0";
$sth = $pdo->query($sql);
$opt_user = array();
foreach ($sth->fetchAll() as $row) {
$opt_user[$row['userid']] = $row['displayname'];
}
// ========== ACTIONS START ===================================================
switch ($submit = form_get_action()) {
case NULL: break;
case 'add': $action = ACT_ADD; break;
case 'view': $action = ACT_VIEW; break;
case 'edit': $action = ACT_EDIT; break;
case 'del': $action = ACT_DELETE; break;
case 'filter':
$flt = array();
$flt['txt'] = gpc_get_string($_POST, 'flt_txt');
db_save_filter($flt, 205);
$action = ACT_DEFAULT;
break;
case 'insert':
$p['vid'] = $user->id;
$p[':projname'] = gpc_get_string($_POST, 'projname');
$p[':responsible'] = gpc_get_int($_POST, 'responsible');
$p[':remarks'] = gpc_get_string($_POST, 'remarks', 150);
$id = db_exec_insert('company', $p);
$action = ACT_VIEW;
break;
case 'update':
$p[':projid'] = $id;
$p[':projname'] = gpc_get_string($_POST, 'projname');
$p[':startdate'] = gpc_get_date($_POST, 'startdate');
$p[':duration'] = gpc_get_int($_POST, 'duration');
$p[':remarks'] = gpc_get_string($_POST, 'remarks', 150);
db_exec_update('project', $p, 'projid');
$action = ACT_VIEW;
break;
case 'delete':
// Security token needed!
if (gpc_get_string($_POST, 'token', 16) != $_SESSION['token']) {
$g_error->Add(_('Delete prohibited, invalid security token!'));
$action = ACT_VIEW;
break;
}
unset($_SESSION['token']);
// TBD
$action = ACT_DEFAULT;
break;
default:
$g_error->Add(sprintf(_("Unknown function '%s'!"), $submit));
$valid = FALSE;
}
// ========== ACTIONS END =====================================================
require 'header.php';
// ========== PAGE CONTENT ====================================================
if ($action == ACT_DEFAULT):
// ========== VARIANT: default behavior =======================================
echo '', $pagetitle, "
\n";
$sql = "SELECT projid, projname, startdate, duration, remarks "
. "FROM project "
. "WHERE vid=? "
. "ORDER BY projid";
$sth = $pdo->prepare($sql);
$sth->execute([$user->vid]);
$res = $sth->fetchAll();
echo ''. "\n";
echo "\n";
echo "";
echo "| " . _('Name') . " | ";
echo "" . _('Start date') . " | ";
echo "" . _('Duration') . " | ";
echo "" . _('Remarks') . " | ";
echo " | ";
echo "
\n";
echo "\n";
foreach ($res as $row) {
echo "\n";
echo "| ". $row['projname'] ." | \n";
echo "". $row['startdate'] ." | \n";
echo "". $row['duration'] ." | \n";
echo "". $row['remarks'] ." | \n";
// Action buttons
form_action_buttons($g_scriptname, $row['projid']);
echo "
\n";
}
echo "\n";
echo '| ', sprintf(_('%d records'), count($res)), ' |
', "\n";
echo "\n";
echo "
\n";
form_add_button($g_scriptname);
echo "", _('Generic Tasks'), "
\n";
echo "", _('Tasks not assigned to any project'), "
\n";
$sql = "SELECT taskid, taskname "
. "FROM task "
. "WHERE projid IS NULL "
. "ORDER BY taskid";
$sth = $pdo->query($sql);
$res = $sth->fetchAll();
echo '', "\n";
echo "\n";
echo "";
echo "| " . _('Name') . " | ";
echo "
\n";
echo "\n";
foreach ($res as $row) {
echo "\n";
echo "| ". $row['taskname'] ." | \n";
form_action_buttons('task.php', $row['taskid']);
echo "
\n";
}
// Table summary
echo "\n";
echo '| ', sprintf(_('%d records'), count($res)), ' |
', "\n";
echo "\n";
echo "
\n";
form_add_button('task.php');
elseif ($action == ACT_ADD):
// ========== VARIANT: add record =============================================
echo '', _('Add Project'), "
\n";
?>
prepare($sql);
$sth->execute([$id]);
$project = $sth->fetch(PDO::FETCH_OBJ);
echo "", $project->projname, "
\n";
echo '', "\n";
echo '| ', _('Name')," | ", $project->projname, " |
|---|
\n";
echo '| ', _('Responsible')," | ", $opt_user[$project->responsible], " |
|---|
\n";
echo '| ', _('Start date')," | ", $project->startdate, " |
|---|
\n";
echo '| ', _('Duration')," | ", $project->duration, " |
|---|
\n";
echo '| ', _('Remarks')," | ", $project->remarks, " |
|---|
\n";
echo "
\n";
form_view_buttons($g_scriptname, $id);
// assigned tasks
echo "", _('Assigned tasks'), "
\n";
$sql = "SELECT taskid, taskname FROM task WHERE projid=? ORDER BY taskname";
$sth = $pdo->prepare($sql);
$sth->execute([$id]);
?>
', _('Edit Project'), "\n";
$sql = "SELECT projname, responsible, startdate, duration, remarks "
. "FROM project "
. "WHERE projid=?";
$sth = $pdo->prepare($sql);
$sth->execute([$id]);
$project = $sth->fetch(PDO::FETCH_OBJ);
?>
', _('Delete Project'), "\n";
else:
// ========== ERROR UNKNOWN VARIANT ===========================================
echo '', _('Unknown function call: Please report to system development!'), "
\n";
endif; // $action == ...
// ========== END OF VARIANTS =================================================
include 'footer.php';