MMCT TEAM
Server IP : 162.214.80.37  /  Your IP : 216.73.216.83
Web Server : Apache
System : Linux sh013.webhostingservices.com 4.19.286-203.ELK.el7.x86_64 #1 SMP Wed Jun 14 04:33:55 CDT 2023 x86_64
User : imyrqtmy ( 2189)
PHP Version : 8.2.18
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON
Directory (0750) :  /home2/imyrqtmy/public_html/thesmarthands/

[  Home  ][  C0mmand  ][  Upload File  ]

Current File : /home2/imyrqtmy/public_html/thesmarthands/add_task.php
<?php

include("inc/config.php");

if(isset($_POST['add_task'])){
    $project_name = $_POST['project_name'];
    $task_name = $_POST['task_name'];
    $start_datetime = $_POST['start_datetime'];
    $end_datetime = $_POST['end_datetime'];
    $total_time = $_POST['total_time'];
    $emp_name = $_POST['emp_name'];
    $erh = $_POST['erh'];
    $onbh_rate = $_POST['onbh_rate'];
    $total_amt = $_POST['total_amt'];
    $po_no = $_POST['po_no'];

    $trvl_time_rate = $_POST['trvl_time_rate'];
    $milage_rate = $_POST['milage_rate'];
    $total_trvl_time = $_POST['total_trvl_time'];
    $total_trvl_amt = $_POST['total_trvl_amt'];
    $total_milage_time = $_POST['total_milage_time'];
    $total_milage_amt = $_POST['total_milage_amt'];

    $extra_expenses = $_POST['extra_expenses'];
    $remark = $_POST['remark'];
    // $total_task_value = $_POST['total_task_value'];

  


    $grand_total = $_POST['grand_total'];
 

    $status = $_POST['status'];


    $project_name = mysqli_real_escape_string($conn, $_POST['project_name']);
    $task_name = mysqli_real_escape_string($conn, $_POST['task_name']);
    $start_datetime = mysqli_real_escape_string($conn, $_POST['start_datetime']);
    $end_datetime = mysqli_real_escape_string($conn, $_POST['end_datetime']);
    $total_time = mysqli_real_escape_string($conn, $_POST['total_time']);
    $emp_name = mysqli_real_escape_string($conn, $_POST['emp_name']);
    $erh = mysqli_real_escape_string($conn, $_POST['erh']);
    $onbh_rate = mysqli_real_escape_string($conn, $_POST['onbh_rate']);

    
    $total_amt = mysqli_real_escape_string($conn, $_POST['total_amt']);
    $po_no = mysqli_real_escape_string($conn, $_POST['po_no']);

    $trvl_time_rate = mysqli_real_escape_string($conn, $_POST['trvl_time_rate']);
    $milage_rate = mysqli_real_escape_string($conn, $_POST['milage_rate']);
    $total_trvl_time = mysqli_real_escape_string($conn, $_POST['total_trvl_time']);
    $total_trvl_amt = mysqli_real_escape_string($conn, $_POST['total_trvl_amt']);
    $total_milage_time = mysqli_real_escape_string($conn, $_POST['total_milage_time']);
    $total_milage_amt = mysqli_real_escape_string($conn, $_POST['total_milage_amt']);

    $extra_expenses = mysqli_real_escape_string($conn, $_POST['extra_expenses']);
    $remark = mysqli_real_escape_string($conn, $_POST['remark']);
    // $total_task_value = mysqli_real_escape_string($conn, $_POST['total_task_value']);


    $grand_total = mysqli_real_escape_string($conn, $_POST['grand_total']);

    $status = mysqli_real_escape_string($conn, $_POST['status']);

    

    // Handling File Upload
    $attachment = "";
    if (!empty($_FILES['attachment']['name'])) {
        $target_dir = "attachment/"; // Folder where the files will be stored
        if (!is_dir($target_dir)) {
            mkdir($target_dir, 0777, true); // Create the directory if it doesn't exist
        }

        $file_name = basename($_FILES['attachment']['name']);
        $target_file = $target_dir . time() . "_" . $file_name; // Unique filename
        $file_type = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));

        // Check file type (only allow PDF)
        if ($file_type != "pdf") {
            $_SESSION['status'] = "Only PDF files are allowed.";
            header('Location: task.php');
            exit;
        }

        // Move uploaded file
        if (move_uploaded_file($_FILES['attachment']['tmp_name'], $target_file)) {
            $attachment = $target_file; // Store the file path in the database
        } else {
            $_SESSION['status'] = "File upload failed.";
            header('Location: task.php');
            exit;
        }
    }

    $erh = isset($_POST['erh']) ? $_POST['erh'] : null;
$onbh_rate = isset($_POST['onbh_rate']) ? $_POST['onbh_rate'] : null;
    // Construct the SQL query
    $query = "INSERT INTO `tasks` (`po_no`, `project_name`, `task_name`, `start_datetime`, `end_datetime`, `total_time`, `emp_name`, `erh`, `onbh_rate`, `total_amt`, `trvl_time_rate`, `milage_rate`, `total_trvl_time`, `total_trvl_amt`, `total_milage_time`, `total_milage_amt`, `extra_expenses`, `remark`, `attachment`, `grand_total`, `status`) 
              VALUES ('$po_no',  '$project_name',  '$task_name', '$start_datetime', '$end_datetime', '$total_time', '$emp_name', '$erh', '$onbh_rate', '$total_amt', '$trvl_time_rate', '$milage_rate', '$total_trvl_time', '$total_trvl_amt', '$total_milage_time', '$total_milage_amt',  '$extra_expenses',  '$remark',   '$attachment',  '$grand_total', '$status')";

    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        $_SESSION['status'] = "Data Uploaded Successfully";
        header('Location: view-task.php');
        exit;
    } else {
        $_SESSION['status'] = "Data Not Uploaded Successfully";
        header('Location: task.php');
        exit;
    }
}



if (isset($_POST['update_task'])) {
    $id = $_POST['id']; 
    $project_name = mysqli_real_escape_string($conn, $_POST['project_name']);
    $task_name = mysqli_real_escape_string($conn, $_POST['task_name']);
    $start_datetime = mysqli_real_escape_string($conn, $_POST['start_datetime']);
    $end_datetime = mysqli_real_escape_string($conn, $_POST['end_datetime']);
    $total_time = mysqli_real_escape_string($conn, $_POST['total_time']);
    $emp_name = mysqli_real_escape_string($conn, $_POST['emp_name']);
    $erh = mysqli_real_escape_string($conn, $_POST['erh']);
    $onbh_rate = mysqli_real_escape_string($conn, $_POST['onbh_rate']);
    $total_amt = mysqli_real_escape_string($conn, $_POST['total_amt']);
    $po_no = mysqli_real_escape_string($conn, $_POST['po_no']);
    $trvl_time_rate = mysqli_real_escape_string($conn, $_POST['trvl_time_rate']);
    $milage_rate = mysqli_real_escape_string($conn, $_POST['milage_rate']);
    $total_trvl_time = mysqli_real_escape_string($conn, $_POST['total_trvl_time']);
    $total_trvl_amt = mysqli_real_escape_string($conn, $_POST['total_trvl_amt']);
    $total_milage_time = mysqli_real_escape_string($conn, $_POST['total_milage_time']);
    $total_milage_amt = mysqli_real_escape_string($conn, $_POST['total_milage_amt']);
    $extra_expenses = mysqli_real_escape_string($conn, $_POST['extra_expenses']);
    $remark = mysqli_real_escape_string($conn, $_POST['remark']);
    $grand_total = mysqli_real_escape_string($conn, $_POST['grand_total']);
    $status = mysqli_real_escape_string($conn, $_POST['status']);

    $attachment = $_POST['old_attachment']; // Preserve old attachment by default

    if (!empty($_FILES['attachment']['name'])) {
        $target_dir = "attachment/";
        if (!is_dir($target_dir)) {
            mkdir($target_dir, 0777, true); 
        }

        $file_name = basename($_FILES['attachment']['name']);
        $target_file = $target_dir . time() . "_" . $file_name; 
        $file_type = strtolower(pathinfo($target_file, PATHINFO_EXTENSION));

        if ($file_type != "pdf") {
            $_SESSION['status'] = "Only PDF files are allowed.";
            header('Location: task.php');
            exit;
        }

        if (move_uploaded_file($_FILES['attachment']['tmp_name'], $target_file)) {
            $attachment = $target_file; 
        } else {
            $_SESSION['status'] = "File upload failed.";
            header('Location: task.php');
            exit;
        }
    }

    // Conditionally update the attachment field only if a new file was uploaded
    if (!empty($_FILES['attachment']['name'])) {
        $query = "UPDATE `tasks` SET 
                  `po_no` = '$po_no', 
                  `project_name` = '$project_name', 
                  `task_name` = '$task_name', 
                  `start_datetime` = '$start_datetime', 
                  `end_datetime` = '$end_datetime', 
                  `total_time` = '$total_time', 
                  `emp_name` = '$emp_name', 
                  `erh` = '$erh', 
                   `onbh_rate` = '$onbh_rate', 
                  `total_amt` = '$total_amt', 
                  `trvl_time_rate` = '$trvl_time_rate', 
                  `milage_rate` = '$milage_rate', 
                  `total_trvl_time` = '$total_trvl_time', 
                  `total_trvl_amt` = '$total_trvl_amt', 
                  `total_milage_time` = '$total_milage_time', 
                  `total_milage_amt` = '$total_milage_amt', 
                  `extra_expenses` = '$extra_expenses', 
                  `remark` = '$remark', 
                  `attachment` = '$attachment', 
                  `grand_total` = '$grand_total', 
                  `status` = '$status' 
                  WHERE `id` = '$id'";
    } else {
        $query = "UPDATE `tasks` SET 
                  `po_no` = '$po_no', 
                  `project_name` = '$project_name', 
                  `task_name` = '$task_name', 
                  `start_datetime` = '$start_datetime', 
                  `end_datetime` = '$end_datetime', 
                  `total_time` = '$total_time', 
                  `emp_name` = '$emp_name', 
                  `erh` = '$erh', 
                   `onbh_rate` = '$onbh_rate', 
                  `total_amt` = '$total_amt', 
                  `trvl_time_rate` = '$trvl_time_rate', 
                  `milage_rate` = '$milage_rate', 
                  `total_trvl_time` = '$total_trvl_time', 
                  `total_trvl_amt` = '$total_trvl_amt', 
                  `total_milage_time` = '$total_milage_time', 
                  `total_milage_amt` = '$total_milage_amt', 
                  `extra_expenses` = '$extra_expenses', 
                  `remark` = '$remark', 
                  `grand_total` = '$grand_total', 
                  `status` = '$status' 
                  WHERE `id` = '$id'";
    }

    $query_run = mysqli_query($conn, $query);

    if ($query_run) {
        $_SESSION['status'] = "Task Updated Successfully";
        header('Location: view-task.php');
        exit;
    } else {
        $_SESSION['status'] = "Task Update Failed";
        header('Location: task.php');
        exit;
    }
}


// delete

if(isset($_POST['delete_task'])){
    $id = $_POST['delete_id'];
    $photo = $_POST['del_task'];
   

    $query = "DELETE FROM tasks WHERE id = '$id'";
    $query_run = mysqli_query($conn, $query);

    if($query_run){
        if(unlink("attachment/".$photo)) {
            $_SESSION['status'] = "Deleted Successfully";
            header('Location: view-task.php');
        } else {
            $_SESSION['status'] = "Error deleting files";
            header('Location: view-task.php');
        }
    } else {
        $_SESSION['status'] = "Not Deleted Successfully";
        header('Location: view-task.php');
    }
}
?>

MMCT - 2023