do.php

泛微协同办公系统标准版E-office V5.5的源代码内含泛微办公系统V5.5自动注册文件。

<?php

ob_start( );
include_once( "inc/auth.php" );
include_once( "inc/utility_html.php" );
include_once( "../prcs_role.php" );
include_once( "inc/utility_all.php" );
include_once( "inc/mobile_sms.inc.php" );
ob_end_clean( );
$connection = openconnection( );
$CUR_TIME = date( "Y-m-d H:i:s", time( ) );
if ( !run_role( $RUN_ID, $PRCS_ID ) )
{
	exit( );
}
switch ( $_REQUEST['f'] )
{
case "create" :
	$query = "SELECT MAX(RUN_ID) from FLOW_RUN";
	$cursor = exequery( $connection, $query );
	if ( $ROW = mysql_fetch_array( $cursor ) )
	{
		$RUN_ID = $ROW[0] + 1;
	}
	$query = "insert into FLOW_RUN(RUN_ID,RUN_NAME,FLOW_ID) values ({$RUN_ID},'{$RUN_NAME}',{$FLOW_ID})";
	exequery( $connection, $query );
	$query = "insert into FLOW_RUN_PRCS(RUN_ID,PRCS_ID,USER_ID,PRCS_FLAG,FLOW_PRCS) values ({$RUN_ID},1,'{$LOGIN_USER_ID}','1','1')";
	exequery( $connection, $query );
	header( "location:edit2.php?RUN_ID=".$RUN_ID."&FLOW_ID=".$FLOW_ID."&PRCS_ID=1" );
	exit( );
case "turnnext" :
	$I = 1;
	for ( ;	$I <= $ITEM_ID_MAX;	++$I	)
	{
		$STR = "DATA_".$I;
		$query = "select * from FLOW_RUN_DATA where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		$cursor = exequery( $connection, $query );
		if ( mysql_fetch_array( $cursor ) )
		{
			$query = "update FLOW_RUN_DATA set ITEM_DATA='".$$STR."' where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		}
		else
		{
			$query = "INSERT INTO FLOW_RUN_DATA (RUN_ID,ITEM_ID,ITEM_DATA) VALUES ({$RUN_ID},{$I},'".$$STR."')";
		}
		exequery( $connection, $query );
	}
	if ( $FLOW_PRCS == "" )
	{
		$query = "update FLOW_RUN_PRCS set DELIVER_TIME='{$CUR_TIME}',PRCS_FLAG='4' WHERE RUN_ID={$RUN_ID} and PRCS_ID={$PRCS_ID}";
		exequery( $connection, $query );
		$existAccess = 0;
		if ( $existAccess )
		{
			$query = "SELECT * from FLOW_TYPE WHERE FLOW_ID={$FLOW_ID}";
			$cursor1 = exequery( $connection, $query );
			if ( $ROW = mysql_fetch_array( $cursor1 ) )
			{
				$FLOW_NAME = $ROW['FLOW_NAME'];
				$FLOW_TYPE = $ROW['FLOW_TYPE'];
				$FORM_ID = $ROW['FORM_ID'];
				$FORM_TYPE = $ROW['FORM_TYPE'];
			}
			$query = "SELECT * from FLOW_FORM_TYPE WHERE FORM_ID={$FORM_ID}";
			$cursor1 = exequery( $connection, $query );
			if ( $ROW = mysql_fetch_array( $cursor1 ) )
			{
				$FORM_NAME = $ROW['FORM_NAME'];
				$PRINT_MODEL = $ROW['PRINT_MODEL'];
			}
			$query = "SELECT * from FLOW_RUN_DATA WHERE RUN_ID={$RUN_ID} ORDER BY ITEM_ID";
			$cursor = exequery( $connection, $query );
			while ( $ROW = mysql_fetch_array( $cursor ) )
			{
				$ITEM_ID = $ROW['ITEM_ID'];
				$ITEM_DATA = $ROW['ITEM_DATA'];
				$STR = "DATA_".$ITEM_ID;
				$$STR = $ITEM_DATA;
			}
			$query = "SELECT * from FLOW_RUN WHERE RUN_ID={$RUN_ID}";
			$cursor = exequery( $connection, $query );
			if ( $ROW = mysql_fetch_array( $cursor ) )
			{
				$RUN_NAME = $ROW['RUN_NAME'];
			}
			$query = "SELECT * from FLOW_RUN_PRCS where RUN_ID={$RUN_ID} and PRCS_ID=1";
			$cursor = exequery( $connection, $query );
			if ( $ROW = mysql_fetch_array( $cursor ) )
			{
				$USER_ID = $ROW['USER_ID'];
				$PRCS_TIME1 = $ROW['PRCS_TIME'];
				$PRCS_TIME1 = format_date( $PRCS_TIME1 );
			}
			$PRINT_MODEL = str_replace( "#[表单]", "<b>{$FORM_NAME}</b>", $PRINT_MODEL );
			$PRINT_MODEL = str_replace( "#[文号]", $RUN_NAME, $PRINT_MODEL );
			$PRINT_MODEL = str_replace( "#[时间]", "日期：{$PRCS_TIME1}", $PRINT_MODEL );
			$ELEMENT_ARRAY = html_element( $PRINT_MODEL );
			$ITEM_ID_MAX = sizeof( $ELEMENT_ARRAY );
			$ITEM_ID = 0;
			$POS = 0;
			$I = 0;
			for ( ;	$I < $ITEM_ID_MAX;	++$I	)
			{
				$ELEMENT = $ELEMENT_ARRAY[$I];
				$ENAME = get_attr( $ELEMENT, "NAME" );
				$EVALUE = get_attr( $ELEMENT, "VALUE" );
				$ECLASS = get_attr( $ELEMENT, "CLASS" );
				$ETITLE = get_attr( $ELEMENT, "TITLE" );
				$ETITLE = str_replace( "<", "&lt", $ETITLE );
				$ETITLE = str_replace( ">", "&gt", $ETITLE );
				$ETITLE = stripslashes( $ETITLE );
				if ( $ECLASS != "DATE" )
				{
					++$ITEM_ID;
				}
				$STR = "DATA_".$ITEM_ID;
				$ITEM_VALUE = $$STR;
				$access[$ETITLE] = $$STR;
			}
			$tablename = $FORM_NAME;
			$access = $access;
			$dbc = new com( "ADODB.Connection" );
			$dbc->Provider = "MSDASQL";
			$dbc->open( "workflow_form" );
			$sql = "SELECT Count(*) AS Qty FROM MSysObjects WHERE (((MSysObjects.Name) Like '{$tablename}'))";
			$rs = $dbc->execute( $sql );
			$i = 0;
			while ( !$rs->EOF )
			{
				$i += 1;
				$fld0 = $rs->fields( 0 );
				$existTable = $fld0->value;
				$rs->movenext( );
			}
			$rs->close( );
			if ( $existTable == 0 )
			{
				$sqlf = "";
				while ( list( $key, $val ) = each( $access ) )
				{
					$fieldname = $key;
					$sqlf .= ",{$fieldname} TEXT NULL";
				}
				$sql = "CREATE TABLE {$tablename} (ID AUTOINCREMENT PRIMARY KEY NOT NULL {$sqlf})";
				$dbc->execute( $sql );
			}
			$sqlf = "";
			$sqlv = "";
			$j = 0;
			reset( $access );
			while ( list( $key, $val ) = each( $access ) )
			{
				++$j;
				$fieldname = $key;
				$fieldvalue = $val;
				if ( $j == 1 )
				{
					$sqlf .= "{$fieldname}";
					$sqlv .= "'{$fieldvalue}'";
				}
				else
				{
					$sqlf .= ",{$fieldname}";
					$sqlv .= ",'{$fieldvalue}'";
				}
			}
			$sql = "INSERT INTO {$tablename} ({$sqlf}) VALUES ({$sqlv})";
			$dbc->execute( $sql );
		}
	}
	else
	{
		$PRCS_ID_NEXT = $PRCS_ID + 1;
		$TOK = strtok( $PRCS_USER, "," );
		while ( $TOK != "" )
		{
			if ( $TOK == $PRCS_OP_USER )
			{
				$OP_FLAG = 1;
			}
			else
			{
				$OP_FLAG = 0;
			}
			$sql = "SELECT PRCS_OPTYPE FROM flow_process WHERE FLOW_ID=".$FLOW_ID." AND PRCS_ID=".$FLOW_PRCS;
			$rs = exequery( $connection, $sql );
			$row = mysql_fetch_array( $rs );
			$PRCS_OPTYPE = $row['PRCS_OPTYPE'];
			if ( 0 < $PRCS_OPTYPE )
			{
				$OP_FLAG = 0;
			}
			$query = "insert into FLOW_RUN_PRCS(RUN_ID,PRCS_ID,USER_ID,PRCS_FLAG,FLOW_PRCS,OP_FLAG,LIMIT_DATE) values ({$RUN_ID},{$PRCS_ID_NEXT},'{$TOK}','1',{$FLOW_PRCS},'{$OP_FLAG}','{$LIMIT_DATE}')";
			exequery( $connection, $query );
			$SMS_CONTENT = "工作流提醒：您有新的工作需要办理！";
			$SEND_TIME = date( "Y-m-d H:i:s", time( ) );
			$query1 = "insert into SMS(FROM_ID,TO_ID,SMS_TYPE,CONTENT,SEND_TIME,REMIND_FLAG) values ('{$LOGIN_USER_ID}','{$TOK}','7','{$SMS_CONTENT}','{$SEND_TIME}','1')";
			exequery( $connection, $query1 );
			if ( ifsendmbsms( ) && $MOBILE_SMS_REMIND == "1" )
			{
				$newSms = new mobilesms( );
				$newSms->selfsendmore( $TOK, $_REQUEST['mobilect'] );
			}
			$TOK = strtok( "," );
		}
		$query = "update FLOW_RUN_PRCS set DELIVER_TIME='{$CUR_TIME}',PRCS_FLAG='3' WHERE RUN_ID={$RUN_ID} and PRCS_ID={$PRCS_ID}";
		exequery( $connection, $query );
	}
	if ( $OP == "MANAGE" )
	{
		$PRCS_ID_PREV = $PRCS_ID - 1;
		$query = "update FLOW_RUN_PRCS set PRCS_FLAG='4' WHERE RUN_ID={$RUN_ID} AND PRCS_ID={$PRCS_ID_PREV}";
		exequery( $connection, $query );
	}
	echo "<script>";
	echo "location='../work_list.php'";
	echo "</script>";
	exit( );
case "saveform" :
	$I = 1;
	for ( ;	$I <= $ITEM_ID_MAX;	++$I	)
	{
		$STR = "DATA_".$I;
		$query = "select * from FLOW_RUN_DATA where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		$cursor = exequery( $connection, $query );
		if ( mysql_fetch_array( $cursor ) )
		{
			$query = "update FLOW_RUN_DATA set ITEM_DATA='".$$STR."' where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		}
		else
		{
			$query = "INSERT INTO FLOW_RUN_DATA (RUN_ID,ITEM_ID,ITEM_DATA) VALUES ({$RUN_ID},{$I},'".$$STR."')";
		}
		exequery( $connection, $query );
	}
	$SAVEFORM_TIME = date( "Y-m-d H:i:s", time( ) );
	$query = " \r\n\t\t\t   UPDATE FLOW_RUN_PRCS \r\n\t\t\t\t   SET  SAVEFORM_TIME='".$SAVEFORM_TIME."' \r\n\t\t\t\t   WHERE RUN_ID={$RUN_ID} \r\n\t\t\t\t\t AND PRCS_ID={$PRCS_ID} \r\n\t\t\t\t\t AND USER_ID='".$_SESSION['LOGIN_USER_ID']."'\r\n\t\t\t   ";
	exequery( $connection, $query );
	echo "<script>";
	echo "location='../work_list.php'";
	echo "</script>";
	exit( );
case "opsaveform" :
	$I = 1;
	for ( ;	$I <= $ITEM_ID_MAX;	++$I	)
	{
		$STR = "DATA_".$I;
		$query = "select * from FLOW_RUN_DATA where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		$cursor = exequery( $connection, $query );
		if ( mysql_fetch_array( $cursor ) )
		{
			$query = "update FLOW_RUN_DATA set ITEM_DATA='".$$STR."' where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		}
		else
		{
			$query = "INSERT INTO FLOW_RUN_DATA (RUN_ID,ITEM_ID,ITEM_DATA) VALUES ({$RUN_ID},{$I},'".$$STR."')";
		}
		exequery( $connection, $query );
	}
	$sql = " \r\n\t\t       SELECT FLOW_PRCS FROM flow_run_prcs \r\n\t\t\t\t    WHERE RUN_ID=".$_REQUEST['RUN_ID']." \r\n\t\t\t\t    AND USER_ID='".$_SESSION['LOGIN_USER_ID']."' \r\n\t\t\t\t    AND PRCS_ID=".$_REQUEST['PRCS_ID'];
	$rs = exequery( $connection, $sql );
	$row = mysql_fetch_array( $rs );
	$flow_prcs_turn = $row['FLOW_PRCS'];
	header( "location:input_form.php?RUN_ID={$RUN_ID}&FLOW_ID={$FLOW_ID}&PRCS_ID={$PRCS_ID}&FLOW_PRCS={$flow_prcs_turn}" );
	exit( );
case "autosave" :
	$I = 1;
	for ( ;	$I <= $ITEM_ID_MAX;	++$I	)
	{
		$STR = "DATA_".$I;
		$query = "select * from FLOW_RUN_DATA where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		$cursor = exequery( $connection, $query );
		if ( mysql_fetch_array( $cursor ) )
		{
			$query = "update FLOW_RUN_DATA set ITEM_DATA='".iconv( "UTF-8", "GB2312", $$STR )."' where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		}
		else
		{
			$query = "INSERT INTO FLOW_RUN_DATA (RUN_ID,ITEM_ID,ITEM_DATA) VALUES ({$RUN_ID},{$I},'".iconv( "UTF-8", "GB2312", $$STR )."')";
		}
		exequery( $connection, $query );
	}
	$sql = " \r\n\t\t\t\t   SELECT FLOW_PRCS FROM flow_run_prcs \r\n\t\t\t\t\t\tWHERE RUN_ID=".$_REQUEST['RUN_ID']." \r\n\t\t\t\t\t\tAND USER_ID='".$_SESSION['LOGIN_USER_ID']."' \r\n\t\t\t\t\t\tAND PRCS_ID=".$_REQUEST['PRCS_ID'];
	$rs = exequery( $connection, $sql );
	$row = mysql_fetch_array( $rs );
	$sql = "UPDATE flow_run SET RUN_NAME='".iconv( "UTF-8", "GB2312", $_REQUEST['RUN_NAME'] )."' WHERE RUN_ID=".$_REQUEST['RUN_ID'];
	exequery( $connection, $sql );
	echo "1";
	exit( );
case "selectsaveform" :
	$I = 1;
	for ( ;	$I <= $ITEM_ID_MAX;	++$I	)
	{
		$STR = "DATA_".$I;
		$query = "select * from FLOW_RUN_DATA where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		$cursor = exequery( $connection, $query );
		if ( mysql_fetch_array( $cursor ) )
		{
			$query = "update FLOW_RUN_DATA set ITEM_DATA='".$$STR."' where RUN_ID={$RUN_ID} and ITEM_ID={$I}";
		}
		else
		{
			$query = "INSERT INTO FLOW_RUN_DATA (RUN_ID,ITEM_ID,ITEM_DATA) VALUES ({$RUN_ID},{$I},'".$$STR."')";
		}
		exequery( $connection, $query );
	}
	$sql = " \r\n\t\t       SELECT FLOW_PRCS FROM flow_run_prcs \r\n\t\t\t\t    WHERE RUN_ID=".$_REQUEST['RUN_ID']." \r\n\t\t\t\t    AND USER_ID='".$_SESSION['LOGIN_USER_ID']."' \r\n\t\t\t\t    AND PRCS_ID=".$_REQUEST['PRCS_ID'];
	$rs = exequery( $connection, $sql );
	$row = mysql_fetch_array( $rs );
	$flow_prcs_turn = $row['FLOW_PRCS'];
	header( "location:input_form.php?RUN_ID={$RUN_ID}&FLOW_ID={$FLOW_ID}&PRCS_ID={$PRCS_ID}&FLOW_PRCS={$flow_prcs_turn}&PRCS_TO_CHOOSE={$PRCS_TO_CHOOSE}&OP={$OP}" );
	exit( );
}
?>