Приложение Б (1203265), страница 2
Текст из файла (страница 2)
echo '</form></tr>';
}
if($_POST['id_ca']!=$row3['Id_subcategory'])
{
echo '<tr><FORM METHOD= "POST" ACTION= "NewSubcategory.php">';
echo "<td>".$row3['Name_subcategory'].'</td>';
echo "<td>" .$Cat_id[$row3['Id_category']]. '</td>';
?><td><input type = 'submit' name='EDITsubcategory' value='Редактировать'>
<input type = 'submit' name='DELETEsubcategory' value='Удалить'>
<input type = 'hidden' name = 'id_ca' value = <?=$row3['Id_subcategory'];?> />
</td>
</form></tr>
<?php }
}?></table>
<?php
require 'footer.php';
if($_SERVER["REQUEST_METHOD"]=="POST")
{
if(isset($_POST['CANCEL']))
{
echo "<meta http-equiv='Refresh' content='0; URL=NewSubcategory.php'>";
}
if(isset($_POST['SAVEsubcategory']))
{
$query="update Subcategory set Name_subcategory = '" .$_POST['Name_subcategory']. "',
ID_category = '".$_POST['Cat_select']. "'
where Id_subcategory='" .$_POST['id_ca']. "'";
mysql_query($query) or die('Error: '. mysql_error());;
echo "<meta http-equiv='Refresh' content='0' >";
}
if(isset($_POST['DELETEsubcategory']))
{
$query="DELETE from `subcategory` where Id_subcategory='" .$_POST['id_ca']. "'";
mysql_query($query);
echo "<meta http-equiv='Refresh' content='0' >";
}
if(isset($_POST['ADDsubcategory']))
{
if($_POST['Name_subcategory']!=Null && $_POST['Cat_select'])
{
$с_name=$_POST['Name_subcategory'];
$name_s=$_POST['Cat_select'];
$query="INSERT INTO `Subcategory` (`Id_subcategory`,`Id_category`,`Name_subcategory`)
VALUES (NULL, '$name_s', '$с_name')";
mysql_query($query) or die('Error: '. mysql_error());
echo "<meta http-equiv='Refresh' content='0' >";
}
else
{
echo "<script >alert('Незаполнены основные поля'); </script>";
echo "<meta http-equiv='Refresh' content='0' >";
}
}
}
UsersAdm.php
<?php
require 'header.php';
?>
<table border=1 class="tables table-bordered">
<CENTER><h2>Таблица пользователей</h2></CENTER>
<tr>
<td> ФИО сотрудника </td>
<td> Отдел </td>
<td> Должность </td>
<td> Контактный телефон </td>
<td> Имя пользователя </td>
<td> Пароль </td>
<td> Уровень доступа </td>
<td> Действие </td></tr>
<tr>
<FORM METHOD= "POST" ACTION= "UsersAdm.php">
<td><input type='text' name='FIO_user' value=''/></td>
<td>
<select name='Otdel_user'>
<?php
$query4="select * from `deportament`";
$result4=mysql_query($query4);
$num_results4=mysql_num_rows($result4);
$otdel_id=[];
echo "<option value='0'></OPTION>";
for($i=0; $i<$num_results4; $i++)
{
$row4 = mysql_fetch_array($result4);
$otdel_id[$row4['Id_deportament']]=$row4['name_deportament'];
echo "<option value='".$row4['Id_deportament']."'>".$row4['name_deportament']."</OPTION>";
}
?>
</select>
</td>
<td><input type='text' name='Position_user' value=''/></td>
<td><input type='text' name='Phone_user' value=''/></td>
<td><input type='text' name='Name_user' value=''/></td>
<td><input type='text' name='Pass_user' value=''/></td>
<td><input type='text' name='Access_user' value=''/></td>
<td><input type='submit' name='ADDuser' value = 'Добавить'></td></tr></form>
<?php
$query3="select * from `user`";
$result3=mysql_query($query3);
$num_results3=mysql_num_rows($result3);
for($i=0; $i<$num_results3; $i++)
{
$row3 = mysql_fetch_array($result3);
if($_POST['id_us']==$row3['Id_user'] && !isset($_POST['DELETEuser']))
{
echo '<tr><FORM METHOD= "POST" ACTION= "UsersAdm.php">';
echo "<td><input type='text' name='FIO_user' value='".$row3['FIO_user']."'/></td>";
$ot=$row3['Otdel_user'];
echo "<td><select name='Otdel_user'><option value='".$row3['Otdel_user']."'>",$row3['Otdel_user'],"</OPTION>";
$query4="select * from `deportament`";
$result4=mysql_query($query4);
$num_results4=mysql_num_rows($result4);
for($i4=0; $i4<$num_results4; $i4++)
{
$row4 = mysql_fetch_array($result4);
if($row4['name_deportament']!=$ot){
$selected = $row3['Id_deportament']==$row4['Id_deportament']?'selected':'';
echo "<option value='".$row4['Id_deportament']."' ".$selected.">".$row4['name_deportament']."</OPTION>";
}
}
echo "</select></td>";
echo "<td><input type='text' name='Position_user' value='".$row3['position_user']."'/></td>";
echo "<td><input type='text' name='Phone_user' value='".$row3['phone_user']."'/></td>";
echo "<td><input type='text' name='Name_user' value='".$row3['name_user']."'/></td>";
echo "<td><input type='text' name='Pass_user' value='".$row3['pass_user']."'/></td>";
echo "<td><input type='text' name='Access_user' value='".$row3['access_user']."'/></td>";
?><td><input type = 'submit' name='SAVEuser' value='Сохранить'>
<input type = 'submit' name='CANCEL' value='Отмена'>
<input type = 'hidden' name = 'id_us' value = <?=$row3['Id_user'];?> />
</td>
<?php
echo '</form></tr>';
}
if($_POST['id_us']!=$row3['Id_user'] )
{
echo '<tr><FORM METHOD= "POST" ACTION= "UsersAdm.php">';
echo "<td>",$row3['FIO_user'],'</td>';
echo "<td>",$otdel_id[$row3['Id_deportament']],'</td>';
echo "<td>",$row3['position_user'],'</td>';
echo "<td>",$row3['phone_user'],'</td>';
echo "<td>",$row3['name_user'],'</td>';
echo "<td>",$row3['pass_user'],'</td>';
echo "<td>",$row3['access_user'],'</td>';
?>
<td>
<input type = 'submit' name='EDITuser' value='Редактировать'>
<input type = 'submit' name='DELETEuser' value='Удалить'>
<input type = 'hidden' name = 'id_us' value = <?=$row3['Id_user'];?> />
</td>
</form>
</tr>
<?php
}
}
?>
</table>
<?php
require 'footer.php';
if($_SERVER["REQUEST_METHOD"]=="POST")
{
if(isset($_POST['CANCEL']))
{
echo "<meta http-equiv='Refresh' content='0; URL=UsersAdm.php'>";
}
if(isset($_POST['SAVEuser']))
{
$query="update user set FIO_user = '" .$_POST['FIO_user']. "',
Id_deportament = '" .$_POST['Otdel_user']. "',
Position_user = '" .$_POST['Position_user']. "',
Phone_user = '" .$_POST['Phone_user']. "',
Name_user = '" .$_POST['Name_user']. "',
Pass_user = '" .$_POST['Pass_user']. "',
Access_user = '" .$_POST['Access_user']. "'
where Id_user='" .$_POST['id_us']. "'";
mysql_query($query) or die('Error: '. mysql_error());
echo "<meta http-equiv='Refresh' content='0' >";
}
if(isset($_POST['DELETEuser']))
{
$query="DELETE from `user` where Id_user='" .$_POST['id_us']. "'";
mysql_query($query) or ('Error: '. mysql_error());
echo "<meta http-equiv='Refresh' content='0' >";
}
if(isset($_POST['ADDuser']))
{
if($_POST['FIO_user']!=Null&&
$_POST['Otdel_user']!=Null&&
$_POST['Position_user']!=Null&&
$_POST['Name_user']!=Null&&
$_POST['Pass_user']!=Null&&
$_POST['Access_user']!=Null
)
{
$u_name=$_POST['FIO_user'];
$u_pas=$_POST['Otdel_user'];
$u_pos=$_POST['Position_user'];
$u_ph=$_POST['Phone_user'];
$u_na=$_POST['Name_user'];
$u_pa=$_POST['Pass_user'];
$u_ac=$_POST['Access_user'];
$query="INSERT INTO `user` (`Id_user`,`FIO_user`,`Id_deportament`,`Position_user`,`Phone_user`,`Name_user`,`Pass_user`,`Access_user`)
VALUES (NULL,'$u_name','$u_pas','$u_pos','$u_ph','$u_na','$u_pa','$u_ac')";
$result=mysql_query($query) or ('Error: '. mysql_error());
}
elseif($_POST['FIO_user']==Null||
$_POST['Otdel_user']==Null||
$_POST['Position_user']==Null||
$_POST['Name_user']==Null||
$_POST['Pass_user']==Null||
$_POST['Access_user']==Null
)
{
echo "<script >alert('Незаполнены основные поля'); </script>";
echo "<meta http-equiv='Refresh' content='2' >";
}
echo "<meta http-equiv='Refresh' content='0' >";
}
}
?>
addRequest.php
<?php
error_reporting( E_ERROR );
session_start();
include "config.php";
if($_SERVER["REQUEST_METHOD"]=="POST")
{
if(isset($_POST['CategoryID'])){
$result="<CENTER><br> Подкатегория <select name='subcateg_req'>
<option value=''></OPTION>";
$query5="select * from `Subcategory` where Id_category=".$_POST['CategoryID'];
$result5=mysql_query($query5);
$num_results5=mysql_num_rows($result5);
for($i=0; $i<$num_results5; $i++)
{
$row5 = mysql_fetch_array($result5);
$result.= "<option value='".$row5['Id_subcategory']."'>".$row5['Name_subcategory']."</OPTION>";
}
$result.= "</select></CENTER>";
echo $result;
return true;
}
if(isset($_POST['Add']))
{
if ($_POST['top_request']!=Null&&
$_POST['categ_req']!=Null&&
$_POST['subcateg_req']!=Null&&
$_POST['desc_request']!=Null
)
{
$top_req=$_POST['top_request'];
$desc_req=$_POST['desc_request'];
$ncat_req=$_POST['categ_req'];
$nsubcat_req=$_POST['subcateg_req'];
$auth_req=$_SESSION['ID_U'];
$query9="INSERT INTO Request (`Id_request`,`topic_request`,`description_request`,
`Id_category`,`Id_subcategory`,`status_request`,
`technician_request`,`Id_user`,`time_compl`)
VALUES (NULL,'$top_req','$desc_req','$ncat_req','$nsubcat_req',
'Открыта',NULL,'$auth_req','NULL')";
mysql_query($query9) or die('Error: '. mysql_error());
echo "<script >alert('Заявка подана'); </script>";;
}
else {
echo "<script>alert('Незаполнены основные поля'); </script>";
echo "<meta http-equiv='Refresh' content='2; URL=addrequest.php'>";
}
}
}
require 'header.php';
?>
<CENTER><h2>Новая заявка</h2>
<FORM class="reqform form-group" METHOD= "POST" ACTION= "Addrequest.php">
<br> Тема заявки <input class='form-control' type='text' name='top_request' value=''/><br>
<br> Описание заявки <input class='form-control' type='text' name='desc_request' value=''/><br>
<br> Категория <select class='form-control' name='categ_req' ID="Categ">
<option value=''></OPTION>
<?php
$query4="select * from `category`";
$result4=mysql_query($query4);
$num_results4=mysql_num_rows($result4);
for($i=0; $i<$num_results4; $i++)
{















