MOON
Server: Apache
System: Linux e2e-78-16.ssdcloudindia.net 3.10.0-1160.45.1.el7.x86_64 #1 SMP Wed Oct 13 17:20:51 UTC 2021 x86_64
User: imensosw (1005)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/imensosw/www/imenso.co/dev/data-panel/post_data.php
<?php

// assuming file.zip is in the same directory as the executing script.

require_once 'config.php';

error_reporting(0);

include('PHPExcel/Classes/PHPExcel/IOFactory.php');

if(isset($_POST['formData']['rowId']))

{
 
  $assignment_no = $_POST['formData']['assignment_no'];
  $docId = $_POST['formData']['docId'];
  $rowId = $_POST['formData']['rowId'];
  $title = $_POST['formData']['title'];
  $date = $_POST['formData']['date'];
  $description = $_POST['formData']['description'];

  $inputFileName = "docs/".$assignment_no."/".$assignment_no.".xls";
  $inputFileType = PHPExcel_IOFactory::identify($inputFileName);
  $excel2 = PHPExcel_IOFactory::createReader($inputFileType);
  $excel2 = $objPHPExcel = $excel2->load($inputFileName);

  // Empty Sheet
  $excel2->setActiveSheetIndex(0); // Set Worksheet Index
  $sheet = $objPHPExcel->getSheet(0);
  $highestRow = $sheet->getHighestRow();
  $highestColumn = $sheet->getHighestColumn();

  $excel2->getActiveSheet()->SetCellValue('B'.$rowId, $title);
  $excel2->getActiveSheet()->SetCellValue('C'.$rowId, $date);
  $excel2->getActiveSheet()->SetCellValue('D'.$rowId, $description);

    $objWriter = PHPExcel_IOFactory::createWriter($excel2, $inputFileType);
    ob_end_clean();

    $sql =  "SELECT assignment_details.* FROM assignment_details INNER JOIN assignments ON assignments.id=assignment_details.assignment_id WHERE assignments.assignment_no= '".$assignment_no."' and assignment_details.doc_id ='".$docId."'";
    $result = $conn->query($sql);
    $row = $result->fetch_assoc() ;
    
    $title = str_replace("'","\'",$title) ;
    $title = str_replace('"','\"',$title) ;
    $updateQuery = "UPDATE assignment_details SET doc_title='".$title."', doc_date='".$date."', doc_description ='".$description."'  WHERE assignment_details.id='".$row['id']."' ";
    $recordUpdate = FALSE ;
    if ($conn->query($updateQuery) === TRUE) 
    {
        $objWriter->save($inputFileName);
        $recordUpdate = TRUE ;
    } 

    if($title=="" && $date=="" && $description=="")
    { 
        echo json_encode(['status'=>"default", "message"=>""]);
    }
    else if( $description!="" && $recordUpdate === TRUE)
    {
        echo json_encode(['status'=>"doubt", "message"=>""]);
    }
    else if(  $recordUpdate === TRUE)
    {
        echo json_encode(['status'=>"done", "message"=>""]); 
    }
 

}
else if(isset($_POST['assignment_status_id']))
{
    $status = "fail";
    $message = "Assignment Submittion Failed! Please try again"; 
    if($_POST['assignment_status_id'] == 2)
    {
        $inputFileName = "docs/".$_POST['assignment_no']."/".$_POST['assignment_no'].".xls";
        $inputFileType = PHPExcel_IOFactory::identify($inputFileName);
        $excel2 = PHPExcel_IOFactory::createReader($inputFileType);
        $excel2 = $objPHPExcel = $excel2->load($inputFileName);
        // Empty Sheet
        $sheet = $objPHPExcel->getSheet(0);
        $highestRow = $sheet->getHighestRow();
        $highestColumn = $sheet->getHighestColumn();
        $rowData="";
        
        $sql =  "SELECT assignments.id FROM assignments WHERE  assignments.assignment_no= '".$_POST['assignment_no']."'";
        $result = $conn->query($sql);
        $row = $result->fetch_assoc() ;
        $assignmentsId = $row['id'] ;
        
        for ($row = 1; $row <= $highestRow; $row++) 
        {
            $rowData = $sheet->rangeToArray('A' . $row . ':' . $highestColumn . $row, NULL, TRUE, FALSE);
            $updateQuery = "UPDATE assignment_details SET doc_title='".$rowData[0][1]."', doc_date='".$rowData[0][2]."', doc_description ='".$rowData[0][3]."'  WHERE assignment_details.assignment_id='".$assignmentsId."' and assignment_details.doc_id='".$rowData[0][0]."' ";
            $conn->query($updateQuery);
        }
        
        
        $sql =  "SELECT count(*) as freshCount FROM assignment_details WHERE assignment_id = $assignmentsId and (doc_title = '' AND doc_date = '' AND doc_description = '')";
        $result = $conn->query($sql);
        $row = $result->fetch_assoc() ;
        if( $row['freshCount'] == 0  )
        {
            $conn->query("UPDATE assignments SET assignment_status_id='".$_POST['assignment_status_id']."' , submit_date =  '".date("Y-m-d")."' WHERE assignment_no='".$_POST['assignment_no']."' " ) ;
            $status = "success";
            $message = "done"; 
        }
    }
    else
    {
        $conn->query("UPDATE assignments SET assignment_status_id='".$_POST['assignment_status_id']."' , submit_date =  '".date("Y-m-d")."' WHERE assignment_no='".$_POST['assignment_no']."' " ) ;
        $status = "success";
        $message = "done"; 
    }

    echo json_encode(['status'=>$status, "message"=>$message]); 
}
else if(isset($_POST['get_detail']))
{
    $assignment_no = $_POST['assignment_no'];
    $docId = $_POST['docId'];
    $sql =  "SELECT assignment_details.* FROM assignment_details INNER JOIN assignments ON assignments.id=assignment_details.assignment_id WHERE  assignments.assignment_no= '".$assignment_no."' and assignment_details.doc_id ='".$docId."'";
    $result = $conn->query($sql);
    $row = mysqli_fetch_assoc($result);
    echo json_encode($row); 
}
else{

   echo json_encode(['status'=>"error", "message"=>""]); 

}





?>