EIOS/inc/iup_student.php

169 lines
7.9 KiB
PHP

<?php
$perevod=0; if($GET['des'] == 'perevod') { $perevod=1; } if($GET['des'] == 'recount') { $perevod=2; }
include_once $_SERVER['DOCUMENT_ROOT'].'/inc/class_SYSTEM.php';
$SYSTEMclass = new SYSTEMclass();
if(isset($_POST['iup_student_save'])||isset($_POST['iup_student_edit'])||isset($_POST['perevod_student_save'])||isset($_POST['perevod_student_edit'])){
$_POST['tmpdatac']=time();
file_put_contents('tmp/iup_posts/'.$_SESSION['user']['id'].'.json',json_encode($_POST)."\n",FILE_APPEND);
//$debug = '<pre>'.print_r($_POST,1).'</pre>';
//$debug .= '<pre>'.print_r($_FILES,1).'</pre>';
$fio = htmlspecialchars(addslashes($_POST['fio']));
$tel = htmlspecialchars(addslashes($_POST['tel']));
$pred_obraz = $_POST['pred_obraz'];
$obraz_uchr = htmlspecialchars(addslashes($_POST['obraz_uchr']));
$diplom_seriya = htmlspecialchars(addslashes($_POST['diplom_seriya']));
$diplom_nomer = htmlspecialchars(addslashes($_POST['diplom_nomer']));
if($_POST['diplom_data']!=''){
$t=explode('.',$_POST['diplom_data']);
$diplom_data = mktime(0,0,0,$t[1],$t[0],$t[2]);
}else $diplom_data = time();
$pret_naprav = $_POST['pret_naprav'];
$pret_kurs = $_POST['pret_kurs'];
$pret_fo = $_POST['pret_fo'];
if(isset($_POST['status'])) $status = '-1'; else $status=0;
$pret_format = htmlspecialchars(addslashes($_POST['pret_format']));
if($perevod==1) $tperevod=1; elseif ($perevod==2) $tperevod = 2; else $tperevod=0;
}
$id_studentzayavks=0;
if(isset($_POST['iup_student_save'])||isset($_POST['perevod_student_save'])){
$sql = 'INSERT INTO `'.$TB['iup_studentzayavks'].'` VALUES (0,'.time().','.$_SESSION['user']['id'].',"'.$fio.'","'.$pred_obraz.'","'.$obraz_uchr.'","'.$diplom_seriya.'","'.$diplom_nomer.'",'.$diplom_data.',"'.$pret_naprav.'","'.$pret_kurs.'","'.$pret_fo.'",'.$status.',"'.$tel.'","'.$pret_format.'",'.$tperevod.')';
$rez = $DB->QUR($sql); //echo '<pre>'.print_r($rez,1).'</pre>';
if(!$rez['err']){
$id_studentzayavks = mysql_insert_id();
send_email_iup($id_studentzayavks);
$msg['msg'][]='Ваша заявка создана!';
}else{
$msg['err'][]='Ваша заявка не создана! Ошибка БД!!!';
}
}
if(isset($_POST['iup_student_edit'])||isset($_POST['perevod_student_edit'])){
$id = (int)$_POST['id'];
$sql = 'UPDATE `'.$TB['iup_studentzayavks'].'` SET data_c='.time().',fio="'.$fio.'",pred_obraz="'.$pred_obraz.'",obraz_uchr="'.$obraz_uchr.'",diplom_seriya="'.$diplom_seriya.'",diplom_nomer="'.$diplom_nomer.'",diplom_data='.$diplom_data.',pret_naprav="'.$pret_naprav.'",pret_kurs="'.$pret_kurs.'",pret_fo="'.$pret_fo.'",status='.$status.',tel="'.$tel.'",pret_format="'.$pret_format.'" WHERE id='.$id.' AND id_user='.$_SESSION['user']['id'].' LIMIT 1';
$rez = $DB->QUR($sql);
if($rez){
$msg['msg'][]='Ваша заявка отредактирована!';
$id_studentzayavks = $id;
if(isset($_POST['del_file'])){foreach($_POST['del_file'] as $fid => $val){
$sql = 'SELECT * FROM '.$TB['iup_studentzayavks_files'].' WHERE id_user='.$_SESSION['user']['id'].' AND id='.$fid.'';
$rez = $DB->QUR_SEL($sql);
if($rez){
$val = $rez[1];
unlink($val['file']);
$rez = $DB->QUR_SEL('DELETE FROM '.$TB['iup_studentzayavks_files'].' WHERE id_user='.$_SESSION['user']['id'].' AND id='.$fid.'');
$msg['err'][]='Файл удален!';
}else{
$msg['err'][]='Файл не найден в базе данных.';
}
}}
}
}
if($id_studentzayavks){ //обходим загруженные файлы
foreach($prilogens as $key => $val){
if(isset($_FILES[$val['name']])){
foreach($_FILES[$val['name']]['tmp_name'] as $k => $v){
if($v!=''){//загружаем файл
$dir_dest = 'upload/iup/'.$_SESSION['user']['id'].'/';
if(!file_exists($dir_dest)) mkdir($dir_dest);
$fil = $_FILES[$val['name']]['name'][$k];
$t = explode('.',$fil); $ext = $t[count($t)-1];
unset($t[count($t)-1]); $fn = implode('.',$t);
$uploadfile = $dir_dest . basename(translit($fn).'.'.$ext);
//$debug .= $v.' - '.$uploadfile.'<br>';
//if (move_uploaded_file($v, $uploadfile)) {
if ($SYSTEMclass->sysUPLOAD($v, $uploadfile)) {
//echo "Файл корректен и был успешно загружен.\n";
$sql1 = 'INSERT INTO `'.$TB['iup_studentzayavks_files'].'` VALUES (0,'.time().','.$_SESSION['user']['id'].','.$id_studentzayavks.',"'.$val['title'].'","'.$uploadfile.'",1);';
$rez1 = $DB->QUR($sql1);
if($rez1){
$msg['msg'][]='Файл загружен и сохранен в БД!';
}else{
$msg['err'][]='Файл загружен и не сохранен в БД!';
}
} else {
$msg['err'][]='Файл не загружен!';
}
}
}
}
}
$des = 'show';
}
if($des == 'del'){
$id = (int)$_GET['id'];
$sql = 'SELECT * FROM '.$TB['iup_studentzayavks'].' WHERE id_user='.$_SESSION['user']['id'].' AND id='.$id.' AND status=-1';
$rez = $DB->QUR_SEL($sql);
if($rez){
$val = $rez[1];
$sql = 'SELECT id,file FROM '.$TB['iup_studentzayavks_files'].' WHERE id_user='.$_SESSION['user']['id'].' AND id_studentzayavks='.$val['id'].' ORDER BY data_c';
$rez = $DB->QUR_SEL($sql);
if($rez){foreach($rez as $k => $v)if($k){
unlink($v['file']);
$rez = $DB->QUR_SEL('DELETE FROM '.$TB['iup_studentzayavks_files'].' WHERE id_user='.$_SESSION['user']['id'].' AND id='.$v['id'].'');
}}
$rez = $DB->QUR_SEL('DELETE FROM '.$TB['iup_studentzayavks'].' WHERE id_user='.$_SESSION['user']['id'].' AND id='.$id.' AND status=-1');
$des = 'show';
}
}
if($des == 'add'){
$napravlenie = iup_get_napravlenie();
$smarty->assign('napravlenie',$napravlenie);
$zayavka['fio'] = $_SESSION['user']['fio'];
$smarty->assign('zayavka',$zayavka);
}
if($des == 'edit'){
$id = (int)$_GET['id'];
$sql = 'SELECT * FROM '.$TB['iup_studentzayavks'].' WHERE id_user='.$_SESSION['user']['id'].' AND id='.$id.' AND (status=-1 OR status=-2)';
$rez = $DB->QUR_SEL($sql);
if($rez){
$val = $rez[1];
$val['data_c'] = date('H:i:s d.m.Y',$val['data_c']);
$val['diplom_data'] = date('d.m.Y',$val['diplom_data']);
$sql = 'SELECT * FROM '.$TB['iup_studentzayavks_files'].' WHERE id_user='.$_SESSION['user']['id'].' AND id_studentzayavks='.$val['id'].' ORDER BY data_c';
$rez = $DB->QUR_SEL($sql);
if($rez){foreach($rez as $k => $v)if($k){
$v['data_c'] = date('H:i:s d.m.Y',$v['data_c']);
$val['files'][]=$v;
}}
$sql = 'SELECT * FROM '.$TB['iup_statuses'].' WHERE id_studentzayavks='.$val['id'].' ORDER BY data_c DESC';
$rez = $DB->QUR_SEL($sql);
if($rez){foreach($rez as $k => $v)if($k){
$v['data_c'] = date('H:i:s d.m.Y',$v['data_c']);
$val['statuses'][]=$v;
}}
$zayavka = $val;
$napravlenie = iup_get_napravlenie();
$smarty->assign('napravlenie',$napravlenie);
$smarty->assign('zayavka',$zayavka);
}else{
$des = 'show';
}
}
if($des == 'show'){
$zayavks=array();
if($perevod==0)
$sql = 'SELECT * FROM '.$TB['iup_studentzayavks'].' WHERE id_user='.$_SESSION['user']['id'].' AND perevod=0 ORDER BY data_c DESC';
elseif ($perevod==2)
$sql = 'SELECT * FROM '.$TB['iup_studentzayavks'].' WHERE id_user='.$_SESSION['user']['id'].' AND perevod=2 ORDER BY data_c DESC';
else
$sql = 'SELECT * FROM '.$TB['iup_studentzayavks'].' WHERE id_user='.$_SESSION['user']['id'].' AND perevod=1 ORDER BY data_c DESC';
$rez = $DB->QUR_SEL($sql);
//echo $sql.'<pre>'.print_r($rez,1).'</pre>';
if($rez){
foreach($rez as $key => $val)if($key){
$val['data_c'] = date('H:i:s d.m.Y',$val['data_c']);
$zayavks[] = $val;
}
}
$smarty->assign('zayavks',$zayavks);
}
$smarty->assign('page',$page);
$smarty->assign('perevod',$perevod);
$smarty->assign('des',$des);
$smarty->assign('debug',$debug);
$smarty->assign('prilogens',$prilogens);
$smarty->assign('zd_students',$zd_students);
$smarty->assign('msg',$msg);
$maincontent = $smarty->fetch('tpl_iup_main.html');