File manager

File manager - Edit - /home/autoph/public_html/data03252025consolidation/app/bank/configurations/bank_banks.php

Back
<?php include_once("../../../cfg/db.php"); $type = $db->escape($_POST['type']); if($type == 1){ // add bank $bank_code = $db->escape(trim(strtoupper($_POST['bank_code']))); $new_bank = $db->escape(trim(strtoupper($_POST['new_bank']))); $current_user = $_SESSION['user']['id']; if(intval($db->select("SELECT COUNT(1) FROM bank_db WHERE abbreviation = '$bank_code'")) > 0){ $return_arr['status'] = 0; //duplicate bank code $return_arr['message'] = "Bank code already existing"; echo json_encode($return_arr); } else if(intval($db->select("SELECT COUNT(1) FROM bank_db WHERE name = '$new_bank'")) > 0){ $return_arr['status'] = 1; //duplicate bank name $return_arr['message'] = "Bank name already existing"; echo json_encode($return_arr); } else { $current_date = $db->select("SELECT DATE_FORMAT(CURRENT_DATE(), '%Y-%m_%d') AS date"); $db->sql_query("INSERT INTO `bank_db` (`abbreviation`, `name`, `added_by`, `last_modified_by`, `date_modified`, `status`) VALUES('$bank_code', '$new_bank', '$current_user', '$current_user', '$current_date', 1)"); $return_arr['status'] = 2; echo json_encode($return_arr); } } else if($type == 2){ // reload / load brand list $bank_id = $db->escape($_POST['bank_id']); $arr = array(); $query = "SELECT bd.id, bd.name, bd.abbreviation, DATE_FORMAT(bd.date_added, '%b %d, %Y / %h:%i %p') AS date_added, concat(e1.first_name, ' ', e1.last_name) AS added_by, concat(e2.first_name, ' ', e2.last_name) AS last_modified_by, DATE_FORMAT(bd.date_modified, '%b %d, %Y') AS date_modified, bd.status FROM bank_db bd INNER JOIN employee e1 ON bd.added_by = e1.id INNER JOIN employee e2 ON bd.last_modified_by = e2.id WHERE bd.id = '$bank_id' AND bd.id != 0"; $query_list = $db->sql_query($query); foreach($query_list AS $row){ $arr['id'] = $row['id']; $arr['code'] = $row['abbreviation']; $arr['name'] = $row['name']; $arr['date_added'] = $row['date_added']; $arr['added_by'] = $row['added_by']; $arr['last_modified_by'] = $row['last_modified_by']; $arr['date_modified'] = $row['date_modified']; $arr['status'] = (intval($row['status']) <> 0) ? true : false ; } echo json_encode($arr); } else if($type == 3){ // update bank $bank_id = $db->escape($_POST['bank_id']); $new_bank_code = $db->escape(trim(strtoupper($_POST['new_bank_code']))); $new_bank_name = $db->escape(trim(strtoupper($_POST['new_bank_name']))); $status = $db->escape($_POST['status']); $set_status = 0; $current_user = $_SESSION['user']['id']; if($status == "true"){ $set_status = 1; } if(intval($db->select("SELECT COUNT(1) FROM bank_db WHERE `abbreviation` != '' AND `abbreviation` = '$new_bank_code' AND id != '$bank_id'")) > 0){ $arr['status'] = 0; //duplicate bank code } else if(intval($db->select("SELECT COUNT(1) FROM bank_db WHERE `name` != '' AND `name` = '$new_bank_name' AND id != '$bank_id'")) > 0){ $arr['status'] = 1; //duplicate bank name } else { $current_date = $db->select("SELECT DATE_FORMAT(CURRENT_DATE(), '%Y-%m_%d') AS date"); $update_query = "UPDATE `bank_db` SET `abbreviation`='$new_bank_code', `name`='$new_bank_name', `status`='$set_status', `last_modified_by`='$current_user', `date_modified` = '$current_date' WHERE `id` = '$bank_id'"; //echo $update_query; $db->sql_query($update_query); $arr['status'] = 2; //success update } echo json_encode($arr); } else if($type == 4){ // refresh list $query = "SELECT `id`, `abbreviation`, `name` FROM `bank_db` WHERE id != 0 ORDER BY name ASC"; $bank = $db->return_result($query); //echo $query; return; foreach($bank AS $data){ echo "<option value='{$data['id']}'>".$data['abbreviation']. " - ". $data['name']."</option>"; } } else if($type == 5){ // search function $search_item = $db->escape(trim($_POST['search_item'])); $search_query = "SELECT id, abbreviation, name FROM bank_db WHERE (name LIKE '%%$search_item%%') OR (abbreviation LIKE '%%$search_item%%') AND id != 0 ORDER BY name ASC"; //echo $search_query; return; $result = $db->sql_query($search_query); //echo $search_query; return; while($row = $result->fetch_assoc()) { echo '<option value="'.$row['id'].'">'.$row["abbreviation"]." - ".$row['name'].'</option>'; } } ?>

| ver. 1.4 | . | PHP 7.3.33 | Generation time: 0 | proxy | phpinfo | Settings