????JFIF??x?x????'
Server IP : 79.136.114.73 / Your IP : 13.59.50.189 Web Server : Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.29 OpenSSL/1.0.1f System : Linux b8009 3.13.0-170-generic #220-Ubuntu SMP Thu May 9 12:40:49 UTC 2019 x86_64 User : www-data ( 33) PHP Version : 5.5.9-1ubuntu4.29 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority, MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/icad.astacus.se/project/project/ |
Upload File : |
<?php session_start(); $headers = 'MIME-Version: 1.0' . "\r\n"; $headers .= "Content-type: text/html; charset=iso-8859-1\r\n"; $headers .= "Date: ".date("r")."\r\n"; $headers .= "From: astacusproject@gmail.com \r\n"; $headers .= "Reply-To: astacusproject@gmail.com\r\n"; $headers .= "Return-Path: astacusproject@gmail.com\r\n"; $link = mysql_connect ("localhost", "root", "root123"); mysql_select_db ("vpa"); $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; if($_GET['ID'] == "ProjectStatusId"){ $sql = "UPDATE Project SET ProjectStatusId = ".$_GET['statusId'].", statusChangedDate = '".date("Y-m-d H:i:s")."' where ProjectId = ".$_GET['projectId']." "; $result = mysql_query($sql); $sql = "INSERT INTO ProjectStatusLog VALUES(null,".$SystemUserId.",".$_GET['projectId'].",".$_GET['statusId'].",'".date("Y-m-d H:i:s")."');"; $result = mysql_query($sql); $sql = "SELECT * FROM ProjectStatus WHERE ProjectStatusId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $Name = $row['ProjectStatusDisplayValue']; $Grouping = $row['Grouping']; } if($Grouping == "Project flow"){ $ProjectPhaseId = 2; }else if($Grouping == "Preproject"){ $ProjectPhaseId = 1; }else if($Grouping == "Admin"){ $ProjectPhaseId = 3; }else { $ProjectPhaseId = 0; } $sql = "UPDATE Project SET ProjectPhaseId = '$ProjectPhaseId' where ProjectId = ".$_GET['projectId']." "; $result = mysql_query($sql); $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The project status was changed to: ".$Name); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); //echo($sql); $sql = ""; }else if($_GET['ID'] == "JobTypeId"){ $sql = "SELECT * FROM JobType WHERE JobTypeId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $JobTypeDisplayValue = $row['JobTypeDisplayValue']; } $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The job type was changed to: ".$JobTypeDisplayValue); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); $sql = "UPDATE Project SET JobTypeId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." "; mysql_query($sql); if($_GET['statusId'] == "1"){ $y = "20".date("y"); $d = date("W"); $sql = "SELECT * FROM Sales Where Username = '".$_GET['ProjectManagerName']."'"; $result = mysql_query($sql); //echo($sql ); $FOUND = 0; while ($row = mysql_fetch_assoc($result)){ $FOUND = 1; } if($FOUND == 1){ $sql = "INSERT INTO Sales VALUES(null, '".$_GET['ProjectManagerName']."','".$y.$d."',0,0,0,1)"; mysql_query($sql); $sql = "select * from Sales"; } } // }else if($_GET['ID'] == "ProjectPhaseId"){ $sql = "SELECT * FROM ProjectPhase WHERE ProjectPhaseId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $ProjectPhaseName = $row['ProjectPhaseName']; } $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The phase was changed to: ".$ProjectPhaseName); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); $sql = "UPDATE Project SET ProjectPhaseId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." "; }else if($_GET['ID'] == "ProductionManagerId"){ $sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $Username = $row['Username']; } $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The production manager was changed to: ".$Username); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); $sql = "UPDATE Project SET SystemUserIdProductionManager = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." "; }else if($_GET['ID'] == "BallId"){ $sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $Username = $row['Username']; } $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The sales responsible was changed to: ".$Username); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); mail($Username, "You are sales responsible in project: ".$_GET['projectId'], nl2br("The Sales responsible was changed to: ".$Username), $headers); $sql = "DELETE FROM ICADBalls WHERE ProjectId = ".$_GET['projectId']." "; mysql_query($sql); $sql = "INSERT INTO ICADBalls VALUES(NULL,".$_GET['projectId'].",".$_GET['statusId'].",'".date("Y-m-d")."') "; }else if($_GET['ID'] == "ProjectTypeId"){ $sql = "SELECT * FROM ProjectType WHERE ProjectTypeId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $ProjectTypeDisplayValue = $row['ProjectTypeDisplayValue']; } $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The project type was updated to: ".$ProjectTypeDisplayValue); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); $sql = "UPDATE Project SET ProjectTypeId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." "; }else if($_GET['ID'] == "CountryId"){ $sql = "UPDATE Project SET CountryId = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." "; }else if($_GET['ID'] == "ProjectManagerId"){ $sql = "DELETE FROM ProjectManager WHERE ProjectId = ".$_GET['projectId']." "; mysql_query($sql); $sql = "INSERT INTO ProjectManager VALUES(NULL,".$_GET['statusId'].",".$_GET['projectId'].") "; mysql_query($sql); $sql = "INSERT INTO ProjectFavorite VALUES(NULL,".$_GET['statusId'].",".$_GET['projectId'].") "; $sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $Name = $row['Name']; $Username = $row['Username']; } $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The Application Engineer has been updated to: ".$Name." (".$Username.")"); $prio = "4"; $sql = "INSERT IGNORE INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); mail($Username,"You are Application Engineer in project: ".$_GET['projectId'], nl2br("The Application Engineer was changed to: ".$Username), $headers); $sql = ""; }else if($_GET['ID'] == "SystemUserId"){ $sql = "SELECT * FROM SystemUser WHERE SystemUserId = ".$_GET['statusId']; $result = mysql_query($sql); while ($row = mysql_fetch_assoc($result)){ $Name = $row['Name']; $Username = $row['Username']; $Phone = $row['Phone']; } $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The client contact person info was updated to: ".$Name.", ".$Username.", ". $Phone); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); $sql = "UPDATE Project SET clientProjectManagerName = '".$Name."', clientProjectManagerEmail = '".$Username."', clientProjectManagerTelephone = '".$Phone."' where ProjectId = ".$_GET['projectId']." "; }else if($_GET['ID'] == "orderConfirmationSent"){ $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The order confirmation was sent: ".$LogDate); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); $sql = "UPDATE Project SET orderConfirmationSent = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." "; }else if($_GET['ID'] == "InvoiceSent"){ $LogDate = date("Y-m-d H:i:s"); $ProjectId = $_GET['projectId']; $SystemUserId = $_SESSION['ASTACUS_SSO_INFO'][0]; $Subject = "Automatic function"; $Message = nl2br ("The invoice was sent: ".$LogDate); $prio = "4"; $sql = "INSERT INTO ProjectLog VALUES (NULL,'$LogDate',$ProjectId,$SystemUserId,'$Message',$prio,'$Subject');"; $result = mysql_query($sql); $sql = ""; $sql = "UPDATE Project SET InvoiceSent = ".$_GET['statusId']." where ProjectId = ".$_GET['projectId']." "; } $result = mysql_query($sql); header("Location: index.php?".str_replace("EE","&",$_GET['params'])); ?>