File manager

File manager - Edit - /home/autoph/public_html/pms_v1/sales/loadSalesGroup.php

Back
<?php include_once("../../../cfg/conn.php"); include ("../functions/users.php"); //error_reporting(0); if(isset($_POST['sgrp'])){ $selectedGroupID =""; $empLName = ""; $empFName = ""; $empID = ""; $empLevel = ""; $errorMSG=""; $sgrp = $_POST['sgrp']; $selUnitID = sanitize($_POST['selUnitID']); switch ($sgrp){ case 1: //LOAD $selectedGroupID = sanitize($_POST['selectedGroupID']); break; case 2: //ADD $salesPersonID = sanitize($_POST['salesPersonID']); $selRole = sanitize($_POST['selRole']); $selUnitID = sanitize($_POST['selUnitID']); $employeeSearchID = sanitize($_POST['employeeSearchID']); $userID = $_POST['userID']; //check if exist $chkIfExist = "SELECT * FROM `pms_sales_team` WHERE `deleted`=0 AND `company_id`='$selUnitID' AND `employee_id`='$employeeSearchID'"; $valExist = mysqli_query($conn,$chkIfExist); $valRow = mysqli_num_rows($valExist); if($valRow > 0){ $errorMSG="Record already exist."; }else{ $branchID = getUserData($employeeSearchID)[0]; //store data $sql = "INSERT INTO pms_sales_team ( `id`, `company_id`, `employee_id`, `group_id`, `dealer_id`, `date_added`, `modified_by`) VALUES ( '', '$selUnitID', '$employeeSearchID', '$selRole', '$branchID', '$myTimeStamp', '$userID')"; if ($conn->query($sql) === TRUE) { $errorMSG="Record has been saved."; } else { $errorMSG="Error saving record. SQL Error detected at line: 49 loadCompanyApprover @ swtich #2"; } } break; case 3: //DELETE aprID $userID = sanitize($_POST['userID']); $salesPersonID = sanitize($_POST['salesPersonID']); $selUnitID = sanitize($_POST['selUnitID']); $sql = "UPDATE pms_sales_team SET deleted = 1,date_modified='$myTimeStamp',modified_by='$userID' WHERE `id`='$salesPersonID'"; if ($conn->query($sql) === TRUE) { $errorMSG="Record has been updated."; } else { $errorMSG="Error saving record. SQL Error detected at line: 63 loadCompanyApprover @ swtich #3"; } break; } $count=0; if($selectedGroupID!=''){ $getEmpInfo = "SELECT * FROM `pms_sales_team` WHERE `deleted`=0 AND `company_id`='$selUnitID' AND `group_id`='$selectedGroupID' ORDER BY `id` ASC"; }else{ $getEmpInfo = "SELECT * FROM `pms_sales_team` WHERE `deleted`=0 AND `company_id`='$selUnitID' ORDER BY `id` ASC"; } $getEmp = mysqli_query($conn,$getEmpInfo); $statRow = mysqli_num_rows($getEmp); $actDealID=0; $grpID=0; $actEmpID=0; while($eow = mysqli_fetch_array($getEmp)){ $count = $count + 1; $actEmpID=$eow['employee_id']; $actDealID =$eow['dealer_id']; $grpID=$eow['group_id']; ?><tr onclick="javascript:aprData(this);" style="width:100%"><?php echo "<td style='width:10%;border:0px solid red'>".$eow['id']."</td>"; echo "<td style='width:15%;border:0px solid red'>"; echo getSalesGroup($grpID)[0]; echo "</td>"; echo "<td style='width:40%;border:0px solid red'>"; echo getEmployeeEmpInformationB($actEmpID)[2] . " ". getEmployeeEmpInformationB($actEmpID)[3]; echo "</td>"; echo "<td style='width:30%;border:0px solid red'>"; echo getDealerNameSub($actDealID)[0]; echo "</td>"; echo "<td style='width:5%'> <abbr title='Delete record'><i class='fa fa-trash ' aria-hidden='true' style='cursor:pointer;color:#FF0800;font-size:16px'></i></abbr> </td>"; echo "<tr>"; } if($count>1){$flr='s';}else{$flr='';} $errorMSG = $count ." record" .$flr." found"; echo "<tr><td colspan=6 style='padding:30px;color:red;font-size:14px;text-align:left'>".$errorMSG."</td></tr>"; $conn->close(); } ?>

| ver. 1.4 | . | PHP 8.1.32 | Generation time: 0 | proxy | phpinfo | Settings