Пример #1
0
function login($_POST)
{
    global $_SESSION;
    extract($_POST);
    require_lib("validate");
    $v = new validate();
    $v->isOk($code, "string", 1, 5, "Invalid company name.");
    # Display errors, if any
    if ($v->isError()) {
        $confirm = "";
        $errors = $v->getErrors();
        foreach ($errors as $e) {
            $confirm .= "<li class='err'>" . $e["msg"] . "</li>";
        }
        return slctcomp($confirm);
    }
    # Change code to lowercase
    $code = strtolower($code);
    if (!db_check("cubit_" . $code)) {
        return slctcomp("<li class='err'>Invalid Company. Select another company or<br />\n\t\t\tclick <a href='company-new.php?key=recover'>here</a> to see if Cubit can recover from this error.</li>");
    }
    # Get Company Name
    db_conn("cubit");
    $sql = "SELECT name FROM companies WHERE code = '{$code}'";
    $compRslt = db_exec($sql) or errDie("Unable to access database.", SELF);
    if (pg_numrows($compRslt) < 1) {
        $comp['name'] = "";
    } else {
        $comp = pg_fetch_array($compRslt);
    }
    $_SESSION["code"] = $code;
    $_SESSION["comp"] = $comp['name'];
    header("Location: doc-index.php");
}
Пример #2
0
function recover()
{
    extract($_REQUEST);
    require_lib("validate");
    $v = new validate();
    $v->isOk($code, "string", 1, 5, "Invalid company code.");
    # Display errors, if any
    if ($v->isError()) {
        $confirm = "";
        $errors = $v->getErrors();
        foreach ($errors as $e) {
            $confirm .= "<li class='err'>" . $e["msg"] . "</li>";
        }
        return slctcomp($confirm);
    }
    # Change code to lowercase
    $code = strtolower($code);
    # Get Company Name
    db_con("cubit");
    $sql = "SELECT * FROM companies WHERE code = '{$code}'";
    $compRslt = db_exec($sql) or errDie("Unable to access database.", SELF);
    if (pg_numrows($compRslt) < 1) {
        return "<li class='err'> Invalid Company Code</li>";
    } else {
        $comp = pg_fetch_array($compRslt);
    }
    $sql = "UPDATE companies SET status='active' WHERE code = '{$code}'";
    $delRslt = db_exec($sql) or errDie("Unable to access database.", SELF);
    $date = date("Y-m-d");
    $Sl = "INSERT INTO ch(comp,code,des,f,t,date) VALUES ('{$comp['name']}','{$comp['code']}','Recover by " . USER_NAME . "','{$comp['ver']}','{$comp['ver']}','{$date}')";
    $Ri = db_exec($Sl);
    $rem = "\n\t\t\t<h3>Recover Company</h3>\n\t\t\t<h4><li> Company : {$comp['name']} has been successfully been recovered and marked as active.</h4>";
    return $rem;
}