SRM/WebPage/place/getvalues.php

<?php

$currentusr = $_SESSION["username"];
$isadminqry = mysqli_query($link, "select * from users where username='".$currentusr."'");
while($row = mysqli_fetch_array($isadminqry)){
  $admin = $row['admin'];
}

if(isset($_GET['a'])){
    $place = $_GET['a'];
}
if(isset($_GET['req'])){
    $req = trim($_GET['req']);
}
if(isset($_GET['acc'])){
    $acc = trim($_GET['acc']);
}
if(isset($_GET['clt'])){
    $cltid = trim($_GET['clt']);
}
if(isset($_GET['rep'])){
    $rep = trim($_GET['rep']);
}
if(isset($_GET['usr'])){
    $usr = trim($_GET['usr']);
}
if(isset($_GET['chk'])){
    $chk = trim($_GET['chk']);
}
if(isset($_GET['repid'])){
    $repportid = trim($_GET['repid']);
}
if(isset($_GET['searchstring'])){
    $searchstring = trim($_GET['searchstring']);
}
if(isset($_GET['dvctp'])){
    $dvctp = trim($_GET['dvctp']);
}
if(isset($_GET['stpdn'])){
    $stpdn = trim($_GET['stpdn']);
}
if(isset($_GET['repdn'])){
    $repdn = trim($_GET['repdn']);
}

if($place == "logout"){
    session_destroy();
    header("Refresh:0");
    exit;
}

if($_SERVER["REQUEST_METHOD"] == "POST"){
    require "place/postactions.php";
}

if(isset($acc)){
    if($acc == "yes"){
        $sql = "UPDATE request SET treated_by = ?, approved = 1 WHERE id = ?";
        if($stmt = mysqli_prepare($link, $sql)){
            mysqli_stmt_bind_param($stmt, "si", $currentusr, $req);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=launch&req=$req");
                exit();
            } else{
                echo "Oops! Something went wrong. Please try again later.";
            }
        }
    }elseif($acc == "cltclass"){
        $sql = "UPDATE request SET clientid = ? WHERE id = ?";
        if($stmt = mysqli_prepare($link, $sql)){
            mysqli_stmt_bind_param($stmt, "ii", $cltid, $req);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=launch&req=$req");
                exit();
            } else{
                echo "Oops! Something went wrong. Please try again later.";
            }
        }
    }elseif($acc == "reqend"){
        $sql = "UPDATE request SET approved = 3 WHERE id = ?";
        if($stmt = mysqli_prepare($link, $sql)){
            mysqli_stmt_bind_param($stmt, "i", $req);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=launch");
                exit();
            } else{
                echo "Oops! Something went wrong. Please try again later.";
            }
        }
    }
}

if(isset($stpdn)){
    $stepqry = mysqli_query($link, "select * from repports where id='$rep'");
    while($row = mysqli_fetch_array($stepqry)){
        $stepsdone = $row['stepsdone'];
    }
    if(strpos("$stepsdone", "<$stpdn>")){
        $stepsdone = str_replace("<$stpdn>","",$stepsdone);
        $delstepqry = "UPDATE repports SET stepsdone = ? WHERE id = $rep";
        if($stmt = mysqli_prepare($link, $delstepqry)){
            mysqli_stmt_bind_param($stmt, "s", $stepsdone);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=launch&acc=rapp&req=$req&rep=$rep");
                exit();
            }
        }
    }else{
        $stepsdone = $stepsdone."<$stpdn>";
        $addstepqry = "UPDATE repports SET stepsdone=? WHERE id=$rep";
        if($stmt = mysqli_prepare($link, $addstepqry)){
            mysqli_stmt_bind_param($stmt, "s", $stepsdone);
            if(mysqli_stmt_execute($stmt)){
                header("location: ?a=launch&acc=rapp&req=$req&rep=$rep");
                exit();
            }
        }
    }
}

if(isset($repdn)){
    $delrepqry = "UPDATE repports SET repstat = 1 WHERE id = ?";
    if($stmt = mysqli_prepare($link, $delrepqry)){
        mysqli_stmt_bind_param($stmt, "i", $rep);
        if(mysqli_stmt_execute($stmt)){
            header("location: ?a=launch&acc=rapp&req=$req");
            exit();
        }
    }
}

if($rep == "done"){
    $finreqqry = "UPDATE request SET approved = 3 WHERE id = ?";
    if($stmt = mysqli_prepare($link, $finreqqry)){
        mysqli_stmt_bind_param($stmt, "i", $req);
        if(mysqli_stmt_execute($stmt)){
            header("location: ?a=launch");
            exit();
        }
    }
}

require "place/theme.php";

?>