0byt3m1n1-V2

Path: /home/office2017v2.1/admin/ [ Home ]
File: crud_depart.php
<?php
include_once 'function.php';
/*
$officeType=$_POST['officeType'];
$dep_name=$_POST['dep_name'];
$address=$_POST['address'];
$tel=$_POST['tel'];
$fax=$_POST['fax'];
$social=$_POST['facebook'];
 */

if(isset($_POST['save'])){
    $officeType=$conn->real_escape_string($_POST['officeType']);
    $dep_name=$conn->real_escape_string($_POST['dep_name']);
    $address=$conn->real_escape_string($_POST['address']);
    $tel=$conn->real_escape_string($_POST['tel']);
    $fax=$conn->real_escape_string($_POST['fax']);
    $social=$conn->real_escape_string($_POST['facebook']);
    $status=$conn->real_escape_string($_POST['status']);
    $local_num=$conn->real_escape_string($_POST['local_num']);
    //$SQL = $MySQLiconn->query("INSERT INTO data(fn,ln) VALUES('$fn','$ln')");
    $SQL=$conn->query("
                        INSERT INTO depart(type_id,dep_name,address,phone,fax,social,status,local_num)
                        VALUE ('$officeType','$dep_name','$address','$tel','$fax','$social',$status,$local_num)
                     ");
    
    echo "<meta http-equiv='refresh' content='1;URL=depart.php'>";
    echo "<script>swal(\"Good job!\", \"บันทึกข้อมูลเรียบร้อยแล้ว\", \"success\")</script>";
    if(!$SQL){
        echo $conn->error;
    }
}

if(isset($_GET['del'])){
	$SQL = $conn->query("DELETE FROM depart WHERE dep_id=".$_GET['del']);
	echo "<meta http-equiv='refresh' content='1;URL=depart.php'>";
}

if(isset($_GET['edit'])){
	$SQL = $conn->query("SELECT * FROM depart WHERE dep_id=".$_GET['edit']);
        
	$getROW = $SQL->fetch_array();
        //echo "<meta http-equiv='refresh' content='1;URL=object.php'>";
}

if(isset($_POST['update'])){
        $sql="UPDATE depart
                         SET type_id=".$_POST['officeType'].",
                             dep_name='".$_POST['dep_name']."',
                             address='".$_POST['address']."',
                             phone='".$_POST['tel']."',
                             fax='".$_POST['fax']."',
                             social='".$_POST['website']."',
                             status=".$_POST['status'].",
                             local_num=".$_POST['local_num']."
                        WHERE dep_id=".$_GET['edit']."
                            ";
        //echo $sql;
	$SQL = $conn->query($sql);
        echo "<script>swal(\"Good job!\", \"แก้ไขข้อมูลแล้ว!\", \"success\")</script>";                 
        
	echo "<meta http-equiv='refresh' content='1;URL=depart.php'>";
}
?>