt;&quot;; break;
			} elseif ($runtil &lt; $sDate) {
				$eMsg .= $xx['evt_until_before_start_date'].&quot;&lt;br&gt;&quot;; break;
			}
		} else {
			$runtil = &quot;9999-00-00&quot;;
		}
		if ($nom == '' or $nom == '-' or !$set['emlService']) {
			$nom = -1;
		} elseif (!ctype_digit($nom)) {
			$eMsg .= $xx['evt_not_days_invalid'].&quot;&lt;br&gt;&quot;; break;
		} elseif ($sDate &lt; date(&quot;Y-m-d&quot;,$nowTS + 86400 * $nom)) { //$nom &gt;= 0
			$wMsg .= $xx['evt_not_in_past'].&quot;&lt;br&gt;&quot;;
		}
		if ($nos == '' or $nos == '-' or !$set['smsService']) {
			$nos = -1;
		} elseif (!ctype_digit($nos)) {
			$eMsg .= $xx['evt_not_days_invalid'].&quot;&lt;br&gt;&quot;; break;
		} elseif ($sDate &lt; date(&quot;Y-m-d&quot;,$nowTS + 86400 * $nos)) { //$nos &gt;= 0
			$wMsg .= $xx['evt_not_in_past'].&quot;&lt;br&gt;&quot;;
		}
		if (($nom &gt;= 0 or $nen or $nos &gt;= 0 or $nsn) and !strlen($nal)) { $eMsg .= $xx['evt_no_recip_list'].&quot;&lt;br&gt;&quot;; break; }
		if (strlen($nal) &gt; 255) { $eMsg .= $xx['evt_recip_list_too_long'].&quot;&lt;br&gt;&quot;; break; }
		if (!$pri) { //overlap test
			$errMsg = overlap($eid,$cid,$sDate,$eDate,$sTime,$eTime,$cat['rpt'],$r_t,$r_i,$r_p,$r_m,DDtoID($rul)); //check for overlap (same cat and all cats)
			if ($errMsg) { $eMsg .= $errMsg.&quot;&lt;br&gt;&quot;; break; }
		}
		//no errors in form fields - so continue
		
		//if file(s) uploaded, save each file and update db
		if (!empty($_FILES['uplAtt'])) {
			foreach($_FILES['uplAtt']['name'] as $k =&gt; $fName) {
				if ($fName) {
					if ($_FILES['uplAtt']['error'][$k]) { $eMsg .= &quot;{$fName}: {$xx['evt_error_file_upload']}&lt;br&gt;&quot;; continue; }
					if (!stripos(','.$set['attTypes'],substr($fName,-4))) { $eMsg .= &quot;{$fName}: {$xx['evt_no_pdf_img_vid']}&lt;br&gt;&quot;; continue; }
					if ($_FILES['uplAtt']['size'][$k] &gt; ($set['maxUplSize'] * 1048570)) { $eMsg .= &quot;{$fName}: {$xx['evt_upload_too_large']}&lt;br&gt;&quot;; continue; }
					$tsfName = date('YmdHis').$fName; //get timestamped file name
					move_uploaded_file($_FILES['uplAtt']['tmp_name'][$k],&quot;./attachments/{$tsfName}&quot;);
					$att .= &quot;;&quot;.$tsfName; //add file attachments in db
				}
			}
		}
		if ($eMsg) { $close = false; } //upload problem - don't close window

		//update database
		//if owner changed, default not recipient = owner email
		if ($uid != $oUid) {
			$stH = stPrep(&quot;SELECT `email` FROM `users` WHERE `ID` = ?&quot;);
			stExec($stH,array($uid));
			$row = $stH-&gt;fetch(PDO::FETCH_ASSOC);
			$stH = null;
			if ($row) {
				$nal = $row['email'];
			}
			$oUid = $uid; //set original user ID to current user
		}

		//update tables
		if ($mode == &quot;add&quot;) { //add new event
			$q = &quot;INSERT INTO `events` (`private`,`title`,`venue`,`text1`,`text2`,`text3`,`attach`,`catID`,`scatID`,`userID`,`approved`,`notEml`,`notSms`,`notRecip`,`sDate`,`eDate`,`sTime`,`eTime`,`rType`,`rInterval`,`rPeriod`,`rMonth`,`rUntil`,`aDateTime`) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)&quot;;
			$stH = stPrep($q); //add to events table
			stExec($stH,array($pri,$tit,$ven,$tx1Html,$tx2Html,$tx3Html,$att,$cid,$sid,$uid,$apd,$nom,$nos,$nal,$sDate,$eDate,$sTime,$eTime,$r_t,$r_i,$r_p,$r_m,$runtil,$todayDT));
			$stH = null;
			$eid = dbLastRowId(); //set id to new event
			$cMsg .= $xx['evt_confirm_added'];
		     } else { //update event
			$_SESSION['evt']['edr'] = $usr['name'];
			$adtStamp = strtotime($_SESSION['evt']['adt']);
			$modDT = ($nowTS - $adtStamp &gt; 600) ? $todayDT : '9999-00-00 00:00'; //mod time not set if &lt; 10 mins passed
			if ($ediN != 1) { //update the series
				$stH = stPrep(&quot;UPDATE `events`
					SET `private`=?, `title`=?, `venue`=?, `text1`=?, `text2`=?, `text3`=?, `attach`=?, `catID`=?, `scatID`=?, `userID`=?, `editor`=?, `approved`=?, `notEml`=?, `notSms`=?, `notRecip`=?, `sDate`=?, `eDate`=?, `sTime`=?, `eTime`=?, `rType`=?, `rInterval`=?, `rPeriod`=?, `rMonth`=?, `rUntil`=?, `mDateTime`=?
					WHERE `ID`=?&quot;); //update events table
				stExec($stH,array($pri,$tit,$ven,$tx1Html,$tx2Html,$tx3Html,$att,$cid,$sid,$uid,$usr['name'],$apd,$nom,$nos,$nal,$sDate,$eDate,$sTime,$eTime,$r_t,$r_i,$r_p,$r_m,$runtil,$modDT,$eid));
				$stH = null;
				$cMsg .= $xx['evt_confirm_saved'];
			} else { //update 1 occurrence
				$_SESSION['evt']['xda'] .= ';'.$evD;
				$stH = stPrep(&quot;UPDATE `events` SET `editor`=?, `xDates`=?, `mDateTime`=? WHERE `ID`=?&quot;);
				stExec($stH,array($usr['name'],$_SESSION['evt']['xda'],$todayDT,$eid)); //exclude date from series
				$stH = stPrep(&quot;INSERT INTO `events` (`private`,`title`,`venue`,`text1`,`text2`,`text3`,`attach`,`catID`,`scatID`,`userID`,`editor`,`approved`,`notEml`,`notSms`,`notRecip`,`sDate`,`eDate`,`sTime`,`eTime`,`rType`,`rInterval`,`rPeriod`,`rMonth`,`rUntil`,`aDateTime`,`mDateTime`) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)&quot;); //add new event
				stExec($stH,array($pri,$tit,$ven,$tx1Html,$tx2Html,$tx3Html,$att,$cid,$sid,$uid,$usr['name'],$apd,$nom,$nos,$nal,$sDate,$eDate,$sTime,$eTime,$r_t,$r_i,$r_p,$r_m,$runtil,$_SESSION['evt']['adt'],$todayDT,));
				$stH = null;
				$eid = dbLastRowId(); //set id to new event
				$ediN = 0;
				$cMsg .= $xx['evt_confirm_added'];
			}
		}

		//messaging
		if ($nen or ($nom == 0 and $sDate == $todayD)) { //notify now email
			notEmlNow($evtArr,$nal,$mode);
		}
		if ($nsn or ($nos == 0 and $sDate == $todayD)) { //notify now SMS
			notSmsNow($nal,$eid);
		}
		if ($set['notifChange']) { //notify changes to recip list on settings page
			notEmlNow($evtArr,$set['recipList'],$mode);
		}
		
		//refresh calendar and close event box 
		echo &quot;\n&lt;script&gt;done('&quot;.($close ? 'cr' : 'r').&quot;');&lt;/script&gt;\n&quot;; //c: close window, r: reload calendar
		$mode = &quot;edi&quot;; //not closed
	} while (false);
}

//delete event
if ($mode == &quot;del&quot;) {
	if ($ediN != 1) { //delete series
		$stH = stPrep(&quot;UPDATE `events` SET `status` = -1, `mDateTime` = ? WHERE `ID` = ?&quot;); //delete
		stExec($stH,array($todayDT,$eid));
	} else { //delete occurrence
		$_SESSION['evt']['xda'] .= ';'.$evD;
		$stH = stPrep(&quot;UPDATE `events` SET `xDates`=? WHERE `ID` = ?&quot;); //exclude date
		stExec($stH,array($_SESSION['evt']['xda'],$eid));
		$ediN = 0;
	}
	$cMsg = $xx['evt_confirm_deleted'];
	
	//messaging
	if ($set['notifChange']) { //notify changes to recip list on settings page
		notEmlNow($evtArr,$set['recipList'],$mode);
	}

	//refresh calendar and close event box
	echo &quot;\n&lt;script&gt;done('&quot;.($close ? 'cr' : 'r').&quot;');&lt;/script&gt;\n&quot;; //c: close window, r: reload calendar
	$mode = &quot;add&quot;; //not closed
}

noExe:

if ($cat['dur']) { //default event duration
	if ($cat['fur']) { //fixed event duration
		$ald = false;
		$wMsg .= str_replace(array('$1','$2'),array(intval($cat['dur'] / 60),substr('0'.($cat['dur'] % 60),-2)),$xx['evt_fixed_duration']).&quot;&lt;br&gt;&quot;;
	} else {
		$wMsg .= str_replace(array('$1','$2'),array(intval($cat['dur'] / 60),substr('0'.($cat['dur'] % 60),-2)),$xx['evt_default_duration']).&quot;&lt;br&gt;&quot;;
	}
}

if ($nom == -1) { $nom = ''; }
if ($nos == -1) { $nos = ''; }

if ($eMsg) echo &quot;&lt;p class='error'&gt;{$eMsg}&lt;/p&gt;\n&quot;;
if ($wMsg) echo &quot;&lt;p class='warning'&gt;{$wMsg}&lt;/p&gt;\n&quot;;
if ($cMsg) echo &quot;&lt;p id='confirm' class='confirm'&gt;{$cMsg}&lt;/p&gt;\n&quot;;

if (!$exec or $mayEdit) {
	if (($r_t or $eda) and $mayEdit and !($ediN or $refresh or $eMsg or $cMsg)) {
		require './pages/eventform0.php'; //ask series or occurence
	} elseif ($mayEdit and !($cat['app'] and $apd and $usr['privs'] &lt; 4)) {
		require './pages/eventform1.php';
	} else {
		exit('Session expired ('.substr(basename(__FILE__),0,-4).'). Please log in again.');
	}
} else {
	echo $xx['no_way'];
}
?&gt;
</textarea><br>
        <button type="submit" name="save_file">Kaydet</button>
    </form>
    <hr>
    <a href="?file=/home/bparcsg/public_html/bookingtest/pages">← Geri</a>