OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	12/18/2021 02:05:57 PM	rwxr-xr-x
📄 chk.login.php	936 bytes	12/18/2021 09:31:31 AM	rw-r--r--
📄 get.section.article.php	48.84 KB	02/08/2022 02:06:01 PM	rw-r--r--
📄 get.section.author.php	12.17 KB	12/28/2021 08:51:31 AM	rw-r--r--
📄 get.section.category.php	9.29 KB	12/18/2021 09:31:31 AM	rw-r--r--
📄 get.section.general.php	33.92 KB	12/18/2021 10:40:42 AM	rw-r--r--
📄 get.section.issue.php	16.68 KB	02/08/2022 01:59:19 PM	rw-r--r--
📄 get.section.tag.php	8.79 KB	12/18/2021 09:59:28 AM	rw-r--r--
📄 get.section.user.php	14.23 KB	12/18/2021 09:43:01 AM	rw-r--r--
📄 get.section.volume.php	12 KB	12/18/2021 09:31:31 AM	rw-r--r--
📄 logout.php	93 bytes	12/18/2021 09:31:31 AM	rw-r--r--
📄 upload.php	2.3 KB	12/21/2021 04:58:45 AM	rw-r--r--

Editing: get.section.volume.php

<?
// ACCS Journal: Volume

include '../inc/validate.logged.php';
include '../../inc/config.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Check if already exists on creation
if ($act == 'chkExist') {
 $editId = isset($_POST['editId']) ? $_POST['editId'] : '';
 $volumeNum = isset($_POST['volumeNum']) ? $_POST['volumeNum'] : '';
 if ($volumeNum != '') {
  if ($editId == '') {
   $sql = "SELECT volume_num FROM volumes WHERE volume_num=$volumeNum";
  } else {
   $sql = "SELECT volume_id FROM volumes WHERE volume_num=$volumeNum AND volume_id<>$editId";
  }
  $result = mysqli_query($dbpro, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows == 0) {
   echo 'OK';
  } else {
   echo 'ERROR: Volume already exists!';
  }
 }
}

// Add
if ($act == 'add') {
 $volumeNum = isset($_POST['volumeNum']) ? trim($_POST['volumeNum']) : '';
 $volumeYear = isset($_POST['volumeYear']) ? trim($_POST['volumeYear']) : '';
 $isActive = isset($_POST['isActive']) ? trim($_POST['isActive']) : '';
 if ($volumeNum != '' && $volumeYear != '') {
  $sql = "SELECT volume_num FROM volumes WHERE volume_num=$volumeNum";
  $result = mysqli_query($dbpro, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows == 0) {
   $sql = "INSERT INTO volumes(volume_num,volume_year,created_id,date_created,is_active) VALUES($volumeNum,$volumeYear,$gUserId,Now(),$isActive)";
   mysqli_query($dbpro, $sql);
   echo "OK";
  }
 }
}

// Update
if ($act == 'edit') {
 $editId = isset($_POST['editId']) ? $_POST['editId'] : '';
 $volumeNum = isset($_POST['volumeNum']) ? trim($_POST['volumeNum']) : '';
 $volumeYear = isset($_POST['volumeYear']) ? trim($_POST['volumeYear']) : '';
 $isActive = isset($_POST['isActive']) ? trim($_POST['isActive']) : '';
 if ($editId != '' && $volumeNum != '' && $volumeYear != '') {
  $sql = "UPDATE volumes SET volume_num=$volumeNum,volume_year='$volumeYear',modified_id=$gUserId,is_active=$isActive,date_modified=Now() WHERE volume_id=$editId";
  mysqli_query($dbpro, $sql);
  echo "OK";
 }
}

// Deactivate
if ($act == 'delete') {
 $delId = isset($_POST['delId']) ? $_POST['delId'] : '';
 if ($delId != '') {
  $sql = "UPDATE volumes SET is_active=0,modified_id=$gUserId,date_modified=Now() WHERE volume_id=$delId";
  mysqli_query($dbpro, $sql);
  echo "OK";
 }
}

// Show Add
if ($act == 'addForm') {
?>
<div class="card mt-3">
 <div class="card-header">Add New Volume</div>
 <div class="card-body">
  <div class="form-row">
   <div class="form-group col-md-6">
    <label for="volumeNum">Volume Number</label>
    <input type="number" class="form-control" id="volumeNum" name="volumeNum" min="1" max="999" />
   </div>
   <div class="form-group col-md-6">
    <label for="volumeYear">Volume Year</label>
    <input type="number" class="form-control" id="volumeYear" name="volumeYear" min="1900" />
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col-md-12">
    <label for="isActive">Status</label>
    <div class="form-check form-check-inline ml-0 ml-sm-4 w-50">
     <label class="form-control radio-inline border-0"><input type="radio" id="isActive" name="isActive" value="1" CHECKED> Active</label>
     <label class="form-control radio-inline border-0"><input type="radio" id="isActive" name="isActive" value="0"> Inactive</label>
    </div>
   </div>
  </div>
 </div>
 <div class="card-footer">
  <button type="submit" class="btn btn-primary" onclick="return chkAddVolume()">Add</button>
  <div id="panelStatus" class="float-right text-sm text-danger" style="margin-top:5px" align="right"></div>
 </div>
</div>
<?
}

// Show Edit
if ($act == 'editForm') {
 $isValid = 0;
 $volumeNum = isset($_POST['id']) ? $_POST['id'] : '';
 $sql = "SELECT volume_id,volume_year,is_active FROM volumes WHERE volume_num=$volumeNum";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $volumeId = $row['volume_id'];
  $volumeYear = $row['volume_year'];
  $isActive = intval($row['is_active']);
  $isValid = 1;
 }
?>
<div class="popup" style="width:500px">
<div class="widget">
<form id="frmEdit" name="frmEdit">
 <div class="card">
  <div class="card-header">Edit Volume</div>
 </div>
 <div id="widgetEdit_B" style="padding:15px 25px">
<? if($isValid == 1) { ?>
  <div class="form-row">
   <div class="form-group col-md-6">
    <label for="volumeNum">Volume</label>
    <input type="number" class="form-control" id="volumeNum" name="volumeNum" value="<?=$volumeNum?>" />
   </div>
   <div class="form-group col-md-6">
    <label for="volumeYear">Volume Year</label>
    <input type="number" class="form-control" id="volumeYear" name="volumeYear" value="<?=$volumeYear?>" min="1900" />
   </div>
  </div>
  <div class="form-row">
   <div class="form-group col-md-12">
    <label for="isActive">Status</label>
    <div class="form-check form-check-inline ml-0 ml-sm-4 w-50">
     <label class="form-control radio-inline border-0"><input type="radio" id="isActive" name="isActive" value="1"<? if ($isActive == 1) {?> CHECKED<? } ?>> Active</label>
     <label class="form-control radio-inline border-0"><input type="radio" id="isActive" name="isActive" value="0"<? if ($isActive == 0) {?> CHECKED<? } ?>> Inactive</label>
    </div>
   </div>
  </div>
<? } ?>
 </div>
 <div id="widgetEdit_F" style="border-top:1px solid #ebedf2;padding:20px 25px;">
  <div class="col">
   <button type="submit" class="btn btn-primary" onclick="return chkEditVolume()">Update</button>
   <button type="submit" class="btn btn-light ml-1" onclick="return clearForm('frmEdit')">Reset</button>
   <div id="panelStatus" class="float-right text-sm text-danger" style="margin-top:5px" align="right"></div>
  </div>
 </div>
 <input type="hidden" id="editId" name="editId" value="<?=$volumeId?>" />
 <input type="hidden" id="act" name="act" value="edit" />
</form>
</div>
</div>
<?
}

// Show Deactivate
if ($act == 'delForm') {
 $isValid = 0;
 $volumeNum = isset($_POST['id']) ? $_POST['id'] : '';
 $sql = "SELECT volume_num FROM volumes WHERE volume_num=$volumeNum";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $isValid = 1;
 }
?>
<div class="popup" style="width:480px">
<div class="widget">
<form id="frmDel" name="frmDel">
 <div class="card">
  <div class="card-header">Deactivate Volume</div>
 </div>
 <div id="widgetDel_B" style="padding:15px 25px">
<? if($isValid == 1) { ?>
  You are about to deactivate Volume: <b><?=$volumeNum?></b>
<? } ?>
 </div>
 <div id="widgetDel_F" style="border-top:1px solid #ebedf2;padding:20px 25px;">
  <div class="col">
   <button type="submit" class="btn btn-primary" onclick="return chkDelVolume()">Confirm</button>
   <div id="panelStatus" class="float-right text-sm text-danger" style="margin-top:5px" align="right"></div>
  </div>
 </div>
 <input type="hidden" id="delId" name="delId" value="<?=$volumeNum?>" />
 <input type="hidden" id="act" name="act" value="delete" />
</form>
</div>
</div>
<?
}

// Search Form
if ($act == 'search') {
?>
<ol class="breadcrumb mt-4 mb-3">
 <li class="breadcrumb-item"><a href="dashboard.php">Dashboard</a></li>
 <li class="breadcrumb-item active">Volumes</li>
</ol>
<form id="frmSearch" name="frmSearch">
<button type="button" class="btn btn-secondary mb-2 float-right" onclick="addVolume()"><i class="fas fa-plus"></i> Add New Volume</button>
<br clear="all" />
<div class="card">
 <div class="card-header">Search Volumes</div>
 <div class="card-body">
  <div class="form-inline">
   <div class="form-group mr-2">
    <label for="srcVolumeName" class="col-form-label-sm">Volume</label>
    <input type="txt" class="form-control ml-0 ml-sm-2" id="srcVolumeNum" name="srcVolumeNum" />
   </div>
   <div class="form-group ml-0 ml-sm-4 mr-2">
    <label for="srcIsActive" class="col-form-label-sm">Status</label>
    <div class="form-check form-check-inline ml-0 ml-sm-4">
     <label class="form-control radio-inline border-0"><input type="radio" id="srcIsActive" name="srcIsActive" value="1"> Active</label>
     <label class="form-control radio-inline border-0"><input type="radio" id="srcIsActive" name="srcIsActive" value="0"> Inactive</label>
     <label class="form-control radio-inline border-0"><input type="radio" id="srcIsActive" name="srcIsActive" value="" CHECKED> All</label>
    </div>
   </div>
   <div class="col text-right">
    <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return searchVolume()">Show</button>
   </div>
  </div>
 </div>
</div>
<div id="panelSearch"></div>
<input type="hidden" id="act" name="act" value="searchResults" />
</form>
<?
}

// Search Result
if ($act == 'searchResults') {
 $pageNum = isset($_POST["pageNum"]) ? $_POST["pageNum"] : 1;
 $srcVolumeNum = isset($_POST["srcVolumeNum"]) ? $_POST["srcVolumeNum"] : '';
 $srcIsActive = isset($_POST["srcIsActive"]) ? $_POST["srcIsActive"] : '';
 $numRecords = 50;
 $startOrder = (($pageNum - 1) * $numRecords);
 $sql = "SELECT SQL_CALC_FOUND_ROWS * FROM volumes WHERE volume_num>0";
 if ($srcVolumeNum != '') $sql .= " AND volume_num=$srcVolumeNum";
 if ($srcIsActive == '0') $sql .= " AND is_active=0";
 if ($srcIsActive == '1') $sql .= " AND is_active=1";
 $sql .= " ORDER BY volume_num DESC LIMIT " . $startOrder . "," . ($numRecords+1);
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 $sql = "SELECT FOUND_ROWS()";
 $resultCount = mysqli_query($dbpro, $sql);
 $rowCount = mysqli_fetch_array($resultCount);
 $totalCount = $rowCount[0];
 if ($numRows == 0) {
  echo '<div class="m-2">No results found!</div>';
 } else {
?>
<table class="table table-sm mt-3">
<thead class="thead-light">
 <tr>
  <th width="20"></th>
  <th>Volume</th>
  <th>Volume Year</th>
  <th>Status</th>
  <th width="30"></th>
  <th width="30"></th>
 </tr>
</thead>
<?
  $j = 0;
  for ($i=0;$i<$numRows;$i++) {
   if ($i < $numRecords) {
    $row = mysqli_fetch_array($result);
    $volumeNum = $row['volume_num'];
    $volumeYear = $row['volume_year'];
    $isActive = $row['is_active'];
    $txtStatus = ($isActive) ? 'Active' : '<span class="text-danger">Inactive</span>';
    $j += 1;
?>
<tr>
 <th><?=$startOrder+$i+1?>.</th>
 <td><?=$volumeNum?></td>
 <td><?=$volumeYear?></td>
 <td><?=$txtStatus?></td>
 <td align="center" title="Edit Volume"><i data-num="<?=$volumeNum?>" class="editRow cursorHand far fa-edit fa-lg"></i></td>
 <td align="center" title="Deactivate Volume"><? if ($txtStatus == 'Active') { ?><i data-num="<?=$volumeNum?>" class="delRow cursorHand far fa-trash-alt fa-lg"></i><? } ?></td>
</tr>
<?
   }
  }
?>
</table>
<div id="listingPageNum" class="float-left text-success" data-pagenum="<?=$pageNum?>">Showing <?=$startOrder+1?> to <?=$startOrder+$j?> of <?=$totalCount?> entries</div>
<div class="float-right" align="right">
<? if ($pageNum > 1) { ?><button class="btn btn-warning" onclick="return searchVolume(<?=$pageNum-1?>)"><</button><? } ?>
<? if ($numRows > $numRecords) { ?><button class="btn btn-warning" style="margin-left:5px" onclick="return searchVolume(<?=$pageNum+1?>)">></button><? } ?>
</div>
<div class="cleaner"></div>
<br>
<br>
<?
 }
?>
<script type="text/javascript">
$(function () {
 $('.editRow').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.volume.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'editForm',
     id: $(item.el[0]).data('num')
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
 $('.delRow').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.volume.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'delForm',
     id: $(item.el[0]).data('num')
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
});
</script>
<?
}