pb_events.php

基于PHP和MYSQL的计算机辅助设备维修管理系统

<?php

//define ("PB_CRYPT_LINKS" , "1");

function DoEvents($this) {
	global $_CONF , $_TSM;

	$_TSM["MENU"] = "";

	//checking if user is logged in
	if (!$_SESSION["minibase"]["user"]) {

		if ($_SERVER["REQUEST_METHOD"] == "POST") {

			//autentificate
			$user = $this->db->QFetchArray("select * from {$this->tables[users]} where `user_login` = '{$_POST[user]}' AND `user_password` = '{$_POST[pass]}'");

			if (is_array($user)) {
				$_SESSION["minibase"]["user"] = 1;
				$_SESSION["minibase"]["raw"] = $user;

				//redirecing to viuw sites
				header("Location: $_CONF[default_location]");
				exit;
			} else
				return $this->templates["login"]->blocks["Login"]->output;

		} else
			return $this->templates["login"]->blocks["Login"]->output;
	}
	if ($_SESSION["minibase"]["raw"]["user_level"] == 0) {
		$_TSM["MENU"] = $this->templates["login"]->blocks["MenuAdmin"]->output;
	} else {
		$_TSM["MENU"] = $this->templates["login"]->blocks["MenuUser"]->output;
	}

	if (!$_POST["task_user"])
		$_POST["task_user"] = $_SESSION["minibase"]["user"];

	if($_SESSION["minibase"]["raw"]["user_level"] == 1) {
		$_CONF["forms"]["adminpath"] = $_CONF["forms"]["userpath"];
	}

	switch ($_GET["sub"]) {
		case "logout":
			unset($_SESSION["minibase"]["user"]);
			header("Location: index.php");

			return $this->templates["login"]->EmptyVars();
		break;

		case "cats":
		case "categories":		
		case "vendors":
		case "tasktype":
		case "tasks":
		case "pages":	
		case "products":

			if (($_GET["sub"] == "categories") && ($_GET["cat_parent"] != 0 )){
				$cat = $this->db->QFetchArray("SELECT * FROM site_cats WHERE cat_id='{$_GET[cat_parent]}'");				
					
					header("Location: index.php?sub=cats&cat_parent=" . ($cat["cat_parent"] ? $cat["cat_parent"]  : $cat["cat_id"] ) );
					exit;
			}

			if (($_GET["sub"] == "cats") && ($_GET["action"] == "" )) {
				$cat = $this->db->QFetchArray("SELECT * FROM site_cats WHERE cat_id='{$_GET[cat_parent]}'");
				$GLOBALS["subcat"] = $cat["cat_name"];
			}

			if (($_GET["sub"] == "products") && ($_GET["product_cat"] != "" )) {
				$cat = $this->db->QFetchArray("SELECT * FROM site_cats WHERE cat_id='{$_GET[product_cat]}'");
				$GLOBALS["category_name"] = $cat["cat_name"];
				$GLOBALS["title"] = "Add equipment to '" . $GLOBALS["category_name"] . "'";

			}

			if (($_GET["sub"] == "products") && ($_GET["action"] == "details")) {
				$task = new CSQLAdmin("tasks", $_CONF["forms"]["admintemplate"],$this->db,$this->tables , $extra);
				$extra["details"]["after"] = $task->DoEvents();				

				$task = new CSQLAdmin("tasks2", $_CONF["forms"]["admintemplate"],$this->db,$this->tables , $extra);
				$extra["details"]["after"] .= $task->DoEvents();				

			}
			
			
			$data = new CSQLAdmin($_GET["sub"], $_CONF["forms"]["admintemplate"],$this->db,$this->tables , $extra);
			return $data->DoEvents();
		break;

		case "users":

			if (!$_POST["job_date"]) {
				$_POST["job_date"] = time();
			}

			if (!$_POST["job_user"]) {
				$_POST["job_user"] = $_SESSION["minibase"]["raw"]["user_id"];
			}

			$data = new CSQLAdmin($_GET["sub"], $_CONF["forms"]["admintemplate"],$this->db,$this->tables);
			return $data->DoEvents();
		break;

		case "export":
			//read the products
			$products = $this->db->QFetchRowArray("SELECT * FROM {$this->tables[products]}");

			//read the users
			$_users = $this->db->QFetchRowArray("SELECT * FROM {$this->tables[users]}");
			if (is_array($_users)) {
				foreach ($_users as $key => $val) {
					$users[$val["user_id"]] = $val;
				}				
			}

			$_types = $this->db->QFetchRowArray("SELECT * FROM {$this->tables[tasktype]}");
			if (is_array($_types)) {
				foreach ($_types as $key => $val) {
					$types[$val["type_id"]] = $val;
				}				
			}


			if (is_array($products)) {
				header("Content-Type: text/x-csv");
				header("Content-Disposition: inline; filename=tasks.csv");
				header("Cache-Control: must-revalidate, post-check=0, pre-check=0");
				header("Pragma: public");
					echo "\"equipment name\",category,subcategory,\"task type\",\"task name\",\"scheduled date\",\"completed date\",user \n";

				foreach ($products as $key => $val) {
					//read the catefory
					$category = $this->db->QFetchArray("SELECT * FROM {$this->tables[categories]} WHERE cat_id='{$val[product_cat]}'");
					if ($category["cat_parent"]) {
						$subcat = $this->db->QFetchArray("SELECT * FROM {$this->tables[categories]} WHERE cat_id='{$category[cat_parent]}'");
					} else {
						$subcat = "";
					}

					//read the tasks 
					$tasks = $this->db->QFetchRowArray("SELECT * FROM {$this->tables[tasks]} WHERE task_product='{$val[product_id]}'");
					if (is_array($tasks)) {

						foreach ($tasks as $k => $task) {
								echo 
										"\"$val[product_name]\"," .
										"\"$category[cat_name]\"," .
										"\"$subcat[cat_name]\"," .
										"\"" . $types[$task["task_type"]]["type_name"] . "\",".
										"\"$task[task_name]\",".
										"\"" . ($task["task_date"] > 0 ? @date("m.d.Y",$task["task_date"] ) : "not available") . "\"," . 
										"\"" . ($task["date_completed"] > 0 ? @date("m.d.Y",$task["date_completed"] )  : "not available") . "\"," .
										"\"" . $users[$task["task_user"]]["user_name"]. "\" \n";
								//scheduled date	completed date	user

						}
						
					}
					
				}				
				die;
			} else {
				return "No equipments found!" ;
			};
			
		break;

		case "settings":

			$file = $_GET["sub"] . ".xml";

			$data = new CForm($_CONF["forms"]["admintemplate"],$this->db,$this->tables);

			if ($_GET["action"] == "store") {
				if (is_array($values = $data->Validate($_CONF["forms"]["adminpath"] . $file,$_POST))) {

					return $data->Show($_CONF["forms"]["adminpath"] . $file, $values);
				} else {

					$this->vars->SetAll($_POST);
					$this->vars->Save();

					header("location: index.php?mod=eshop&sub=" . $_GET["sub"]);
					exit;
				}
				
			}
					
			return $data->Show($_CONF["forms"]["adminpath"] . $file , array("values"=>$this->vars->data));

		break;

	}
}

?>