File manager

File manager - Edit - /home/autoph/public_html/connect/home/PRF_POSTUNPOSTEDPO.php

Back
<?php include_once 'core/init.php'; $prfDate = date_create() ->format("Y-m-d"); $myUID = $user_data['u_id']; if(isset($_POST['done'])){ //$itemRefCode = mysql_escape_string($_POST['itemRefCode']); $myPONumberA = mysql_escape_string($_POST['myPONumber']); $myPONumber = str_replace(' ', '', $myPONumberA); $MyAPIcode = mysql_result(mysql_query("SELECT `SMSAPICode` FROM `asa_versioning_db` WHERE `type`='Live'"),0); $MyPasswd = mysql_result(mysql_query("SELECT `SMSAPIPass` FROM `asa_versioning_db` WHERE `type`='Live'"),0); $myTokenKey = $myPONumber ."-".$myPONumber; $myToken = md5(md5($myTokenKey)); $valLink ="prfpovalidation.php"; $chkPOIfExist = mysql_result(mysql_query("SELECT COUNT(1) FROM `prf_purchase_order` WHERE `po_number`='$myPONumber'"),0); if($chkPOIfExist == 0){ echo "<script>Alert('ERROR: PO Number ".$myPONumber." cannot be found in the PO Table. Please contact your system support for assistance. Thank yoU!');</script>"; exit; } $poChecker = mysql_result(mysql_query("SELECT `po_officer_id` FROM `prf_poapprover` WHERE `trans_type`='Checker' AND `deleted`=0"),0); mysql_query("UPDATE `prf_request_detl` SET `po_code_posted`='1', `item_status`='8' WHERE `po_code`='$myPONumber'"); mysql_query("UPDATE `prf_purchase_order` SET `token`='$myToken', `checked_by`='$poChecker', `date_posted`='$prfDate', `po_status`='1' WHERE `po_number`='$myPONumber'"); $getPOApprovingOfficers=mysql_query("SELECT vts_users.`u_id`,vts_users.`u_fname`,vts_users.`u_lname`,vts_users.`usr_mobile`,vts_users.`email`, prf_poapprover.`comp_id`,prf_poapprover.`po_officer_id`,prf_poapprover.`authority` FROM prf_poapprover JOIN vts_users ON vts_users.`u_id` = prf_poapprover.`po_officer_id` WHERE prf_poapprover.`deleted`=0 AND prf_poapprover.`trans_type`='Checker'"); while($xRow = mysql_fetch_array($getPOApprovingOfficers)){ $exID = $xRow['u_id']; $randomCodeFinal = rand(10001,999999); $randomCode = $randomCodeFinal."".$exID; $SMSMessage = "Purchase Order #".$myPONumber." has been routed to you for PO Validation. Click the link below to process the request: https://autohub.ph/val.php?c=".$randomCode; $myValidateLink = "https://autohub.ph/val.php?c=".$randomCode; $empMobile = $xRow['usr_mobile']; $empEmail = $xRow['email']; $empFName = $xRow['u_fname']; //$result = itexmo($empMobile, $SMSMessage,$MyAPIcode,$MyPasswd); $result = itexmoAA($empMobile, $SMSMessage,$MyAPIcode,$MyPasswd); if ($result == ""){ //echo '<script>alert("No response from SMS server. SMS failed to send")</script>'; }else if ($result == 0){ //echo "SMS Sent!"; } else{ //echo "Error Num ". $result . " was encountered!"; } //####################################################################### //####################################################################### mysql_query("INSERT INTO prf_validate_links(code,link,po_code,uid,sms_link) VALUES('{$randomCode}','{$valLink}','{$myPONumber}','{$exID}','{$myValidateLink}')"); //mysql_query("INSERT INTO prf_validate_links(code,link,po_code,uid) //VALUES('{$randomCode}','{$valLink}','{$myPONumber}','{$exID}')"); //####################################################################### //####################################################################### //######################################PAGINATION####################################################### //######################################PAGINATION####################################################### $from = "support@autohub.ph"; $to = $empEmail; $subject = "NEW PO FOR VALIDATION"; $msgBox = "Hi ".$empFName."! Purchase Order #".$myPONumber." has been routed to you for PO Validation. Click the link below to process the request: https://autohub.ph/val.php?c=".$randomCode; $headers = "From:" . $from; mail($to,$subject,$msgBox, $headers); //######################################PAGINATION####################################################### //######################################PAGINATION####################################################### } echo "<script>Alert('PO has been posted');</script>"; ?> <table> <?php //######################################PAGINATION####################################################### //######################################PAGINATION####################################################### $totalRows = mysql_result(mysql_query("SELECT COUNT(id) FROM `prf_suppliers` WHERE `deleted`=0 "),0); $noOfRecordPerPage = mysql_result(mysql_query("SELECT `page_count` FROM `asa_versioning_db` WHERE 1"),0); $myPageCount = ceil($totalRows / $noOfRecordPerPage); $offSet = 0;//($myPageCount-1) * $noOfRecordPerPage; echo "<input type='hidden' id='MyPageCount' value='".$myPageCount."'>"; echo "<input type='hidden' id='MyRowCount' value='".$totalRows."'>"; echo "<input type='hidden' id='myOffSet' value='".$offSet."'>"; echo "<input type='hidden' id='recordPerPage' value='".$noOfRecordPerPage."'>"; //####################################################################################################### //####################################################################################################### $getItemHdr = mysql_query("SELECT * FROM `prf_request_detl` WHERE `awarded`= 1 AND `deleted`=0 AND `execom_approval_ts`!= '' AND `for_execom_canvass_approval`=1 AND `po_code`='' ORDER BY `execom_approval_ts` DESC LIMIT $offSet, $noOfRecordPerPage "); while($row=mysql_fetch_array($getItemHdr)){ $regHDRcode=$row['header_ref_code']; $regCat=$row['category_id']; $vendorID = $row['award_to_vendor_id']; $vendorName = mysql_result(mysql_query("SELECT `sup_name` FROM `prf_suppliers` WHERE `id`='$vendorID'"),0); $regCatName =mysql_result(mysql_query("SELECT `description` FROM `prf_expensecategory` WHERE `id`='$regCat'"),0); $reqByID = mysql_result(mysql_query("SELECT `request_by` FROM `prf_request_hdr` WHERE `reference_code`='$regHDRcode'"),0); $reqCompID=$row['comp_id']; $dateNeeded = mysql_result(mysql_query("SELECT `date_needed` FROM `prf_request_hdr` WHERE `reference_code`='$regHDRcode'"),0); $reqCompName = mysql_result(mysql_query("SELECT `comp_name` FROM vts_company WHERE comp_id='$reqCompID'"),0); $reqByFName = mysql_result(mysql_query("SELECT u_fname FROM vts_users WHERE u_id='$reqByID'"),0); $reqByLName = mysql_result(mysql_query("SELECT u_lname FROM vts_users WHERE u_id='$reqByID'"),0); $fileCode = mysql_result(mysql_query("SELECT `file_code` FROM `prf_uploadedcanvass` WHERE `ref_code`='".$row['approved_proposal_code']."'"),0); ?><tr onclick="javascript:getInfo(this);" id='LoadUserApprovedCanvassItem' ><?php echo "<td style='width:5%'>".$row['id']."</td>"; echo "<td style='width:10%'>".$row['header_ref_code']."</td>"; echo "<td style='width:15%'>".$reqCompName."</td>"; echo "<td style='width:20%'>".$vendorName."</td>"; echo "<td style='width:30%'>".$row['item_description']."</td>"; echo "<td style='width:5%'>".$row['approved_qty']."</td>"; echo "<td style='width:10%'>".$row['approved_amount']."</td>"; echo "<td style='width:5%;text-align:center'><a href='https://www.autohub.ph/connect/home/FILES/canvass/".$fileCode."' target='_blank'>📋</a></td>"; echo "</tr>"; } ?> </table> <?php } ?>

| ver. 1.4 | . | PHP 7.3.33 | Generation time: 0.05 | proxy | phpinfo | Settings