webadmin.php

/var/www/hkosl.com/imusiccircle/_process.php

<?
    include('_init.php');
//$data = $_POST;

    $invalid_upload_file_format = false;
    require_once("webadmin/mime_type_lib.php");

    switch ($_POST['action']) {
        case 'course_share_email':
            //
            $id = (int)$_POST['course_id'];

            $sql        = "select * from tutor_postjob as tb where id = ? and deleted = ? and approved = ? and status = ? and (NOW() between start_date and end_date)";
            $parameters = array($id, 0, 1, 1);
            $row_detail = bind_pdo($sql, $parameters, "selectone");

            $sql        = "select nickname,tutor_no, id 
                           from tutor_main where id = ? and deleted = ? LIMIT 1";
            $parameters = array($row_detail["tutormain_id"], 0);
            $row_tutor  = bind_pdo($sql, $parameters, "selectone");

            $sql            = "select name_cn as name 
                               from master_type_code where id = ? and typeid = ? and deleted = ? LIMIT 1";
            $parameters     = array($row_detail["mas_instrument"], 'INSTRUMENT', 0);
            $row_instrument = bind_pdo($sql, $parameters, "selectone");

            $sql          = "select * from master_type_code where typeid = ? and id = ? and deleted = ?";
            $parameters   = array('RESIDENCE_POSITIONCODE', $row_detail['classlocation'], 0);
            $row_position = bind_pdo($sql, $parameters, "selectone");

            $sql               = "SELECT date FROM tutor_postjob_date WHERE postjob_refid = ?";
            $parameters99      = array(intval($row_detail['id']));
            $rows_postjob_date = bind_pdo($sql, $parameters99, "selectall");

            if ($row_detail['level'] == 1) {
                $level = '初級';
            } else if ($row_detail['level'] == 3) {
                $level = '三級';
            }
            //
            $to           = $_POST['email'];
            $sender_name  = $site_info['companyname_' . $lang];
            $sender_email = $site_info['enquiryemail'];
            $content_arr['member_name'] = '你好,';
            $subject = $row_instrument["name"] . " " . $row_detail["people_count"].'人班';
            $content_arr['titlename'] = $row_instrument["name"] . " " . $row_detail["people_count"].'人班';
            $content_arr['msg']       = '每人收費 : $'.(float)$row_detail["fee"].'<br>級別 : '.$level;
            $content_arr['date'] = date('Y-m-d');
            $content_arr['time'] = date('H:i:s');

            $map_file            = 'email/page.html';
            sendEmail2($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
            $path = $_SERVER['HTTP_REFERER'];
            @header("Location: {$path}");
            echo "<script language='JavaScript'>window.location='{$path}'</script>";
            exit();
            break;
        case 'profile_adminmsg':

            $msg = $_POST['msg'];
            $tel = $_POST['tel'];
            $email = $_POST['email'];

            if($email && $tel && $msg){

                $msg = htmlspecialchars('留言: '.$msg.'<br>
                    電郵: '.$_POST['email'].'<br>
                    電話: '.$_POST['tel'], ENT_QUOTES );
                unset($data);
                $data['type']      = 'findtutor';
                $data['msg']      = $msg;
                $data['lastupdate'] = date('Y-m-d H:i:s');
                $data['status']  = 1;
                $data['deleted'] = 0;
                $sql             = mysql_install($data, 'admin_msg', 'add');
                $arraykey        = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);

                //
                $lang = 'cn';
                $to           = $site_info['enquiryemail'];
                $sender_name  = $site_info['companyname_' . $lang];
                $sender_email = $_POST['email'];
                $content_arr['member_name'] = '';
                if ($lang == 'en') {
                    $subject = '聯絡導師';
                } else if ($lang == 'cn') {
                    $subject = '聯絡導師';
                }
                $content_arr['titlename'] = '';
                $content_arr['msg']       = $msg;
                $content_arr['date'] = date('Y-m-d');
                $content_arr['time'] = date('H:i:s');
                $map_file            = 'email/page.html';
                sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);

                $path = $_SERVER['HTTP_REFERER'];
                @header("Location: {$path}");
                echo "<script language='JavaScript'>window.location='{$path}'</script>";
                exit();
            }
            break;
        case 'category_adminmsg':

            $instrument = $_POST['instrument_id'];
            $tel = $_POST['tel'];
            $email = $_POST['email'];

            if($email && $tel && $instrument){
                $sql            = "select name_en,name_cn from master_type_code where id = ? and typeid = 'INSTRUMENT' LIMIT 1";
                $parameters     = array($instrument);
                $row_instrument = bind_pdo($sql, $parameters, "selectone");

                $msg = htmlspecialchars('樂器: '.$row_instrument['name_cn'].'<br>
                    電郵: '.$_POST['email'].'<br>
                    電話: '.$_POST['tel'], ENT_QUOTES );
                unset($data);
                $data['type']      = 'findtutor';
                $data['msg']      = $msg;
                $data['lastupdate'] = date('Y-m-d H:i:s');
                $data['status']  = 1;
                $data['deleted'] = 0;
                $sql             = mysql_install($data, 'admin_msg', 'add');
                $arraykey        = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);

                $lang = 'cn';
                $to           = $site_info['enquiryemail'];
                $sender_name  = $site_info['companyname_' . $lang];
                $sender_email = $site_info['enquiryemail'];
                $content_arr['member_name'] = '';
                if ($lang == 'en') {
                    $subject = '使用導師配對顧問服務';
                } else if ($lang == 'cn') {
                    $subject = '使用導師配對顧問服務';
                }
                $content_arr['titlename'] = '';
                $content_arr['msg']       = $msg;
                $content_arr['date'] = date('Y-m-d');
                $content_arr['time'] = date('H:i:s');
                $map_file            = 'email/page.html';
                $result = sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);

                if($result == "OK"){
                    $_SESSION['course_msg'] = true;
                }

                $path = $_SERVER['HTTP_REFERER'];
                @header("Location: {$path}");
                echo "<script language='JavaScript'>window.location='{$path}'</script>";
                exit();
            }
            break;

        case 'course_category_adminmsg':

            if($_POST["tel"] && $_POST["email"] && $_POST["instrument"] && $_POST["district"]){
                $msg = htmlspecialchars('電話: '.$_POST['tel'].'<br>
                    電郵: '.$_POST['email'].'<br>
                    樂器: '.$_POST['instrument'].'<br>
                    地區: '.$_POST['district'].'<br>', ENT_QUOTES );

                unset($data);
                $data['type']      = 'course_enquiry';
                $data['msg']      = $msg;
                $data['lastupdate'] = date('Y-m-d H:i:s');
                $data['status']  = 1;
                $data['deleted'] = 0;
                $sql             = mysql_install($data, 'admin_msg', 'add');
                $arraykey        = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);

                $lang = 'cn';
                $to           = $site_info['enquiryemail'];
                $sender_name  = $site_info['companyname_' . $lang];
                $sender_email = $site_info['enquiryemail'];
                $content_arr['member_name'] = '';
                if ($lang == 'en') {
                    $subject = '使用音樂班配對顧問服務';
                } else if ($lang == 'cn') {
                    $subject = '使用音樂班配對顧問服務';
                }
                $content_arr['titlename'] = '';
                $content_arr['msg']       = $msg;
                $content_arr['date'] = date('Y-m-d');
                $content_arr['time'] = date('H:i:s');
                $map_file            = 'email/page.html';
                $result = sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);

                if($result == "OK"){
                    $_SESSION['course_msg'] = true;
                }

                $path = $_SERVER['HTTP_REFERER'];
                @header("Location: {$path}");
                echo "<script language='JavaScript'>window.location='{$path}'</script>";
                exit();
            }
            break;
        case 'forgetpassword':
            unset($tmp_data);
            //檢查該電郵是否是導師
            $sql           = "SELECT cmsloginid,email,nickname as name FROM tutor_main WHERE email=? AND deleted = 0";
            $parameters    = array(aes_crypt(strtolower($_POST['email']), 1));
            $record_email  = bind_pdo($sql, $parameters, "selectone");
            //檢查該電郵是否是學生
            $sql           = "SELECT cmsloginid,email,contactname as name FROM student_main WHERE email=? AND deleted = 0";
            $parameters    = array(aes_crypt(strtolower($_POST['email']), 1));
            $record_email2 = bind_pdo($sql, $parameters, "selectone");

            //查看是否找到學生或導師資料
            if ($record_email['cmsloginid'] || $record_email2['cmsloginid']) {
                if ($record_email['cmsloginid']) {
                    $record_member = $record_email;
                } else {
                    $record_member = $record_email2;
                }
                /*---------------創建密碼---------------*/
                include('webadmin/function_auth.php');
                $password               = pass_gen(8); //隨機8個字元密碼
                $tmp_data['cmsloginpw'] = Password::hash($password); //加密
                //儲存密碼
                $sql                    = mysql_install($tmp_data, 'sys_cms_login', 'edit', 'cmsloginid');
                $tmp_data['cmsloginid'] = $record_member['cmsloginid'];
                $arraykey               = array_keys($tmp_data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $tmp_data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                //
                /*---------------完---------------*/
                /*---------------發送電郵---------------*/
                #$to = $record_member['email'].',bennyleung@onesolution.com.hk';
                $lang         = $_SESSION['langcode'];
                $to           = aes_crypt($record_member['email'], 2); //解密發送者電郵
                $sender_name  = $site_info['companyname_' . $lang];
                $sender_email = $site_info['enquiryemail'];
                $content_arr['member_name'] = $record_member['name'];
                if ($lang == 'en') {
                    $subject = 'Password of Member 【Forget password】';
                } else if ($lang == 'cn') {
                    $subject = '會員密碼【忘記密碼】';
                }
                //拿取網頁資料
                $sql             = "select cmsloginname from sys_cms_login as tb 
                                    where `cmsloginid` = ? and deleted = ? LIMIT 1";
                $parameters      = array($record_member['cmsloginid'], 0);
                $record_cmslogin = bind_pdo($sql, $parameters, "selectone");
                //
                $sender_name     = $site_info['companyname_' . $lang];
                if ($lang == 'en') {
                    $content_arr['titlename'] = 'Password of Member 【Account Activation】';
                    $content_arr['msg']       = 'Your Password : ' . $password . '<br>';
                } else if ($lang == 'cn') {
                    $content_arr['titlename'] = '會員密碼【忘記密碼】';
                    $content_arr['msg']       = '你的新密碼 : ' . $password . '<br>';
                }
                $content_arr['date'] = date('Y-m-d');
                $content_arr['time'] = date('H:i:s');
                $map_file            = 'email/page.html';
                sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
                /*---------------完---------------*/
                $path = 'forgetpassword.php?action=success';
            } else {
                $path = 'forgetpassword.php?action=fail';
            }
            break;
        case 'logout':
            /*---------------後台使用---------------*/
            unset($_SESSION['loginname']);
            unset($_SESSION['cmsloginname']);
            unset($_SESSION['cmsusername']);
            unset($_SESSION['password']);
            unset($_SESSION['loginid']);
            unset($_SESSION['cmsloginid']);
            unset($_SESSION['role']);
            unset($_SESSION['cmsrole']);
            unset($_SESSION['is_tutor']);
            unset($_SESSION['is_student']);
            /*---------------完---------------*/
            /*---------------前台使用---------------*/
            unset($_SESSION['member_login']);
            unset($_SESSION['student_login']);
            unset($_SESSION['login_user_name']);
            /*---------------完---------------*/
            $path = 'index.php';
            break;
            break;
        case 'login':
            /*---------------找尋登入資料是導師或是學生---------------*/
            if ($_POST['facebook_id']) { // 如使用facebook登入
                //檢查該facebook回傳來的數據是否是導師
                $sql        = "SELECT cmsloginid FROM tutor_main WHERE facebook_id=? AND deleted = 0";
                $parameters = array($_POST['facebook_id']);
                $record     = bind_pdo($sql, $parameters, "selectone");
                //檢查該facebook回傳來的數據是否是學生
                $sql        = "SELECT cmsloginid FROM student_main WHERE facebook_id=? AND deleted = 0";
                $parameters = array($_POST['facebook_id']);
                $record2    = bind_pdo($sql, $parameters, "selectone");

                $sql = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb 
                        where `cmsloginid` = ? and deleted = ? LIMIT 1";
                if ($record['cmsloginid']) {
                    $parameters = array($record['cmsloginid'], 0); //讀取導師資料
                } else if ($record2['cmsloginid']) {
                    $parameters = array($record2['cmsloginid'], 0); //讀取學生資料
                } else {
                    $parameters = array(0, 0); //什麼都找不到
                }
            } else {
                //使用電郵密碼讀取導師資料
                include('webadmin/function_auth.php');
                $sql        = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb 
                               where `cmsloginname` = ? and `cmsloginpw` = ? and cmsrole = ? and deleted = ? LIMIT 1";
                $parameters = array(aes_crypt(strtolower($_POST['email']), 1), Password::hash($_POST['password']), 'user', 0);
            }
            $row_cms = bind_pdo($sql, $parameters, "selectone");
            /*---------------完---------------*/
            /*---------------更新最後登入日期及時間---------------*/
            if (!empty($row_cms)) {
                $sql        = "update sys_cms_login set last_login_date = ? where cmsloginid = ?";
                $parameters = array(date("Y-m:d H:i:s"), $row_cms['cmsloginid']);
                bind_pdo($sql, $parameters);
            }
            /*---------------完---------------*/
            if ($row_cms['is_tutor'] == 1) { //如果是導師
                //查看是否已經電郵驗證
                $sql        = "select id,status,nickname from tutor_main 
                               where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
                $parameters = array($row_cms['cmsloginid']);
                $row        = bind_pdo($sql, $parameters, "selectone");
                //
                if ($row['id']) {
                    if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
                        //儲存SESSION
                        $_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
                        $_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
                        $_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
                        $_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
                        $_SESSION['loginid']         = $row_cms['cmsloginid'];
                        $_SESSION['cmsrole']         = $row_cms['cmsrole'];
                        $_SESSION['role']            = $row_cms['cmsrole'];
                        $_SESSION['is_tutor']        = $row_cms['is_tutor'];
                        $_SESSION['is_student']      = $row_cms['is_student'];
                        $_SESSION['login_user_name'] = $row['nickname'];
                        $_SESSION['member_login']    = $row['id'];
                        if ($row['status'] == 4) { //管理員驗證
                            $path = 'webadmin/index.php';
                        } else if ($row['status'] == 3) { //手機驗證
                            $path = 'index.php';
                        }
                    } else {
                        $_SESSION['member_login']    = $row['id'];
                        $_SESSION['login_user_name'] = $row['nickname'];
                        $path                        = 'signupTutor.php';
                    }
                } else {
                    $_SESSION['login'] = 'fail';
                    $path              = 'index.php';
                }
            } else if ($row_cms['is_student'] == 1) {
                //查看是否已經電郵驗證
                $sql        = "select id,status,contactname from student_main 
                               where `cmsloginid` = ? and `isemailverified` = 1 LIMIT 1";
                $parameters = array($row_cms['cmsloginid']);
                $row        = bind_pdo($sql, $parameters, "selectone");
                //
                if ($row['id']) {
                    if ($row['status'] == 3 || $row['status'] == 4) { //查看是否已經手機或管理員驗證
                        $_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
                        $_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
                        $_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
                        $_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
                        $_SESSION['loginid']         = $row_cms['cmsloginid'];
                        $_SESSION['cmsrole']         = $row_cms['cmsrole'];
                        $_SESSION['role']            = $row_cms['cmsrole'];
                        $_SESSION['is_tutor']        = $row_cms['is_tutor'];
                        $_SESSION['is_student']      = $row_cms['is_student'];
                        $_SESSION['login_user_name'] = $row['contactname'];
                        $_SESSION['student_login']   = $row['id'];
                        $path                        = 'webadmin/index.php';
                    } else {
                        $_SESSION['login_user_name'] = $row['contactname'];
                        $_SESSION['student_login']   = $row['id'];
                        $path                        = 'signupStudent.php';
                    }
                } else {
                    $_SESSION['login'] = 'fail';
                    $path              = 'index.php';
                }
            } else {
                $_SESSION['login'] = 'fail';
                $path              = 'index.php';
            }
            break;
        case 'signup_tutorverification':
            $nowdate = date("Y-m-d H:i:s");
            $id      = $_SESSION['member_login'];
            if ($id) {
                /*----------儲存成功註冊----------*/
                $data['status']     = 3;
                $data['lastupdate'] = $nowdate;
                $sql                = mysql_install($data, 'tutor_main', 'edit', 'id');
                $data['id']         = $id;
                $arraykey           = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);

                $sql        = "select cmsloginid 
                                  from tutor_main as tb where id = ? and deleted = ? and status = ?";
                $parameters = array($id, 0, 3);
                $row        = bind_pdo($sql, $parameters, "selectone");

                $sql        = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb 
                               where `cmsloginid` = ? and cmsrole = ? and deleted = ? LIMIT 1";
                $parameters = array($row['cmsloginid'], 'user', 0);
                $row_cms    = bind_pdo($sql, $parameters, "selectone");

                $_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
                $_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
                $_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
                $_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
                $_SESSION['loginid']         = $row_cms['cmsloginid'];
                $_SESSION['cmsrole']         = $row_cms['cmsrole'];
                $_SESSION['role']            = $row_cms['cmsrole'];
                $_SESSION['is_tutor']        = $row_cms['is_tutor'];
                $_SESSION['is_student']      = $row_cms['is_student'];
                $_SESSION['login_user_name'] = $row['nickname'];

                insert_approval_list('TUTOR', 'tutor_main', $id);
            }
            $path = 'index.php';
            break;
        case 'tutor_signup':
            if ($_POST['email'] && $_POST['password']) { // 如有電郵及密碼
                include('webadmin/function_auth.php');
                $nowdate = date("Y-m-d H:i:s");
                /*------------創建後台帳號------------*/
                $sql                         = "select max(cmsloginid) as maxid from sys_cms_login ";
                $parameters                  = array();
                $row2                        = bind_pdo($sql, $parameters, "selectone");
                $cmsloginid                  = $row2{"maxid"} + 1;
                $data['cmsloginid']          = $cmsloginid;
                $data['cmsusername']         = aes_crypt(strtolower($_POST['email']), 1);
                $data['cmsloginname']        = aes_crypt(strtolower($_POST['email']), 1);
                $data['cmsloginpw']          = Password::hash($_POST['password']);
                $data['cmsrole']             = 'user';
                $data['cmsstatus']           = '1';
                $data['createdate']          = $nowdate;
                $data['createby']            = '';
                $data['lastupdate']          = $nowdate;
                $data['lastupby']            = '';
                $data['password_expirydate'] = '2047-07-01';
                $data['deleted']             = 0;
                $data['is_tutor']            = 1;
                $data['is_student']          = 0;
                $sql                         = mysql_install($data, 'sys_cms_login', 'add');
                $arraykey                    = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                /*------------------------*/
                /*------------設定權限------------*/
                unset($data);
                $data['deleted']    = 0;
                $data['profile_id'] = 3;
                $data['user_id']    = $cmsloginid;
                $sql                = mysql_install($data, 'profile_user', 'add');
                $arraykey           = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                /*------------------------*/
                /*------------創建新導師------------*/
                unset($data);
                $sql                = "select max(id) as maxid from tutor_main ";
                $parameters         = array();
                $row2               = bind_pdo($sql, $parameters, "selectone");
                $id                 = $row2{"maxid"} + 1;
                $data['id']         = $id;
                $data['tutor_no']   = gettutorNo($data['id']);
                $data['cmsloginid'] = $cmsloginid;
                $data['email']      = aes_crypt(strtolower($_POST['email']), 1);
                $data['mobno']      = aes_crypt($_POST['mobno'], 1);
                $data['createdate'] = $nowdate;
                $data['lastupdate'] = $nowdate;
                $data['deleted']    = 0;
                $data['status']     = 1;
                $sql                = mysql_install($data, 'tutor_main', 'add');
                $data['id']         = $id;
                $arraykey           = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                /*------------------------*/
                /*------------發送電郵------------*/
                $to           = aes_crypt($data['email'], 2);
                $sender_name  = $site_info['companyname_' . $lang];
                $sender_email = $site_info['enquiryemail'];
                $lang         = $_SESSION['langcode'];

                if ($lang == 'cn') {
                    $subject                    = '導師註冊【電郵驗證】';
                    $content_arr['member_name'] = '你好';
                    $content_arr['titlename']   = '導師註冊【電郵驗證】';
                    $content_arr['msg']         = '
                歡迎加入MusicCircle。
                <br><br>
                多謝你申請成為MusicCircle的導師。你的用戶資料如下：
                <br><br>
                電郵地址 : ' . strtolower($_POST['email']) . '
                <br><br>
                請點擊以下連結，確認你的電郵地址以啟動你的導師賬戶。
                <br><br>
                <a href="'.$site_info["url"].'activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '">'.$site_info["url"].'activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
                (如未能直接點擊以上連結，請將連結複製到瀏覽器上打開)
                <br><br>
                啟動賬戶後，我們會先確定導師資歷。一般需時48－72小時。
                <br><br>
                我們亦建議導師同時進行手機短訊(SMS)認証，只有經過手機短訊認証，導師才可於音樂圈網上平台跟學生直接對話。
                <br><br>
                手機號碼及導師資歷一經確定後，你將可使用音樂圈的相關導師服務。
                <br><br>
                如有任何問題，請電郵至cs@musiccircle.hk 跟我們聯絡。
                <br><br>
                音樂圈客戶服務
                ';
                } else if ($lang == 'en') {
                    $subject                    = 'Tutor Registration 【Email Verification】';
                    $content_arr['member_name'] = 'Hello ,';
                    $content_arr['titlename']   = 'Tutor Registration 【Email Verification】';
                    $content_arr['msg']         = '
                Welcome to MusicCircle.
                <br><br>
                Thanks for your registration as our Tutor and please find below with your login information.
                <br><br>
                Email Address : ' . strtolower($_POST['email']) . '
                <br><br>
                To complete the registration process, please click the link below for verification.
                <br><br>
                <a href="'.$site_info["url"].'activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '">'.$site_info["url"].'activation.php?type=' . aes_crypt('tutor', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
                (Please copy and paste the full address on your Internet Browser if the link doesn’t work)
                <br><br>
                We will check and confirm with your qualification as our tutor. This will take around 48 to 72 hours.
                <br><br>
                At the same time, we suggest our tutors to complete the mobile SMS verification. Tutors can only chat with students on MusicCircle online platform after the mobile SMS verification.
                <br><br>
                After confirmation, you will be able to enjoy the service provided by MusicCircle.
                <br><br>
                Please feel free to contact us at cs@musiccircle.hk if you have any question.
                <br><br>
                Yours sincerely,<br>
                Customer Service, MusicCircle
                ';
                }
                $content_arr['date'] = date('Y-m-d');
                $content_arr['time'] = date('H:i:s');
                $map_file            = 'email/page.html';
                $_SESSION['reg']['email'] = sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
                /*------------------------*/
                $path = 'registration.php';
            } else {
                $path = 'index.php';
            }
            break;
        case 'signup_subject':
            $id = $_SESSION['member_login'];
            if ($id) {
                //
                $data['canaccompany'] = $_POST['canaccompany'];
                $sql                  = mysql_install($data, 'tutor_main', 'edit', 'id');
                $data['id']           = $id;
                $arraykey             = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                // Fee
                unset($tmpdata);
                $post = formatPostData($_POST['area']);
                foreach ($post as $array) {
                    unset($tmpdata);
                    $tmpdata['studenhome_addcharge'] = $array['studenhome_addcharge'];
                    $sql                             = mysql_install($tmpdata, 'tutor_teachareacode', 'edit', 'id');
                    $tmpdata['id']                   = $array['id'];
                    $arraykey                        = array_keys($tmpdata);
                    unset($parameters);
                    for ($i = 0; $i < count($arraykey); $i++) {
                        $parameters[$i] = $tmpdata[$arraykey[$i]];
                    }
                    bind_pdo($sql, $parameters);
                }
                // Teacher Expect Charge
                unset($tmpdata);
                $sql         = "select * from tutor_charge WHERE tutormain_id=?;";
                $parameters  = array($id);
                $rows_charge = bind_pdo($sql, $parameters, "selectall");
                unset($array);
                foreach ($rows_charge as $row_charge) {
                    $array[] = $row_charge['id'];
                }
                if (is_array($array)) {
                    $sql        = "DELETE FROM `tutor_expectcharge` WHERE charge_id in (" . implode(',', $array) . ");";
                    $parameters = array();
                    bind_pdo($sql, $parameters);
                }
                $sql         = "select id from tutor_charge where tutormain_id = ?";
                $parameters  = array($id);
                $rows_charge = bind_pdo($sql, $parameters, "selectall");
                foreach ($rows_charge as $row_charge) {
                    $sql        = "DELETE FROM `tutor_expectcharge` WHERE charge_id = ?;";
                    $parameters = array($row_charge['id']);
                    bind_pdo($sql, $parameters);
                }
                $sql        = "DELETE FROM `tutor_charge` WHERE tutormain_id=?;";
                $parameters = array($id);
                bind_pdo($sql, $parameters);
                if (is_array($_POST['tutor_expectcharge'])) {
                    //print_r($_POST['tutor_expectcharge']);
                    for ($q = 1; $q <= 6; $q++) {
                        if ($_POST['tutor_expectcharge']['mas_instrument' . $q]) {
                            unset($tmpdata);
                            $sql                       = "select max(id) as maxid from tutor_charge ";
                            $parameters                = array();
                            $row2                      = bind_pdo($sql, $parameters, "selectone");
                            $charge_id                 = $row2{"maxid"} + 1;
                            $tmpdata['id']             = $charge_id;
                            $tmpdata['tutormain_id']   = $id;
                            $tmpdata['instrument_no']  = $q;
                            $tmpdata['mas_instrument'] = $_POST['tutor_expectcharge']['mas_instrument' . $q];
                            $tmpdata['lastupdate']     = $nowdate;
                            $tmpdata['deleted']        = 0;
                            $sql                       = mysql_install($tmpdata, 'tutor_charge', 'add');
                            $arraykey                  = array_keys($tmpdata);
                            unset($parameters);
                            for ($i = 0; $i < count($arraykey); $i++) {
                                $parameters[$i] = $tmpdata[$arraykey[$i]];
                            }
                            bind_pdo($sql, $parameters);

                            for ($a = 1; $a <= 8; $a++) {
                                if ($_POST['tutor_expectcharge']['charge_30min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['charge_45min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['charge_60min' . $q . '_' . $a]) {
                                    unset($tmpdata);
                                    $tmpdata['charge_id']    = $charge_id;
                                    $tmpdata['type']         = 'fee';
                                    $tmpdata['grade']        = $a;
                                    $tmpdata['charge_30min'] = $_POST['tutor_expectcharge']['charge_30min' . $q . '_' . $a];
                                    $tmpdata['charge_45min'] = $_POST['tutor_expectcharge']['charge_45min' . $q . '_' . $a];
                                    $tmpdata['charge_60min'] = $_POST['tutor_expectcharge']['charge_60min' . $q . '_' . $a];
                                    $tmpdata['lastupdate']   = $nowdate;
                                    $tmpdata['deleted']      = 0;
                                    $sql                     = mysql_install($tmpdata, 'tutor_expectcharge', 'add');
                                    $arraykey                = array_keys($tmpdata);
                                    unset($parameters);
                                    for ($i = 0; $i < count($arraykey); $i++) {
                                        $parameters[$i] = $tmpdata[$arraykey[$i]];
                                    }
                                    bind_pdo($sql, $parameters);
                                }
                            }
                            for ($a = 1; $a <= 3; $a++) {
                                if ($_POST['tutor_expectcharge']['t_charge_30min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['t_charge_45min' . $q . '_' . $a] || $_POST['tutor_expectcharge']['t_charge_60min' . $q . '_' . $a]) {
                                    unset($tmpdata);
                                    $tmpdata['charge_id']    = $charge_id;
                                    $tmpdata['type']         = 'tfee';
                                    $tmpdata['grade']        = $a;
                                    $tmpdata['charge_30min'] = $_POST['tutor_expectcharge']['t_charge_30min' . $q . '_' . $a];
                                    $tmpdata['charge_45min'] = $_POST['tutor_expectcharge']['t_charge_45min' . $q . '_' . $a];
                                    $tmpdata['charge_60min'] = $_POST['tutor_expectcharge']['t_charge_60min' . $q . '_' . $a];
                                    $tmpdata['lastupdate']   = $nowdate;
                                    $tmpdata['deleted']      = 0;
                                    $sql                     = mysql_install($tmpdata, 'tutor_expectcharge', 'add');
                                    $arraykey                = array_keys($tmpdata);
                                    unset($parameters);
                                    for ($i = 0; $i < count($arraykey); $i++) {
                                        $parameters[$i] = $tmpdata[$arraykey[$i]];
                                    }
                                    bind_pdo($sql, $parameters);
                                }
                            }
                        }
                    }
                }
                //exit();
                // Teacher Mode
                unset($tmpdata);
                $sql        = "DELETE FROM `tutor_expstudentage` WHERE tutormain_id=?;";
                $parameters = array($id);
                bind_pdo($sql, $parameters);
                if (is_array($_POST['expstudentage_id'])) {
                    foreach ($_POST['expstudentage_id'] as $value) {
                        $tmpdata['tutormain_id']      = $id;
                        $tmpdata['mas_expstudentage'] = $value;
                        $tmpdata['lastupdate']        = $nowdate;
                        $tmpdata['deleted']           = 0;
                        $sql                          = mysql_install($tmpdata, 'tutor_expstudentage', 'add');
                        $arraykey                     = array_keys($tmpdata);
                        unset($parameters);
                        for ($i = 0; $i < count($arraykey); $i++) {
                            $parameters[$i] = $tmpdata[$arraykey[$i]];
                        }
                        bind_pdo($sql, $parameters);
                    }
                }
            }
            $path = 'signupTutorVerification.php?refid=' . $id;
            break;
        case 'signup_tutor':
            $nowdate = date("Y-m-d H:i:s");
            $id      = $_SESSION['member_login'];
            if ($id) {
                $data['name_en'] = $_POST['name_en'];
                $data['name_cn'] = $_POST['name_cn'];
                if ($_FILES["profilephoto_path"]['name'] <> '') {

                    //check if image type is valid or not
                    $mime = get_file_mime_type($_FILES["profilephoto_path"]['tmp_name']);

                    if (($mime == "image/jpeg") || ($mime == "image/png")) {

                        $filename = $_FILES["profilephoto_path"]['name'];
                        preg_match("/\.([^\.]+)$/", $filename, $file_ext);
                        $newfilename = random_string(10) . "_teacher_refid_" . $id . "." . $file_ext[1]; // default length 8
                        move_uploaded_file($_FILES["profilephoto_path"]['tmp_name'], "file/teacher/" . $newfilename) or die ("Could not copy the file");

                        image_fix_orientation("file/teacher/" . $newfilename);

                        $photo                     = $newfilename;
                        $data['profilephoto_path'] = $photo;
                    } else {
                        $invalid_upload_file_format = true;
                    }

                    if ($invalid_upload_file_format) {
                        echo '<script>alert("' . _lang("Invalid file format.") . '"); history.back();</script>';
                        exit;
                    }


                }
                //$data['email'] = $_POST['email'];
                //$data['username'] = $_POST['username'];
                $data['nickname']  = $_POST['nickname'];
                $data['gender']    = $_POST['gender'];
                $data['idno']      = aes_crypt($_POST['idno'], 1);
                //$data['mobno']     = aes_crypt($_POST['mobno'], 1);
                $data['hometelno'] = aes_crypt($_POST['hometelno'], 1);
                //$data['mas_area_code'] = $_POST['mobno'];
                $data['dob_year']                 = $_POST['dob_year'];
                $data['dob_mon']                  = $_POST['dob_mon'];
                $data['mas_residencecode']        = $_POST['mas_residencecode'];
                $data['mas_area_code']            = $_POST['mas_area_code'];
                $data['mas_teachexp']             = $_POST['mas_teachexp'];
                $data['self_describemyself']      = $_POST['self_describemyself'];
                $data['self_intro']               = $_POST['self_intro'];
                $data['youtube_url']              = $_POST['youtube_url'];
                $data['studentagerange_expected'] = $_POST['studentagerange_expected'];
                $data['cansupplyinstrument']      = $_POST['cansupplyinstrument'];
                $data['lastupdate']               = $nowdate;
                $data['deleted']                  = 0;
                $sql                              = mysql_install($data, 'tutor_main', 'edit', 'id');
                $data['id']                       = $id;
                $arraykey                         = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                // Teacher Area Code

                $sql        = "DELETE FROM `tutor_teachareacode` WHERE tutormain_id=?;";
                $parameters = array($id);
                bind_pdo($sql, $parameters);
                $sql        = "select * from master_type_code where typeid = ? and deleted = ?";
                $parameters = array('TEACH_AREACODE', 0);
                $rows_area  = bind_pdo($sql, $parameters, "selectall");
                foreach ($rows_area as $row_area) {
                    unset($studenhome_addcharge);
                    foreach($_POST['studenhome_addcharge'.$row_area['id']] as $value){
                        if($value){
                            $studenhome_addcharge[] = $value;
                        }
                    }
                    foreach ($_POST['area' . $row_area['id']] as $index => $value) {
                        unset($tmpdata);
                        $tmpdata['tutormain_id']      = $id;
                        $tmpdata['mas_teachareacode'] = $value;
                        //$tmpdata['studenhome_addcharge'] = $_POST['studenhome_addcharge'.$data['mas_area_code']][$index]?$_POST['studenhome_addcharge'.$data['mas_area_code']][$index]:0;
                        $tmpdata['lastupdate'] = $nowdate;
                        $tmpdata['deleted']    = 0;
                        $sql                   = mysql_install($tmpdata, 'tutor_teachareacode', 'add');
                        $arraykey              = array_keys($tmpdata);
                        unset($parameters);
                        for ($i = 0; $i < count($arraykey); $i++) {
                            $parameters[$i] = $tmpdata[$arraykey[$i]];
                        }
                        bind_pdo($sql, $parameters);
                    }
                }
                // Teacher Venus
                unset($tmpdata);
                $sql        = "DELETE FROM `tutor_teachvenus` WHERE tutormain_id=?;";
                $parameters = array($id);
                bind_pdo($sql, $parameters);
                foreach ($_POST['teachvenus_id'] as $value) {
                    $tmpdata['tutormain_id']   = $id;
                    $tmpdata['mas_teachvenus'] = $value;
                    $tmpdata['lastupdate']     = $nowdate;
                    $tmpdata['deleted']        = 0;

                    $sql      = mysql_install($tmpdata, 'tutor_teachvenus', 'add');
                    $arraykey = array_keys($tmpdata);
                    unset($parameters);
                    for ($i = 0; $i < count($arraykey); $i++) {
                        $parameters[$i] = $tmpdata[$arraykey[$i]];
                    }
                    bind_pdo($sql, $parameters);
                }
                // Teacher Mode
                unset($tmpdata);
                $sql        = "DELETE FROM `tutor_teachmode` WHERE tutormain_id=?;";
                $parameters = array($id);
                bind_pdo($sql, $parameters);
                if (is_array($_POST['teachmode_id'])) {
                    foreach ($_POST['teachmode_id'] as $value) {
                        $tmpdata['tutormain_id']  = $id;
                        $tmpdata['mas_teachmode'] = $value;
                        $tmpdata['lastupdate']    = $nowdate;
                        $tmpdata['deleted']       = 0;
                        $sql                      = mysql_install($tmpdata, 'tutor_teachmode', 'add');
                        $arraykey                 = array_keys($tmpdata);
                        unset($parameters);
                        for ($i = 0; $i < count($arraykey); $i++) {
                            $parameters[$i] = $tmpdata[$arraykey[$i]];
                        }
                        bind_pdo($sql, $parameters);
                    }
                }
                // instrumentquali
                unset($tmpdata);
                $sql        = "DELETE FROM `tutor_instrumentquali` WHERE tutormain_id=?;";
                $post       = formatPostData($_POST['instrumentquali']);
                $parameters = array($id);
                bind_pdo($sql, $parameters);

                if (is_array($post)) {
                    foreach ($post as $value) {
                        unset($tmpdata);
                        if ($value['mas_instrument'] && $value['grade'] && $value['year']) {
                            $tmpdata['tutormain_id']   = $id;
                            $tmpdata['mas_instrument'] = $value['mas_instrument'];
                            $tmpdata['grade']          = $value['grade'];
                            $tmpdata['year']           = $value['year'];
                            $tmpdata['lastupdate']     = $nowdate;
                            $tmpdata['deleted']        = 0;

                            $sql      = mysql_install($tmpdata, 'tutor_instrumentquali', 'add');
                            $arraykey = array_keys($tmpdata);
                            unset($parameters);
                            for ($i = 0; $i < count($arraykey); $i++) {
                                $parameters[$i] = $tmpdata[$arraykey[$i]];
                            }
                            bind_pdo($sql, $parameters);
                        }
                    }
                }
                //tutor_cert
                unset($tmpdata);
                if (is_array($_POST['tutor_cert']['id'])) {
                    $sql = "DELETE FROM `tutor_cert` WHERE tutormain_id=? and id not in (" . implode(',', $_POST['tutor_cert']['id']) . ");";
                } else {
                    $sql = "DELETE FROM `tutor_cert` WHERE tutormain_id=?;";
                }
                $file = formatPostData($_FILES['tutor_cert']);
                unset($parameters);
                $parameters = array($id);
                bind_pdo($sql, $parameters);

                if (is_array($file)) {
                    foreach ($file['file']['name'] as $i => $file_item) {
                        //for($i=0;$i<count($file['file']['name']);$i++){
                        if ($file['file']['name'][$i]) {
                            //check if image type is valid or not

                            $mime = get_file_mime_type($file['file']['tmp_name'][$i]);

                            if (($mime == "image/jpeg") || ($mime == "image/png") || ($mime == "application/pdf")) {
                                $filename = $file['file']['name'][$i];
                                preg_match("/\.([^\.]+)$/", $filename, $file_ext);
                                $newfilename = random_string(10) . "_cert_refid_" . $id . "." . $file_ext[1]; // default length 8

                                move_uploaded_file($file['file']['tmp_name'][$i], "file/teacher/" . $newfilename) or die ("Could not copy the file2");
                                $photo = $newfilename;

                                $tmpdata['tutormain_id'] = $id;
                                $tmpdata['cert_path']    = $photo;
                                $tmpdata['lastupdate']   = $nowdate;
                                $tmpdata['deleted']      = 0;

                                if ($_POST['tutor_cert']['id'][$i]) {
                                    $sql           = mysql_install($tmpdata, 'tutor_cert', 'edit', 'id');
                                    $tmpdata['id'] = $_POST['tutor_cert']['id'][$i];
                                    $arraykey      = array_keys($tmpdata);
                                    unset($parameters);
                                    for ($i = 0; $i < count($arraykey); $i++) {
                                        $parameters[$i] = $tmpdata[$arraykey[$i]];
                                    }
                                    bind_pdo($sql, $parameters);
                                } else {
                                    $sql      = mysql_install($tmpdata, 'tutor_cert', 'add');
                                    $arraykey = array_keys($tmpdata);
                                    unset($parameters);
                                    for ($i = 0; $i < count($arraykey); $i++) {
                                        $parameters[$i] = $tmpdata[$arraykey[$i]];
                                    }
                                    bind_pdo($sql, $parameters);
                                }
                            } else {
                                $invalid_upload_file_format = true;
                            }

                        }
                    }

                    if ($invalid_upload_file_format) {
                        echo '<script>alert("' . _lang("Invalid file format.") . '"); history.back();</script>';
                        exit;
                    }
                }
            }
            $path = 'signupTutorSubject.php';
            break;
        case 'signup_studentverification':
            $nowdate = date("Y-m-d H:i:s");
            $id      = $_SESSION['student_login'];
            if ($id) {
                $data['status']     = 4;
                $data['approved']   = 1;
                $data['lastupdate'] = $nowdate;
                $sql                = mysql_install($data, 'student_main', 'edit', 'id');
                $data['id']         = $id;
                $arraykey           = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);

                $sql        = "select cmsloginid 
                           from student_main as tb where id = ? and deleted = ? and status = ?";
                $parameters = array($id, 0, 4);
                $row        = bind_pdo($sql, $parameters, "selectone");

                $sql        = "select cmsloginname,cmsloginid,cmsrole,is_tutor,is_student from sys_cms_login as tb 
                    where `cmsloginid` = ? and cmsrole = ? and deleted = ? LIMIT 1";
                $parameters = array($row['cmsloginid'], 'user', 0);
                $row_cms    = bind_pdo($sql, $parameters, "selectone");

                $_SESSION['loginname']       = aes_crypt($row_cms['cmsloginname'], 2);
                $_SESSION['cmsloginname']    = aes_crypt($row_cms['cmsloginname'], 2);
                $_SESSION['cmsusername']     = aes_crypt($row_cms['cmsloginname'], 2);
                $_SESSION['cmsloginid']      = $row_cms['cmsloginid'];
                $_SESSION['loginid']         = $row_cms['cmsloginid'];
                $_SESSION['cmsrole']         = $row_cms['cmsrole'];
                $_SESSION['is_tutor']        = $row_cms['is_tutor'];
                $_SESSION['is_student']      = $row_cms['is_student'];
                $_SESSION['login_user_name'] = $row['contactname'];
            }
            $path = 'index.php';
            break;
        case 'signup_student':
            $nowdate = date("Y-m-d H:i:s");
            $id      = $_SESSION['student_login'];
            if ($id) {
                $data['contactname']           = $_POST['contactname'];
                $data['gender']                = $_POST['gender'];
                $data['restelno']              = aes_crypt($_POST['hometelno'], 1);
                $data['mas_yearrange']         = $_POST['mas_yearrange'];
                $data['mas_contactstudentrel'] = $_POST['mas_contactstudentrel'];
                $data['mas_residencecode']     = $_POST['mas_residencecode'];
                $data['address']               = $_POST['address'];
                $data['mas_contacttimerange']  = $_POST['mas_contacttimerange'];
                $data['lastupdate']            = $nowdate;
                $data['deleted']               = 0;
                $sql                           = mysql_install($data, 'student_main', 'edit', 'id');
                $data['id']                    = $id;
                $arraykey                      = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);

                // instrumentquali
                unset($tmpdata);
                $sql        = "DELETE FROM `student_instrumentquali` WHERE studentmain_id=?;";
                $post       = formatPostData($_POST['instrumentquali']);
                $parameters = array($id);
                bind_pdo($sql, $parameters);

                if (is_array($post)) {
                    foreach ($post as $value) {
                        unset($tmpdata);
                        if ($value['mas_instrument'] && $value['grade'] && $value['year']) {
                            $tmpdata['studentmain_id'] = $id;
                            $tmpdata['mas_instrument'] = $value['mas_instrument'];
                            $tmpdata['grade']          = $value['grade'];
                            $tmpdata['year']           = $value['year'];
                            $tmpdata['lastupdate']     = $nowdate;
                            $tmpdata['deleted']        = 0;

                            $sql      = mysql_install($tmpdata, 'student_instrumentquali', 'add');
                            $arraykey = array_keys($tmpdata);
                            unset($parameters);
                            for ($i = 0; $i < count($arraykey); $i++) {
                                $parameters[$i] = $tmpdata[$arraykey[$i]];
                            }
                            bind_pdo($sql, $parameters);
                        }
                    }
                }
            }
            $path = 'signupStudentVerification.php';
            break;
        case 'student_signup':
            if ($_POST['email'] && $_POST['password']) {
                include('webadmin/function_auth.php');
                $nowdate = date("Y-m-d H:i:s");
                //CMS Login
                $sql                         = "select max(cmsloginid) as maxid from sys_cms_login ";
                $parameters                  = array();
                $row2                        = bind_pdo($sql, $parameters, "selectone");
                $cmsloginid                  = $row2{"maxid"} + 1;
                $data['cmsloginid']          = $cmsloginid;
                $data['cmsusername']         = aes_crypt(strtolower($_POST['email']), 1);
                $data['cmsloginname']        = aes_crypt(strtolower($_POST['email']), 1);
                $data['cmsloginpw']          = Password::hash($_POST['password']);
                $data['cmsrole']             = 'user';
                $data['cmsstatus']           = '1';
                $data['createdate']          = $nowdate;
                $data['createby']            = '';
                $data['lastupdate']          = $nowdate;
                $data['lastupby']            = '';
                $data['password_expirydate'] = '2047-07-01';
                $data['deleted']             = 0;
                $data['is_tutor']            = 0;
                $data['is_student']          = 1;
                $sql                         = mysql_install($data, 'sys_cms_login', 'add');
                $arraykey                    = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                //
                unset($data);
                $data['deleted']    = 0;
                $data['profile_id'] = 4;
                $data['user_id']    = $cmsloginid;
                $sql                = mysql_install($data, 'profile_user', 'add');
                $arraykey           = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                //
                unset($data);
                $sql                = "select max(id) as maxid from student_main ";
                $parameters         = array();
                $row2               = bind_pdo($sql, $parameters, "selectone");
                $id                 = $row2{"maxid"} + 1;
                $data['id']         = $id;
                $data['student_no'] = getstudentNo($data['id']);
                $data['cmsloginid'] = $cmsloginid;
                $data['mobno']      = aes_crypt($_POST['mobno'], 1);
                $data['email']      = aes_crypt(strtolower($_POST['email']), 1);
                $data['createdate'] = $nowdate;
                $data['lastupdate'] = $nowdate;
                $data['deleted']    = 0;
                $data['status']     = 1;
                $sql                = mysql_install($data, 'student_main', 'add');
                $data['id']         = $id;
                $arraykey           = array_keys($data);
                unset($parameters);
                for ($i = 0; $i < count($arraykey); $i++) {
                    $parameters[$i] = $data[$arraykey[$i]];
                }
                bind_pdo($sql, $parameters);
                //
                $to = aes_crypt($data['email'], 2);

                $sender_name          = $site_info['companyname_' . $lang];
                $sender_email         = $site_info['enquiryemail'];
                $content_arr['title'] = 'iMusic Circle';
                $lang                 = $_SESSION['langcode'];

                if ($lang == 'cn') {
                    $subject                    = '學生註冊【電郵驗證】';
                    $content_arr['member_name'] = '你好';
                    $content_arr['titlename']   = '學生註冊【電郵驗證】';
                    $content_arr['msg']         = '
                歡迎加入MusicCircle。
                <br><br>
                多謝你申請成為MusicCircle的學生。你的用戶資料如下：
                <br><br>
                電郵地址 : ' . strtolower($_POST['email']) . '
                <br><br>
                請點擊以下連結，確認你的電郵地址以啟動你的學生賬戶。
                <br><br>
                <a href="'.$site_info["url"].'activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '">'.$site_info["url"].'activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
                (如未能直接點擊以上連結，請將連結複製到瀏覽器上打開)
                <br><br>
                啟動賬戶後，我們建議學生同時進行手機短訊(SMS)認証，只有經過手機短訊認証，學生才可於音樂圈網上平台跟導師直接對話。
                <br><br>
                如有任何問題，請電郵至cs@musiccircle.hk 跟我們聯絡。
                <br><br>
                音樂圈客戶服務
                ';
                } else if ($lang == 'en') {
                    $subject                    = 'Student Registration 【Email Verification】';
                    $content_arr['member_name'] = 'Hello ,';
                    $content_arr['titlename']   = 'Student Registration 【Email Verification】';
                    $content_arr['msg']         = '
                Welcome to MusicCircle.
                <br><br>
                Thanks for your registration as our Student and please find below with your login information.
                <br><br>
                Email Address : ' . strtolower($_POST['email']) . '
                <br><br>
                To complete the registration process, please click the link below for verification.
                <br><br>
                <a href="'.$site_info["url"].'/activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '">'.$site_info["url"].'activation.php?type=' . aes_crypt('student', 1) . '&link=' . aes_crypt($id, 1) . '</a><br>
                (Please copy and paste the full address on your Internet Browser if the link doesn’t work)
                <br><br>
                We suggest our students to complete the mobile SMS verification at the same time. Students can only chat with tutors on MusicCircle online platform after the mobile SMS verification.
                <br><br>
                Please feel free to contact us at cs@musiccircle.hk if you have any question.
                <br><br>
                Yours sincerely,<br>
                Customer Service, MusicCircle
                ';
                }
                $content_arr['date'] = date('Y-m-d');
                $content_arr['time'] = date('H:i:s');
                $map_file            = 'email/page.html';
                $_SESSION['reg']['email'] =  sendEmail($to, $subject, $content_arr, $sender_name, $sender_email, $map_file);
                // 
                $path = 'registration.php';
            } else {
                $path = 'index.php';
            }
            break;
    }
    @header("Location: {$path}");
    echo "<script language='JavaScript'>window.location='{$path}'</script>";
    exit();
?>