Linux, Apache, MySQL, PHP

CREATE DEFINER=`root`@`%` PROCEDURE `sp_web_login_employee`(IN param_login_name varchar(255), IN param_login_password_salt varchar(255), IN param_login_password_hash varchar(255), IN param_ip_address varchar(255))
BEGIN
	DECLARE param_employee_id INT;
	DECLARE email_address VARCHAR(255);

	-- IF EXISTS (SELECT user_id FROM users WHERE login_name = param_login_name AND login_password_hash = param_login_password_hash AND is_blocked = FALSE) THEN
	IF EXISTS (SELECT employee_guid FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE) THEN
	BEGIN
		DECLARE param_employee_guid VARCHAR(255);

		SET param_employee_id = (SELECT employee_id FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE);
		SET param_employee_guid = (SELECT employee_guid FROM employees WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE);

		UPDATE employees SET last_login_date = UTC_TIMESTAMP(), last_login_ip = param_ip_address WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE AND current_employee = TRUE;
		-- CALL sp_add_event_log("USER", param_user_id, param_user_id, "User logged on successfully.");

		-- UPDATE employees SET last_login = NOW(), allow_delete = FALSE WHERE login_name = param_login_name AND login_password_salt = param_login_password_salt AND login_password_hash = param_login_password_hash AND is_active = TRUE;

		SET email_address = (SELECT contact_details FROM employee_contacts INNER JOIN contact_category ON contact_category.contact_category_id = employee_contacts.contact_category WHERE contact_category.contact_category_type = "EMAIL" AND employee_contacts.employee_id = param_employee_id AND employee_contacts.use_for_communication = TRUE);

		SELECT email_address, employees_table.employee_id, employees_table.employee_number, employees_table.employee_guid, employees_table.first_name, employees_table.second_name,
		employees_table.third_name, employees_table.fourth_name, employees_table.last_name, employees_table.official_name, employees_table.photo,
		managers_table.employee_id AS manager_id, managers_table.official_name AS manager_name, employee_job.contract_id, employee_contracts.contract_start,
		employee_contracts.contract_expiry, job_titles.job_title_name, departments.department_name, companies.company_name, locations.location_name, country.country_name
		FROM employees employees_table
		JOIN employee_contracts ON employees_table.employee_id = employee_contracts.employee_id
		JOIN employee_job ON employees_table.employee_id = employee_job.employee_id
		JOIN job_titles ON employee_job.job_title = job_titles.job_title_id
		JOIN companies ON employee_job.company_id = companies.company_id
		JOIN departments ON employee_job.department = departments.department_id
		JOIN locations ON employee_job.company_location = locations.location_id
		JOIN country ON locations.country_code = country.country_code_alpha2
		LEFT JOIN employees managers_table ON employee_job.reporting_to = managers_table.employee_id
		WHERE employees_table.login_name = param_login_name AND employees_table.login_password_salt = param_login_password_salt AND employees_table.login_password_hash = param_login_password_hash AND employees_table.is_active = TRUE AND employees_table.current_employee = TRUE AND employee_job.is_current = TRUE;
	END;
	END IF;

END

<input type="hidden" name="Action" value="EDIT" /><input type="hidden" name="Selection"  id="Selection" value="-1"><div>Below is the list of your saved codes. To edit your codes, select it from the list.</div>
<select size="1" name="CodeList" id="CodeList">
<?php
   $directory = $directory = 'users/' . $_SESSION['username'];
   $filesContents = Array();
   $files = scandir( $directory ) ;

   foreach( $files as $file )
  {
   if ( ! is_dir( $file ) )
  {
   $filesContents[$file] = file_get_contents($directory , $file);
  echo "<option>" . $file . "</option>";
  }
   }
   ?>
   </select>

<?php
   session_start();
    $directory = $directory = $_SERVER['DOCUMENT_ROOT'] . '/users/' . $_SESSION['username'];
    $file_to_delete = $_POST['CodeList'];
    if ( unlink ($directory.'/'.$file_to_delete) ) {
      echo $file_to_delete . " deleted.";
   } else {
echo "Error.";
}
?>

<select name="SType">
  <option value=""></option>
  <option value="Bid" name="Bid">Bid[2]</option>
  <option value="Lib CM" name="Library CM">Lib CM[23]</option>
  <option value="Quote" name="Quote">Quote[20]</option>
  <option value="RFP" name="RFP">RFP[2]</option>
  <option value="Removed" name="Removed">Removed[29]</option>
  <option value="Archived" name="Archived">Archived[4501]</option>
  <option value="Awarded" name="Awarded">Awarded[40]</option>
  <option value="Open" name="Open">Open[47]</option>
  <option value="Closed" name="Closed">Closed[11]</option>
  <option value="Under Review" name="Under Review">Under Review[126]</option>
  <option value="Cancelled" name="Cancelled">Cancelled[64]</option>
</select>

//If value matches dropdown value, then display records associated with dropdown value
if(isset($_REQUEST['Solicitations'])){
    if($_GET['Solicitations'] == "Bid"){
    $result = "SELECT * FROM bids where BidStatus = 1 and BidType = 'Bid' ORDER BY title";
    $query = sqlsrv_query( $conn, $sql , $params, $options );
    }
  }

<?php
error_reporting(E_ERROR | E_WARNING | E_PARSE);

?>

<?php
// Connect to SQL Server database
include("connections/CWDevConnect.php");

// this function is used to sanitize code against sql injection attack.
function ms_escape_string($data) {
        if ( !isset($data) or empty($data) ) return '';
        if ( is_numeric($data) ) return $data;

        $non_displayables = array(
            '/%0[0-8bcef]/',            // url encoded 00-08, 11, 12, 14, 15
            '/%1[0-9a-f]/',             // url encoded 16-31
            '/[\x00-\x08]/',            // 00-08
            '/\x0b/',                   // 11
            '/\x0c/',                   // 12
            '/[\x0e-\x1f]/'             // 14-31
        );
        foreach ( $non_displayables as $regex )
            $data = preg_replace( $regex, '', $data );
        $data = str_replace("'", "''", $data );
        return $data;
    }

$fields = array(
    'projectTitle' => array('field' => 'b.BidTitle', 'searchType' => 'like'),
    'BidType' => array('field' => 'b.BidType', 'searchType' => 'equal'),
    'BidStatus' => array('field' => 'b.BidStatus', 'searchType' => 'equal'),
    'department' => array('field' => 'b.Department', 'searchType' => 'equal'),
    'bidId' => array('field' => 'b.BidID', 'searchType' => 'equal'),
    'bidDate' => array('field' => 'b.BidDate', 'searchType' => 'equal'),
    'dueDate' => array('field' => 'b.DueDate', 'searchType' => 'equal')

);

$where = array();
foreach($fields as $fieldPost => $field) {
    if(isset($_POST[$fieldPost]) && strlen($_POST[$fieldPost]) > 0) {
        if($field['searchType'] == 'like') {
            $where[] = "".$field['field']." LIKE '%" . ms_escape_string($_POST[$fieldPost]) . "%'";
        } else {
            $where[] = "".$field['field']." = '" . ms_escape_string($_POST[$fieldPost]) . "'";
        }
    }
}
   $sql = "Select b.ID,convert(char(10),b.BidDate,101) BidDate,convert(char(10),
          b.DueDate,101)DueDate,b.BidTitle,b.DueTime,b.BidID,BidIDFile,
          d.Department,b.BidType,CASE WHEN b.AwardDate ='01/01/1900' Then NULL ELSe convert(char(10),b.AwardDate,101)END AS AwardDate,
          convert(char(10),b.LastUpdate,101) LastUpdate,s.Status
          FROM bids b inner join dept d on b.Department=d.DeptID inner join Status s on b.BidStatus=s.StatusId " . ( count($where) > 0 ? " WHERE " . implode(' AND ', $where) : "" );
//echo $sql;
  $params = array();
  $options =  array( "Scrollable" => SQLSRV_CURSOR_KEYSET );
  $query = sqlsrv_query( $conn, $sql , $params, $options );

  $num_rows = sqlsrv_num_rows($query);

  $per_page = 20;   // Per Page
  $page  = 1;

  if(isset($_GET["Page"]))
  {
      $page = $_GET["Page"];
  }

  $prev_page = $page-1;
  $next_page = $page+1;

  $row_start = (($per_page*$page)-$per_page);
  if($num_rows<=$per_page)
  {
      $num_pages =1;
  }
  else if(($num_rows % $per_page)==0)
  {
      $num_pages =($num_rows/$per_page) ;
  }
  else
  {
      $num_pages =($num_rows/$per_page)+1;
      $num_pages = (int)$num_pages;
  }
  $row_end = $per_page * $page;
  if($row_end > $num_rows)
  {
      $row_end = $num_rows;
  }

  $sql = " SELECT c.* FROM (
      SELECT ROW_NUMBER() OVER(ORDER BY ID) AS RowID,ID,convert(char(10),b.BidDate,101) BidDate,convert(char(10),
          b.DueDate,101)DueDate,b.BidTitle,b.DueTime,b.BidID,BidIDFile,
          d.Department,b.BidType,CASE WHEN b.AwardDate ='01/01/1900' Then NULL ELSe convert(char(10),b.AwardDate,101)END AS AwardDate,
          convert(char(10),b.LastUpdate,101) LastUpdate,s.Status
          FROM bids b inner join dept d on b.Department=d.DeptID inner join Status s on b.BidStatus=s.StatusId " . ( count($where) > 0 ) ? " WHERE " . implode(' AND ', $where) : " )
      ) AS c
  WHERE c.RowID > $row_start AND c.RowID <= $row_end

  $query = sqlsrv_query( $conn, $sql);
  ";
?>
  <table>
      <thead>
      <tr style="white-space:nowrap">
          <th></th>
          <th>Issue Date</th>
          <th>Due Date</th>
          <th>Project Title</th>
          <th>ID</th>
          <th>Department</th>
          <th>Type</th>
          <th>Award Date</th>
          <th>Last Update</th>
          <th>Status</th>
      </tr>
      </thead>
<?php
while($result = sqlsrv_fetch_array($query, SQLSRV_FETCH_ASSOC))
{
?>
 <tbody>
 <?php echo '<tr style="background:',(($c=!$c)? '#eee' : '#ddd' ),';font-size:12px;">'; ?>
    <td><div align="center"><a href="bidDetails.php?Id=<?php echo $result["ID"];?>"><img src="images/details.gif" alt="" title="Details" /></a></div></td>
    <td><div align="center"><?php echo $result["BidDate"];?></div></td>
    <td><?php echo $result["DueDate"];?><br />@<?php echo $result["DueTime"];?></td>
   <!-- <td><a href="pdfdownload.php?file=<?php echo $result["BidIDFile"];?>"><?php echo $result["BidTitle"];?></a></td>  -->
    <td><a href="uploads/<?php echo $result["BidIDFile"]; ?>" Target="DETAILS" onClick="window.open('','DETAILS','width=850,height=700,scrollbars=yes'); return true;" type="application/octet-stream"><?php echo $result["BidTitle"];?></a></td>
    <td style="white-space:nowrap"><div align="center"><?php echo $result["BidID"];?></div></td>
    <td align="right"><?php echo $result["Department"];?></td>
    <td align="right"><?php echo $result["BidType"];?></td>
    <td align="right"><?php echo $result["AwardDate"];?></td>
    <td align="right"><?php echo format_date($result["LastUpdate"]);?></td>
    <td align="right"><?php echo $result["Status"];?></td>
  </tr>
<?php
}
?>
</tbody>
</table>
<br>
Total <?php echo $num_rows;?> Record : <?php echo $num_pages;?> Page :
<?php
if($prev_page)
{
  echo " <a href='$_SERVER[SCRIPT_NAME]?Page=$prev_page&txtKeyword=$strprojectTitle&BidType=$strbidType'><< Back</a> ";
}

for($i=1; $i<=$num_pages; $i++){
  if($i != $page)
  {
      echo "[ <a href='$_SERVER[SCRIPT_NAME]?Page=$i&txtKeyword=$strprojectTitle&BidType=$strbidType'>$i</a> ]";
  }
  else
  {
      echo "<b> $i </b>";
  }
}
if($page!=$num_pages)
{
  echo " <a href ='$_SERVER[SCRIPT_NAME]?Page=$next_page&txtKeyword=$strprojectTitle&BidType=$strbidType'>Next>></a> ";
}
sqlsrv_close($conn);
?>

 <form method="get">

<table>
          <tr>
            <td style="padding:5px;">Budget:</td>
            <td style="padding:5px;"><input type="text" name="budget" class="txtfield" placeholder="Please enter your desired budget"></td>
          </tr>
          <tr>
            <td style="padding:5px;">Service Type:</td>
          <td style="padding:5px;">
              <select name="servicetype" class="txtfield">
                <option>Wedding</option>
                <option>Debut</option>
                <option>Birthday</option>
              </select>
            </td>
          </tr>
          <tr>
            <td style="padding:5px;"></td>
            <td style="padding:5px;"><input type="submit" name="search" value="Search" class="btn btn-warning"></td>
          </tr>
        </table>
        </form>
    <?php if(isset($_GET['search'])):?>
        <h3 style="background:red; color:white; width:300px; padding:5px;">Desired Amount: <?php echo $_GET['budget'] ?></h3>
    <?php endif?>
    <div class="products">
    <?php
    //current URL of the Page. cart_update.php redirects back to this URL
	$current_url = base64_encode($url="http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
    if(isset($_GET['search']))
    {

$servicetype = $_GET['servicetype'];
    if($_GET['budget'] =="")
    {
        echo'<div class="alert alert-warning">Please enter your desired amount</div>';
    }
    else
    {
    $servicetype = $_GET['servicetype'];
	$results = $mysqli->query("SELECT service_inclusion,price,servicetype,soid FROM service_offer 
        where servicetype='$servicetype' ORDER BY soid ASC");
    if ($results) 
    {

  while($obj = $results->fetch_object())
        {

  echo '<div class="product">'; 
            echo '<form method="get" action="cart_update.php">';
			
  echo '<div class="product-content"><h3>'.$obj->service_inclusion.'</h3>';
            echo '<div class="product-desc">Price: '.$currency.$obj->price.' </div>';
            echo '<div class="product-desc">Service Type: '.$obj->servicetype.' </div>';
            echo '<div class="product-info">';
			echo '<button style="background:#F01818; color:white;border:0;">Add Services</button>';
			echo '</div></div>';
            echo '<input type="hidden" name="service_inclusion" value="'.$obj->service_inclusion.'" />';
            echo '<input type="hidden" name="type" value="add" />';
            echo '<input type="hidden" name="soid" value="'.$obj->soid.'" />';
			echo '<input type="hidden" name="return_url" value="'.$current_url.'" />';
            echo '</form>';
            echo '</div>';
        }
      }
    }

 ?>
    
 </div>
    
<div class="shopping-cart">
<h2>Your Shopping Cart</h2>
<?php
if(isset($_SESSION["products"]))
{
    $total = 0;
    echo '<ol>';
    if($_GET['budget'] > $cart_itm['price'])
    {
        $message = 'error';
    }
    else
    {
    foreach ($_SESSION["products"] as $cart_itm)
    {

  echo '<li class="cart-itm">';
        echo '<span class="remove-itm"><a href="cart_update.php?removep='.$cart_itm["code"].'&return_url='.$current_url.'">×</a></span>';
        echo '<h3>'.$cart_itm["name"].'</h3>';
        echo '<div class="p-price">Price :'.$currency.$cart_itm["price"].'</div>';
        echo '</li>';
        $subtotal = ($cart_itm["price"]);
        $Total = ($total + $subtotal);
        
   }echo'</ol>';
    echo '<span class="check-out-txt"><strong>Total : '.$currency.$Total.'</strong> <a href="view_cart.php">Check-out!</a></span>';
	echo '<span class="empty-cart"><a href="cart_update.php?emptycart=1&return_url='.$current_url.'">Empty Cart</a></span>';
}   }
else
{
    echo 'Your Cart is empty';

}}
?>

</div>
<div style="clear:both;"></div>    
</div>
<script type="text/javascript">
    <?php 
        if(isset($message))
        {
            echo "alert('$message')";
        }
    ?>
</script>

echo $timestamp = strtotime($_POST['dateFrom']);

public string HashString(string toHash)
{
    using (SHA512CryptoServiceProvider sha = new SHA512CryptoServiceProvider())
    {
        byte[] dataToHash = Encoding.UTF8.GetBytes(toHash);
        byte[] hashed = sha.ComputeHash(dataToHash);
        return Convert.ToBase64String(hashed);
    }
}

public string HashPassword(string password, string salt)
{
    string combined = password + salt;
    return HashString(combined);
}

Apache 2.
Apache was not able to cross-connect to remote host.