1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
<?php $formid = "Master"; require_once "inc/configure.php";
if(havePermission("RTu")==false){ myerror("Invalid Permission"); }
$parent_refid = filter_var($_REQUEST['parent_refid'], FILTER_SANITIZE_NUMBER_INT); $lv = (int)$_REQUEST['lv'];
//(int)$_REQUEST['productID']; //vdump($_REQUEST); //exit; if( $_REQUEST['action']=="dgn_master_route_addform" && !empty($parent_refid)){ $parent_refid = (int)filter_var($_REQUEST['parent_refid'], FILTER_SANITIZE_STRING); $opr_nbr = (int)filter_var($_REQUEST['opr_nbr'], FILTER_SANITIZE_NUMBER_FLOAT,FILTER_FLAG_ALLOW_FRACTION); $opr_code = filter_var($_REQUEST['opr_code'], FILTER_SANITIZE_STRING); $workplace_code = filter_var($_REQUEST['workplace_code'], FILTER_SANITIZE_STRING); $opr_svc = (float)filter_var($_REQUEST['opr_svc'], FILTER_SANITIZE_NUMBER_FLOAT,FILTER_FLAG_ALLOW_FRACTION); $uom_svc = filter_var($_REQUEST['uom_svc'], FILTER_SANITIZE_STRING); $itemno = filter_var($_REQUEST['itemno'], FILTER_SANITIZE_STRING); $mold_refid = (int)filter_var($_REQUEST['mold_refid'], FILTER_SANITIZE_STRING); $createby = filter_var($_SESSION['user'], FILTER_SANITIZE_STRING); $lastupby = filter_var($_SESSION['user'], FILTER_SANITIZE_STRING); if($workplace_code=="DEFAULT"){ $sql = "SELECT * FROM master_operation where code = :code"; $sth = $dbh->prepare($sql); $q= $sth->execute( array(':code' => $opr_code) ); $row = $sth->fetch(); $workplace_code = $row['workplace']; } switch ($lv) { case -1: $field = "uom_wt"; //not used $parent_refid = ""; //not used //echo"main op"; $table = "dgn_master_route"; break; case 0: $field = "route_refid"; $table = "dgn_master_subroute"; break; case 1: $field = "subroute_refid"; $table = "dgn_master_subsubroute"; break; } //update operation table $sql = "INSERT INTO $table ($field, opr_nbr, opr_code, workplace_code, opr_svc, uom_svc, itemno, mold_refid, createby, createdate, lastupby, lastupdate) VALUES (:parent_refid, :opr_nbr, :opr_code, :workplace_code, :opr_svc, :uom_svc, :itemno, :mold_refid, :createby, GETDATE(), :lastupby, GETDATE())"; $sth = $dbh->prepare($sql); $q= $sth->execute( array(':parent_refid' => $parent_refid, ':opr_nbr' => $opr_nbr, ':opr_code' => $opr_code, ':workplace_code' => $workplace_code, ':opr_svc' => (float)$opr_svc, ':uom_svc' => $uom_svc, ':itemno' => $itemno, ':mold_refid' => $mold_refid, ':createby' => $createby, ':lastupby' => $lastupby) ); /* echo $sth->getSQL( array(':parent_refid' => $parent_refid, ':opr_nbr' => $opr_nbr, ':opr_code' => $opr_code, ':workplace_code' => $workplace_code, ':opr_svc' => $opr_svc, ':uom_svc' => $uom_svc, ':itemno' => $itemno, ':mold_refid' => $mold_refid, ':createby' => $createby, ':lastupby' => $lastupby) ).HTML_EOL;*/ pdo_showerror($sth, $q); $refid = $dbh->lastInsertId(); //exit;
$lv++; header("Location: dgn_master_route_modifyform.php?mold_refid=$mold_refid&refid=$refid&lv=$lv&msg=Saved."); print "Saved."; exit; } print "Invalid Request";
|