| Server IP : 104.21.21.239 / Your IP : 216.73.216.30 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/mitzvahm/planner/admin/mod/ |
Upload File : |
<?php
//var_dump(is_readable('_form_header.php'));
//echo ini_get('include_path');
include('_form_header.php');
$form_error = 0;
$form_menu_seq_error = '';
$form_menu_index_error = '';
$form_menu_name_error = '';
$form_show_state_error = '';
$form_show_roles_error = '';
//echo 'Submitted '.$_POST['Submitted'];
//exit();
if ($_POST['Submitted'] == '1')
{
$form_saved_menu_seq = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['SavedMenuSeq']));
$form_menu_seq = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['MenuSeq']));
$form_menu_index = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['MenuIndex']));
$form_menu_name = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['MenuName']));
$form_show_state = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['ShowState']));
$form_show_roles = mysqli_real_escape_string($GLOBALS['con'], trim(implode(',',$_POST['ShowRoles'])));
if ($form_menu_seq == '' || !is_numeric($form_menu_seq))
{
$form_error = 1;
$form_menu_seq_error = 'Menu Seq must be non-blank numeric!';
}
if ($form_menu_index == '')
{
$form_error = 1;
$form_menu_index_error = 'Menu Index must be non-blank!';
}
if ($form_menu_name == '')
{
$form_error = 1;
$form_menu_name_error = 'Menu Name must be non-blank!';
}
if ($form_error != 1)
{
if ($_GET['ACTION'] == 'edit')
{
$sql = "UPDATE admin_menucontrol
SET MenuSeq = ".$form_menu_seq.
",MenuIndex = '".$form_menu_index."'".
",MenuName = '".$form_menu_name."'".
",ShowState = ".$form_show_state.
",ShowRoles = '".$form_show_roles."'".
"WHERE MenuSeq = ".$form_saved_menu_seq;
mysqli_query($GLOBALS['con'], $sql);
}
else
{
$sql = "INSERT INTO admin_menucontrol (MenuSeq,MenuIndex,MenuName,ShowState,ShowRoles) VALUES (".
$form_menu_seq.
",'".$form_menu_index."'".
",'".$form_menu_name."'".
",".$form_show_state.
",'".$form_show_roles."')";
mysqli_query($GLOBALS['con'], $sql);
}
if (mysqli_error($GLOBALS['con']) != '')
echo 'SQL: '.$sql.'<BR />Database Error - '.mysqli_error($GLOBALS['con']).'<BR />';
else
{
echo 'Update successful';
echo "<SCRIPT>";
echo "window.parent.location.href = window.parent.location.href;";
echo "</SCRIPT>";
}
exit();
}
}
else
{
if ($_GET['ACTION'] == 'edit')
{
$key_id = mysqli_real_escape_string($GLOBALS['con'], trim($_GET['KEYID']));
$sql = "SELECT * FROM admin_menucontrol WHERE MenuSeq = ".$key_id;
$result = mysqli_query($GLOBALS['con'], $sql);
if (mysqli_num_rows($result) < 1)
die('Database error! Record not found, Key ID: '.$key_id);
$row = mysqli_fetch_array($result);
$form_saved_menu_seq = $row['MenuSeq'];
$form_menu_seq = $row['MenuSeq'];
$form_menu_index = $row['MenuIndex'];
$form_menu_name = $row['MenuName'];
$form_show_state = $row['ShowState'];
$form_show_roles = $row['ShowRoles'];
}
else
{
$form_saved_menu_seq = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['SavedMenuSeq']));
$form_menu_seq = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['MenuSeq']));
$form_menu_index = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['MenuIndex']));
$form_menu_name = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['MenuName']));
$form_show_state = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['ShowState']));
$form_show_roles = mysqli_real_escape_string($GLOBALS['con'], trim($_POST['ShowRoles']));
}
}
?>
<div class="form-header">
Menu item record detail - <?php echo $_GET['ACTION'] ?>
</div>
<form name="frmDetail" id="frmDetail" method="post" action="menu_form.php?ACTION=<?php echo $_GET['ACTION'] ?>" >
<input type="hidden" id="Submitted" name="Submitted" value="1" >
<input name="SavedMenuSeq" id="SavedMenuSeq" value="<?php echo $form_saved_menu_seq; ?>" type="hidden">
<table border="0" cellspacing="3" cellpadding="0" style="text-align:left;" >
<tr>
<td>
<div style="width:180px;">
</div>
</td>
<td>
<div style="width:330px;">
</div>
</td>
<td>
<div style="width:180px;">
</div>
</td>
</tr>
<tr valign="middle">
<td valign="top">
Menu Sequence:
</td>
<td>
<input type="text" id="MenuSeq" name="MenuSeq" value="<?php echo $form_menu_seq ?>" class="input-box" style="width:125px;" size="5" maxlength="5" >
</td>
<td valign="top" class="error_text">
<?php echo $form_menu_seq_error; ?>
</td>
</tr>
<tr valign="middle">
<td valign="top">
Menu Index:
</td>
<td>
<input type="text" id="MenuIndex" name="MenuIndex" value="<?php echo $form_menu_index ?>" class="input-box" style="width:300px;" size="25" maxlength="25" >
</td>
<td valign="top" class="error_text">
<?php echo $form_menu_index_error; ?>
</td>
</tr>
<tr valign="middle">
<td valign="top">
Menu Name:
</td>
<td>
<input type="text" id="MenuName" name="MenuName" value="<?php echo $form_menu_name ?>" class="input-box" style="width:300px;" size="25" maxlength="25" >
</td>
<td valign="top" class="error_text">
<?php echo $form_menu_name_error; ?>
</td>
</tr>
<tr valign="middle">
<td valign="top">
Show State:
</td>
<td>
<select id="ShowState" name="ShowState" class="input-box-var" style="width:160px;" >
<option value="0" <?php if ($form_show_state == '0') echo 'selected="selected"' ?> >0 - All states</option>
<option value="1" <?php if ($form_show_state == '1') echo 'selected="selected"' ?> >1 - Logged in</option>
<option value="2" <?php if ($form_show_state == '2') echo 'selected="selected"' ?> >2 - Not logged in</option>
<option value="99" <?php if ($form_show_state == '99') echo 'selected="selected"' ?> >99 - Do not show</option>
</select>
</td>
<td valign="top" class="error_text">
<?php echo $form_show_state_error; ?>
</td>
</tr>
<tr valign="middle">
<td valign="top">
Roles:
</td>
<td>
<?php
$sql = "SELECT * FROM admin_roles WHERE Active = 1 ORDER BY RoleID";
$result = mysqli_query($GLOBALS['con'], $sql);
while($row = mysqli_fetch_array($result))
{
?>
<input type="checkbox" name="ShowRoles[]" value="<?php echo $row['RoleID']; ?>" <?php if (stripos($form_show_roles,$row['RoleID']) !== false) echo ' checked="checked"'; ?> /> <?php echo $row['RoleDescription']; ?><br />
<?php
}
?>
</td>
<td valign="top" class="error_text">
<?php echo $form_show_roles_error; ?>
</td>
</tr>
<tr valign="middle">
<td colspan="3" align="center">
<br />
<input type="submit" name="btnSubmit" value="Save" class="default-button" >
<input type="button" name="btnCancel" value="Cancel" class="default-button" onClick="resetForm();" />
<br />
</td>
</tr>
</table>
</form>
<?php include('_form_footer.php'); ?>