MOON
Server: Apache
System: Linux e2e-78-16.ssdcloudindia.net 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64
User: imensosw (1005)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/imensosw/www/imenso.co/demo/claapp/creator/edit.php
<?php
include_once("../config/config.php"); 
include_once(BASIC_PATH."layout/header.php"); 
include_once(BASIC_PATH."config/validation.php");
include_once(BASIC_PATH."config/function.php");
include_once(BASIC_PATH."model/creator.php");
include_once(BASIC_PATH."model/user.php");

$target_dir = BASIC_PATH."encounters/upload/";
$status=$msg="";$id=0;
$crud=New Crud();
if(isset($_GET['id']))
{
 $id=$_GET['id'];
}
$footer=1;
  $query="select * from incubators where status not in('watting')  and created='".$_SESSION['nthrive_id']."' and id=".$id;
  $result=$crud->getData($query);
  if((!$id) ||(count($result)<1 && $_SESSION['nthrive_type']=='creator'))
  {
      $status='warrning';
      $msg='Permission Access Denied';
      $_SESSION[$status]=$msg;
     header('location:'.PATH.'creator');
     exit();
  }
if(isset($_POST['name']))
{
      $pdffile="";
      $validation = new Validation();
      $name = $crud->escape_string($_POST['name']);
 
      $msg = $validation->check_empty($_POST, array('name'));
    if (is_uploaded_file($_FILES['pdffile']['tmp_name']))
    {
         $result=uploadfile($target_dir,'pdffile');
         $result=json_decode($result);
         if($result->status=="error")
         {
           $msg.="\n".$result->msg;
           $status=$result->status;
         }
         else
         {
           $pdffile=$result->msg;
         }
    }
    
     $query="select * from incubators where id not in('$id') and  name='".$name."'";
    $result=$crud->getData($query);
   
    if($result)
    {
        $status='warrning';
        $msg='Incubators Name Already Exist';
    }
    // checking empty fields
    if($msg =="") {
    
        // if all the fields are filled (not empty) 
         $creator=New Creator();
         $add_result=json_decode($creator->updateCreator($pdffile,$id));
         $status=$add_result->status;
         $msg=$add_result->msg;
     
    }
    $_SESSION[$status]=$msg;
    if($status=="success")
    {
     if($_SESSION['nthrive_type']=="manager" || $_SESSION['nthrive_type']=="admin")
      {
        header('location:'.PATH.'manager');

      }
      else
      {
       header('location:'.PATH.'creator');
      }
        
       exit();
    }
}

  $query="select * from incubators where id=".$id;
  $result=$crud->getData($query);

  $query="select * from codes where incubator=".$id;
  $codes=$crud->getData($query);

 $path = $_SERVER['REQUEST_URI'];
    $folders = explode('/', $path); // splits folders in array
    $subfolder = $folders[folder_number];
    $cancel = "";
    if(($_SESSION['nthrive_type']=="admin" || $_SESSION['nthrive_type']=="manager") && ($subfolder=="manager" || $subfolder=="creator"))
    {
       $cancel = $subfolder="manager";
    }

?>
<div class="main-container container padding-10">
  <div id="content1" class="m_t20">
     <div class="col-xs-6 mt4">
        <a class="page-name" href="<?php echo PATH.$subfolder; ?>"><strong><i class="fa fa-long-arrow-left"></i> Back</strong></a>
      </div>
     <div class="col-xs-6 bdc">
      <div class="text-right">       
         <?php include(BASIC_PATH."layout/sub_header.php"); ?>
      </div>
    </div>
    <div class="clearfix"></div>
    <form  id="add_form" action="" class="m_t20" method="post" enctype="multipart/form-data">
    <div class="clearfix"></div>
   
      <div class="m_b20">
        <div class="col-md-9 col-sm-8">
            <?php 
             if($_SESSION["nthrive_type"]=="admin" || $_SESSION["nthrive_type"]=="manager")
            { ?>
           
              <div class="row">
                <label class="col-sm-12 col-xs-3">Status:</label>
                <div class="col-sm-2 col-xs-4">
                   <div class="radio">
                      <label>
                        <input name="status" type="radio"  <?php if($result[0]['status']=='draft'){ echo "checked"; } ?>  value="draft">
                        <span class="ms"><i class="ms-icon fa fa-check"></i></span>
                          Draft
                      </label>
                   </div>
                </div>
                <div class="col-sm-2 col-xs-5">
                   <div class="radio">
                      <label>
                        <input value="approved"  <?php if($result[0]['status']=='approved'){ echo "checked"; } ?> name="status" type="radio">
                        <span class="ms"><i class="ms-icon fa fa-check"></i></span>
                          Publish
                      </label>
                   </div>
                </div>
              </div>
          <?php } ?>

          <div class="form-group m_b30">
            <label>Name:</label>
            <input type="text" value="<?php echo $result[0]['name']; ?>" name="name" required class="form-control" id="name" placeholder="Name">
          </div>
          <div class="code_box">
             <?php
             for ($i=0;$i<count($codes);$i++) {
                ?>
                 <div class="form-area">
                 
                  <div class="action"><a href="javascript:;" ><span class="glyphicon glyphicon-pencil edit_form-area" aria-hidden="true"></span></a>
                  <?php if($i>0){ ?>   <a href="javascript:;"><span class="glyphicon glyphicon-trash delete_form-area" aria-hidden="true"></span></a> <?php } ?>
                  </div>
                 
                  <div class="row">
                    <div class="col-xs-4">
                        <div class="form-group m_b20">
                          <label>Code type</label>
                          <div class="val readable">
                            <?php 
                             if($codes[$i]['primarys']=='dCodesPrimary')
                              {
                                echo "Dx-Primary";
                              }
                              else if($codes[$i]['primarys']=='dCodesSecondary')
                              {
                                echo "Dx-Secondary";
                              }
                              else if($codes[$i]['primarys']=='pCodesPrimary')
                              {
                                echo "PCS-Primary";
                              }
                              if($codes[$i]['primarys']=='pCodesSecondary')
                              {
                                echo "PCS-Secondary";
                              }
                              if($codes[$i]['primarys']=='cpt')
                              {
                                echo "CPT";
                              }

                               ?></div>
                          <div class="val hidden">
                            <select name="primary[]" class="form-control code_type">
                            
                              <option value="dCodesPrimary" <?php if($codes[$i]['primarys']=='dCodesPrimary'){ echo "selected"; } ?>>Dx-Primary</option>
                               <option value="dCodesSecondary" <?php if($codes[$i]['primarys']=='dCodesSecondary'){ echo "selected"; } ?>>Dx-Secondar</option>
                                 <option value="pCodesPrimary" <?php if($codes[$i]['primarys']=='pCodesPrimary'){ echo "selected"; } ?>>PCS-Primary</option>
                                  <option value="pCodesSecondary" <?php if($codes[$i]['primarys']=='pCodesSecondary'){ echo "selected"; } ?>>PCS-Secondary</option>
                                   <option value="pCodesSecondary" <?php if($codes[$i]['primarys']=='CPT'){ echo "selected"; } ?>>CPT</option>
                            </select>
                          </div>
                        </div>
                    </div>
                    <div class="col-xs-4">
                      <div class="form-group m_b20">
                        <label>Code</label>
                         <div class="val readable"><?php echo $codes[$i]['code']; ?></div>
                        <div class="val hidden"><input value="<?php echo $codes[$i]['code']; ?>"  required type="text" autocomplete="off" class="form-control code" placeholder="Code" name="code[]"></div>
                       <div id="suggesstion-box" class="suggesstion"></div>

                      </div>
                    </div>
                    <div class="col-xs-4">
                      <div class="form-group m_b20">
                        <label>Tag</label>
                         <div class="val readable"><?php echo $codes[$i]['tag']; ?></div>
                        <div class="val hidden"><input type="text" value="<?php echo $codes[$i]['tag']; ?>" class="form-control tag" autocomplete="off" placeholder="Tag" name="tag[]"></div>
                        <div id="suggesstion-tag" class="suggesstion"></div>

                      </div>
                    </div>
                    <div class="col-sm-12">
                      <div class="form-group m_b20">
                        <label>Code Description</label>
                         <div class="val readable"><?php echo $codes[$i]['description']; ?></div>
                        <div class="val hidden"><textarea placeholder="Description" class="form-control description"  name="description[]"><?php echo $codes[$i]['description']; ?></textarea></div>
                      </div>
                    </div>
                    <div class="col-sm-12">
                      <div class="form-group m_b20">
                       <label>Rationale</label>
                       <div class="val readable"><?php echo $codes[$i]['rationale']; ?></div>
                      <div class="val hidden"><input value="<?php echo $codes[$i]['rationale']; ?>" type="text" class="form-control rationale" placeholder="Rationale" name="relation[]"></div>
                    </div>
                  </div> 
                  
                </div>
                 </div>
                <?php
              } 
              if($i==0)
              {
                 ?>
                    <div class="form-area"> <!-- form area start -->
                      <div class="row">
                        <div class="col-xs-4">
                          <div class="form-group m_b20">
                            <label>Code Type</label>
                            <div class="val">
                              <select name="primary[]" class="form-control code_type">
                                <option value="dCodesPrimary">Dx-Primary</option>
                                <option value="dCodesSecondary">Dx-Secondary</option>
                                <option value="pCodesPrimary">PCS-Primary</option>
                                <option value="pCodesSecondary">PCS-Secondary</option>
                                <option value="cpt">CPT</option>

                              </select>
                            </div>
                          </div>
                        </div>
                        <div class="col-xs-4">
                          <div class="form-group m_b20">
                            <label>Code</label>
                            <div class="val"><input required type="text" class="form-control code" autocomplete="off" placeholder="Code" name="code[]"></div>
                            <div id="suggesstion-box" class="suggesstion"></div>

                          </div>
                        </div>
                        <div class="col-xs-4">
                          <div class="form-group m_b20">
                            <label>Tag</label>
                            <div class="val"><input type="text" class="form-control tag" placeholder="Tag"  autocomplete="off" name="tag[]"></div>
                          <div id="suggesstion-tag" class="suggesstion"></div>

                        </div>
                      </div>
                        <div class="col-sm-12">
                          <div class="form-group m_b20">
                            <label>Code Description</label>
                            <div class="val"><textarea class="form-control description"  name="description[]"></textarea></div>
                        </div>
                      </div>
                        <div class="col-sm-12">
                          <div class="form-group m_b20">
                            <label>Rationale</label>
                            <div class="val"><input type="text" class="form-control rationale" placeholder="Rationale" name="relation[]"></div>
                        </div>
                      </div>
                      </div>
                    </div> <!-- form area close -->
                 <?php 
              }
             ?>
          </div>
          <button type="button" class="btn btn-default btn-sm add_code">Add New Code</button> 
        </div>
        <div class="col-md-3 col-sm-4">  
          <div class="row">  
            <div class="col-sm-12" style="position: relative;">
              <div class="fixme">
                <?php
                if($result[0]['fpdpath']!="")
                {
                 ?>
               <div class="pdf-view"><span><strong>Click to view PDF</strong><br />(<?php echo $result[0]['fpdpath']; ?>)</span> <a href="<?php echo PATH.'encounters/upload/'.$result[0]['fpdpath'] ?>" target="_blank" ><img src="<?php echo PATH ?>images/pdf-icon.png" alt="PDF Icon"></a>
                </div>
                <?php } ?>
                <div class="form-group">
                  <label for="email">Upload New File:</label>
                  <input type="file"  onchange="ValidateSize(this)" name="pdffile" class="form-control">
                </div>
                <div class="m_t30 row">
                  <div class="col-xs-6">
                    <div class="text-center"><button type="submit" class="btn btn-block btn-success">Save</button></div>
                  </div>
                  <div class="col-xs-6">
                    <div class="text-center"><a href="<?php echo PATH.$cancel; ?>" class="btn btn-block btn-cancel">Cancel</a></div>
                  </div>
                </div>

             
              </div>
            </div>
          </div>
        </div>
      </div>
    </form>
  </div>
</div>

<?php  require(BASIC_PATH."layout/footer.php"); ?>
<script src="<?php echo PATH ?>js/user.js"></script>
<script type="text/javascript">
$(document).ready(function(){
   $("#add_form").validate(); 
     $(document).on('submit','#add_form',function(){
       if($('#add_form').validate())
       {
          $('.loader').show();
       }
      
  });
 });


var max_execution_time='<?php echo ini_get('max_execution_time') ?>';
var max_input_time='<?php echo ini_get('max_input_time') ?>';
var memory_limit='<?php echo ini_get('memory_limit') ?>';
var post_max_size='<?php echo ini_get('post_max_size') ?>';
var upload_max_filesize='<?php echo ini_get('upload_max_filesize') ?>';
if(memory_limit!="")
{
 memory_limit= memory_limit.replace('M','');
}
if(post_max_size!="")
{
  post_max_size=post_max_size.replace('M','');
}
if(upload_max_filesize!="")
{
  upload_max_filesize=upload_max_filesize.replace('M','');
}
function ValidateSize(file) {

flag=0; error="System Requirements not set.";
    
     /*if(memory_limit<1000)
     {
       flag=1;
         error+="\n memory_limit  should be 1000M";

     }
     if(post_max_size<200)
     {
       flag=1;
        error+="\n post_max_size should be 200M";
     }
     if(upload_max_filesize<200)
     {
       flag=1;
               error+="\n upload_max_filesize  should be 200M";

     }
     if(flag==1)
     {
        alert(error);
         $(file).val('');
        return false;

     }*/
     
 }

   
</script>