/* Create Hotel Table */

CREATE TABLE Hotel (
hotelNo numeric(10),
hotelName varchar(20),
city nvarchar (10),
CONSTRAINT hotel_PK PRIMARY KEY(hotelNo));

/* Create Room Table */

CREATE TABLE Room (
roomNo numeric(10),
hotelNo numeric(10),
type nvarchar (20),
price money,
CONSTRAINT room_PK PRIMARY KEY (roomNo, hotelNo),
CONSTRAINT hotel_FK FOREIGN KEY (hotelNo) REFERENCES Hotel(hotelNo) );

/* Insert into Hotel Table */

INSERT INTO Hotel VALUES
(5431, 'Ritz', 'London'),
(5551, 'Marriott', 'London'),
(3451, 'Marriott', 'Paris'),
(1122, 'Riverside', 'Berlin'),
(1342, 'Imperial', 'London'),
(7782, 'Triumph', 'Paris');

/* Insert into Room Table */

INSERT INTO Room VALUES
(910, 5551, 'Double', 255),
(915, 5551, 'Family', 345),
(448, 7782, 'Double', 15),
(110, 1122, 'Double', 39),
(910, 1345, 'Single', 27),
(448, 1121, 'Suite', 115);

<?php require_once('includes/config.php');
ob_start();

include('includes/sc-includes.php');
$pagetitle = Contact;

if (!function_exists(\"GetSQLValueString\")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = \"\", $theNotDefinedValue = \"\")
{
  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists(\"mysql_real_escape_string\") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case \"text\":
      $theValue = ($theValue != \"\") ? \"'\" . $theValue . \"'\" : \"NULL\";
      break;   
    case \"long\":
    case \"int\":
      $theValue = ($theValue != \"\") ? intval($theValue) : \"NULL\";
      break;
    case \"double\":
      $theValue = ($theValue != \"\") ? \"'\" . doubleval($theValue) . \"'\" : \"NULL\";
      break;
    case \"date\":
      $theValue = ($theValue != \"\") ? \"'\" . $theValue . \"'\" : \"NULL\";
      break;
    case \"defined\":
      $theValue = ($theValue != \"\") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= \"?\" . htmlentities($_SERVER['QUERY_STRING']);
}

?>
<?php if ($_GET['csv']==\"import\") { ?>
<?php
$row = 1;
$handle = fopen ($_FILES['csv']['tmp_name'],\"r\");

while ($data = fgetcsv ($handle, 1000, \",\")) {


$checkc = mysql_num_rows(mysql_query(\"SELECT * FROM contacts WHERE contact_id = \".$data['0'].\"\"));

    if ($checkc > 0) {

//UPDATE CURRENT RECORDS
  $updateSQL = sprintf(\"UPDATE contacts SET `contact_name`=%s, contact_hp=%s, contact_type=%s, contact_company=%s, contact_street=%s, contact_city=%s, contact_state=%s, contact_zip=%s, contact_email=%s, contact_phone=%s, contact_fax=%s, signup_date=%s, expiry_date=%s, contact_web=%s, contact_profile=%s WHERE contact_id=\".$data['0'].\"\",
                       GetSQLValueString($data['1'], \"text\"),
                       GetSQLValueString($data['2'], \"text\"),
                       GetSQLValueString($data['3'], \"text\"),
                       GetSQLValueString($data['4'], \"text\"),
                       GetSQLValueString($data['5'], \"text\"),
                       GetSQLValueString($data['6'], \"text\"),
                       GetSQLValueString($data['7'], \"text\"),
                       GetSQLValueString($data['8'], \"text\"),
                       GetSQLValueString($data['9'], \"text\"),
                       GetSQLValueString($data['10'], \"text\"),
                       GetSQLValueString($data['11'], \"text\"),
                       GetSQLValueString($data['12'], \"text\"),
                       GetSQLValueString($data['13'], \"text\"),
                       GetSQLValueString($data['14'], \"text\"),
                       GetSQLValueString($data['15'], \"text\"));

  mysql_select_db($database_contacts);
  $Result1 = mysql_query($updateSQL) or die(mysql_error());

}
//


else {

if ($row > 1) {

//INSERT NEW RECORDS
  $insertSQL = sprintf(\"INSERT INTO contacts (`contact_name`, contact_hp, contact_type, contact_company, contact_street, contact_city, contact_state, contact_zip, contact_email, contact_phone, contact_fax, signup_date, expiry_date, contact_web, contact_profile) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, $s, $s, %s)\",
                       GetSQLValueString($data['1'], \"text\"),
                       GetSQLValueString($data['2'], \"text\"),
                       GetSQLValueString($data['3'], \"text\"),
                       GetSQLValueString($data['4'], \"text\"),
                       GetSQLValueString($data['5'], \"text\"),
                       GetSQLValueString($data['6'], \"text\"),
                       GetSQLValueString($data['7'], \"text\"),
                       GetSQLValueString($data['8'], \"text\"),
                       GetSQLValueString($data['9'], \"text\"),
                       GetSQLValueString($data['10'], \"text\"),
                       GetSQLValueString($data['11'], \"text\"),
                       GetSQLValueString($data['12'], \"text\"),
                       GetSQLValueString($data['13'], \"text\"),
                       GetSQLValueString($data['14'], \"text\"),
                       GetSQLValueString($data['15'], \"text\"));
   


  mysql_select_db($database_contacts);
  $Result1 = mysql_query($insertSQL) or die(mysql_error());
    $cid = mysql_insert_id();


mysql_query(\"INSERT INTO history (history_contact, history_date, history_status) VALUES
(
    \".$cid.\",
    \".time().\",
    1
)
\");


//
}
$row++;
}

}

header('Location: contacts.php');
}

?>