Gecko [ 43.229.15.234 ]

Name	Size	Permission
ajaxview.php	520 B	-rw-r--r--
userinfo.php	6.11 KB	-rw-r--r--
userinfo_editor.php	7.45 KB	-rw-r--r--
userinfo_list.php	8.37 KB	-rw-r--r--
userinfo_pending.php	8.36 KB	-rw-r--r--

Code Editor : userinfo.php

<?php
       session_start();
       include("../common/functions.php");
	   include("../common/config.php");
	   
	   
	  if(empty($_SESSION["username"])) 
	   {
	     Header("Location: ../login/login.php");
	    }

$cmd = $_REQUEST["cmd"];
	   switch($cmd)
	   {
	     
		  case "add": 
				
			
				if(empty($_REQUEST["id"]))
				{
                    $stmt = $conn->prepare("INSERT INTO userinfo (uname,username,upassword,mobileno,dumpass,office_id,designation,districtoffice_id) VALUES (?,?,?,?,?,?,?,?)");
					$stmt->bind_param("sssssisi", trim($_REQUEST['uname']),$_REQUEST['username'],md5(trim($_REQUEST["upassword"])),$_REQUEST['mobileno'],
											  trim($_REQUEST['upassword']), $_REQUEST['office_id'],$_REQUEST['designation'],$_REQUEST['districtoffice_id']
											  );
                    $stmt->execute();
                    $stmt->close();
                }
                else
                {
					         
						 
                    $stmt = $conn->prepare("UPDATE userinfo SET uname = ?,
					                                        username = ?, 
															upassword = ?,
															userrole_id = ?,
															dumpass = ?, 
															office_id = ?, 
															districtoffice_id = ?,
															designation = ?,
															mobileno = ? 
															WHERE id = ?");
					$stmt->bind_param("sssisiissi", $_REQUEST['uname'],
					                                $_REQUEST['username'],
													md5(trim($_REQUEST["upassword"])),
													$_REQUEST['userrole_id'],
													trim($_REQUEST["upassword"]), 
													$_REQUEST['office_id'],
													$_REQUEST['districtoffice_id'],
													$_REQUEST['designation'],
													$_REQUEST['mobileno'],
													$_REQUEST['id']);
                    $stmt->execute();
					$stmt->close();
				
				}
				
				Header("Location: ../userinfo/userinfo.php?cmd=list");				   
				break;    
		case "edit":

if(!empty($_REQUEST["id"]))
            {
                
				// prepare and bind
                $stmt = $conn->prepare("SELECT * FROM userinfo WHERE id = ?");
                $stmt->bind_param("i",base64_decode($_REQUEST["id"]));
                $stmt->execute();

//Result
                $result = $stmt->get_result();

//Data Retriving
                while($row = $result->fetch_assoc()) {
                    $Id   = $row['id'];
					$uname =  $row["uname"];
					$mobileno =  $row["mobileno"];
					$username =  $row["username"];
                    $upassword =  $row["dumpass"];
					$userrole_id =  $row["userrole_id"];
					$districtoffice_id =  $row["districtoffice_id"];
					$office_id =  $row["office_id"];
					$designation =  $row["designation"];
                }
                $stmt->close();
            }

include("../userinfo/userinfo_editor.php");						  
				break;
						   
         case "delete":
			
			 // prepare and bind
			 $stmt = $conn->prepare("Select * from general where userinfo_id  = ?");
			 $stmt->bind_param("i",$_REQUEST["id"]);
			 $stmt->execute();

//Result
			 $result = $stmt->get_result();

//Data Retriving
			 while($row = $result->fetch_assoc()) {
				 $Id   = $row['id'];
				 $uname =  $row["uname"];
				 $dumpass =  $row["dumpass"];				 
			 }
			 
			 if (empty($Id))
			 {
				$stmt = $conn->prepare("DELETE from userinfo where id = ?");
				$stmt->bind_param("i", $_REQUEST['id']);
				$stmt->execute();
	
			 }
			 Header("Location: ../userinfo/userinfo.php?cmd=list");		
			$stmt->close();
		
		break;

case "approve":
				
				$stmt = $conn->prepare("UPDATE userinfo SET aprflag = 1 WHERE id = ?");
				$stmt->bind_param("i", base64_decode($_REQUEST['id']));
				$stmt->execute();
	
	
				 // prepare and bind
				 $stmt = $conn->prepare("SELECT * FROM userinfo WHERE id = ?");
				 $stmt->bind_param("i",base64_decode($_REQUEST["id"]));
				 $stmt->execute();
	
				 //Result
				 $result = $stmt->get_result();
	
				 //Data Retriving
				 while($row = $result->fetch_assoc()) {
					 $Id   = $row['id'];
					 $uname =  $row["uname"];
					 $dumpass =  $row["dumpass"];				 
				 }
				$stmt->close();
				
				/*include("../mail.php");
	
    			$to   = $uname;
                $from = 'eedpimssupport@bdspiderit.com';
                $name = 'Education Engineering';
                $subj = "ইউজার অনুমোদন";                
                
                $msg = "Dear User,\n"." আপনাকে পার্সন্যাল ইনফরমেশন ম্যানেজমেন্ট সিস্টেম সফটওয়ার ব্যাবহারের অনুমোদন দেওয়া হলো।
						\n http://bdspiderit.com/eduhrm \n User Name=".$uname."\n Password=".$dumpass;
						
                
                $error=smtpmailer($to,$from, $name ,$subj, $msg);
				
				*/
			   Header("Location: ../userinfo/userinfo.php?cmd=list");					   
				break; 
	
						   
         case "list" :    	 
			  if(!empty($_REQUEST["page"])&&$_SESSION["search"]=="yes")
				{
				  $_SESSION["search"]="yes";
				}
				else
				{
				   $_SESSION["search"]="no";
				   unset($_SESSION["search"]);
				   unset($_SESSION["field_value"]); 
				}
				include("../userinfo/userinfo_list.php");
				break;

case "view" :    	 
				include("../userinfo/userinfo_view.php");
				break;

case "pending" :    	 
			if(!empty($_REQUEST["page"])&&$_SESSION["search"]=="yes")
				{
				  $_SESSION["search"]="yes";
				}
				else
				{
				   $_SESSION["search"]="no";
				   unset($_SESSION["search"]);
				   unset($_SESSION["field_value"]); 
				}
				include("../userinfo/userinfo_pending.php");
				break;

case "search_userinfo":
				$_REQUEST["page"] = 1;  
				$_SESSION["search"]="yes";
				$_SESSION["field_value"] = $_REQUEST["field_value"];
				include("../userinfo/userinfo_list.php");
				break;  								   
						
	     default :    
		       include("../userinfo/userinfo_editor.php");		         
	   }

${this.title}

Code Editor : userinfo.php