MINI SHELL

Server : Apache/2.2.2 (Fedora)
System : Linux App1.pathumtani.go.th 2.6.20-1.2320.fc5smp #1 SMP Tue Jun 12 19:40:16 EDT 2007 i686
User : apache ( 48)
PHP Version : 5.2.9
Disable Function : NONE
Directory :  /var/www/html/pathumthani_eoffice/application/CA/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/pathumthani_eoffice/application/CA/ca_member_dashboard.php
<?
session_start() ;
require_once "config/config.ini.php";
require_once "common/database.class.php";
require_once ("common/mail_smtp.php");
?>
<html>
<head>
<title></title>
<META http-equiv=Content-Type content="text/html; charset=windows-874">

<?
if($_SESSION[session_username]==""){
 echo"ยังไม่ได้ login เข้าสู้ระบบ";
 die();
}else{
$xsec=$_SESSION[session_apppermit];
	if($xsec[16][10]!="on"){
		echo"ท่านไม่มีสิทธิ์เข้าใช้ระบบนี้";
		die();
	}
	
}



$db = new database();
$x=$db->connect();
if($xaction=="del"&&$mid){
        $strSQL="DELETE FROM `ca_member` WHERE (`id`='$mid') ";
        $sql="select  count(id)  as maxid from ca_member where  trim(serial_number)= (select trim( xxx.serial_number) from ca_member as xxx where xxx.id='$mid')";
		//echo   $sql;
        $re=mysql_query($sql);
        $row=mysql_fetch_array($re);
        $sqlup="";
        if($row[maxid]==1){         
        $sqlup="update member set status_approve='0' where  trim(serial_number)=trim((select serial_number from ca_member where `id`='$mid') ) ";
         if($sqlup!=""){mysql_query($sqlup)or die(mysql_error()."<br>sql:".$sqlup);}  
         //echo $sqlup; 
        }
	mysql_query($strSQL) or die(mysql_error()."<br>sql:".$strSQL);
	  
}elseif($xaction=="approve"){	
  $i=0;
  if(count($checkid)>0){
 foreach($checkid as $index=>$xvalue){
     $sqlup="";
	 $i++;  
	 if($checkapp[$index]){
  	 	$strSQL="	UPDATE `ca_member` SET `key_status`='approve' 	WHERE 	`id`='$xvalue'";
		$sql="select  status_approve   from member where trim(serial_number)=trim((select xxx.serial_number from ca_member as xxx where `id`='$xvalue' limit 1))";
       
		$re=mysql_query($sql);
		$row=mysql_fetch_array($re);
		$sqlup="";
       
        $xapp= $row[status_approve];
		if($xapp=="0"){							
		     $sqlup="update member set status_approve='1' where  trim(serial_number)=trim((select serial_number from ca_member where `id`='$xvalue'))  ";	
		}
        mysql_query($strSQL)or die(mysql_error()."<br>sql:".$strSQL);    
       if($sqlup!=""){mysql_query($sqlup)or die(mysql_error()."<br>sql:".$sqlup);}	
     //  echo $sqlup;	
		//mysql_free_result($re);	
	if($xapp=="0"){
      //  echo $row[status_approve]."<br>";
		$sql="SELECT id,ps_name_th, ps_surname_th ,req_email,req_email_label,ps_email FROM ca_member where id='$xvalue' and req_email='1'";		
		$re_member=mysql_query($sql);
		$row_member=mysql_fetch_array($re_member);
		$num_member=mysql_num_rows($re_member);
		if($num_member=="1"){
			$sqlmail="SELECT id,email,pass,host,st_active FROM ca_admin_config order by id limit 1";
			$remail=mysql_query($sqlmail);
			$rowmail=mysql_fetch_array($remail);
			$nummail=mysql_num_rows($remail);
			if($nummail>0){	
			$title_name="แจ้งผลอนุมัติใบอนุญาติขอกุญแจอิเล็กทรอนิกส์ ";
			$email_to=($row_member[req_email_label])?$row_member[req_email_label]:$row_member[ps_email];
			$email_from=$rowmail[email];
			$username=$email_from;
			$password=$rowmail[pass];
			$host=$rowmail[host];
			$sql=" select * from member  where  trim(serial_number)=trim((select serial_number from ca_member where `id`='$xvalue'))";
			$rex=mysql_query($sql);
		    $rowx=mysql_fetch_array($rex);
			$url =  "http://".$_SERVER["SERVER_NAME"]."/pathumthani_eoffice/application/CA/getfile.php?filename=".$rowx['private_file']."";
$msgtext="เรียนคุณ $row_member[ps_name_th] $row_member[ps_surname_th]<br> ใบอนุญาติขอกุญแจอิเล็กทรอนิกส์ได้รับการอนุมัติเรียบร้อยแล้ว สามารถนำกุญแจอิเล็กทรอนิกส์<br>
	ตรวจสอบกับระบบได้ผ่านระบบ eoffice    <a href='$url' >download private key(กุญแจส่วนตัว) </a>	";
			if($email_to!=""){
				//$title_name,$email_to,$email_from,$msgtext,$username,$password,$host="mail.sapphire.co.th"){
				 send_mail($title_name,$email_to,$email_from,$msgtext,$username,$password,$host);
				 
			 }
			}
        }
    } 
	}else{
		$strSQL="	UPDATE `ca_member` SET `key_status`=NULL 	WHERE 	`id`='$xvalue'";
		$sql="select  max(id)  as maxid from ca_member where trim(serial_number)=trim((select xxx.serial_number from ca_member as xxx where `id`='$xvalue')) ";
		$re=mysql_query($sql);
		$row=mysql_fetch_array($re);
		$sqlup="";
       // echo "$row[maxid]:$xvalue<br>";
		if($row[maxid]==$xvalue){	 	
		$sqlup="update member set status_approve='0' where  trim(serial_number)=trim((select serial_number from ca_member where `id`='$xvalue'))";
		}
        mysql_query($strSQL)or die(mysql_error()."<br>sql:".$strSQL);    
       if($sqlup!=""){mysql_query($sqlup)or die(mysql_error()."<br>sql:".$sqlup);}
	}
	    
	}
  }
 
  if($i>0){	echo "<script language=javascript>alert('ปรับปรุงการอนุมัติเรียบร้อย');</script>";  }

  }



?>

<script src="../../common/gs_sortable.js" type="text/javascript"></script>
<script src="../../common/jquery.js"></script>
<script>
var TSort_Data = new Array ('my_table','', 's', 's','s', 's', 's', 's', 's','','');
var TSort_Classes = new Array ('row1', 'row2');
$(document).ready(function(){
	tsRegister();
});
function saveapp(){
	if( confirm('ต้องการบันทึกผลการอนุมัติหรือไม่')){
	document.frm1.xaction.value='approve';	
	document.frm1.submit();
	}else{
		return false;
		}

}
 function openpopup(){
 var url="popupgetSN.php?Rnd="+(Math.random()*1000);
  var prop="dialogHeight: 200px; dialogWidth: 430px; scroll: No; help: No; status: No;";
 var o=showModalDialog(url,"pop",prop);
 if(o){
	 window.location="ca_member.php?CA_SN="+o.sn +"&xfromaction=new&xfrom=admin" ;
  }

}

</script>
<style type="text/css">
<!--
body {
	margin-left: 0px;
	margin-top: 0px;
	margin-right: 0px;
	margin-bottom: 0px;
}
.comment{
	color:#F00;	
}

INPUT{
	FONT-SIZE: 12px; FONT-FAMILY: Tahoma,  "Microsoft Sans "; 
}
.theader{
	font-size:12px;
}
-->
</style>
<link href="css/style.css" rel="stylesheet" type="text/css">
<link href="../../common/gs_sortable.css" rel="stylesheet" type="text/css">
<style type="text/css">

</style></head>
<body>
<?
$sql = "SELECT 	count(ca_member.id) as  nnum			
		   FROM 	ca_member 
			Inner Join org_staffgroup ON ca_member.org_id= org_staffgroup.gid ";
$rows_perpage=($mode=="org")?40:10;
$rs=mysql_query($sql);
$row=mysql_fetch_array($rs);
$totalrow =$row[nnum]; 
$pagesize = $rows_perpage;  // แสดงจำนวนกระทู้ในแต่ละหน้า ในที่นี้จะแสดง 2 กระทู้ เพื่อทดสอบ
$totalpage = (int)($totalrow/$pagesize); 
if(($totalrow%$pagesize)!=0){
$totalpage += 1;
} 
// หา record แรกที่จะแสดงของแต่ละหน้า
if(isset($page)){
$pageno = $page;
$start = $pagesize*($pageno-1);
}else{
$pageno = 1;
$start = 0;
}

?>


<form action="?" method="post" name="frm1" >
<table width="100%" border="0" cellspacing="5" cellpadding="0">
  <tr>
    <td width="1%" align="right">&nbsp;</td>
    <td width="3%" align="right">&nbsp;</td>
    <td width="66%" align="left"><div  style="text-align:left;font-size:16px;font-weight:bold">รายชื่อผู้ขอใบรับรองอิเล็กทรอนิกส์</div><br /></td>
    <td width="30%" align="right">
    <input name="search_text" type="text" id="search_text" size="40" value="<?=$search_text?>">
      <input type="submit" name="button" id="button" value="ค้นหา"></td>
    </tr>
</table>

<table width="100%" border="0" cellspacing="0" cellpadding="2">
 
  <tr>
    <td align="center">
	<table width="100%" border="0" cellpadding="0" cellspacing="0" bgcolor="#CCCCCC">
	  <tr>
		<td><table width="100%" border="0" cellpadding="0" cellspacing="1" id="my_table">
        <thead>   
		  <tr class="theader">
			<th width="22" height="25" align="center" bgcolor="#999999"><strong>#</strong></th>
            <th width="46" align="center" bgcolor="#999999">SN</th>
			<th width="210" align="center" bgcolor="#999999"><strong>ชื่อ-สกุล</strong></th>
			<th width="224" align="center" bgcolor="#999999"><strong>หน่วยงาน</strong></th>
			<th width="79" align="center" bgcolor="#999999"><strong>โทรศัพท์</strong></th>
			<th width="104" align="center" bgcolor="#999999"><strong>หมายเลขประจำตัว</strong></th>
			
			<th width="79" align="center" bgcolor="#999999" >วันที่ยื่นคำร้อง</th>
			<th width="79" align="center" bgcolor="#999999" >ประเภทคำร้อง</th>
			<th width="36" align="center" bgcolor="#999999" ><strong>อนุมัติ</strong></th>
			<th width="84" align="center" bgcolor="#999999" class="mainlevel">
            <input type="button" name="button2" id="button2" value="เพิ่มใหม่" onClick="openpopup();"></th>
		  </tr>
          </thead>
          <tbody>
		  <?
		  $org_order=($mode=="org")?" org_staffgroup.groupname, ":"";
		  $strSQL="
		  SELECT
			ca_member.id,
			ca_member.member_id,ca_member.serial_number,
			ca_member.ps_prename_th,
			ca_member.ps_name_th,
			ca_member.ps_surname_th,
			ca_member.org_id,
			org_staffgroup.groupname,
			ca_member.org_tel,
			ca_member.ps_card_ID,
			ca_member.ps_home_no,
			ca_member.ps_home_moo,
			ca_member.ps_home_soi,
			ca_member.ps_home_road,
			ca_member.ps_home_villa,		
			ca_member.ps_home_tambon,
			ca_member.ps_home_amphur,
			ca_member.ps_home_province,
			ca_member.ps_home_zipcode,
			ca_member.sign_type,ca_member.key_status,
			left(ca_member.date_req,10) as date_req
		FROM
			ca_member 
			Inner Join org_staffgroup ON ca_member.org_id= org_staffgroup.gid 
			where  
			ca_member.serial_number like '%$search_text%' or
			ca_member.ps_name_th like '%$search_text%'  or
			ca_member.ps_surname_th like '%$search_text%' or
			ca_member.ps_card_ID  like '%$search_text%'
			order by $org_order ca_member.date_req desc limit $start,$pagesize ";		
		$result=mysql_query($strSQL)or die(mysql_error()."<br>sql:".$strSQL);
		$i=0;
		while($row=mysql_fetch_assoc($result)){ $i++;
		$bgcolor=$bgcolor=='#f1f1f1'?'#ffffff':'#f1f1f1';
		?>
      <tr bgcolor="<?=$bgcolor?>" >
        <td height="24" align="center" valign="top"><?=$i?></td>
         <td align="left" valign="top" nowrap><?=$row['serial_number']?></td>
        <td align="left" valign="top"><?=$row['ps_prename_th'].$row['ps_name_th']." ".$row['ps_surname_th'];?></td>
        <td align="left" valign="top"><?=$row['groupname']?></td>
        <td align="left" valign="top"><?=$row['org_tel']?></td>
        <td align="left" valign="top"><?=$row['ps_card_ID']?></td>
       
        <td align="center" valign="top" class="mainlevel"><?
		$xarr=explode('-',$row[date_req]);
		$xdate=($xarr[2]*1)."-".$xarr[1]."-".($xarr[0]+543);
		echo $xdate;
		  ?></td>
        <td align="center" valign="top" class="mainlevel"><?=($row['sign_type']=="1")?"ขอใบรับรอง":"ขอต่ออายุ"?></td>
        <td align="center" valign="top" class="mainlevel">
        <input type="hidden" name="checkid[<?=$row['id']?>]" value="<?=$row['id']?>" />
        <input type="checkbox"  <?=($row['key_status']=='approve')?" checked ":""?>   name="checkapp[<?=$row['id']?>]" value="<?=$row['id']?>" /></td>
        <td align="center" valign="top" class="mainlevel"><a href="ca_member.php?mid=<?=$row['id']?>&action=edit&xfromaction=edit&xfrom=admin" ><img src="../../images/ico_trans_edit.gif" alt="แก้ไข" width="16" height="16" border="0" /></a> 
   <a href="ca_member.php?CA_SN=<?=$row['serial_number']?>&xfromaction=renew&xfrom=admin" title="ต่ออายุ" >    <img src="../../images/ico_status_pass.gif" width="16" height="17" border="0"></a>
       
       &nbsp;<a href="?xaction=del&mid=<?=$row['id']?>" onClick="return confirm('ต้องการลบข้อมูลหรือไม่? ')"><img src="../../images/ErrorCircle-16x16.png" alt="ลบ" width="16" height="16" border="0" /></a></td>
      </tr>
	  <?  }  ?></tbody>
      <tfoot>
      <tr bgcolor="<?=$bgcolor?>" >
        <td height="24" colspan="10" align="left" bgcolor="#FFFFFF"><div style="float:left;width:400px">
          <?

if($pageno >1){
echo " <b class='textpage'><a href='?search_text=$search_text&page=",$pageno-1,"i&seltype=$seltype'>Previous</a></b> |";
} 
for($i=1;$i<=$totalpage;$i++){
if($pageno==$i){
echo" <b class='textpage'>".$i."</b> |";
}else{
echo "<b class='textpage'> <a href='?search_text=$search_text&page=$i&seltype=$seltype'>$i</a> </b>|";
}
}
if($pageno<$totalpage){
echo "<b class='textpage'> <a href='?search_text=$search_text&page=",$pageno+1,"i&seltype=$seltype'>Next</a></b>";
}
?>
          </div>
          <div style="float:right;width:250px;text-align:right" >รายการทั้งหมด :
            <?=$totalrow?>
            <input type="hidden" name="xaction" value="">
            <input type="button" name="button3" value="บันทึกสถานะอนุมัติ" style="width:100px" onClick="return  saveapp();" />
            </div>
          
</td>
        </tr>	
        </tfoot>  
    </table>
	
	</td>
  </tr>
</table>
</td>
  </tr>
</table>
</form>
</body>
</html>

Anon7 - 2021