| Server IP : 104.21.21.239 / Your IP : 216.73.216.201 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/hotel-prod/public_html/mod/ |
Upload File : |
<?php include('_mod_security.php'); ?>
<?php
form_prep('hotels', 'basic_info');
$product_key_disabled = false;
if (!empty($_GET['drop_location'])) :
$product_key_disabled = true;
endif;
if ($_POST['ajax_delivery_submitted'] == '1') :
form_reload_check();
$ar_product_key = explode('|', $_POST['product_key']);
$_POST['product_id'] = $ar_product_key[0];
$_POST['drop_location'] = $ar_product_key[1];
if (isset($_POST['active_tab'])) :
$active_tab = $_POST['active_tab'];
else :
$active_tab = 'basic_info';
endif;
$ar_err = array();
form_validate('product_key', 'string', true);
form_validate('qty', 'int', true);
if (!$err_flag) :
$set = "hotel_id = ".nz(trim($_POST['hotel_id']), '0').", ".
"product_id = ".nz($_POST['product_id'], '0').", ".
"drop_location = ".$db->quote(trim($_POST['drop_location'])).", ".
"qty = ".nz(trim($_POST['qty']), '0' ).", ".
"return_qty = ".nz(trim($_POST['return_qty']), '0' ).", ".
"restock_qty = ".nz(trim($_POST['restock_qty']),'0').", ".
"comments = ".$db->quote(trim($_POST['comments'])).", ".
sql_set_update();
if ($action == 'Edit') :
$sql = "UPDATE deliveries set ".$set.
"WHERE delivery_id = ".nz(trim($_REQUEST['id']), '0')." ";
$db->query($sql) or die('Database Error!');
//echo '==='.$sql.'===';
post_set_update();
else :
if ($action == 'Add New') :
$sql = "INSERT INTO deliveries SET ".
sql_set_create().
$set;
//echo '==='.$sql.'===';
$db->query($sql) or die('Database Error!');
$_REQUEST['id'] = last_id();
$_POST['delivery_id'] = $_REQUEST['id'];
post_set_create_update();
$_POST['create_by_repeater'] = get_user($_POST['create_by']);
$_POST['create_date_repeater'] = nzdate_display_datetime($_POST['create_date']);
endif;
endif;
//***********************************************************************
$form_message = "Saved sucessfully!";
form_uid_reset();
if ($_POST['xsubmit'] == 'Save & Close') :
echo "<SCRIPT>";
echo "appstack_pop()";
echo "</SCRIPT>";
endif;
if ($_POST['xsubmit'] == 'Save & New') :
echo "<SCRIPT>";
echo "window.location.href = 'index.php?IX=delivery_form&ref=".urlencode($_REQUEST['ref'])."&hotel_id=".$_GET['hotel_id']."'";
echo "</SCRIPT>";
endif;
else :
$active_tab = $err_tab;
$form_message = "Errors found!";
endif;
else:
if ($action == 'Edit') :
$sql = "SELECT * FROM deliveries WHERE delivery_id = ".nz(trim($_REQUEST['id']), '0')." ";
$result = $db->query($sql) or die('Database Error!');
if ($result->rowCount() > 0) :
$row = $result->fetch(PDO::FETCH_OBJ);
$_POST['delivery_id'] = $row->delivery_id;
$_POST['hotel_id'] = $row->hotel_id;
$_POST['product_id'] = $row->product_id;
$_POST['drop_location'] = $row->drop_location;
$_POST['product_key'] = trim($_POST['product_id']).'|'.trim($_POST['drop_location']);
$_POST['qty'] = $row->qty;
$_POST['return_qty'] = $row->return_qty;
$_POST['restock_qty'] = $row->restock_qty;
$_POST['comments'] = $row->comments;
post_set_load_create_update();
$_POST['create_by_repeater'] = get_user($row->create_by);
$_POST['create_date_repeater'] = nzdate_display_datetime($row->create_date);
else :
echo form_fatal_error('Invalid Operation!');
return;
endif;
else :
if (!empty($_GET['hotel_id'])) :
$_POST['hotel_id'] = $_REQUEST['hotel_id'];
if (!empty($_GET['product_id'])) :
$find_product_id = " AND product_id = ".nz($_GET['product_id'], '0');
else :
$find_product_id = " AND product_id = ".APP_DEFAULT_PRODUCT;
endif;
if (!empty($_GET['drop_location'])) :
$find_drop_location = " AND drop_location = ".$db->quote($_GET['drop_location']);
else :
$find_drop_location = '';
endif;
$sql = "SELECT * FROM hotels_products WHERE hotel_id = ".nz($_POST['hotel_id'], '0')." ".$find_product_id." ".$find_drop_location." ";
//echo '==='.$sql.'===';
$result = $db->query($sql) or die('Database Error!');
if ($result->rowCount() > 0) :
$row_product = $result->fetch(PDO::FETCH_OBJ);
$_POST['product_key'] = trim($row_product->product_id).'|'.trim($row_product->drop_location);
else :
//$_POST['product_key'] = APP_DEFAULT_PRODUCT.'|'.APP_DEFAULT_DROP_LOCATION;
endif;
endif;
endif;
endif;
?>
<script>
var active_page = '<?php echo $_REQUEST['IX']; ?>';
var active_tab = '';
update_header = function()
{
/*
if ($("#first_name").val() > "" && $("#last_name").val() > "" )
{
$("#header_repeater").text(" - " + $("#first_name").val() + ' ' + $("#last_name").val());
}
*/
}
var ar_product_loc = [];
var ar_product_qty = [];
product_change = function()
{
if ($('#product_key').val() > '')
{
$('#disp_location').text(ar_product_loc[$('#product_key').val()]);
$('#disp_dist_qty').text(ar_product_qty[$('#product_key').val()]);
}
else
{
$('#disp_location').text('');
$('#disp_dist_qty').text('');
}
}
$(document).ready(function()
{
switch_tab('<?php echo $active_tab; ?>');
update_header();
$(':input:not(.search)').change(function() {sheet_dirty = true; } );
product_change();
}
)
</script>
<h1>Delivery - <?php echo $action; ?><span id="header_repeater"></span></h1>
<?php echo form_message($form_message); ?>
<form style="" name="frm_verificaation" id="frm_verificaation" method="post" action="">
<input name="ajax_delivery_submitted" type="hidden" value="1" />
<input name="id" type="hidden" value="<?php echo $_REQUEST['id']; ?>" />
<input name="active_tab" id="active_tab" type="hidden" value="basic_info" />
<?php form_button_strip('top'); ?>
<div class="tab_strip">
<?php
form_tab_header('basic_info', 'Basic Info', 'admin,distributor,driver,gte');
?>
</div>
<div class="cleardiv">
</div>
<div class="tab_content" id="tab_content_basic_info">
<div class="form_header">
Basic Info
</div>
<div class="input_column">
<?php
form_field('delivery_id', 'text', 10, 0, false, false, true, '', '', 'delivery_id', 'Delivery ID');
form_field('create_date_repeater', 'text', 25, 0, false, false, true, '', '', 'create_date_repeater', 'Date/Time');
form_field('create_by_repeater', 'text', 50, 0, false, false, true, '', '', 'create_by_repeater', 'Delivered By');
$sql = "SELECT hotel_id, hotel_name FROM hotels WHERE hotel_id = ".nz($_POST['hotel_id'], '0')." ORDER BY hotel_name ";
$result = $db->query($sql) or die('Database Error!');
$ar_hotels = $result->fetchAll(PDO::FETCH_KEY_PAIR);
form_field('hotel_id', 'select', 50, 0, false, false, true, '', '', 'hotel_id', 'Hotel', $ar_hotels);
$sql = "SELECT CONCAT(p.product_id, '|', hp.drop_location), CONCAT(p.description, ' - ', hp.dist_qty, ' - ', hp.drop_location) FROM products p INNER JOIN hotels_products hp ON (p.product_id = hp.product_id) WHERE p.active = 1 AND hp.hotel_id = ".nz($_POST['hotel_id'], '0')." ORDER BY p.product_id, hp.drop_location ";
$result = $db->query($sql) or die('Database Error!');
$ar_products = $result->fetchAll(PDO::FETCH_KEY_PAIR);
form_field('product_key', 'select', 50, 0, true, false, $product_key_disabled, '', '', 'product_key', 'Product / Drop Location', $ar_products, 'product_change();');
foreach($ar_products as $key => $value) :
$ar_loc_qty = explode(' - ', $value);
echo '<script>';
echo 'ar_product_loc["'.$key.'"] = "'.$ar_loc_qty[2].'";';
echo 'ar_product_qty["'.$key.'"] = "'.$ar_loc_qty[1].'";';
echo '</script>';
endforeach;
echo 'Location: <span id="disp_location"></span><br />';
echo 'Distribution qty: <span id="disp_dist_qty"></span><br />';
form_field('qty', 'text', 10, 0, true, false, false, '', '', 'qty', 'Delivered Qty');
form_field('return_qty', 'text', 10, 0, false, false, false, '', '', 'return_qty', 'Return Qty');
form_field('restock_qty', 'text', 10, 0, false, false, false, '', '', 'restock_qty', 'Restock Qty');
form_field('comments', 'textarea', 70, 9, false, false, false, '', '', 'comments', 'Comments');
?>
</div>
</div>
<!-- -------------------------------------------------------------------------------------------------------------- -->
<?php form_button_strip('bottom'); ?>
</form>