Chorverwaltung
This commit is contained in:
aschwarz
258
controller/admin_memberupload.php
Normal file
258
controller/admin_memberupload.php
Normal file
@ -0,0 +1,258 @@
|
||||
<?php
|
||||
require_once ("../config.inc.php");
|
||||
$function = $_POST['function'];
|
||||
|
||||
if ($function == 'save_with_files')
|
||||
{
|
||||
|
||||
if (isset($_POST) && $_SERVER['REQUEST_METHOD'] == "POST")
|
||||
{
|
||||
## Dieses Script wird für jede Datei einzeln aufgerufen durch vpb_uploader.js. Bei 3 Dateien, 3x
|
||||
$vorname = $_POST['vorname'];
|
||||
$nachname = $_POST['nachname'];
|
||||
$mail = $_POST['mail'];
|
||||
#csid gesetzt, wenn Member bearbeitet wird
|
||||
$csid_edit = $_POST['csid_edit'];
|
||||
$singstimme = $_POST['singstimme'];
|
||||
$bemerkung = $db->real_escape_string(stripslashes( $_POST['bemerkung'] ));
|
||||
|
||||
// Fehlercheck funktioniert hier nicht. Das Script wird so oft aufgerufen wie Dateien angehängt werden. Bei mehreren Dateien ist spätestens nach dem zweiten Aufruf der Sänger vorhanden
|
||||
// $result = $db->query("SELECT count(*) Anz FROM jumi_chor_saenger WHERE mail = '$mail'");
|
||||
// $row = $result->fetch_array();
|
||||
//
|
||||
// #Fehlercheck
|
||||
// if ($row['Anz'] != "0") {
|
||||
// echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> User ist im System bereits vorhanden!</div>|***|error';
|
||||
// }
|
||||
if ($singstimme == '' or $vorname == '' or $nachname == '' or $mail == '') {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Es müssen alle Felder ausgefüllt werden!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
if (!filter_var($mail, FILTER_VALIDATE_EMAIL)) {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Geben Sie eine gültige Mailadresse ein!</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
$datum_file = date("Ymd_His_");
|
||||
#$vpb_file_name = strip_tags($_FILES['upload_file']['name']); //File Name
|
||||
$vpb_file_name = str_replace(array(
|
||||
"ä",
|
||||
"ö",
|
||||
"ü",
|
||||
"ß",
|
||||
"Ä",
|
||||
"Ö",
|
||||
"Ü",
|
||||
" "
|
||||
) , array(
|
||||
"ae",
|
||||
"oe",
|
||||
"ue",
|
||||
"ss",
|
||||
"Ae",
|
||||
"Oe",
|
||||
"Ue",
|
||||
"_"
|
||||
) , $_FILES['upload_file']['name']);
|
||||
$originalname = $_FILES['upload_file']['name'];
|
||||
$vpb_file_name = $datum_file . $vpb_file_name;
|
||||
$vpb_file_id = strip_tags($_POST['upload_file_ids']); // File id is gotten from the file name
|
||||
$vpb_file_size = $_FILES['upload_file']['size']; // File Size
|
||||
$vpb_uploaded_files_location = '../media/file_upload/member/'; //This is the directory where uploaded files are saved on your server
|
||||
$vpb_final_location = $vpb_uploaded_files_location . $vpb_file_name; //Directory to save file plus the file to be saved
|
||||
//Without Validation and does not save filenames in the database
|
||||
|
||||
|
||||
if (move_uploaded_file(strip_tags($_FILES['upload_file']['tmp_name']) , $vpb_final_location))
|
||||
{
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
$result = $db->query("SELECT csid
|
||||
FROM jumi_chor_saenger
|
||||
WHERE vorname = '$vorname'
|
||||
AND nachname = '$nachname'
|
||||
AND singstimme = '$singstimme'
|
||||
");
|
||||
$row = $result->fetch_array();
|
||||
if ($row['csid'] == '' AND $csid_edit == '-1')
|
||||
{
|
||||
$sql1 = $db->query("INSERT INTO jumi_chor_saenger ( vorname
|
||||
, nachname
|
||||
, mail
|
||||
, singstimme
|
||||
, bemerkung
|
||||
)
|
||||
VALUES
|
||||
( '$vorname'
|
||||
, '$nachname'
|
||||
, '$mail'
|
||||
, '$singstimme'
|
||||
, '$bemerkung'
|
||||
)
|
||||
");
|
||||
$csid = $db->insert_id;
|
||||
}
|
||||
elseif($csid_edit != '-1')
|
||||
{
|
||||
$sql1 = $db->query( "UPDATE jumi_chor_saenger
|
||||
SET vorname = '$vorname'
|
||||
,nachname = '$nachname'
|
||||
,mail = '$mail'
|
||||
,singstimme = '$singstimme'
|
||||
,bemerkung = '$bemerkung'
|
||||
WHERE csid = $csid_edit
|
||||
" );
|
||||
$csid = $csid_edit;
|
||||
}
|
||||
else
|
||||
{
|
||||
$csid = $row['csid'];
|
||||
}
|
||||
|
||||
$sql2 = $db->query("INSERT INTO jumi_chor_saenger_uploads ( csid
|
||||
, filename
|
||||
, originalname
|
||||
, uid
|
||||
, datum
|
||||
)
|
||||
VALUES
|
||||
( $csid
|
||||
, '$vpb_final_location'
|
||||
, '$originalname'
|
||||
, $uid
|
||||
, '$datum'
|
||||
)
|
||||
");
|
||||
//Display the file id
|
||||
if ($sql2)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Dokumente wurden angelegt!</div>|***|success|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Dokumente wurden nicht angelegt: Insert Fehler Datenbank.</div>|***|error|***|' . $vpb_file_id;
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
else
|
||||
{
|
||||
//Display general system error
|
||||
echo 'general_system_error';
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'save_without_files')
|
||||
{
|
||||
$vorname = $_POST['vorname'];
|
||||
$nachname = $_POST['nachname'];
|
||||
$mail = $_POST['mail'];
|
||||
$singstimme = $_POST['singstimme'];
|
||||
#csid gesetzt, wenn Member bearbeitet wird
|
||||
$csid_edit =$_POST['csid_edit'];
|
||||
$bemerkung = $db->real_escape_string(stripslashes( $_POST['bemerkung'] ));
|
||||
$db = dbconnect();
|
||||
$datum = date("Y-m-d H:i:s");
|
||||
|
||||
if($csid_edit == '-1'){
|
||||
$sql1 = $db->query("INSERT INTO jumi_chor_saenger ( vorname
|
||||
, nachname
|
||||
, mail
|
||||
, singstimme
|
||||
, bemerkung
|
||||
)
|
||||
VALUES
|
||||
( '$vorname'
|
||||
, '$nachname'
|
||||
, '$mail'
|
||||
, '$singstimme'
|
||||
, '$bemerkung'
|
||||
)
|
||||
");
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> SägerIn wurde angelegt!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> SägerIn wurde nicht angelegt: Insert Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
}else{
|
||||
$sql1 = $db->query( "UPDATE jumi_chor_saenger
|
||||
SET vorname = '$vorname'
|
||||
,nachname = '$nachname'
|
||||
,mail = '$mail'
|
||||
,singstimme = '$singstimme'
|
||||
,bemerkung = '$bemerkung'
|
||||
WHERE csid = $csid_edit
|
||||
" );
|
||||
if ($sql1)
|
||||
{
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> SägerIn wurde bearbeitet!</div>|***|success|***|';
|
||||
exit;
|
||||
}
|
||||
else
|
||||
{
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> SägerIn nicht bearbeitet: Update Fehler Datenbank.</div>|***|error';
|
||||
exit;
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
if ($function == 'delMemberFile') {
|
||||
if (isset($_POST['id'])) {
|
||||
$id = $_POST['id'];
|
||||
}
|
||||
|
||||
$result0 = $db->query("SELECT filename, csid
|
||||
FROM jumi_chor_saenger_uploads
|
||||
WHERE id = $id;");
|
||||
$row0 = $result0->fetch_array();
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_chor_saenger_uploads WHERE id= $id");
|
||||
$del = unlink($row0['filename']);
|
||||
|
||||
if ($stmt1 AND $del) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> Die Datei wurde gelöscht!</div>|***|success|***|'.$row0['csid'];
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> Die Datei wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success|***|'.$row0['csid'];
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
if ($function == 'delMember') {
|
||||
if (isset($_POST['csid'])) {
|
||||
$csid = $_POST['csid'];
|
||||
}
|
||||
|
||||
$query = "SELECT id, filename, originalname FROM jumi_chor_saenger_uploads WHERE csid='$csid' ORDER BY datum DESC";
|
||||
$result = $db->query( $query)
|
||||
or die ("Cannot execute query1");
|
||||
|
||||
while ($row = $result->fetch_array()){
|
||||
$del = unlink($row['filename']);
|
||||
}
|
||||
|
||||
|
||||
$stmt1 = $db->query("DELETE FROM jumi_chor_saenger_uploads WHERE csid = $csid;");
|
||||
$stmt2 = $db->query("DELETE FROM jumi_chor_saenger WHERE csid = $csid");
|
||||
|
||||
|
||||
if ($stmt1 AND $stmt2) {
|
||||
echo '<div class="alert alert-success"><i class="fa fa-fw fa-thumbs-up"></i> SägerIn wurde gelöscht!</div>|***|success|***|'.$row0['csid'];
|
||||
exit;
|
||||
} else {
|
||||
echo '<div class="alert alert-danger"><i class="fa fa-fw fa-thumbs-down"></i> SägerIn wurde nicht gelöscht: DELETE Fehler Datenbank.</div>|***|success|***|'.$row0['csid'];
|
||||
exit;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
?>
|
||||
Reference in New Issue
Block a user