query( "SELECT * FROM branch WHERE deleted_at IS NULL " . $user_branch_permission_sql_123 ) ; if ( $get_branch->num_rows > 0 ){ while ( $row_branch = $get_branch->fetch_assoc() ){ $branch_all[$row_branch['branch_id']] = $row_branch['branch_name'] ; } } // mode type | all list | new | edit switch($page_mode){ // edit case 'new' : case 'edit' : // check query exsits $submit_type = 'new' ; $mysqli_page = $mysqli->query("SELECT * FROM form WHERE form_id = '".$page."' LIMIT 1"); if ($mysqli_page->num_rows > 0){ // keep query value in array $row_page = $mysqli_page->fetch_array(MYSQLI_ASSOC) ; $submit_type = 'edit' ; } // update database if ( isset($type) && ( $type == 'new' || $type == 'edit' ) && $_POST['hide'] == 1 ){ if ( $page == '' ){ $mysqli->query("INSERT INTO form ( created_at ) VALUES ( '".TODAYDATE."' )") ; $page = $mysqli->insert_id ; } // resize image // set image in variable $image = $_FILES["image"]["name"] ; $image_query = '' ; $remove_photo = $_POST['remove_photo'] ; if ( $remove_photo == 1 ){ $image = '' ; $image_query = "file = '', file_type = ''," ; }else{ if ( $image != '' ){ $get_image = pathinfo($image) ; if ( $get_image['extension'] == 'pdf' || $get_image['extension'] == 'xls' || $get_image['extension'] == 'xlsx' || $get_image['extension'] == 'doc' || $get_image['extension'] == 'docx' ){ $file_name = $page.'-'.time().'.'.$get_image['extension'] ; copy($_FILES["image"]["tmp_name"], 'uploads/Form/'.$file_name) ; $image_query= "file = '".$file_name."', file_type = '".$get_image['extension']."'," ; }else{ $create_image = reCreateImage('Form', $page, $page, '', $image, $_FILES["image"]["type"], $_FILES['image']['tmp_name']) ; // Image uploads when exists if ($create_image['result'] && is_array($create_image['crop']) && count($create_image['result']) > 0){ $resizeObj = new resize($create_image['original']) ; // Initialise load image foreach($create_image['crop'] as $value){ // Resize image (options: exact, portrait, landscape, auto, crop) $resizeObj -> resizeImage($value['width'], $value['height'], $value['type']) ; $resizeObj -> saveImage($value['source'], 70) ; // Save image } $get_image = pathinfo($create_image['image']) ; $image_query = "file = '".$create_image['image']."', file_type = '".$create_image['extension']."'," ; } } } } // delete all department & receiver $staffids = [] ; $receiver_type = dataFilter($_POST['receiver_type']) ; $receiver_to = $_POST['receiver_to'] ; $receiver_to_dept = $_POST['receiver_to_dept'] ; $selected_staff = [] ; $selected_depart = [] ; if ( $receiver_type == '0' ){ $mysqli_staff = $mysqli->query("SELECT staff_id, staff_name, staff_idno FROM staff WHERE ( staff_date_resigned IS NULL || staff_date_resigned = '0000-00-00' || staff_date_resigned >= '".TODAYDATE."' ) AND deleted_at IS NULL ") ; if ( $mysqli_staff->num_rows > 0 ){ while ( $row_staff = $mysqli_staff->fetch_assoc() ){ $staffids[] = $row_staff['staff_id'] ; // pushToUserCron( 'form', $page, $row_staff['staff_id'], 'Form', 'Form has been update' ) ; } } }elseif ( $receiver_type == '1' ){ if( !empty( $receiver_to ) ){ for ( $i = 0 ; $i < count($receiver_to) ; $i++ ){ if ( $receiver_to[$i] != '' ){ $reset_staff = $receiver_to[$i] ; $selected_staff[$reset_staff] = $reset_staff ; $staffids[] = $reset_staff ; // pushToUserCron( 'form', $page, $reset_staff, 'Form', 'Form has been update' ) ; } } } }else{ if( !empty( $receiver_to_dept ) ){ $array_depart = [] ; for ( $i = 0 ; $i < count($receiver_to_dept) ; $i++ ){ $department_id = $receiver_to_dept[$i] ; if ( $department_id != '' ){ // save into department $selected_depart[]= $department_id ; // check department staff $reset_depart = str_replace( ['(', ')'], '', $department_id ) ; $get_depart_staff = $mysqli->query( "SELECT staff_id FROM staff_department WHERE deleted_at IS NULL AND department_id = '".$reset_depart."'") ; if ( $get_depart_staff->num_rows > 0 ){ while ( $row_depart_staff = $get_depart_staff->fetch_assoc() ){ if ( !in_array($row_depart_staff['staff_id'], $array_depart) ){ $array_depart[] = $row_depart_staff['staff_id'] ; $selected_staff[$row_depart_staff['staff_id']] = $row_depart_staff['staff_id'] ; $staffids[] = $row_depart_staff['staff_id'] ; // pushToUserCron( 'form', $page, $row_depart_staff['staff_id'], 'Form', 'Form has been update' ) ; } } } } } } } $selected_staff = ( arrayCheck($selected_staff) ? '/'.implode( '/', $selected_staff ).'/' : '' ) ; $selected_depart = ( arrayCheck($selected_depart) ? '/'.implode( '/', $selected_depart ).'/' : '' ) ; $array_branch = [] ; foreach ( $_POST['branch'] as $k_branch => $v_branch ){ $array_branch[] = escapeString( $v_branch ) ; } // update database $mysqli->query("UPDATE form SET ".$image_query." branch = '/".implode('/', $array_branch)."/', category_id = '".escapeString($_POST['category_id'])."', staff_id = '".$selected_staff."', department_id = '".$selected_depart."', title = '".escapeString($_POST['title'])."', sortable = '".escapeString($_POST['sortable'])."', receiver_type = '".escapeString($_POST['receiver_type'])."', updated_at = '".TODAYDATE."' WHERE form_id = '".$page."'") ; if ( $_POST['is_retick'] == 'yes' ){ $mysqli->query( "UPDATE staff_form SET deleted_at = '".TODAYDATE."' WHERE form_id = '".$page."'" ) ; } foreach ( $LANGS as $klang => $vlang ){ $title = escapeString( $_POST['title_'.$klang] ) ; checkLangUpdate( 'form_translation', 'form_id', $page, $klang, [ 'title' => [ 'type' => 'input', 'value' => $title ] ] ) ; } if ( count($staffids) > 0 ){ // pushToBranchUser( $array_branch, $staffids, 'form', $page, 'Form', 'Form has been update' ) ; } // refresh page header("Location:app-form.php?page_mode=edit&page=".$page."&success=1") ; $_SESSION['system_result'] = 'success-updated' ; exit ; } // get all requires // get all staff $staff_list = [] ; $mysqli_staff = $mysqli->query("SELECT staff_id, staff_name, staff_idno FROM staff WHERE ( staff_date_resigned IS NULL || staff_date_resigned = '0000-00-00' || staff_date_resigned >= '".TODAYDATE."' ) AND deleted_at IS NULL ") ; if ( $mysqli_staff->num_rows > 0 ){ while ( $row_staff = $mysqli_staff->fetch_assoc() ){ $staff_list[$row_staff['staff_id']] = dataFilter($row_staff['staff_name']) . ' ( ' . dataFilter($row_staff['staff_idno']) . ' )' ; } } // get all requires $department_list = [] ; $mysqli_department = $mysqli->query("SELECT a.department_id, b.department_desc FROM setting_department a LEFT JOIN setting_department_translation b ON ( a.department_id = b.department_id ) WHERE a.deleted_at IS NULL AND b.lang = 'en'") ; if ( $mysqli_department->num_rows > 0 ){ while ( $row_department = $mysqli_department->fetch_assoc() ){ $department_list[$row_department['department_id']] = dataFilter($row_department['department_desc']) ; } } if ( ( $page_mode == 'new' && !permissionCheck($row_user, 'form-list-new') ) || ( $page_mode == 'edit' && !permissionCheck($row_user, 'form-list-edit') ) ){ header('Location: app-form.php') ; exit ; } // get all selected staff & department $receiver_staff = ( $row_page['staff_id'] != '' ? explode('/', $row_page['staff_id']) : [] ) ; $receiver_depart = ( $row_page['department_id'] != '' ? explode('/', $row_page['department_id']) : [] ) ; // start header here include 'requires/page_header.php'; include 'requires/page_top.php'; ?>