ESH/indent_script.php

<?php
include('includes/config/config.php');
include('includes/auth/auth.php');
include('includes/functions.php');
include('access.php');
include('log_entry.php');
error_reporting(E_ERROR | E_PARSE);
?>
<?php
begin();
// Connect to MySQL database
$page = 1; // The current page
$sortname = 'indent_id'; // Sort column
$sortorder = 'desc'; // Sort order
$qtype = ''; // Search column
$query = ''; // Search string
$searchSql = "";          // Get posted data
if (isset($_POST['page'])) {
    $page = mysqli_real_escape_string($conn, $_POST['page']);
}
if (isset($_POST['sortname'])) {
    $sortname = mysqli_real_escape_string($conn, $_POST['sortname']);
}
if (isset($_POST['sortorder'])) {
    $sortorder = mysqli_real_escape_string($conn, $_POST['sortorder']);
}
if (isset($_POST['qtype'])) {
    $qtype = mysqli_real_escape_string($conn, $_POST['qtype']);
}
if (isset($_POST['query'])) {
    $query = mysqli_real_escape_string($conn, $_POST['query']);
}
if (isset($_POST['rp'])) {
    $rp = mysqli_real_escape_string($conn, $_POST['rp']);
}

$hasReadAccess = isAccessible($_SESSION['RoleId'], $menu_key, 'R');
$hasWriteAccess = isAccessible($_SESSION['RoleId'], $menu_key, 'W');
$hasExecuteAccess = isAccessible($_SESSION['RoleId'], $menu_key, 'E');

$sortSql = "order by $sortname $sortorder";

$searchSql = ($qtype != '' && $query != '') ? "where upper($qtype) like upper('%$query%')" : '';
if ($searchSql != '') {

    if ($qtype == 'indent_date') {

        $searchSql = " and date_format(date(indent_date),'%Y-%m-%d')=str_to_date('$query','%d/%m/%Y') ";
        //echo $searchSql;
    }
}
// Get total count of records
$searchSql = preg_replace('/and/', 'where', $searchSql, 1);
//echo $searchSql;
//echo $qtype."  ".$query;
//echo ($qtype != '' && $query != '');
error_log("search" . $searchSql);
// Setup sort and search SQL using posted data


//echo "h".$searchSql;
//$searchSql = preg_replace ( '/and/', 'where', $searchSql, 1 );
// Get total count of records
$sql = "select count(*) from indent_master where (status='REJECTED' or status='draft' or status='PENDING') and ohc_type_id = '" . $_SESSION['current_ohcttype'] . "'  $searchSql";
error_log("nnnnnnnnnnn" . $sql);
//echo $sql;
$result = mysqli_query($conn, $sql);
rollback();
$row = mysqli_fetch_array($result);
$total = $row[0];
if (!isset($rp)) {
    $rp = 10;
}
// Setup paging SQL
// $rp=1;
$pageStart = ($page - 1) * $rp;
$limitSql = "limit $pageStart, $rp";
// Return JSON data
$data = array();
$data['page'] = $page;
$data['total'] = $total;
$data['rows'] = array();
//$sql_ambulance = "SELECT *  FROM ambulance_details    $searchSql $sortSql $limitSql";
$sql_ambulance = "SELECT * FROM indent_master where  ohc_type_id ='" . $_SESSION['current_ohcttype'] . "' and (status='REJECTED' or status='draft' or status='PENDING') $searchSql $sortSql $limitSql";
$sql_export = $sql_ambulance;
//echo $sql_ambulance;
error_log("aa" . $sql_ambulance);
$results_ambulance = mysqli_query($conn, $sql_ambulance);
rollback();
$count = ($page - 1) * $rp + 1;
// echo $sql_ailment;
// echo $access_level;

while ($row1 = mysqli_fetch_assoc($results_ambulance)) {
    $id = $row1['indent_id'];
    // echo $Department_id;
    $view_link = "";
    $edit_link = "";
    $delete_link = "";
    $pdf_link = "";
    $links = "";
    if ($hasReadAccess) {
        // echo "shubham";
        $view_link = "<a  href=\"#\"class=\"green\"  onclick=\"open_indent('" . $id . "','V');\"><i class=\"ace-icon fa fa-search-plus bigger-130\"></i></a>";
        $pdf_link =  "<a href=\"#\" class=\"red\" onclick=\"open_indent_items_pdf('" . $id . "');\"><i class=\"fa fa-file-pdf-o\" style=\"font-size: 15px;\"></i></a>";
    }

    if ($hasWriteAccess) {
        $edit_link = "<a href=\"#\" class=\"blue\" onclick=\"open_indent('" . $id . "','E');\"><i class=\"ace-icon fa fa-pencil bigger-130\"></i></a>";
    }
    if ($hasExecuteAccess) {
        $delete_link = "<a href=\"#\" class=\"red\" onclick=\"delete_procurement('" . $id . "');\"><i class=\"ace-icon fa fa-trash-o bigger-130\"></i></a>";
    }
    $item_desc = "";
    $item_qty = "";

    $sql_q = "select * from indent_items where indent_id='" . $row1['indent_id'] . "'";
    error_log("indent sql" . $sql_q);
    $result = mysqli_query($conn, $sql_q);
    while ($row2 = mysqli_fetch_assoc($result)) {
        $item_desc = $item_desc . ' <p> ' . getItemWithFormName($row2['item_id']) . '</p>';
        $item_unit_id = getTableFieldValue('tbl_items', 'unit_id', 'item_id', $row2['item_id']);
        $item_unit = getTableFieldValue(' unit_master', 'unit_name', 'unit_id', $item_unit_id);
        $item_qty = $item_qty . ' <p> ' . $row2['indent_qty'] . ' ' . $item_unit . '</p>';
    }
    $indent_ref_no = "<a  href=\"#\" class=\"blue\" onclick=\"open_indent_items_pdf('" . $id . "');\">" . $row1['indent_ref_no'] . "</a>";
    $space = "&nbsp;&nbsp;&nbsp;";
    $links = $assign_link . $space . $view_link . $space . $edit_link . $space . $delete_link . $space . $pdf_link;
    //$waste_category_name = getTableFieldValue ( 'waste_category', 'waste_category_name', 'waste_category_id', $row1['waste_category'] );
    //$ohc_type_name = getTableFieldValue ( 'ohc_type ', 'ohc_type_name', 'ohc_type_id ', $row1['ohc_type_id '] );

    $data['rows'][] = array(
        'id' => $row1['box_id'],
        'cell' => array(
            $links,
            $count++,
            $indent_ref_no,
            $item_desc,
            date_format(date_create($row1['indent_date']), "d-M-Y"),
            $item_qty,
            $row1['remarks']


        )
    );
}

commit();
$data['rows'][] = array(
    'id' => $row['filterkey'],
    'cell' => array('', "<input type=hidden name='filterkey' id='filterkey' value=\"" . base64_encode($sql_export) . "\">", "<input type=hidden name=paramlist id=paramlist value=\"" . ($qtype . ':' . $query) . "\">", '',  '', '', '', '', '', '',  '', '', '', '', '', '', '', '', '', '')
);
echo json_encode($data);


?>