www/attachments.php

   1 <?php
   2 require(dirname(__DIR__)."/require.php");
   3 $error="<p>";
   4 $imgs="<div class='card mb-3 w-100'><div class='card-body'><div class='row'>";
   5 $pdfs="<div class='card mb-3'><div class='card-body'>";
   6 if(!empty($_GET["pid"])){
   7   $pid=$_GET["pid"];
   8   if(!empty($_FILES)){
   9     if(in_array($_FILES["upload"]["type"], ["image/jpeg", "image/jpg", "image/png", "image/gif", "application/pdf"])){
  10       if(!empty($_GET["name"])){
  11         $name=$_GET["name"]."-";
  12       }
  13       else{
  14         $name="";
  15       }
  16       $fname=str_replace("/", "", $pid)."-".$name.time()."-".rand(1000,9999).".".pathinfo($_FILES["upload"]["name"], PATHINFO_EXTENSION);
  17       move_uploaded_file($_FILES["upload"]["tmp_name"], CONFIG_WWW."data/attachments/".$fname);
  18       if(!empty($_GET["req"])){
  19         $db->omitRequisition($_GET["req"]);
  20       }
  21     }
  22     else{
  23       $error=$error."Only jpg, png, gif, pdf files are supported.";
  24     }
  25   }
  26   elseif(!empty($_POST["delete"])){
  27     $file=str_replace("/","",$_POST["delete"]);
  28     rename(CONFIG_WWW."data/attachments/".$file, CONFIG_WWW."data/attachments/.trash/".$file);
  29   }
  30
  31   if(checkAccess("attachments")=="all" && $db->getStatus($pid)->fetchArray()["status"]=="admitted"){
  32     $hideEdit="";
  33   }
  34   else{
  35     $hideEdit="style='display:none'";
  36   }
  37
  38   foreach(glob("data/attachments/".str_replace("/", "", $pid)."-*") as $attach){
  39     if(pathinfo($attach, PATHINFO_EXTENSION)=="pdf"){
  40       $pdfs=$pdfs."<p><a href='".$attach."'>".pathinfo($attach, PATHINFO_BASENAME)."</a> <button type='submit' ".$hideEdit." form='delete' name='delete' value='".pathinfo($attach, PATHINFO_BASENAME)."' class='float-right btn btn-sm btn-outline-danger confirm'>Delete</button></p><hr>";
  41     }
  42     else{
  43       preg_match("/-([0-9]+)-/", pathinfo($attach, PATHINFO_FILENAME), $orig);
  44       $imgs=$imgs."<div class='col-md-6'><figure><a href='".$attach."'><img class='w-100 mb-2' src='".$attach."'></a><figcaption>Uploaded on: ".date("M d, Y h:i a", $orig[1])." <button type='submit' ".$hideEdit." form='delete' name='delete' value='".pathinfo($attach, PATHINFO_BASENAME)."' class='float-right btn btn-sm btn-outline-danger confirm'>Delete</button></figcaption></figure></div>";
  45     }
  46   }
  47 }
  48 $imgs=$imgs."</div></div></div>";
  49 $pdfs=$pdfs."</div></div>";
  50 $error=$error."</p>";
  51 ?>
  52 <!DOCTYPE html>
  53 <html>
  54   <head>
  55     <?php include(CONFIG_LIB."head.php");?>
  56     <title>Attachments</title>
  57   </head>
  58   <body>
  59     <div class="container">
  60       <form method="post" id="delete"></form>
  61       <?php include(CONFIG_LIB."top.php");?>
  62       <?php echo getInfo($pid);?>
  63       <form class="mt-3 mb-3" method="post" enctype="multipart/form-data" <?php echo $hideEdit; ?>>
  64         <label for="upload">Select file to upload. JPG, PNG, GIF and PDF files are supported. Size limit: <span id="size-limit"><?php echo str_replace("M", "MB", ini_get("upload_max_filesize"));?></span><span id="upload-error"></span></label>
  65         <input type="file" name="upload" id="upload" class="form-control">
  66         <input type="submit" value="Upload" class="mt-2 btn btn-primary">
  67       </form>
  68       <div id="attachments">
  69         <?php echo $pdfs;?>
  70           <div class="row">
  71             <?php echo $imgs;?>
  72           </div>
  73       </div>
  74       <?php echo $error;?>
  75     </div>
  76     <?php include(CONFIG_LIB."foot.php");?>
  77   </body>
  78 </html>