--- careers.php	2001/03/19 10:47:46	1.10
+++ careers.php	2001/04/10 12:43:58	1.12
@@ -23,6 +23,9 @@
 
 	if ($part == "Mail" && !check_required()) $part="ApplicationForm";
 
+	$sql="select num,title,job_code,department,open_position_locations.location as location,description,edu_req,qual_req,open_position_locations.email as sendto
+		from open_positions,open_position_locations
+		where open_positions.location_id=open_position_locations.id and visible is true";
 	if ($part == "ApplicationForm") {
 		$sth = $dbh->prepare("select iso,name from countries order by name");
 		$sth->execute();
@@ -32,14 +35,18 @@
 		$smarty->assign("countries",$countries);
 
 		if ($position) {
-			$sth = $dbh->prepare("select num,title,job_code,department,location from open_positions where visible is true and num=$position");
+			$sql.=" and num=$position";
+			$sth = $dbh->prepare($sql);
 			$sth->execute();
 			if ($row=$sth->fetchrow_hash()) {
+				include("rot13.inc");
+				$row[sendto]=rot13($row[sendto]);
 				$smarty->assign("position",$row);
 			}
 		}
 	} elseif ($part == "OpenPositions") {
-		$sth = $dbh->prepare("select num,title,job_code,department,location,description,edu_req,qual_req from open_positions where visible is true and expiration >= date('now') order by num asc");
+		$sql.=" and expiration >= date('now') order by num asc";
+		$sth = $dbh->prepare($sql);
 		$sth->execute();
 		while ($row=$sth->fetchrow_hash()) {
 			$positions[]=$row;
@@ -68,7 +75,12 @@
 ";
 		$smarty->assign("mail","You sent following e-mail:<br><pre>$mail</pre>");
 		include("class.CMailFile");
-		$sendto="careercenter@pliva.hr";
+		if (!isset($sendto) || !strstr($sendto,"@")) {
+			$sendto="careercenter@pliva.hr";
+		} else {
+			include("rot13.inc");
+			$sendto=rot13($sendto);
+		}
 		$replyto="$first_name $last_name <$email>";
 		$mailfile = new CMailFile("application for submission",$sendto,$replyto,$mail,$resume);
 		$mailfile->sendfile();