ManageVehicleRatesSubmit

<?php

if (!isset($_SESSION['LoggedIn']))
	session_start();
//connect to the database//
include_once('dbConnect.php');
include_once('logging.php');
$db = connectToDB();


//grab the posted values
$ID=(isset($_POST['ID']) && $_POST['ID']!='' ? intval($_POST['ID']) : '');
$CompanyID=(isset($_POST['CompanyID']) && $_POST['CompanyID'] != '' ? $_POST['CompanyID'] : '');
$VehicleType_ID=(isset($_POST['VehicleType_ID']) && $_POST['VehicleType_ID']!='' ? intval($_POST['VehicleType_ID']) : '');
$AreaType_ID=(isset($_POST['AreaType_ID']) && $_POST['AreaType_ID']!='' ? intval($_POST['AreaType_ID']) : '');
$VehicleType =(isset($_POST['VehicleType']) && $_POST['VehicleType']!='' ? mysql_real_escape_string($_POST['VehicleType']): '');
$AreaType =(isset($_POST['AreaType']) && $_POST['AreaType']!='' ? mysql_real_escape_string($_POST['AreaType']): '');
$HourlyRate = (isset($_POST['HourlyRate']) && $_POST['HourlyRate']!='' ? floatval($_POST['HourlyRate']) : '');
$HourlyMinimum = (isset($_POST['HourlyMinimum']) && $_POST['HourlyMinimum']!= '' ? floatval($_POST['HourlyMinimum']) : '');
$MilageRate = (isset($_POST['MilageRate']) && $_POST['MilageRate']!='' ? floatval($_POST['MilageRate']) : '');
$MilageMinimum = (isset($_POST['MilageMinimum']) && $_POST['MilageMinimum']!='' ? floatval($_POST['MilageMinimum']): '');
$Active = ($_POST['Active'] == 'true' || $_POST['Active'] == 'on' || $_POST['Active'] == '1' ? 1 : 0);

if($db)
{
	if ($_POST['Action'] == 'Create')
	{
		$submitQuery = "INSERT INTO VehicleRates (VehicleType_ID, HourlyRate, HourlyMinimum, MilageRate, MilageMinimum, AreaType_ID, Active) VALUES ('".$VehicleType_ID."', '".$HourlyRate."', '".$HourlyMinimum."','".$MilageRate."', '".$MilageMinimum."', '".$AreaType_ID."', ".$Active.")";
	}
	else
	if ($_POST['Action'] == 'Update')
	{
		$submitQuery = "UPDATE VehicleRates SET
		VehicleType_ID = '".$VehicleType_ID."',
		HourlyRate='".$HourlyRate."',
		HourlyMinimum='".$HourlyMinimum."',
		MilageRate ='".$MilageRate."',
		MilageMinimum='".$MilageMinimum."',
		AreaType_ID='".$AreaType_ID."',
		Active=".$Active."
		WHERE ID ='".$ID."'";

	//	echo $submitQuery;
	}
	else
	if ($_POST['Action'] == 'Delete')
	{
		$submitQuery = "DELETE FROM VehicleRates WHERE ID = '".$ID."'";
	}
	if ($submitResult = mysql_query($submitQuery))
	{
		updateLog($submitQuery);
		if ($_SESSION['Debug'] == 0)
			echo '{success:true}';
		else
			echo '{success:true, query:'.$submitQuery.'}';
	}
	else
	{
		if ($_SESSION['Debug'] == 0)
			echo '{success:false, reason:"problem with the query"}';
		else
			echo '{success:false, reason:"problem with the query", query:'.$submitQuery.'}';
	}
}
else
{
	echo '{success:false, reason:"Problem connecting to the database"}';
}

?>