<tr><td>Email</td>
<td><input type="text" name="call_email" id="call_email" value="<?php
echo $user_info->user_email;
?>
" required></td></tr>
<tr><td>Phone</td>
<td><input type="text" name="call_phone" class="input-medium" value="<?php
echo $user_info->user_phone;
?>
"></td></tr>
<tr><td>Department</td><td><select name='call_department'>
<option></option>
<?php
$call_dept = $db->get_results("select type_id,type_name from site_types where type=1 order by type_name;");
foreach ($call_dept as $dept) {
?>
<option value='<?php
echo $dept->type_id;
?>
'><?php
echo $dept->type_name;
?>
</option>
<?php
}
?>
</select></td></tr>
<tr><td>Request</td><td><select name='call_request'>
$searchquery .= " AND (call_request = {$call_request})";
}
if (!empty($call_device)) {
$searchquery .= " AND (call_device = {$call_device})";
}
if (!empty($call_staff)) {
$searchquery .= " AND (call_staff = {$call_staff})";
}
if (!empty($call_details)) {
$searchquery .= " AND (call_details LIKE '%{$call_details}%')";
}
if (!empty($call_solution)) {
$searchquery .= " AND (call_solution LIKE '%{$call_solution}%')";
}
$searchquery .= " order by call_date desc LIMIT 50;";
$site_calls = $db->get_results("Select * from site_calls WHERE 1=1 {$searchquery}");
//$db->debug();
$num = $db->num_rows;
}
//</SEARCHQUERY>
if ($num > 0) {
//<RESULTS>
echo "<h4><small>[ " . $num . " ] found</small></h4>";
?>
<table class="<?php
echo $table_style_3;
?>
" style='width: auto;'>
<tr>
<th colspan="<?php
echo $colspan;
// $is_valid = 0;
//}
if ($is_valid != 1) {
$_SESSION['hit'] += 1;
echo "<div class='alert alert-warning' style='width: 375px;'><i class='glyphicon glyphicon-info-sign'></i> Login incorrect, or your registration is pending.</div>";
include "includes/footer.php";
exit;
}
$id = $_SESSION[id];
$nama = $_SESSION[nama];
//$site_users = $db->get_row("select user_id,user_name,user_level from site_users WHERE $checkusing = '$user_login' limit 1;");
$user_id = $id;
$user_name = $nama;
//$user_level = $site_users->user_level;
echo $id;
$sqlrole = $db->get_results("select user_role2role_role_id from w_user_role2role where user_role2role_user_id='{$id}'");
foreach ($sqlrole as $sqlrolenya) {
$rolenya = $sqlrolenya->user_role2role_role_id;
echo $rolenya;
if ($rolenya == 2 || $rolenya == 27) {
$user_level = 0;
} else {
$user_level = 1;
}
}
if ($user_level == 0) {
$_SESSION['admin'] = 1;
} else {
$_SESSION['user'] = 1;
}
$_SESSION['user_id'] = $user_id;
$encrypted_passwords = $db->get_var("SELECT option_value FROM site_options where option_name = 'encrypted_passwords';");
if ($encrypted_passwords == "yes") {
echo "<p class='text-danger'><strong>This function has already been run!</strong></p>";
include "includes/footer.php";
exit;
}
?>
<h4><strong>Please <u>backup database</u> before starting.</strong></h4>
<p><a href="fhd_admin_e.php?start=1" class="btn btn-success" onclick="return confirm('Please be sure you have a good database backup!')">Start</a> <a href="fhd_settings.php" class="btn btn-danger">Cancel</a></p>
<?php
if (isset($_GET['start'])) {
$db->query("ALTER TABLE `site_users` CHANGE `user_password` `user_password` VARCHAR( 225 );");
$myquery = "SELECT user_id,user_login,user_password from site_users;";
$e = $db->get_results($myquery);
foreach ($e as $ep) {
$user_id = $ep->user_id;
$user_login = $ep->user_login;
$user_password = $ep->user_password;
$hasher = new PasswordHash(8, false);
$hash = $hasher->HashPassword($user_password);
echo $user_login . " -> <i class='fa fa-lock'></i><br />";
$db->query("UPDATE `site_users` SET user_password = '******' WHERE user_id = {$user_id} limit 1;");
}
echo "<h4>Update Complete!</h4>";
//mark passwords as updated.
$db->query("UPDATE `site_options` SET option_value = 'yes' WHERE option_name = 'encrypted_passwords';");
}
include "includes/footer.php";
include "includes/ez_sql_mysqli.php";
include "includes/functions.php";
$db = new ezSQL_mysqli(db_user, db_password, db_name, db_host);
$queryadd = "";
$colspan = 2;
if ($user_level == 1) {
$queryadd = " AND call_user = {$user_id}";
$colspan = 1;
}
if (isset($_GET['user_id'])) {
$queryadd = " AND call_user = "******"SELECT call_id,call_date,call_first_name,call_last_name,call_request,call_department,call_device from site_calls WHERE (call_status = 0) $queryadd order by call_id desc;";
$myquery = "SELECT call_id,call_date,call_first_name,call_last_name,call_request,call_department,call_device from site_calls WHERE (call_status = 0) order by call_id desc;";
$site_calls = $db->get_results($myquery);
$num = $db->num_rows;
//$db->debug();
echo "<h4><i class='fa fa-tags'></i> Laporan Masalah <small>[ {$num} ]</small></h4>";
if ($num > 0) {
?>
<table class="<?php
echo $table_style_1;
?>
" style='width: auto;'>
<tr>
<th colspan="<?php
echo $colspan;
?>
" style='text-align: center;'>Action</th>
<?php
echo "<tr><td>Status</td><td>" . call_status($site_calls->call_status) . "</td></tr>\n";
echo "<tr><td>Date</td><td>" . $call_date . "</td></tr>\n";
if ($call_status == 1) {
echo "<tr><td>Closed</td><td>" . date('Y-m-d', $site_calls->call_date2) . "</td></tr>\n";
}
echo "<tr><td>Name</td><td>" . $site_calls->call_first_name . "</td></tr>\n";
echo "<tr><td>Email</td><td>" . $site_calls->call_email . "</td></tr>\n";
echo "<tr><td>Dept</td><td>{$department_name}</td></tr>\n";
echo "<tr><td>Request</td><td>{$request_name}</td></tr>\n";
echo "<tr><td>Device</td><td>{$device_name}</td></tr>\n";
echo "<tr><td>Details</td><td style='width: 500px;'>" . $site_calls->call_details . "</td></tr>\n";
echo "<tr><td>Solution</td><td style='width: 500px;'>" . $site_calls->call_solution . "</td></tr>\n";
echo "<tr><td>Staff</td><td>{$staff_name}</td></tr>\n";
//********** manage file upload
if (FHD_UPLOAD_ALLOW == "yes") {
$getuploads = $db->get_results("SELECT id,call_id,file_name,file_ext,timestamp FROM site_upload WHERE call_id = {$call_id};");
$filecount = $db->num_rows;
if ($filecount > 0) {
echo "<tr><td colspan='2'>Uploads ({$filecount})</td></tr>\n";
foreach ($getuploads as $fn) {
$call_id = $fn->call_id;
$file_id = $fn->id;
$file_name = $fn->file_name;
$file_ext = $fn->file_ext;
$timestamp = $fn->timestamp;
$realpath = md5(UPLOAD_KEY . $file_id) . "." . $file_ext;
echo "<tr><td colspan='2'><a href='upload/" . $realpath . "'>{$file_name}</a> • {$timestamp}</td></tr>\n";
}
}
}
//*********************************
<tr><td>Email</td>
<td><input type="text" name="call_email" value="<?php
echo $site_calls->call_email;
?>
" class="input-xlarge"></td></tr>
<tr><td>Phone</td>
<td><input type="text" name="call_phone" value="<?php
echo $site_calls->call_phone;
?>
" class="input-medium"></td></tr>
<tr><td>Dept</td><td><select name='call_department'>
<?php
$call_dept = $db->get_results("select type_id,type_name from site_types where type=1");
foreach ($call_dept as $dept) {
?>
<option value='<?php
echo $dept->type_id;
?>
'<?php
if ($dept->type_id == $call_department) {
echo ' selected';
}
?>
><?php
echo $dept->type_name;
?>
</option>
<?php
<?php
}
?>
<th>Edit</th>
<th>Delete</th>
<?php
if ($type != 0) {
?>
<th>Calls</th>
<?php
}
?>
</tr>
<?php
$nacl = md5(AUTH_KEY . $db->get_var("select last_login from site_users where user_id = {$user_id};"));
$site_types = $db->get_results("SELECT type_id,type,type_name,type_email,type_location,type_phone from site_types where type = {$type} order by type_name;");
foreach ($site_types as $site_type) {
$type_id = $site_type->type_id;
$type = $site_type->type;
$type_name = $site_type->type_name;
$type_email = $site_type->type_email;
$type_location = $site_type->type_location;
$type_phone = $site_type->type_phone;
$col_name = show_type_col($type);
$count = $db->get_var("select count(call_id) from site_calls where {$col_name} = {$type_id};");
if ($count == 0) {
//if there are no calls, then the category can be removed.
$deletelink = "<a href='fhd_settings_action.php?type_id={$type_id}&type={$type}&action=delete&nacl={$nacl}' onclick=\"return confirm('Are you sure you want to delete?')\"><i class='glyphicon glyphicon-remove-circle' title='delete'></i></a>";
} else {
$deletelink = " ";
}
<td><input type="text" name="call_first_name" class="input-xlarge" required></td>
</tr>
<tr>
<td>Email</td>
<td><input type="email" name="call_email" class="input-xlarge" required></td>
</tr>
<tr>
<td>Phone</td>
<td><input type="text" name="call_phone" class="input-medium"></td>
</tr>
<tr><td>Departtment</td><td><select name='call_department'>
<?php
$call_dept = $db->get_results("select type_id,type_name from site_types where type=1 order by type_name;");
foreach ($call_dept as $dept) {
?>
<option value='<?php
echo $dept->type_id;
?>
'><?php
echo $dept->type_name;
?>
</option>
<?php
}
?>
</select></td></tr>
<tr><td>Request</td><td><select name='call_request'>
/**********************************************************************
* ezSQL initialisation for mySQLi
*/
// Include ezSQL core
include_once "../shared/ez_sql_core.php";
// Include ezSQL database specific component
include_once "ez_sql_mysqli.php";
// Initialise database object and establish a connection
// at the same time - db_user / db_password / db_name / db_host
// db_host can "host:port" notation if you need to specify a custom port
$db = new ezSQL_mysqli('db_user', 'db_password', 'db_name', 'db_host');
/**********************************************************************
* ezSQL demo for mySQLi database
*/
// Demo of getting a single variable from the db
// (and using abstracted function sysdate)
$current_time = $db->get_var("SELECT " . $db->sysdate());
print "ezSQL demo for mySQL database run @ {$current_time}";
// Print out last query and results..
$db->debug();
// Get list of tables from current database..
$my_tables = $db->get_results("SHOW TABLES", ARRAY_N);
// Print out last query and results..
$db->debug();
// Loop through each row of results..
foreach ($my_tables as $table) {
// Get results of DESC table..
$db->get_results("DESC {$table['0']}");
// Print out last query and results..
$db->debug();
}
