nok/wms-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ICS modules

Browse Source
This commit is contained in:
Thanakorn S
2026-03-21 14:58:15 +07:00
parent 2e558a55bb
commit a4f474b5df
45 changed files with 3110 additions and 597 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/contact/api/engine/manage_contact.php
+89 -196
View File
@@ -1,212 +1,105 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
$id = (int)$data['id'];
/** * FILE SYNCHRONIZATION & UPLOAD LOGIC
* -----------------------------------------------------------------------------------
* Strategy: "Keep & Sync"
* 1. Identify which existing files were removed by the user and delete them from disk.
* 2. Upload any brand-new files dropped into the Dropzone.
* 3. Re-assemble a final comma-separated string containing (Kept Files + New Files).
* -----------------------------------------------------------------------------------
*/
try {
/** 1. FILE HANDLING **/
$uploader = new FileUploader($include_url . "uploads/contact/");
// Define the physical path for storage
$target_dir = $include_url . "uploads/contact/";
// Cleanup deleted files
if ($id > 0) {
$sql = "SELECT `files` FROM md_contact WHERE company_id = :company_id AND id = :id";
$sth = $pdo2->prepare($sql);
$sth->execute([":company_id" => $company_id, ":id" => $id]);
$uploader->cleanup($sth->fetchColumn(), $data['keep_files'] ?? '');
}
/** 1. DISK CLEANUP (Removal of deleted files) **/
if ($id > 0) {
// Fetch currently stored filenames from DB for comparison
$sql_check = "SELECT `files` FROM md_contact WHERE company_id = :company_id AND id = :id";
$sth_check = $pdo2->prepare($sql_check);
$sth_check->execute([":company_id" => $company_id, ":id" => $id]);
$existing_db_string = $sth_check->fetchColumn();
// Upload new files
$errors = $uploader->upload('contact_files');
if (!empty($errors)) {
$answer["success"] = 0;
$answer["message"] = $errors[0];
exit(json_encode($answer));
}
if (!empty($existing_db_string)) {
$existing_files_array = explode(',', $existing_db_string);
// 'keep_files' comes from JS (Dropzone.files names currently in the UI)
$keep_files = isset($data['keep_files']) ? explode(',', $data['keep_files']) : [];
$db_image_string = $uploader->buildFileString($data['keep_files'] ?? '');
foreach ($existing_files_array as $file_on_disk) {
$file_on_disk = trim($file_on_disk);
if (empty($file_on_disk)) continue;
/** 2. DATABASE **/
dbTransaction($pdo2, function($pdo) use ($data, $company_id, $logging, $id, $db_image_string) {
/**
* If a file exists in the database but is NOT in the 'keep_files' list,
* it means the user clicked 'Remove' in the UI. We delete it from the server.
*/
if (!in_array($file_on_disk, $keep_files)) {
$full_path = $target_dir . $file_on_disk;
if (file_exists($full_path)) {
unlink($full_path); // Physically remove (rm) the file
}
}
$sql = "SELECT `log` FROM md_contact
WHERE company_id = :company_id AND id = :id";
$sth = $pdo->prepare($sql);
$sth->execute([
":company_id" => $company_id,
":id" => $id
]);
$table_log = json_decode($sth->fetchColumn() ?: '[]', true);
if (!is_array($table_log)) $table_log = [];
$table_log[] = $logging;
$params = [
":company_id" => $company_id,
":contact_name" => $data["contact_name"],
":tax_id" => $data["tax_id"],
":organization" => $data["organization"],
":branch" => $data["branch"],
":contact_type" => (int)$data["contact_type"],
":billing_address" => $data["billing_address"],
":shipping_location"=> $data["shipping_location"],
":shipping_address" => $data["shipping_address"],
":remark" => $data["remark"],
":files" => $db_image_string,
":status" => (int)$data["status"],
":log" => json_encode($table_log),
];
if ($id > 0) {
$sql = "UPDATE md_contact SET
`contact_name` = :contact_name,
`tax_id` = :tax_id,
`organization` = :organization,
`branch` = :branch,
`contact_type` = :contact_type,
`billing_address` = :billing_address,
`shipping_location` = :shipping_location,
`shipping_address` = :shipping_address,
`remark` = :remark,
`files` = :files,
`status` = :status,
`log` = :log
WHERE id = :id AND company_id = :company_id";
$params[":id"] = $id;
} else {
$sql = "INSERT INTO md_contact
(company_id, contact_name, tax_id, organization, branch, contact_type,
billing_address, shipping_location, shipping_address, remark, files, status, log)
VALUES
(:company_id, :contact_name, :tax_id, :organization, :branch, :contact_type,
:billing_address, :shipping_location, :shipping_address, :remark, :files, :status, :log)";
}
}
$sth = $pdo->prepare($sql);
$sth->execute($params);
});
$answer["success"] = 1;
} catch (PDOException $e) {
// DB failed — rollback uploaded files
if (isset($uploader)) $uploader->rollbackUploads();
$answer["success"] = 0;
$answer["message"] = "Database error, please try again";
} catch (Exception $e) {
if (isset($uploader)) $uploader->rollbackUploads();
$answer["success"] = 0;
$answer["message"] = $e->getMessage();
}
/** 2. PERMISSION & DIRECTORY CHECK **/
$parent_dir = dirname($target_dir);
if (!is_writable($parent_dir)) {
exit(json_encode([
"success" => 0,
"message" => "Server error: Target directory is not writable. Check permissions."
]));
}
// Ensure the directory exists
if (!is_dir($target_dir)) {
mkdir($target_dir, 0755, true);
}
/** 3. PROCESSING NEW UPLOADS **/
$uploaded_names = [];
// Allowed MIME types whitelist
$allowed_mimes = ['image/jpeg', 'image/png', 'image/gif', 'image/webp', 'application/pdf'];
// Allowed extensions whitelist
$allowed_extensions = ['jpg', 'jpeg', 'png', 'gif', 'webp', 'pdf'];
// Max file size: 5MB
$max_size = 5 * 1024 * 1024;
if (isset($_FILES['contact_files'])) {
foreach ($_FILES['contact_files']['name'] as $key => $name) {
if ($_FILES['contact_files']['error'][$key] === UPLOAD_ERR_OK) {
$tmp_name = $_FILES['contact_files']['tmp_name'][$key];
$file_size = $_FILES['contact_files']['size'][$key];
$extension = strtolower(pathinfo($name, PATHINFO_EXTENSION));
// Check 1: File size
if ($file_size > $max_size) {
error_log("Rejected oversized file: " . $name);
continue;
}
// Check 2: Extension whitelist
if (!in_array($extension, $allowed_extensions)) {
error_log("Rejected extension: " . $name);
continue;
}
// Check 3: Real MIME type (reads actual file bytes, not filename)
$finfo = finfo_open(FILEINFO_MIME_TYPE);
$mime = finfo_file($finfo, $tmp_name);
finfo_close($finfo);
if (!in_array($mime, $allowed_mimes)) {
error_log("Rejected MIME type: " . $mime . " for file: " . $name);
continue;
}
// Safe unique filename — no original extension trusted
$file_id = uniqid() . "_" . time() . "." . $extension;
$destination = $target_dir . $file_id;
if (move_uploaded_file($tmp_name, $destination)) {
$uploaded_names[] = $file_id;
chmod($destination, 0644);
} else {
error_log("Failed to move uploaded file: " . $name);
}
}
}
}
/** 4. CONSTRUCTING THE FINAL DATABASE STRING **/
// Parse files the user kept from the existing session
$keep_files = isset($data['keep_files']) ? explode(',', $data['keep_files']) : [];
// Merge old kept filenames with the brand-new unique filenames
$final_file_array = array_merge($keep_files, $uploaded_names);
// Clean up: Remove empty values and trim whitespace
$final_file_array = array_filter(array_map('trim', $final_file_array));
// The final comma-separated string for the DB 'files' column
$db_image_string = implode(",", $final_file_array);
/********************************************************************************** */
// 2. Initialize log array
$table_log = [];
// Get existing log and existing files if updating
if ($id > 0) {
$sql = "SELECT `log`, `files` FROM md_contact WHERE company_id = :company_id AND id = :id";
$sth = $pdo2->prepare($sql);
$sth->execute([
":company_id" => $company_id,
":id" => $id
]);
$row = $sth->fetch(PDO::FETCH_ASSOC);
if ($row) {
$table_log = json_decode($row['log'] ?? '[]', true);
}
}
// Append the new log entry
$table_log[] = $logging;
// 3. Database Operation
$params = [
":company_id" => $company_id,
":contact_name" => $data["contact_name"],
":tax_id" => $data["tax_id"],
":organization" => $data["organization"],
":branch" => $data["branch"],
":contact_type" => (int)$data["contact_type"],
":billing_address" => $data["billing_address"],
":shipping_location"=> $data["shipping_location"],
":shipping_address" => $data["shipping_address"],
":remark" => $data["remark"],
":files" => $db_image_string,
":status" => (int)$data["status"],
":log" => json_encode($table_log)
];
if ($id > 0) {
// UPDATE
$sql = "UPDATE md_contact SET
`contact_name` = :contact_name,
`tax_id` = :tax_id,
`organization` = :organization,
`branch` = :branch,
`contact_type` = :contact_type,
`billing_address` = :billing_address,
`shipping_location` = :shipping_location,
`shipping_address` = :shipping_address,
`remark` = :remark,
`files` = :files,
`status` = :status,
`log` = :log
WHERE id = :id AND company_id = :company_id";
$params[":id"] = $id;
$sth = $pdo2->prepare($sql);
$sth->execute($params);
} else {
// INSERT
$sql = "INSERT INTO md_contact
(company_id, contact_name, tax_id, organization, branch, contact_type,
billing_address, shipping_location, shipping_address, remark, files, status, log)
VALUES
(:company_id, :contact_name, :tax_id, :organization, :branch, :contact_type,
:billing_address, :shipping_location, :shipping_address, :remark, :files, :status, :log)";
$sth = $pdo2->prepare($sql);
$sth->execute($params);
}
$answer["success"] = 1;
exit(json_encode($answer));
?>
app/contact/api/engine/manage_contact_type.php
+56 -67
View File
@@ -1,77 +1,66 @@
<?php
session_start();
require '../../../assets/utils/db_auth.php';
$id = (int)$data['id'];
try {
dbTransaction($pdo2, function($pdo) use ($data, $company_id, $logging) {
// Initialize log array
$table_log = [];
$id = (int)$data['id'];
// Get existing log only if we are updating an existing record
if ($id > 0) {
$sql = "SELECT `log`
FROM md_contact_type
WHERE
company_id = :company_id AND
id = :id";
$sth = $pdo2->prepare($sql);
$sth->execute([
":company_id" => $company_id,
"id" => $id
]);
if ($sth->errorCode() !== '00000') {
$error = $sth->errorInfo();
$answer["message"] = $error[2] ?? $error[0];
exit(json_encode($answer));
}
$row = $sth->fetch(PDO::FETCH_ASSOC);
if ($row) {
$table_log = json_decode($row['log'] ?? '[]', true);
}
$sql = "SELECT `log` FROM md_contact_type
WHERE company_id = :company_id AND id = :id";
$sth = $pdo->prepare($sql);
$sth->execute([
":company_id" => $company_id,
":id" => $id
]);
$table_log = json_decode($sth->fetchColumn() ?: '[]', true);
if (!is_array($table_log)) $table_log = [];
$table_log[] = $logging;
$params = [
":company_id" => $company_id,
":contact_type" => $data["contact_type"],
":description" => $data["description"],
":status" => (int)$data["status"],
":log" => json_encode($table_log),
];
if ($id > 0) {
$sql = "UPDATE md_contact_type SET
`contact_type` = :contact_type,
`description` = :description,
`status` = :status,
`log` = :log
WHERE id = :id AND company_id = :company_id";
$params[":id"] = $id;
} else {
$sql = "INSERT INTO md_contact_type
(company_id, contact_type, `description`, `status`, `log`)
VALUES
(:company_id, :contact_type, :description, :status, :log)";
}
$sth = $pdo->prepare($sql);
$sth->execute($params);
});
$answer["success"] = 1;
} catch (PDOException $e) {
$answer["success"] = 0;
$answer["message"] = "Database error, please try again";
} catch (Exception $e) {
$answer["success"] = 0;
$answer["message"] = "Something went wrong";
}
// Append the new log entry (assuming $logging is defined in your preset/utils)
$table_log[] = $logging;
if ($id > 0) {
// UPDATE existing record
$sql = "UPDATE md_contact_type SET
`contact_type` = :contact_type,
`description` = :description,
`status` = :status,
`log` = :log
WHERE id = :id AND company_id = :company_id";
$sth = $pdo2->prepare($sql);
$sth->execute([
":id" => $id,
":company_id" => $company_id,
":contact_type" => $data["contact_type"],
":description" => $data["description"],
":status" => (int)$data["status"],
":log" => json_encode($table_log),
]);
} else {
// INSERT new record
$sql = "INSERT INTO md_contact_type
(company_id, contact_type, `description`, `status`, `log`)
VALUES
(:company_id, :contact_type, :description, :status, :log)";
$sth = $pdo2->prepare($sql);
$sth->execute([
":company_id" => $company_id,
":contact_type" => $data["contact_type"],
":description" => $data["description"],
":status" => (int)$data["status"],
":log" => json_encode($table_log),
]);
}
$answer["success"] = 1;
exit(json_encode($answer));
?>
app/contact/manage_contact.php
+1 -1
View File
@@ -185,7 +185,7 @@
url: "<?php echo $server_url?>contact/api/engine/manage_contact.php",
autoPrepare: true,
checkRequired: 1,
debugMode: 1,
debugMode: 0,
formData: formData,
action: 'manage',
onSuccess: function(res) {
app/contact/manage_contact_type.php
+2 -2
View File
@@ -84,7 +84,7 @@
}
function retreive_for_edit() {
function retrieve_for_edit() {
<?php if(empty($_GET['id'])){ ?>
return false;
@@ -114,7 +114,7 @@
$(async function() {
try {
await retreive_for_edit();
await retrieve_for_edit();
} catch (e) {
console.log(e);
}