File "add_forms.php"

Full Path: /home/analogde/www/00000/P1/forms/add_forms.php
File size: 5.29 KB
MIME-type: text/x-php
Charset: utf-8

<?php include '../includes/db.php' ?>

<?php 
$action = $_GET['action'];

if($action == 'user'){

	$eid = $_POST['eid'];
	$user = $_POST['user'];
	$pass = $_POST['pass'];
	$u_type = $_POST['u_type'];

	
	if($query = mysqli_query($conn,"INSERT INTO users (eid,username,password,user_type,io)VALUES('$eid','$user','$pass','$u_type','1')")){
		echo '<script>$("#msg").show("SlideDown");</script>';
	}else{
		echo "<script>alert('Saving data failed!.')</script>";
	}
}

if($action == 'position'){

	$pos = $_POST['position'];
	$dr = $_POST['dr'];

	
	if($query = mysqli_query($conn,"INSERT INTO position (position,daily_rate)VALUES('$pos','$dr')")){
		include '../includes/msg_box.php';
	}else{
		echo "<script>alert('Saving data failed!.')</script>";
	}
}

if($action == 'attendance'){

	foreach($_GET as $var=>$value)
		$$var =$value;
	if($task == 'in'){
		$query = mysqli_query($conn,"INSERT INTO attendance (eid,time_in,date_today) VALUES('$id',now(),'$d') ");
	}
	if($task == 'del'){
		$query = mysqli_query($conn,"DELETE from attendance where eid ='$id' and date_today = '$d' ");
	}
	if($task == 'out'){
		$query2 = mysqli_query($conn,"UPDATE attendance set time_out = now() where eid ='$id' and date_today = '$d' ");
	}
	if($task == 'out'){
		$query2 = mysqli_query($conn,"UPDATE attendance set time_out = '' where eid ='$id' and date_today = '$d' ");
	}

	
	if($query){
		
		echo '<script>
		window.location.reload();
		</script>';
	}else{
		echo "<script>alert('Saving data failed!.')</script>";
		echo '<script>
		window.location.reload();
		</script>';
	}
	if($query2){
		
		echo '<script>
		window.location.reload();
		</script>';
	}else{
		echo "<script>alert('Employee haven't time in yet.')</script>";
		echo '<script>
		window.location.reload();
		</script>';
	}
}

if($action == 'division'){

	$division = $_POST['division'];
	$p_type =  $_POST['p_type'];

	
	if($query = mysqli_query($conn,"INSERT INTO project_division (division,project_type)VALUES('$division','$p_type')")){
		include '../includes/msg_box.php';
	}else{
		echo "<script>alert('Saving data failed!.')</script>";
	}
}

if($action == 'employee'){
	$fname =$_POST['fname'];
	$lname =$_POST['lname'];
	$mname =$_POST['mname'];
	$address =$_POST['address'];
	$gender =$_POST['gender'];
	$bday =$_POST['bday'];
	$cn =$_POST['cn'];
	$position =$_POST['position'];
	$status =$_POST['status'];

	
		$file = "no_image.jpg";
		$e_query = mysqli_query($conn,"SELECT * FROM employee order by eid DESC limit 1");
	$e_row = mysqli_fetch_assoc($e_query);
	if($e_row > 0 && $e_row['ecode'] != ''){
		$ecode = $e_row['ecode']+'1';
	}else { $ecode = '1001';}

	$query = mysqli_query($conn,"INSERT INTO employee (lastname,firstname,midname,bday,contact_no,address,pid,status,gender,ecode,e_pic,io,date_added)
		VALUES('$lname','$fname','$mname','$bday','$cn','$address','$position','$status','$gender','$ecode','$file','1',NOW())");
	$last_id = mysqli_insert_id($conn);
	if($query){
		echo '<script>$("#suc_msg").show("slidedown");
		 var delay = 1500;
                    setTimeout(function(){  window.location = "index.php?page=employee_profile&id='. $last_id.'&dattyp=new";   }, delay);
		</script>';
	}else{
		echo '<script>$("#err_msg").show("slidedown");</script>';
		
	}
}
if($action == 'project'){
	$pname =$_POST['pname'];
	$location =$_POST['location'];
	$cost =$_POST['cost'];
	$deadline =$_POST['deadline'];
	$sdate =$_POST['sdate'];
	$tid =$_POST['tid'];
	$p_type =$_POST['p_type'];
	$file = "no_image.jpg";
		
	$query = mysqli_query($conn,"INSERT INTO projects (project,location,overall_cost,start_date,deadline,site_pic,tid,date_added,io,proposed_project)
		VALUES('$pname','$location','$cost','$sdate','$deadline','$file','$tid',now(),'1','$p_type')");
	$last_id = mysqli_insert_id($conn);
	if(isset($_POST['divs'])){

	$divs= $_POST['divs'];
	$cd = count($divs);
	for($i=0; $i < $cd; $i++){
		$query2 = mysqli_query($conn,"INSERT INTO project_partition (project_id,pd_id)
		VALUES('$last_id','$divs[$i]')");
	}
	}
	if($query && $query2){
		echo '<script>$("#suc_msg2").show("slidedown");
		var delay = 1500;
                    setTimeout(function(){  window.location = "index.php?page=project_detail&id='. $last_id.'&dattyp=new";   }, delay);
		</script>';
	}else{
		echo $query;
		
	}
}
if($action == 'team'){
	$fid = $_POST['fid'];

	$q1 = mysqli_query($conn,"INSERT INTO project_team (eid,date_added,pio) VALUES('$fid',now(),'1')");
	$id = mysqli_insert_id($conn);
	if(isset($_POST['mid'])){
		$mid = $_POST['mid'];
		$mc=count($mid);
		for($i = 0 ; $i < $mc;$i++){
			$q2 = mysqli_query($conn,"INSERT INTO team_member (tid,eid) VALUES('$id','$mid[$i]')");
		}
	}
	if($q1){
		echo "true";
	}
}
if($action =='progress'){
	foreach ($_POST as $var => $value)
		$$var = $value;
	$rd2 = mt_rand(1000, 9999);
			$filename = basename($_FILES['image']['name']);
			$ext = substr($filename, strrpos($filename, '.') + 1);
			$file = $rd2. "_" .$filename;
			(move_uploaded_file($_FILES['image']['tmp_name'],'../images/'.$file));
}
	$query= mysqli_query($conn,"INSERT INTO project_progress (pp_id,progress,date_added,partition_img)values('$div','$prog',now(),'$file') ");
	if($query){
		echo "<script>location.replace(document.referrer);</script>";
	}
 ?>