lookup.php

<?php
    include 'secrets.php';
    $year = "2021-2022";

    if (isset($_POST['id']) || isset($_POST['email'])) {
        $db = mysqli_connect("localhost", "root", MYSQL_SECRET, $dbname);

        if (!$db) {
            die('<p class="error">Connect Error ('.mysqli_connect_errno().') '. mysqli_connect_error()."</p>");
        }

        $year = $_POST['year'];

        if (isset($_POST['id'])) {
            $id = hash('sha512', $_POST['id']);

            $query = "SELECT * FROM `". $year ."` WHERE id='".$id."'";

            $results = $db->query($query);

            if ($results) {
                $row = mysqli_fetch_array($results);
                if (count($row) == 0) {
                    exit();
                }
                printf("Name: %s<BR>Email: %s<BR>", $row['name'], $row['email']);
                exit();
            }
        } else if (isset($_POST['email'])) {
            $email = trim($_POST['email']);
            if (empty($email)) {
                exit();
            }

            $email = mysqli_real_escape_string($db, $email);

            $query = "SELECT * FROM `". $year ."` WHERE email LIKE '%$email%'";

            $results = $db->query($query);

            if ($results) {
                while($row = mysqli_fetch_array($results)) {
                    printf("Name: %s<BR>Email: %s<BR>", $row['name'], $row['email']);
                }
                exit();
            }
        }
    }
?>

<?php
    $title = "Lookup Members";
    include 'header.php';
?>

    <style>
        .error {
            border-color: red;
        }
    </style>

    <!-- Page Heading/Breadcrumbs -->
    <div class="row">
        <div class="col-lg-12">
        <h1 class="page-header"><?php echo $title ?></h1>
            <ol class="breadcrumb">
                <li><a href="index.php">Home</a>
                </li>
                <li class="active"><?php echo $title ?></li>
            </ol>
        </div>
    </div>
    <!-- /.row -->

    <!-- Well -->
    <div class="well">

        <div class="row">
            <div class="col-lg-8 col-lg-offset-2 text-dark">
                <select id="year" name="year" class="form-control" style="width: 200px; display: inline-block;" onchange="switchYear(event)">
                    <option disabled="disabled" selected="selected" value="">Select Year</option>
                    <option value="2021-2022">2021 - 2022</option>
                    <option value="2020-2021">2020 - 2021</option>
                    <option value="2019-2020">2019 - 2020</option>
                    <option value="2018-2019">2018 - 2019</option>
                    <option value="2017-2018">2017 - 2018</option>
                </select>
                <span id="year-error" class="help-block" style="color: red; display: none">Select a year</span>
                <br />

                <div class="form-group text-dark">
                    <label for="inputlg" style="font-size: 45px;">Enter ID:</label>
                    <input class="form-control input-lg" id="id-input" type="password" onkeyup="checkId(event)">
                    <span id="id-error-lookup" class="help-block" style="color: red; display: none">Could not find member by ID</span>
                    <span id="id-error-match" class="help-block" style="color: red; display: none">ID text does not match ID format</span>
                </div>

                <div class="form-group text-dark">
                    <label for="inputlg" style="font-size: 45px;">Search by Email:</label>
                    <input class="form-control input-lg" id="email-input" type="text" onkeyup="checkEmail(event)">
                    <span id="email-error" class="help-block" style="color: red; display: none">Could not find member by Email</span>
                </div>
            </div>
        </div>

        <div class="row">
            <div id ="data" class="col-lg-8 col-lg-offset-2 text-center text-dark"> </div>
        </div>

    </div>
    <!-- /.well -->

    <!-- jQuery -->
    <script src="js/jquery.js"></script>

    <script type="application/javascript">

        function checkId(event) {
            if (event.which === 13) {
                var id = $('#id-input').val();
                var index = document.getElementById("year");
                var year = index.options[index.selectedIndex].value;
                if(year == "") {
                    $("#year-error").show();
                    return;
                }

                id = id.match(/00[0-9]{8}/gm);
                if (id != null) {
                    $.post("lookup.php", {
                        id: id[0],
                        year: year
                    }, function(ret) {
                        if (ret.trim()) {
                            addData(ret)
                        } else {
                            $("#id-input").addClass("error")
                            $("#id-error-lookup").show()
                        }
                    });
                } else {
                    $("#id-input").addClass("error")
                    $("#id-error-match").show()
                    // do something to say they don't exist
                }

                $('#id-input').val("");
            } else {
                $("#id-error-lookup").hide()
                $("#id-error-match").hide()
            }
        }

        function checkEmail(event) {
            if (event.which === 13) {
                var email = $('#email-input').val();
                var index = document.getElementById("year");
                var year = index.options[index.selectedIndex].value;
                if(year == "") {
                    $("#year-error").show();
                    return;
                }
                $.post("lookup.php", {
                    email: email,
                    year: year
                }, function(ret) {
                    if (ret.trim()) {
                        addData(ret)
                    } else {
                        $("#email-input").addClass("error")
                        $("#email-error").show()
                    }
                });
            } else {
                $("#email-input").removeClass("error")
                $("#email-error").hide()
            }
        }

        function addData(data) {
            $("#data").prepend(`<h2>${data}</h2>`)
        }

        function switchYear(event) {
            $("#year-error").hide();
        }
    </script>

<?php
    include 'footer.php';
?>