| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/hkosl.com/e-ims/file_manager/ |
Upload File : |
<?php
include 'config.php';
// Check if the user is logged in
if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1'))
{
header("Location: login.php");
exit;
}
require("configure.php");
$index = $_POST["index"];
$nowdate = date("Y-m-d H:i:s");
//print_r($_POST);
//exit;
$reportid = $_POST["reportid"];
if (is_array($reportid)){
foreach ($reportid as $x => $v) {
$treportid = $reportid[$x];
//Soft Delete Report DB
$sql = "update report_content set status='0', deleted='1', lastupby=:lastupby, lastupdate=:lastupdate where reportid=:reportid";
$sql_param = array();
$sql_param[':lastupby'] = $_SESSION['loginid'];
$sql_param[':lastupdate'] = $nowdate;
$sql_param[':reportid'] = $treportid;
$sth = Db::getDbh()->prepare($sql);
$sth->execute($sql_param);
if( $error = $sth->getError($sql_param) ){
var_dump($error);
}
//Move File to delete folder
$sql = "select * from file_content Where refid=:refid";
$sth = Db::getDbh()->prepare($sql);
$sth->execute(array(":refid" => $treportid));
if( $error = $sth->getError(array(":refid" => $treportid)) ){
var_dump($error);
}
$row = $sth->fetch(PDO::FETCH_ASSOC);
if($row{'filename'}){
$source_path = "../file_manager/file/".$row{'filename'};
$move_check = rename($source_path,"../file_manager/deleted_file/".date("Y-m-d_H-i-s")."_".$row{'filename'});
if ($move_check === false){
if (file_exists($source_path)) {
//die ("Could not Move the file to the path");
}
}
}
//Soft Delete File DB
$sql = "update file_content set status='0', deleted='1', lastupby=:lastupby, lastupdate=:lastupdate where fileid=:fileid";
$sql_param = array();
$sql_param[':lastupby'] = $_SESSION['loginid'];
$sql_param[':lastupdate'] = $nowdate;
$sql_param[':fileid'] = $row{'fileid'};
$sth = Db::getDbh()->prepare($sql);
$sth->execute($sql_param);
if( $error = $sth->getError($sql_param) ){
var_dump($error);
}
//Update File Sort
$sql = "update file_content set sort = sort-1 WHERE sort >=:sort AND folderid=:folderid";
$sql_param = array();
$sql_param[':sort'] = $row{'sort'};
$sql_param[':folderid'] = $parentid;
$sth = Db::getDbh()->prepare($sql);
$sth->execute($sql_param);
if( $error = $sth->getError($sql_param) ){
var_dump($error);
}
}
}
if(!is_array($reportid)){
echo"<script language='javascript'>
alert('Please Select A Report.');
history.back();
</script>";
exit;
}
header("Location: index.php?index=$index");
?>