0byt3m1n1-V2

Path: /home/office2017v2.1/admin/ [ Home ]
File: recive.php
<?php
//include 'header.php';
include 'function.php';
$pid=$_GET['pid'];
$sec_id=$_GET['sec_id'];
$dep_id=$_GET['dep_id'];
$dateRecive=date('Y-m-d H:m:s');

$sql="SELECT  p.pid,p.insite,p.outsite FROM paper p
      INNER JOIN  paperuser u ON u.pid=p.pid
      WHERE u.pid=$pid AND u.dep_id=$dep_id";
$res=mysqli_query($conn,$sql);
if(!$res){
  echo mysqli_error($conn);
  exit;
}else{
  $numrow=mysqli_num_rows($res);
  if($numrow<>0){
    $row=mysqli_fetch_array($res);
    if($row['insite']==1){
     // echo "นี่เป็นหนังสื่อส่งภายใน";
      $sqlRecive="UPDATE paperuser SET confirm=1,confirmdate='$dateRecive' WHERE pid=$pid AND sec_id=$sec_id";
      $resRecive=mysqli_query($conn,$sqlRecive);
      if(!$resRecive){
        echo mysqli_error();
        exit;
      }else{
        echo "<script>window.alert(\"ยืนยันรับทราบเรียบร้อยแล้ว\");</script>";
        echo "<meta http-equiv='refresh' content='1;URL=paper.php'>";
      }
    }elseif($row['outsite']==1){
      //echo "นี่เป็นหนังสื่อส่งภายนอก";
      $sqlRecive="UPDATE paperuser SET confirm=1,confirmdate='$dateRecive' WHERE pid=$pid AND dep_id=$dep_id";
      //print $sqlRecive;
      $resRecive=mysqli_query($conn,$sqlRecive);
      if(!$resRecive){
        echo mysqli_error();
        exit;
      }else{
        echo "<script>window.alert(\"ยืนยันรับทราบเรียบร้อยแล้ว\");</script>";
        echo "<meta http-equiv='refresh' content='1;URL=paper.php'>";
      }
    }
  }
}

?>