File manager

File manager - Edit - /home/autoph/public_html/pms_v1/pef/updateInbox.php

Back
<?php include_once("../../../cfg/conn.php"); //error_reporting(0); if(isset($_POST['inbox'])){ $chkReceiver =0; $empSect = 0; //2 $empDept = 0; $empDivM = 0; $empDivG = 0; $empBrnh = 0; $empComp = 0; $empEmail = ""; $empMobile = ""; $myTimeStampExTX = str_replace(" ","",$myTimeStamp); $myTimeStampExTY = str_replace("-","",$myTimeStampExTX); $myTimeStampExT = str_replace(":","",$myTimeStampExTY); $userID = $_POST['userID']; $getEmpRecordID = $_POST['getEmpRecordID']; $myMessage = $_POST['myMessage']; $mySubject = $_POST['mySubject']; //get employees information so we can query the approver based on setup $getempInfor = "SELECT * FROM `pms_employee_data` WHERE `deleted`='0' AND `id`='$getEmpRecordID'"; $getempInfo = mysqli_query($conn,$getempInfor); while($eRow = mysqli_fetch_array($getempInfo)){ $empSect = $eRow['unit_id']; //2 $empDept = $eRow['department_id'];//3 $empDivM = $eRow['division_id'];//4 $empDivG = $eRow['sub_group_id'];//5 $empBrnh = $eRow['branch_id'];//6 $empComp = $eRow['comp_id'];//7 $empEmail = $eRow['mail'];//7 $empMobile = $eRow['mobile_no'];//7 } //E-MAIL INFO $from = "support@autohubgroup.comp"; $to=""; $subject = "POSTED MAR"; $msgBox = "Good day! New PEF has been posted for your review and approval. For more details, please login to https://pms.autohub.ph"; $headers = "From:" . $from; //END OF EMAIL INFO $withEMPLApprover = "SELECT * FROM `approver_setup` WHERE `deleted`='0' AND `level`='EMPL' AND `unit_id`='$getEmpRecordID'"; $wEmpApr = mysqli_query($conn,$withEMPLApprover); $empRow = mysqli_num_rows($wEmpApr); if($empRow > 0){ $chkReceiver = 1; //1 } //check Section if employee approver is not present if($chkReceiver == 0){ $withSectApprover = "SELECT * FROM `approver_setup` WHERE `deleted`='0' AND `level`='SECT' AND `unit_id`='$empSect'"; $wSecApr = mysqli_query($conn,$withSectApprover); $secRow = mysqli_num_rows($wSecApr); if($secRow > 0){ $chkReceiver =2; //2 } } //check Department if Section approver is not present if($chkReceiver == 0){ $withDeptApprover = "SELECT * FROM `approver_setup` WHERE `deleted`='0' AND `level`='DEPT' AND `unit_id`='$empDept'"; $wDepApr = mysqli_query($conn,$withDeptApprover); $depRow = mysqli_num_rows($wDepApr); if($depRow > 0){ $chkReceiver =3; //3 } } //check Division if Department approver is not present if($chkReceiver == 0){ $withDivmApprover = "SELECT * FROM `approver_setup` WHERE `deleted`='0' AND `level`='DIVM' AND `unit_id`='$empDivM'"; $wDivApr = mysqli_query($conn,$withDivmApprover); $divRow = mysqli_num_rows($wDivApr); if($divRow > 0){ $chkReceiver = 4; //4 } } //check Group if Division approver is not present if($chkReceiver == 0){ $withSubGApprover = "SELECT * FROM `approver_setup` WHERE `deleted`='0' AND `level`='SUBG' AND `unit_id`='$empDivG'"; $wSubGApr = mysqli_query($conn,$withSubGApprover); $subRow = mysqli_num_rows($wSubGApr); if($subRow > 0){ $chkReceiver = 5; //5 } } //check Bramch if Sub Group approver is not present if($chkReceiver == 0){ $withDealApprover = "SELECT * FROM `approver_setup` WHERE `deleted`='0' AND `level`='DEAL' AND `unit_id`='$empBrnh'"; $wDealApr = mysqli_query($conn,$withDealApprover); $dealRow = mysqli_num_rows($wDealApr); if($dealRow > 0){ $chkReceiver = 6; //6 } } //check Company if Branch approver is not present if($chkReceiver == 0){ $withCompApprover = "SELECT * FROM `approver_setup` WHERE `deleted`='0' AND `level`='COMP' AND `unit_id`='$empComp'"; $wComApr = mysqli_query($conn,$withCompApprover); $comRow = mysqli_num_rows($wComApr); if($comRowf > 0){ $chkReceiver = 7; //7 } } switch($chkReceiver){ case '1': $qApprover = " SELECT approver_setup.`unit_id`, approver_setup.`approver_id`, approver_setup.`level`, approver_setup.`id` AS aprID, approver_setup.`unit_id`, approver_setup.`deleted`, approver_setup.`approver_type`, pms_employee_data.`id` AS empRecID, pms_employee_data.`comp_id`, pms_employee_data.`branch_id`, pms_employee_data.`sub_group_id`, pms_employee_data.`division_id`, pms_employee_data.`department_id`, pms_employee_data.`unit_id` AS myUnit, pms_employee_data.`first_name`, pms_employee_data.`last_name`, pms_employee_data.`e-mail`, pms_employee_data.`mobile_no` FROM approver_setup INNER JOIN pms_employee_data ON pms_employee_data.id = approver_setup.`approver_id` WHERE approver_setup.`deleted`='0' AND approver_setup.`level`='EMPL' AND approver_setup.`unit_id`='$getEmpRecordID'"; $qApr = mysqli_query($conn,$qApprover); while($row=mysqli_fetch_array($qApr)){ $id = $row['unit_id']; $to = $row['e-mail']; $headReceiverID = $row['empRecID']; $myToken = $headReceiverID ."".$myTimeStampExT; //20230523074312 //###################################### MAIL SENDER####################################################### mail($to,$subject,$msgBox, $headers); //###################################### SMS SENDER ####################################################### //$result = itexmoAA($empMobile, $msgBox); //if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; //}else if ($result == 0){ //echo "SMS Sent!"; //}else{ //echo "Error Num ". $result . " was encountered!"; //} //insert to inbox table $sql = "INSERT INTO pms_inbox ( `id`, `sender_id`, `subject`, `date_time`, `message`, `receiver_id`, `read_unread`, `group_msg_id`) VALUES ('', '$userID', '$mySubject', '$myTimeStamp', '$myMessage', '$headReceiverID', '0', '$myToken')"; if ($conn->query($sql) === TRUE) { } else { } } break; case '2': $qApprover = " SELECT approver_setup.`unit_id`, approver_setup.`approver_id`, approver_setup.`level`, approver_setup.`id` AS aprID, approver_setup.`unit_id`, approver_setup.`deleted`, approver_setup.`approver_type`, pms_employee_data.`id` AS empRecID, pms_employee_data.`comp_id`, pms_employee_data.`branch_id`, pms_employee_data.`sub_group_id`, pms_employee_data.`division_id`, pms_employee_data.`department_id`, pms_employee_data.`unit_id` AS myUnit, pms_employee_data.`first_name`, pms_employee_data.`last_name`, pms_employee_data.`e-mail`, pms_employee_data.`mobile_no` FROM approver_setup INNER JOIN pms_employee_data ON pms_employee_data.id = approver_setup.`approver_id` WHERE approver_setup.`deleted`='0' AND approver_setup.`level`='SECT' AND approver_setup.`unit_id`='$empSect'"; $qApr = mysqli_query($conn,$qApprover); while($row=mysqli_fetch_array($qApr)){ $id = $row['unit_id']; $to = $row['e-mail']; $headReceiverID = $row['empRecID']; $myToken = $headReceiverID ."".$myTimeStampExT; //20230523074312 //###################################### MAIL SENDER####################################################### mail($to,$subject,$msgBox, $headers); //###################################### SMS SENDER ####################################################### //$result = itexmoAA($empMobile, $msgBox); //if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; //}else if ($result == 0){ //echo "SMS Sent!"; //}else{ //echo "Error Num ". $result . " was encountered!"; //} //insert to inbox table $sql = "INSERT INTO pms_inbox ( `id`, `sender_id`, `subject`, `date_time`, `message`, `receiver_id`, `read_unread`, `group_msg_id`) VALUES ('', '$userID', '$mySubject', '$myTimeStamp', '$myMessage', '$headReceiverID', '0', '$myToken')"; if ($conn->query($sql) === TRUE) { } else { } } break; case '3': $qApprover = " SELECT approver_setup.`unit_id`, approver_setup.`approver_id`, approver_setup.`level`, approver_setup.`id` AS aprID, approver_setup.`unit_id`, approver_setup.`deleted`, approver_setup.`approver_type`, pms_employee_data.`id` AS empRecID, pms_employee_data.`comp_id`, pms_employee_data.`branch_id`, pms_employee_data.`sub_group_id`, pms_employee_data.`division_id`, pms_employee_data.`department_id`, pms_employee_data.`unit_id` AS myUnit, pms_employee_data.`first_name`, pms_employee_data.`last_name`, pms_employee_data.`e-mail`, pms_employee_data.`mobile_no` FROM approver_setup INNER JOIN pms_employee_data ON pms_employee_data.id = approver_setup.`approver_id` WHERE approver_setup.`deleted`='0' AND approver_setup.`level`='DEPT' AND approver_setup.`unit_id`='$empDept'"; $qApr = mysqli_query($conn,$qApprover); while($row=mysqli_fetch_array($qApr)){ $id = $row['unit_id']; $to = $row['e-mail']; $headReceiverID = $row['empRecID']; $myToken = $headReceiverID ."".$myTimeStampExT; //20230523074312 //###################################### MAIL SENDER####################################################### mail($to,$subject,$msgBox, $headers); //###################################### SMS SENDER ####################################################### //$result = itexmoAA($empMobile, $msgBox); //if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; //}else if ($result == 0){ //echo "SMS Sent!"; //}else{ //echo "Error Num ". $result . " was encountered!"; //} //insert to inbox table $sql = "INSERT INTO pms_inbox ( `id`, `sender_id`, `subject`, `date_time`, `message`, `receiver_id`, `read_unread`, `group_msg_id`) VALUES ('', '$userID', '$mySubject', '$myTimeStamp', '$myMessage', '$headReceiverID', '0', '$myToken')"; if ($conn->query($sql) === TRUE) { } else { } } break; case '4': $qApprover = " SELECT approver_setup.`unit_id`, approver_setup.`approver_id`, approver_setup.`level`, approver_setup.`id` AS aprID, approver_setup.`unit_id`, approver_setup.`deleted`, approver_setup.`approver_type`, pms_employee_data.`id` AS empRecID, pms_employee_data.`comp_id`, pms_employee_data.`branch_id`, pms_employee_data.`sub_group_id`, pms_employee_data.`division_id`, pms_employee_data.`department_id`, pms_employee_data.`unit_id` AS myUnit, pms_employee_data.`first_name`, pms_employee_data.`last_name`, pms_employee_data.`e-mail`, pms_employee_data.`mobile_no` FROM approver_setup INNER JOIN pms_employee_data ON pms_employee_data.id = approver_setup.`approver_id` WHERE approver_setup.`deleted`='0' AND approver_setup.`level`='DIVM' AND approver_setup.`unit_id`='$empDivM'"; $qApr = mysqli_query($conn,$qApprover); while($row=mysqli_fetch_array($qApr)){ $id = $row['unit_id']; $to = $row['e-mail']; $headReceiverID = $row['empRecID']; $myToken = $headReceiverID ."".$myTimeStampExT; //20230523074312 //###################################### MAIL SENDER####################################################### mail($to,$subject,$msgBox, $headers); //###################################### SMS SENDER ####################################################### //$result = itexmoAA($empMobile, $msgBox); //if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; //}else if ($result == 0){ //echo "SMS Sent!"; //}else{ //echo "Error Num ". $result . " was encountered!"; //} //insert to inbox table $sql = "INSERT INTO pms_inbox ( `id`, `sender_id`, `subject`, `date_time`, `message`, `receiver_id`, `read_unread`, `group_msg_id`) VALUES ('', '$userID', '$mySubject', '$myTimeStamp', '$myMessage', '$headReceiverID', '0', '$myToken')"; if ($conn->query($sql) === TRUE) { } else { } } break; case '5': $qApprover = " SELECT approver_setup.`unit_id`, approver_setup.`approver_id`, approver_setup.`level`, approver_setup.`id` AS aprID, approver_setup.`unit_id`, approver_setup.`deleted`, approver_setup.`approver_type`, pms_employee_data.`id` AS empRecID, pms_employee_data.`comp_id`, pms_employee_data.`branch_id`, pms_employee_data.`sub_group_id`, pms_employee_data.`division_id`, pms_employee_data.`department_id`, pms_employee_data.`unit_id` AS myUnit, pms_employee_data.`first_name`, pms_employee_data.`last_name`, pms_employee_data.`e-mail`, pms_employee_data.`mobile_no` FROM approver_setup INNER JOIN pms_employee_data ON pms_employee_data.id = approver_setup.`approver_id` WHERE approver_setup.`deleted`='0' AND approver_setup.`level`='SUBG' AND approver_setup.`unit_id`='$empDivG'"; $qApr = mysqli_query($conn,$qApprover); while($row=mysqli_fetch_array($qApr)){ $id = $row['unit_id']; $to = $row['e-mail']; $headReceiverID = $row['empRecID']; $myToken = $headReceiverID ."".$myTimeStampExT; //20230523074312 //###################################### MAIL SENDER####################################################### mail($to,$subject,$msgBox, $headers); //###################################### SMS SENDER ####################################################### //$result = itexmoAA($empMobile, $msgBox); //if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; //}else if ($result == 0){ //echo "SMS Sent!"; //}else{ //echo "Error Num ". $result . " was encountered!"; //} //insert to inbox table $sql = "INSERT INTO pms_inbox ( `id`, `sender_id`, `subject`, `date_time`, `message`, `receiver_id`, `read_unread`, `group_msg_id`) VALUES ('', '$userID', '$mySubject', '$myTimeStamp', '$myMessage', '$headReceiverID', '0', '$myToken')"; if ($conn->query($sql) === TRUE) { } else { } } break; case '6': $qApprover = " SELECT approver_setup.`unit_id`, approver_setup.`approver_id`, approver_setup.`level`, approver_setup.`id` AS aprID, approver_setup.`unit_id`, approver_setup.`deleted`, approver_setup.`approver_type`, pms_employee_data.`id` AS empRecID, pms_employee_data.`comp_id`, pms_employee_data.`branch_id`, pms_employee_data.`sub_group_id`, pms_employee_data.`division_id`, pms_employee_data.`department_id`, pms_employee_data.`unit_id` AS myUnit, pms_employee_data.`first_name`, pms_employee_data.`last_name`, pms_employee_data.`e-mail`, pms_employee_data.`mobile_no` FROM approver_setup INNER JOIN pms_employee_data ON pms_employee_data.id = approver_setup.`approver_id` WHERE approver_setup.`deleted`='0' AND approver_setup.`level`='DEAL' AND approver_setup.`unit_id`='$empBrnh'"; $qApr = mysqli_query($conn,$qApprover); while($row=mysqli_fetch_array($qApr)){ $id = $row['unit_id']; $to = $row['e-mail']; $headReceiverID = $row['empRecID']; $myToken = $headReceiverID ."".$myTimeStampExT; //20230523074312 //###################################### MAIL SENDER####################################################### mail($to,$subject,$msgBox, $headers); //###################################### SMS SENDER ####################################################### //$result = itexmoAA($empMobile, $msgBox); //if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; //}else if ($result == 0){ //echo "SMS Sent!"; //}else{ //echo "Error Num ". $result . " was encountered!"; //} //insert to inbox table $sql = "INSERT INTO pms_inbox ( `id`, `sender_id`, `subject`, `date_time`, `message`, `receiver_id`, `read_unread`, `group_msg_id`) VALUES ('', '$userID', '$mySubject', '$myTimeStamp', '$myMessage', '$headReceiverID', '0', '$myToken')"; if ($conn->query($sql) === TRUE) { } else { } } break; case '7': $qApprover = " SELECT approver_setup.`unit_id`, approver_setup.`approver_id`, approver_setup.`level`, approver_setup.`id` AS aprID, approver_setup.`unit_id`, approver_setup.`deleted`, approver_setup.`approver_type`, pms_employee_data.`id` AS empRecID, pms_employee_data.`comp_id`, pms_employee_data.`branch_id`, pms_employee_data.`sub_group_id`, pms_employee_data.`division_id`, pms_employee_data.`department_id`, pms_employee_data.`unit_id` AS myUnit, pms_employee_data.`first_name`, pms_employee_data.`last_name`, pms_employee_data.`e-mail`, pms_employee_data.`mobile_no` FROM approver_setup INNER JOIN pms_employee_data ON pms_employee_data.id = approver_setup.`approver_id` WHERE approver_setup.`deleted`='0' AND approver_setup.`level`='COMP' AND approver_setup.`unit_id`='$empComp'"; $qApr = mysqli_query($conn,$qApprover); while($row=mysqli_fetch_array($qApr)){ $id = $row['unit_id']; $to = $row['e-mail']; $headReceiverID = $row['empRecID']; $myToken = $headReceiverID ."".$myTimeStampExT; //20230523074312 //###################################### MAIL SENDER####################################################### mail($to,$subject,$msgBox, $headers); //###################################### SMS SENDER ####################################################### //$result = itexmoAA($empMobile, $msgBox); //if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; //}else if ($result == 0){ //echo "SMS Sent!"; //}else{ //echo "Error Num ". $result . " was encountered!"; //} //insert to inbox table $sql = "INSERT INTO pms_inbox ( `id`, `sender_id`, `subject`, `date_time`, `message`, `receiver_id`, `read_unread`, `group_msg_id`) VALUES ('', '$userID', '$mySubject', '$myTimeStamp', '$myMessage', '$headReceiverID', '0', '$myToken')"; if ($conn->query($sql) === TRUE) { } else { } } break; } $conn->close(); } ?>

| ver. 1.4 | . | PHP 7.3.33 | Generation time: 0 | proxy | phpinfo | Settings