X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=admin%2Fattachments.php;h=34ae4c46429ec2fdb1c391c70a15dab370298324;hb=df3ebb4251529abb480179600417fe7164951fe2;hp=cf1c16966540a9389db1aac7392efd7d892df816;hpb=4d4371fb200bb27fd6b680ebd2d1aaa450a0be7e;p=fa-stable.git diff --git a/admin/attachments.php b/admin/attachments.php index cf1c1696..34ae4c46 100644 --- a/admin/attachments.php +++ b/admin/attachments.php @@ -10,51 +10,66 @@ See the License here . ***********************************************************************/ $path_to_root=".."; -$page_security = 8; +$page_security = 'SA_ATTACHDOCUMENT'; include_once($path_to_root . "/includes/session.inc"); include_once($path_to_root . "/includes/date_functions.inc"); include_once($path_to_root . "/includes/ui.inc"); include_once($path_to_root . "/includes/data_checks.inc"); +include_once($path_to_root . "/admin/db/attachments_db.inc"); +if (isset($_GET['vw'])) + $view_id = $_GET['vw']; +else $view_id = find_submit('view'); if ($view_id != -1) { $row = get_attachment($view_id); if ($row['filename'] != "") { - $type = ($row['filetype']) ? $row['filetype'] : 'application/octet-stream'; - header("Content-type: ".$type); - header('Content-Length: '.$row['filesize']); - if ($type == 'application/octet-stream') - header('Content-Disposition: attachment; filename='.$row['filename']); - else - header("Content-Disposition: inline"); - echo file_get_contents($comp_path."/".user_company(). "/attachments/".$row['unique_name']); - exit(); + if(in_ajax()) { + $Ajax->popup($_SERVER['PHP_SELF'].'?vw='.$view_id); + } else { + $type = ($row['filetype']) ? $row['filetype'] : 'application/octet-stream'; + header("Content-type: ".$type); + header('Content-Length: '.$row['filesize']); + if ($type == 'application/octet-stream') + header('Content-Disposition: attachment; filename='.$row['filename']); + else + header("Content-Disposition: inline"); + echo file_get_contents(company_path(). "/attachments/".$row['unique_name']); + exit(); + } } } +if (isset($_GET['dl'])) + $download_id = $_GET['dl']; +else + $download_id = find_submit('download'); -$download_id = find_submit('download'); if ($download_id != -1) { $row = get_attachment($download_id); if ($row['filename'] != "") { - $type = ($row['filetype']) ? $row['filetype'] : 'application/octet-stream'; - header("Content-type: ".$type); - header('Content-Length: '.$row['filesize']); - header('Content-Disposition: attachment; filename='.$row['filename']); - echo file_get_contents($comp_path."/".user_company(). "/attachments/".$row['unique_name']); - exit(); + if(in_ajax()) { + $Ajax->redirect($_SERVER['PHP_SELF'].'?dl='.$download_id); + } else { + $type = ($row['filetype']) ? $row['filetype'] : 'application/octet-stream'; + header("Content-type: ".$type); + header('Content-Length: '.$row['filesize']); + header('Content-Disposition: attachment; filename='.$row['filename']); + echo file_get_contents(company_path()."/attachments/".$row['unique_name']); + exit(); + } } } $js = ""; if ($use_popup_windows) $js .= get_js_open_window(800, 500); -page(_("Attach Documents"), false, false, "", $js); +page(_($help_context = "Attach Documents"), false, false, "", $js); simple_page_mode(true); //---------------------------------------------------------------------------------------- @@ -70,7 +85,7 @@ if ($Mode == 'ADD_ITEM' || $Mode == 'UPDATE_ITEM') //$content = base64_encode(file_get_contents($_FILES['filename']['tmp_name'])); $tmpname = $_FILES['filename']['tmp_name']; - $dir = $comp_path."/".user_company(). "/attachments"; + $dir = company_path()."/attachments"; if (!file_exists($dir)) { mkdir ($dir,0777); @@ -94,30 +109,16 @@ if ($Mode == 'ADD_ITEM' || $Mode == 'UPDATE_ITEM') $unique_name = $filename = $filetype = ""; $filesize = 0; } - $date = date2sql(Today()); if ($Mode == 'ADD_ITEM') { - $sql = "INSERT INTO ".TB_PREF."attachments (type_no, trans_no, description, filename, unique_name, - filesize, filetype, tran_date) VALUES (".$_POST['filterType'].",".$_POST['trans_no'].",". - db_escape($_POST['description']).", '$filename', '$unique_name', '$filesize', '$filetype', '$date')"; - db_query($sql, "Attachment could not be inserted"); + add_attachment($_POST['filterType'], $_POST['trans_no'], $_POST['description'], + $filename, $unique_name, $filesize, $filetype); display_notification(_("Attachment has been inserted.")); } else { - $sql = "UPDATE ".TB_PREF."attachments SET - type_no=".$_POST['filterType'].", - trans_no=".$_POST['trans_no'].", - description=".db_escape($_POST['description']).", "; - if ($filename != "") - { - $sql .= "filename='$filename', - unique_name='$unique_name', - filesize='$filesize', - filetype='$filetype', "; - } - $sql .= "tran_date='$date' WHERE id=$selected_id"; - db_query($sql, "Attachment could not be updated"); + update_attachment($selected_id, $_POST['filterType'], $_POST['trans_no'], $_POST['description'], + $filename, $unique_name, $filesize, $filetype); display_notification(_("Attachment has been updated.")); } $Mode = 'RESET'; @@ -126,11 +127,10 @@ if ($Mode == 'ADD_ITEM' || $Mode == 'UPDATE_ITEM') if ($Mode == 'Delete') { $row = get_attachment($selected_id); - $dir = $comp_path."/".user_company(). "/attachments"; + $dir = company_path()."/attachments"; if (file_exists($dir."/".$row['unique_name'])) unlink($dir."/".$row['unique_name']); - $sql = "DELETE FROM ".TB_PREF."attachments WHERE id = $selected_id"; - db_query($sql, "Could not delete attachment"); + delete_attachment($selected_id); display_notification(_("Attachment has been deleted.")); $Mode = 'RESET'; } @@ -146,7 +146,7 @@ function viewing_controls() { start_form(); - start_table("class='tablestyle_noborder'"); + start_table(TABLESTYLE_NOBORDER); systypes_list_row(_("Type:"), 'filterType', null, true); @@ -155,31 +155,14 @@ function viewing_controls() end_form(); } -//---------------------------------------------------------------------------------------- - -function get_attached_documents($type) -{ - $sql = "SELECT * FROM ".TB_PREF."attachments WHERE type_no=$type ORDER BY trans_no"; - return db_query($sql, "Could not retrieve attachments"); -} - -function get_attachment($id) -{ - $sql = "SELECT * FROM ".TB_PREF."attachments WHERE id=$id"; - $result = db_query($sql, "Could not retrieve attachments"); - return db_fetch($result); -} - function display_rows($type) { - global $table_style; - $rows = get_attached_documents($type); $th = array(_("#"), _("Description"), _("Filename"), _("Size"), _("Filetype"), _("Date Uploaded"), "", "", "", ""); div_start('transactions'); start_form(); - start_table($table_style); + start_table(TABLESTYLE); table_header($th); $k = 0; while ($row = db_fetch($rows)) @@ -213,7 +196,7 @@ if (isset($_POST['filterType'])) start_form(true); -start_table($table_style2); +start_table(TABLESTYLE2); if ($selected_id != -1) { @@ -231,15 +214,13 @@ if ($selected_id != -1) else text_row_ex(_("Transaction #").':', 'trans_no', 10); text_row_ex(_("Description").':', 'description', 40); -start_row(); -label_cells(_("Attached File") . ":", ""); -end_row(); +file_row(_("Attached File") . ":", 'filename', 'filename'); end_table(1); if (isset($_POST['filterType'])) hidden('filterType', $_POST['filterType']); -submit_add_or_update_center($selected_id == -1, '', 'default'); +submit_add_or_update_center($selected_id == -1, '', 'both'); end_form();