Database class integration.
This commit is contained in:
@@ -39,32 +39,32 @@ else {
|
||||
$text = $language->get();
|
||||
|
||||
//action add or update
|
||||
if (isset($_REQUEST["id"])) {
|
||||
if (is_uuid($_REQUEST["id"])) {
|
||||
$action = "update";
|
||||
$contact_time_uuid = check_str($_REQUEST["id"]);
|
||||
$contact_time_uuid = $_REQUEST["id"];
|
||||
}
|
||||
else {
|
||||
$action = "add";
|
||||
}
|
||||
|
||||
//get the contact uuid
|
||||
if (strlen($_GET["contact_uuid"]) > 0) {
|
||||
$contact_uuid = check_str($_GET["contact_uuid"]);
|
||||
if (is_uuid($_GET["contact_uuid"])) {
|
||||
$contact_uuid = $_GET["contact_uuid"];
|
||||
}
|
||||
|
||||
//get http post variables and set them to php variables
|
||||
if (count($_POST)>0) {
|
||||
$time_start = check_str($_POST["time_start"]);
|
||||
$time_stop = check_str($_POST["time_stop"]);
|
||||
$time_description = check_str($_POST["time_description"]);
|
||||
if (is_array($_POST) && @sizeof($_POST) != 0) {
|
||||
$time_start = $_POST["time_start"];
|
||||
$time_stop = $_POST["time_stop"];
|
||||
$time_description = $_POST["time_description"];
|
||||
}
|
||||
|
||||
//process the form data
|
||||
if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
|
||||
if (is_array($_POST) && @sizeof($_POST) != 0 && strlen($_POST["persistformvar"]) == 0) {
|
||||
|
||||
//set the uuid
|
||||
if ($action == "update") {
|
||||
$contact_time_uuid = check_str($_POST["contact_time_uuid"]);
|
||||
$contact_time_uuid = $_POST["contact_time_uuid"];
|
||||
}
|
||||
|
||||
//check for all required data
|
||||
@@ -86,82 +86,76 @@ else {
|
||||
if ($_POST["persistformvar"] != "true") {
|
||||
|
||||
//update last modified
|
||||
$sql = "update v_contacts set ";
|
||||
$sql .= "last_mod_date = now(), ";
|
||||
$sql .= "last_mod_user = '".$_SESSION['username']."' ";
|
||||
$sql .= "where domain_uuid = '".$domain_uuid."' ";
|
||||
$sql .= "and contact_uuid = '".$contact_uuid."' ";
|
||||
$db->exec(check_sql($sql));
|
||||
unset($sql);
|
||||
$array['contacts'][0]['contact_uuid'] = $contact_uuid;
|
||||
$array['contacts'][0]['domain_uuid'] = $domain_uuid;
|
||||
$array['contacts'][0]['last_mod_date'] = 'now()';
|
||||
$array['contacts'][0]['last_mod_user'] = $_SESSION['username'];
|
||||
|
||||
$p = new permissions;
|
||||
$p->add('contact_edit', 'temp');
|
||||
|
||||
$database = new database;
|
||||
$database->app_name = 'contacts';
|
||||
$database->app_uuid = '04481e0e-a478-c559-adad-52bd4174574c';
|
||||
$database->save($array);
|
||||
unset($array);
|
||||
|
||||
$p->delete('contact_edit', 'temp');
|
||||
|
||||
if ($action == "add") {
|
||||
$contact_time_uuid = uuid();
|
||||
$sql = "insert into v_contact_times ";
|
||||
$sql .= "( ";
|
||||
$sql .= "domain_uuid, ";
|
||||
$sql .= "contact_time_uuid, ";
|
||||
$sql .= "contact_uuid, ";
|
||||
$sql .= "user_uuid, ";
|
||||
$sql .= "time_start, ";
|
||||
$sql .= "time_stop, ";
|
||||
$sql .= "time_description ";
|
||||
$sql .= ") ";
|
||||
$sql .= "values ";
|
||||
$sql .= "( ";
|
||||
$sql .= "'".$domain_uuid."', ";
|
||||
$sql .= "'".$contact_time_uuid."', ";
|
||||
$sql .= "'".$contact_uuid."', ";
|
||||
$sql .= "'".$_SESSION["user"]["user_uuid"]."', ";
|
||||
$sql .= "'".$time_start."', ";
|
||||
$sql .= "'".$time_stop."', ";
|
||||
$sql .= "'".$time_description."' ";
|
||||
$sql .= ")";
|
||||
$db->exec(check_sql($sql));
|
||||
unset($sql);
|
||||
$array['contact_times'][0]['contact_time_uuid'] = $contact_time_uuid;
|
||||
|
||||
message::add($text['message-add']);
|
||||
header("Location: contact_edit.php?id=".$contact_uuid);
|
||||
return;
|
||||
} //if ($action == "add")
|
||||
}
|
||||
|
||||
if ($action == "update") {
|
||||
$sql = "update v_contact_times ";
|
||||
$sql .= "set ";
|
||||
$sql .= "time_start = '".$time_start."', ";
|
||||
$sql .= "time_stop = '".$time_stop."', ";
|
||||
$sql .= "time_description = '".$time_description."' ";
|
||||
$sql .= "where ";
|
||||
$sql .= "contact_time_uuid = '".$contact_time_uuid."' ";
|
||||
$sql .= "and domain_uuid = '".$domain_uuid."' ";
|
||||
$sql .= "and contact_uuid = '".$contact_uuid."' ";
|
||||
$sql .= "and user_uuid = '".$_SESSION["user"]["user_uuid"]."' ";
|
||||
$db->exec(check_sql($sql));
|
||||
unset($sql);
|
||||
$array['contact_times'][0]['contact_time_uuid'] = $contact_time_uuid;
|
||||
|
||||
message::add($text['message-update']);
|
||||
header("Location: contact_edit.php?id=".$contact_uuid);
|
||||
return;
|
||||
} //if ($action == "update")
|
||||
} //if ($_POST["persistformvar"] != "true")
|
||||
} //(count($_POST)>0 && strlen($_POST["persistformvar"]) == 0)
|
||||
}
|
||||
|
||||
if (is_array($array) && @sizeof($array) != 0) {
|
||||
$array['contact_times'][0]['domain_uuid'] = $domain_uuid;
|
||||
$array['contact_times'][0]['contact_uuid'] = $contact_uuid;
|
||||
$array['contact_times'][0]['user_uuid'] = $_SESSION["user"]["user_uuid"];
|
||||
$array['contact_times'][0]['time_start'] = $time_start;
|
||||
$array['contact_times'][0]['time_stop'] = $time_stop;
|
||||
$array['contact_times'][0]['time_description'] = $time_description;
|
||||
|
||||
$database = new database;
|
||||
$database->app_name = 'contacts';
|
||||
$database->app_uuid = '04481e0e-a478-c559-adad-52bd4174574c';
|
||||
$database->save($array);
|
||||
unset($array);
|
||||
}
|
||||
|
||||
header("Location: contact_edit.php?id=".$contact_uuid);
|
||||
exit;
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
//pre-populate the form
|
||||
if (count($_GET)>0 && $_POST["persistformvar"] != "true") {
|
||||
if (is_array($_GET) && @sizeof($_GET) != 0 && $_POST["persistformvar"] != "true") {
|
||||
$contact_time_uuid = $_GET["id"];
|
||||
$sql = "select ct.*, u.username ";
|
||||
$sql .= "from v_contact_times as ct, v_users as u ";
|
||||
$sql .= "where ct.user_uuid = u.user_uuid ";
|
||||
$sql .= "and ct.domain_uuid = '".$domain_uuid."' ";
|
||||
$sql .= "and ct.contact_uuid = '".$contact_uuid."' ";
|
||||
$sql .= "and ct.user_uuid = '".$_SESSION["user"]["user_uuid"]."' ";
|
||||
$sql .= "and contact_time_uuid = '".$contact_time_uuid."' ";
|
||||
$prep_statement = $db->prepare(check_sql($sql));
|
||||
$prep_statement->execute();
|
||||
$result = $prep_statement->fetch(PDO::FETCH_NAMED);
|
||||
$time_start = $result["time_start"];
|
||||
$time_stop = $result["time_stop"];
|
||||
$time_description = $result["time_description"];
|
||||
unset ($prep_statement);
|
||||
$sql .= "and ct.domain_uuid = :domain_uuid ";
|
||||
$sql .= "and ct.contact_uuid = :contact_uuid ";
|
||||
$sql .= "and ct.user_uuid = :user_uuid ";
|
||||
$sql .= "and contact_time_uuid = :contact_time_uuid ";
|
||||
$parameters['domain_uuid'] = $domain_uuid;
|
||||
$parameters['contact_uuid'] = $contact_uuid;
|
||||
$parameters['user_uuid'] = $_SESSION["user"]["user_uuid"];
|
||||
$parameters['contact_time_uuid'] = $contact_time_uuid;
|
||||
$database = new database;
|
||||
$row = $database->select($sql, $parameters, 'row');
|
||||
$time_start = $row["time_start"];
|
||||
$time_stop = $row["time_stop"];
|
||||
$time_description = $row["time_description"];
|
||||
unset($sql, $parameters, $row);
|
||||
}
|
||||
|
||||
//show the header
|
||||
|
||||
Reference in New Issue
Block a user