Update wblibadmin.php updated creation

romit-basak · Oct 11, 2023 · afcf189 · afcf189
1 parent bc6f57a
commit afcf189
Showing 1 changed file with 118 additions and 7 deletions.
diff --git a/wblibadmin.php b/wblibadmin.php
@@ -3,14 +3,15 @@
 	include 'config.php';
 	if (!isset($_SESSION['memno'])) {
 		header("location:wblogin.php");
-	}
+	} 
+	$auth = $_SESSION['memno'];
 //	$user = $conn->query("select * from Wbusers where MemNo = '{$_SESSION[('memno')]}';")->fetch_assoc();
 
 //include 'config.php';
 //    $profiles = $conn->query("SELECT * FROM profiles WHERE memNo > 0 AND Active = 1 ORDER BY Name");
 
 
-    $profiles = $conn->query(" SELECT OrderNumber, TO_CHAR(OrderDate, 'DD-MM-YYYY') Dt, Subject, Link FROM Resources ORDER BY OrderDate DESC ");
+    $profiles = $conn->query(" SELECT DocNo, OrderNumber, TO_CHAR(OrderDate, 'DD-MM-YYYY') Dt, Subject, Link FROM Resources ORDER BY DocNo DESC ");
 
 ?>
 <!DOCTYPE html>
@@ -44,10 +45,62 @@
 
 </head>
 <body>
-<?php include 'sidebar.php' ?>
+//<?php include 'sidebar.php' ?>
 <div class="content">
 
-<h1>Library & Resources</h1>
+<h1>Library & Resources Admin</h1>
+
+<?php
+$pageno = 1;
+
+if ($_REQUEST['btn_submit']=="Start") {
+    if ($_SERVER["REQUEST_METHOD"] == "POST") {
+        $mysubmit=0;
+	    if ($conn->query("select MemNo from AuthMatrix where BINARY MemNo = $auth and BINARY Page = $pageno ") ->num_rows == 1) {
+	        $mysubmit = 1;
+	        echo "You are authorized to perform this action.";
+	    } else{
+	        $mysubmit = 0;
+	        echo "You are not authorized to perform this action.";
+	    }
+    }
+}
+
+
+if ($_REQUEST['btn_submit']=="Create") {
+    //echo "a";
+    //echo $mysubmit;
+    if ($_SERVER['REQUEST_METHOD'] == "POST") {
+        //echo "b";
+        $mysubmit = $_POST['mysubmit'];
+        //echo $mysubmit;
+        if ($mysubmit == 1) {
+    	    $orderno = $_POST['orderno'];
+	        $orderdt = $_POST['orderdt'];
+	        $subject = $_POST['subject'];
+    	    $link = $_POST['link'];
+    	    $company = $_POST['company'];
+    	    $createorder = $conn->query("INSERT INTO Resources (OrderNumber, OrderDate, Subject, Link, Company) VALUES ('$orderno', '$orderdt', '$subject', '$link', '$company'); ");
+    	    echo "Success!! - Order Created";
+            //echo $mysubmit;
+            //echo $orderno;
+            //echo $orderdt;
+            //echo $subject;
+            //echo $link;
+            $mysubmit = 0;
+            //echo $mysubmit;
+        } else {
+        //		$error = "Incorrect Credentials";
+            echo "You are not authorized to perform this action.";
+        }
+    }
+}
+
+?>
+
+
+
+
 
 <div class="content">
     <div class="form-container">
@@ -58,22 +111,80 @@
 					;?>"
 		>
 			<div>
-				<input type="submit" name="btn_submit" value="View regulation">
-				<input type="submit" name="btn_submit" value="Claim Form">
+				<input type="submit" name="btn_submit" value="Start">
+				<?php echo $error ?>
+			</div>
+		</form>
+		<form
+			method="post"
+			action="<?php
+						echo htmlspecialchars($_SERVER['PHP_SELF'])
+					;?>"
+		>
+            <input type="hidden" name="mysubmit" value="<?php echo $mysubmit; ?>" />
+			<div>
+				<label for="orderno">Order#</label>
+				<input
+					type="integer"
+					name="orderno"
+					id="orderno"
+					required
+				>
+			</div>
+			<div>
+				<label for="orderdt">Order Date</label>
+				<input
+					type="date"
+					name="orderdt"
+					id="orderdt"
+				>
+			</div>
+			<div>
+				<label for="subject">Subject</label>
+				<input
+					type="text"
+					name="subject"
+					id="subject"
+					required
+				>
+			</div>
+			<div>
+				<label for="link">Link</label>
+				<input
+					type="text"
+					name="link"
+					id="link"
+					required
+				>
+			</div>
+			<div>
+				<label for="company">Company</label>
+				<select name="company" id="company">
+					<option value="" hidden></option>
+					<option value="B">WBSEB</option>
+					<option value="D">WBSEDCL</option>
+					<option value="T">WBSETCL</option>
+				</select>
+			</div>
+			<div>
+				<input type="submit" name="btn_submit" value="Create">
 				<?php echo $error ?>
 			</div>
 		</form>
+
     </div>
 </div>
 <table>
   <tr>
+    <th>Doc No.</th>
     <th>Order No.</th>
     <th style="width:10%">Date </th>
     <th>Subject</th>
     <th>VIEW</th>
   </tr>
     <?php while ($profile = $profiles->fetch_assoc()) { ?>
         <tr>
+            <td><?php echo $profile['DocNo']; ?></td>
             <td><?php echo $profile['OrderNumber']; ?></td>
             <td><?php echo($profile['Dt']); ?></td>
             <td><?php echo $profile['Subject']; ?></td>
@@ -83,4 +194,4 @@
 </table>
 
 </body>
-</html>
+</html>