public static function logout()
 {
     setNotification("You've been successfully logged out.'");
     $_SESSION["username"] = null;
     $_SESSION["name"] = null;
     redirect("../index.php");
 }

function getNotification()
{
    if (isset($_GET["notification"])) {
        setNotification($_GET["notification"]);
    }
    if (notificationIsSet()) {
        echo "<div id='response'>" . $_SESSION["response"] . "</div>";
    }
    echo "<script>\$('#response').slideDown();</script>";
    $_SESSION["response"] = null;
}

 public function forgot()
 {
     $this->load->library('email');
     $this->email->from('info@my_property.com', 'My Property');
     $this->email->to('admin@my_property.com');
     //        $this->email->cc('[email protected]');
     //        $this->email->bcc('[email protected]');
     $this->email->subject('Password Recovery');
     $this->email->message('Your new password is "123456". Kindly change your password from tools to more secure password.');
     //        $this->email->send();
     setNotification('success', 'Check your inbox.');
     redirect(base_url('admin/login'));
 }

 public function index()
 {
     if ($this->input->post('submit')) {
         $result = $this->login_model->validate();
         if (!$result) {
             setNotification('danger', 'Invalid User name or Password.');
             redirect(base_url('login'));
         } else {
             redirect(base_url('admin/dashboard'));
         }
     }
     $data = array();
     $this->render('login', $data);
 }

 public function index()
 {
     if ($this->input->post('submit')) {
         try {
             $result = $this->misc_model->register();
             if ($result) {
                 $this->uploadImage('user/' . $result, 'profile_pic');
                 setNotification('success', 'Your account created sucessfully.');
                 redirect(base_url('welcome'));
             }
         } catch (Exception $e) {
             setNotification('danger', 'Error. Coudn\'t register. Try later.');
         }
     }
     $data = array();
     $data['cities'] = $this->misc_model->getCities(1);
     // country_id
     $this->render('register', $data);
 }

 protected function uploadImage($Path, $FileName)
 {
     $config['upload_path'] = $_SERVER['DOCUMENT_ROOT'] . '/property/public/uploads/' . $Path;
     $config['allowed_types'] = 'gif|jpg|jpeg|png';
     //        $config['max_size'] = 100;
     //        $config['max_width'] = 1024;
     //        $config['max_height'] = 768;
     $config['overwrite'] = TRUE;
     if (!file_exists($config['upload_path']) && !is_dir($config['upload_path'])) {
         mkdir($config['upload_path'], 0777, TRUE);
     }
     $this->load->library('upload', $config);
     $this->upload->initialize($config);
     if (!$this->upload->do_upload($FileName)) {
         $error = $this->upload->display_errors();
         setNotification('danger', 'Error. File not uploaded.');
         return false;
     }
     return true;
 }

 public static function send($message)
 {
     $usernames = array();
     if (User::isNotAlone()) {
         //get a random username
         $receiver = User::getRandomUser();
         global $link;
         //send message
         $sql = "INSERT INTO messages(message, sender, receiver) " . "VALUES(:message, :username, :receiver);";
         $statement = $link->prepare($sql);
         $statement->bindParam(":message", $message, PDO::PARAM_STR);
         $statement->bindParam(":username", $_SESSION["username"], PDO::PARAM_STR);
         $statement->bindParam(":receiver", $receiver, PDO::PARAM_STR);
         $statement->execute();
         $statement->closeCursor();
         //remove bottle
         if (!User::isInfinite()) {
             User::removeBottle();
         }
     } else {
         setNotification("There are no other accounts :(<br/>You are alone..");
     }
 }

 if ($statusOld != $status) {
     $action = "";
     if ($status == "Requested") {
         $action = "Request";
     } else {
         if ($status == "Approved") {
             $action = "Approval - Exempt";
             //Notify original creator that it is approved
             $notificationText = sprintf(_('Your expense request for "%1$s" in budget "%2$s" has been fully approved.'), $row["title"], $row["budget"]);
             setNotification($connection2, $guid, $row["gibbonPersonIDCreator"], $notificationText, "Finance", "/index.php?q=/modules/Finance/expenses_manage_view.php&gibbonFinanceExpenseID={$gibbonFinanceExpenseID}&gibbonFinanceBudgetCycleID={$gibbonFinanceBudgetCycleID}&status=&gibbonFinanceBudgetID=" . $row["gibbonFinanceBudgetID"]);
         } else {
             if ($status == "Rejected") {
                 $action = "Rejection";
                 //Notify original creator that it is rejected
                 $notificationText = sprintf(_('Your expense request for "%1$s" in budget "%2$s" has been rejected.'), $row["title"], $row["budget"]);
                 setNotification($connection2, $guid, $row["gibbonPersonIDCreator"], $notificationText, "Finance", "/index.php?q=/modules/Finance/expenses_manage_view.php&gibbonFinanceExpenseID={$gibbonFinanceExpenseID}&gibbonFinanceBudgetCycleID={$gibbonFinanceBudgetCycleID}&status=&gibbonFinanceBudgetID=" . $row["gibbonFinanceBudgetID"]);
             } else {
                 if ($status == "Ordered") {
                     $action = "Order";
                 } else {
                     if ($status == "Paid") {
                         $action = "Payment";
                     } else {
                         if ($status == "Cancelled") {
                             $action = "Cancellation";
                         }
                     }
                 }
             }
         }
     }

                    if ($row["gibbonPersonIDTutor2"] != "") {
                        $ids[$countInner][0] = $row["gibbonRollGroupID"];
                        $ids[$countInner][1] = $row["gibbonPersonIDTutor2"];
                        $countInner++;
                    }
                    if ($row["gibbonPersonIDTutor3"] != "") {
                        $ids[$countInner][0] = $row["gibbonRollGroupID"];
                        $ids[$countInner][1] = $row["gibbonPersonIDTutor3"];
                        $countInner++;
                    }
                }
            }
        }
        if (isset($count)) {
            if ($count == 0) {
                $report = sprintf(_('All form groups have been registered today (%1$s).'), dateConvertBack($guid, $currentDate));
            } else {
                $report = sprintf(_('%1$s form groups have not been registered today  (%2$s).'), $count, dateConvertBack($guid, $currentDate)) . "<br/><br/>" . $reportInner;
            }
        }
        print $report;
        //Notify non-completing tutors
        foreach ($ids as $id) {
            $notificationText = _('You have not taken attendance yet today. Please do so as soon as possible.');
            setNotification($connection2, $guid, $id[1], $notificationText, "Attendance", "/index.php?q=/modules/Attendance/attendance_take_byRollGroup.php&gibbonRollGroupID=" . $id[0] . "&currentDate=" . dateConvertBack($guid, date('Y-m-d')));
        }
        //Notify admin {
        $notificationText = _('An Attendance CLI script has run.') . " " . $report;
        setNotification($connection2, $guid, $_SESSION[$guid]["organisationAdministrator"], $notificationText, "Attendance", "/index.php?q=/modules/Attendance/report_rollGroupsNotRegistered_byDate.php");
    }
}

    if ($_SESSION[$guid]["i18n"]["code"] != NULL) {
        putenv("LC_ALL=" . $_SESSION[$guid]["i18n"]["code"]);
        setlocale(LC_ALL, $_SESSION[$guid]["i18n"]["code"]);
        bindtextdomain("gibbon", getcwd() . "/../i18n");
        textdomain("gibbon");
    }
}
//Set timezone from session variable
date_default_timezone_set($_SESSION[$guid]["timezone"]);
//Check for CLI, so this cannot be run through browser
//if (php_sapi_name()!="cli") {
//	print _("This script cannot be run from a browser, only via CLI.") . "\n\n" ;
//}
//else {
//SCAN THROUGH ALL OVERDUE LOANS
$today = date("Y-m-d");
try {
    $data = array("today" => $today);
    $sql = "SELECT gibbonLibraryItem.*, surname, preferredName, email FROM gibbonLibraryItem JOIN gibbonPerson ON (gibbonLibraryItem.gibbonPersonIDStatusResponsible=gibbonPerson.gibbonPersonID) WHERE gibbonLibraryItem.status='On Loan' AND borrowable='Y' AND returnExpected<:today AND gibbonPerson.status='Full' ORDER BY surname, preferredName";
    $result = $connection2->prepare($sql);
    $result->execute($data);
} catch (PDOException $e) {
}
if ($result->rowCount() > 0) {
    while ($row = $result->fetch()) {
        //For every student
        $notificationText = sprintf(_('You have an overdue loan item that needs to be returned (%1$s).'), $row["name"]);
        setNotification($connection2, $guid, $row["gibbonPersonIDStatusResponsible"], $notificationText, "Library", "/index.php?q=/modules/Library/library_browse.php&gibbonLibraryItemID=" . $row["gibbonLibraryItemID"]);
    }
}
//}

                        $sql = "INSERT INTO gibbonPerson SET surname=:surname, firstName=:firstName, preferredName=:preferredName, officialName=:officialName, gender=:gender, dob=:dob, email=:email, username=:username, password='', passwordStrong=:passwordStrong, passwordStrongSalt=:passwordStrongSalt, status=:status, gibbonRoleIDPrimary=:gibbonRoleIDPrimary, gibbonRoleIDAll=:gibbonRoleIDAll";
                        $result = $connection2->prepare($sql);
                        $result->execute($data);
                    } catch (PDOException $e) {
                        //Fail 2
                        print $e->getMessage();
                        exit;
                        $URL .= "&addReturn=fail2";
                        header("Location: {$URL}");
                        break;
                    }
                    $gibbonPersonID = $connection2->lastInsertId();
                    if ($status == "Pending Approval") {
                        //Attempt to notify Admissions
                        if ($_SESSION[$guid]["organisationAdmissions"]) {
                            $notificationText = sprintf(_('An new public registration, for %1$s, is pending approval.'), formatName("", $preferredName, $surname, "Student"));
                            setNotification($connection2, $guid, $_SESSION[$guid]["organisationAdmissions"], $notificationText, "User Admin", "/index.php?q=/modules/User Admin/user_manage_edit.php&gibbonPersonID={$gibbonPersonID}&search=");
                        }
                        //Success 1
                        $URL .= "&addReturn=success1";
                        header("Location: {$URL}");
                    } else {
                        //Success 0
                        $URL .= "&addReturn=success0";
                        header("Location: {$URL}");
                    }
                }
            }
        }
    }
}

<?php

/*
 * To change this license header, choose License Headers in Project Properties.
 * To change this template file, choose Tools | Templates
 * and open the template in the editor.
 */
session_start();
date_default_timezone_set('Asia/Tokyo');
function setNotification($message, $user_id)
{
    try {
        $dbh = new PDO('mysql:host=mysql488.db.sakura.ne.jp;dbname=meganeshibu_db;charset=utf8', 'meganeshibu', 'DBmaster777', array(PDO::ATTR_EMULATE_PREPARES => false));
    } catch (PDOException $e) {
        exit('データベース接続失敗。' . $e->getMessage());
    }
    $registTime = new DateTime();
    $sql = "insert into NotificationTable(UserID, NotificationInfo, RegistTime) values('" . $user_id . "',' " . $message . "',' " . $registTime->format('Y-m-d H:i:s') . "')";
    $stmt = $dbh->query($sql);
    $dbh = null;
}
if (filter_input(INPUT_POST, "message") != NULL) {
    $message = filter_input(INPUT_POST, "message");
    $id = $_SESSION["user_id"];
    setNotification($message, $id);
}

 public function delete($PropertyID)
 {
     try {
         $result = $this->property_model->delete($PropertyID);
         if ($result) {
             setNotification('success', 'Record deleted successfully');
             redirect(base_url('admin/dashboard'));
             // Pending: Get last state and redirect there...
         }
     } catch (Exception $e) {
         setNotification('error', 'Error in deleting record');
         redirect(base_url('admin/dashboard'));
         // Pending: Get last state and redirect there...
     }
 }

<?php

require 'load.php';
$entry = Entries::get($_GET['id']);
if (!$entry->success) {
    setNotification('error', $entry->msg);
    redirect('index.php');
}
$tpl = new Layout();
echo $tpl->entriesLayout($tpl->loadTemplate('post', array('post' => $entry->data)));

     $URL .= "?loginReturn=fail1";
     header("Location: {$URL}");
 } else {
     $row = $result->fetch();
     //Check fail count, reject & alert if 3rd time
     if ($row["failCount"] >= 3) {
         try {
             $dataSecure = array("lastFailIPAddress" => $_SERVER["REMOTE_ADDR"], "lastFailTimestamp" => date("Y-m-d H:i:s"), "failCount" => $row["failCount"] + 1, "username" => $username);
             $sqlSecure = "UPDATE gibbonPerson SET lastFailIPAddress=:lastFailIPAddress, lastFailTimestamp=:lastFailTimestamp, failCount=:failCount WHERE (username=:username)";
             $resultSecure = $connection2->prepare($sqlSecure);
             $resultSecure->execute($dataSecure);
         } catch (PDOException $e) {
         }
         if ($row["failCount"] == 3) {
             $notificationText = sprintf(_('Someone failed to login to account "%1$s" 3 times in a row.'), $username);
             setNotification($connection2, $guid, $_SESSION[$guid]["organisationAdministrator"], $notificationText, "System", "/index.php?q=/modules/User Admin/user_manage.php&search={$username}");
         }
         setLog($connection2, $_SESSION[$guid]["gibbonSchoolYearIDCurrent"], NULL, $row["gibbonPersonID"], "Login - Failed", array("username" => $username, "reason" => "Too many failed logins"), $_SERVER["REMOTE_ADDR"]);
         $URL .= "?loginReturn=fail6";
         header("Location: {$URL}");
     } else {
         $passwordTest = false;
         //If strong password exists
         $salt = $row["passwordStrongSalt"];
         $passwordStrong = $row["passwordStrong"];
         if ($passwordStrong != "" and $salt != "") {
             if (hash("sha256", $row["passwordStrongSalt"] . $password) == $row["passwordStrong"]) {
                 $passwordTest = true;
             }
         } else {
             if ($row["password"] != "") {

                $resultCheck2 = $connection2->prepare($sqlCheck2);
                $resultCheck2->execute($dataCheck2);
            } catch (PDOException $e) {
            }
            while ($rowCheck2 = $resultCheck2->fetch()) {
                //Check to see if parent has any non-staff roles. If not, mark as 'Left'
                $nonParentRole = FALSE;
                $roles = explode(",", $rowCheck2["gibbonRoleIDAll"]);
                foreach ($roles as $role) {
                    if (getRoleCategory($role, $connection2) != "Parent") {
                        $nonParentRole = TRUE;
                    }
                }
                if ($nonParentRole == FALSE) {
                    //Update status to 'Left'
                    try {
                        $dataUpdate = array("gibbonPersonID" => $rowCheck2["gibbonPersonID"]);
                        $sqlUpdate = "UPDATE gibbonPerson SET status='Left' WHERE gibbonPersonID=:gibbonPersonID";
                        $resultUpdate = $connection2->prepare($sqlUpdate);
                        $resultUpdate->execute($dataUpdate);
                    } catch (PDOException $e) {
                    }
                    $count++;
                }
            }
        }
    }
    //Notify admin
    $notificationText = sprintf(_('A User Admin CLI script has run, updating %1$s users.'), $count);
    setNotification($connection2, $guid, $_SESSION[$guid]["organisationAdministrator"], $notificationText, "User Admin", "/index.php?q=/modules/User Admin/user_manage.php");
}

 public function index()
 {
     if ($this->input->post('submit') && $this->input->post('submit') == 'submit_profile') {
         $result = $this->user_model->updateProfile(getLoginUserId());
         if ($result) {
             setNotification('success', 'Record updated successfully');
             redirect(base_url('admin/profile'));
         } else {
             setNotification('error', 'Error in updating record');
             redirect(base_url('admin/profile'));
         }
     }
     // Change Profile image
     if ($this->input->post('submit') && $this->input->post('submit') == 'submit_profile_pic') {
         try {
             $config['upload_path'] = $_SERVER['DOCUMENT_ROOT'] . '/property/public/uploads/user/' . getLoginUserId();
             $config['allowed_types'] = 'gif|jpg|jpeg|png';
             $config['overwrite'] = TRUE;
             if (!file_exists($config['upload_path']) && !is_dir($config['upload_path'])) {
                 mkdir($config['upload_path'], 0777, TRUE);
             }
             $this->load->library('upload', $config);
             $this->upload->initialize($config);
             if (!$this->upload->do_upload('profile_pic')) {
                 $error = $this->upload->display_errors();
                 setNotification('danger', 'Error. File not uploaded. ' . $error);
             } else {
                 $result = $this->user_model->updateProfileImage(getLoginUserId());
                 if ($result) {
                     setNotification('success', 'Profile image updated successfully');
                     $data = array('upload_data' => $this->upload->data());
                 }
             }
             redirect(base_url('user/profile'));
         } catch (Exception $e) {
             setNotification('danger', 'Error. Coudn\'t register. Try later.');
         }
     }
     // Change Password
     if ($this->input->post('submit') && $this->input->post('submit') == 'submit_change_password') {
         try {
             $Verify_Result = $this->misc_model->verify_password(getLoginUserId());
             if (is_object($Verify_Result)) {
                 $result = $this->misc_model->update_password(getLoginUserId());
                 if ($result) {
                     setNotification('success', 'Password updated successfully');
                     redirect(base_url('user/profile'));
                 }
             } else {
                 setNotification('danger', 'New & Confirm password does not match.');
                 redirect(base_url('user/profile'));
             }
         } catch (Exception $e) {
             setNotification('danger', 'Error in updating record');
         }
     }
     // Save Roles
     if ($this->input->post('submit') && $this->input->post('submit') == 'submit_user_roles') {
         try {
             $result = $this->user_model->updateUserRoles(getLoginUserId());
             if ($result) {
                 setNotification('success', 'Your user roles sent for approval sucessfully.');
                 redirect(base_url('user/profile'));
             }
         } catch (Exception $e) {
             setNotification('danger', 'Error. Coudn\'t save data. Try later.');
         }
     }
     $data = array();
     $data['user'] = $this->user_model->fetch(getLoginUserId());
     //        var_dump($data['user']->location_id); exit;
     $data['image_path'] = "http://" . $_SERVER['SERVER_NAME'] . '/property/public/uploads/user/' . $data['user']->user_id . '/' . $data['user']->profile_pic;
     $data['cities'] = $this->misc_model->getCities(1);
     // country_id
     // Follwoing code will fetch all possible user roles
     $UserRoles = $this->user_model->getUserRoles();
     $data['role_list'] = sortedUserRoles($UserRoles);
     // Current User's already saved roles
     $AgentUserRoles = $this->user_model->getAgentUserRoles(getLoginUserId());
     foreach ($AgentUserRoles as $value) {
         $data['agent_role_list'][] = $value->role_id;
     }
     //        var_dump($data['agent_role_list']); exit;
     $data['title'] = "My Profile";
     $this->render('user/profile/index', $data);
 }

        //mark message as responded to
        $sql = "UPDATE messages SET responded = 1 WHERE id = :id;";
        $statement = $link->prepare($sql);
        $statement->bindParam(":id", $a = $messageData["id"], PDO::PARAM_INT);
        $statement->execute();
        $statement->closeCursor();
        setNotification("Your response has been successfully sent");
    } else {
        setNotification("There is no open message at this moment");
    }
}
//response end
//settings start
if ($_POST['settings_submit']) {
    if (!isset($_POST["blacklist_word"]) || empty($POST["backlist_word"])) {
        setNotification("You first have to type in a word to put on your blacklist.");
    }
    $blacklist->add($_POST["blacklist_word"]);
}
//settings end
//application end
?>
<!DOCTYPE html>
<!--
Application Index
-->
<html>
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <title>BlueBabble - Connect with strangers like yourself</title>

                            $rowClassGroup = $resultClassGroup->fetch();
                            $replyToID = $rowClassGroup["gibbonPersonID"];
                        }
                        //Get lesson plan name
                        $dataLesson = array("gibbonPlannerEntryID" => $gibbonPlannerEntryID);
                        $sqlLesson = "SELECT * FROM gibbonPlannerEntry WHERE gibbonPlannerEntryID=:gibbonPlannerEntryID";
                        $resultLesson = $connection2->prepare($sqlLesson);
                        $resultLesson->execute($dataLesson);
                        if ($resultLesson->rowCount() == 1) {
                            $rowLesson = $resultLesson->fetch();
                            $name = $rowLesson["name"];
                        }
                        //Create notification for homework owner, as long as it is not me.
                        if ($gibbonPersonID != $_SESSION[$guid]["gibbonPersonID"] and $gibbonPersonID != $replyToID) {
                            $notificationText = sprintf(_('Someone has commented on your homework for lesson plan "%1$s".'), $name);
                            setNotification($connection2, $guid, $gibbonPersonID, $notificationText, "Crowd Assessment", "/index.php?q=/modules/Crowd Assessment/crowdAssess_view_discuss.php&gibbonPlannerEntryID={$gibbonPlannerEntryID}&gibbonPlannerEntryHomeworkID={$gibbonPlannerEntryHomeworkID}&gibbonPersonID={$gibbonPersonID}");
                        }
                        //Create notification to person I am replying to
                        if (is_null($replyToID) == FALSE) {
                            $notificationText = sprintf(_('Someone has replied to a comment on homework for lesson plan "%1$s".'), $name);
                            setNotification($connection2, $guid, $replyToID, $notificationText, "Crowd Assessment", "/index.php?q=/modules/Crowd Assessment/crowdAssess_view_discuss.php&gibbonPlannerEntryID={$gibbonPlannerEntryID}&gibbonPlannerEntryHomeworkID={$gibbonPlannerEntryHomeworkID}&gibbonPersonID={$gibbonPersonID}");
                        }
                        //Success 0
                        $URL .= "&updateReturn=success0{$hash}";
                        header("Location: {$URL}");
                    }
                }
            }
        }
    }
}

 try {
     $data = array("gibbonFinanceExpenseID" => $gibbonFinanceExpenseID, "status" => 'Paid', "paymentDate" => $paymentDate, "paymentAmount" => $paymentAmount, "gibbonPersonIDPayment" => $gibbonPersonIDPayment, "paymentMethod" => $paymentMethod, "paymentReimbursementReceipt" => $attachment, "paymentReimbursementStatus" => "Requested");
     $sql = "UPDATE gibbonFinanceExpense SET status=:status, paymentDate=:paymentDate, paymentAmount=:paymentAmount, gibbonPersonIDPayment=:gibbonPersonIDPayment, paymentMethod=:paymentMethod, paymentReimbursementReceipt=:paymentReimbursementReceipt, paymentReimbursementStatus=:paymentReimbursementStatus WHERE gibbonFinanceExpenseID=:gibbonFinanceExpenseID";
     $result = $connection2->prepare($sql);
     $result->execute($data);
 } catch (PDOException $e) {
     //Fail2
     $URL .= "&editReturn=fail2";
     header("Location: {$URL}");
     break;
 }
 //Notify reimbursement officer that action is required
 $reimbursementOfficer = getSettingByScope($connection2, "Finance", "reimbursementOfficer");
 if ($reimbursementOfficer != FALSE and $reimbursementOfficer != "") {
     $notificationText = sprintf(_('Someone has requested reimbursement for "%1$s" in budget "%2$s".'), $row["title"], $row["budget"]);
     setNotification($connection2, $guid, $reimbursementOfficer, $notificationText, "Finance", "/index.php?q=/modules/Finance/expenses_manage_edit.php&gibbonFinanceExpenseID={$gibbonFinanceExpenseID}&gibbonFinanceBudgetCycleID={$gibbonFinanceBudgetCycleID}&status=&gibbonFinanceBudgetID=" . $row["gibbonFinanceBudgetID"]);
 }
 //Write paid change to log
 try {
     $data = array("gibbonFinanceExpenseID" => $gibbonFinanceExpenseID, "gibbonPersonID" => $_SESSION[$guid]["gibbonPersonID"], "action" => "Payment");
     $sql = "INSERT INTO gibbonFinanceExpenseLog SET gibbonFinanceExpenseID=:gibbonFinanceExpenseID, gibbonPersonID=:gibbonPersonID, timestamp='" . date("Y-m-d H:i:s") . "', action=:action";
     $result = $connection2->prepare($sql);
     $result->execute($data);
 } catch (PDOException $e) {
     //Fail2
     $URL .= "&editReturn=fail2";
     header("Location: {$URL}");
     break;
 }
 //Write reimbursement request change to log
 try {