'.str_replace(array("{var site_name}","{var site_url}","{var employee_name}","{var award_name}","{var award_month}"),array($cinfo[0]->company_name,site_url(),$full_name,$award_type[0]->award_type,$award_date),htmlspecialchars_decode(stripslashes($template[0]->message))).'
';
hrsale_mail($cinfo[0]->email,$cinfo[0]->company_name,$user_info[0]->email,$subject,$message);
}
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and update info in database
public function update() {
if($this->input->post('edit_type')=='award') {
$id = $this->uri->segment(4);
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
/* Server side PHP input validation */
$description = $this->input->post('description');
$qt_description = htmlspecialchars(addslashes($description), ENT_QUOTES);
if($this->input->post('award_type_id')==='') {
$Return['error'] = $this->lang->line('xin_award_error_award_type');
} else if($this->input->post('award_date')==='') {
$Return['error'] = $this->lang->line('xin_award_error_award_date');
} else if($this->input->post('month_year')==='') {
$Return['error'] = $this->lang->line('xin_award_error_award_month');
}
/* Check if file uploaded..*/
else if($_FILES['award_picture']['size'] == 0) {
$module_attributes = $this->Custom_fields_model->awards_hrsale_module_attributes();
$count_module_attributes = $this->Custom_fields_model->count_awards_module_attributes();
$i=1;
if($count_module_attributes > 0){
foreach($module_attributes as $mattribute) {
if($mattribute->validation == 1){
if($i!=1) {
} else if($this->input->post($mattribute->attribute)=='') {
$Return['error'] = $this->lang->line('xin_hrsale_custom_field_the').' '.$mattribute->attribute_label.' '.$this->lang->line('xin_hrsale_custom_field_is_required');
}
}
}
if($Return['error']!=''){
$this->output($Return);
}
}
$fname = '';
$data = array(
'award_type_id' => $this->input->post('award_type_id'),
'created_at' => $this->input->post('award_date'),
'award_month_year' => $this->input->post('month_year'),
'gift_item' => $this->input->post('gift'),
'cash_price' => $this->input->post('cash'),
'description' => $qt_description,
'award_information' => $this->input->post('award_information'),
);
$result = $this->Awards_model->update_record($data,$id);
} else {
$module_attributes = $this->Custom_fields_model->awards_hrsale_module_attributes();
$count_module_attributes = $this->Custom_fields_model->count_awards_module_attributes();
$i=1;
if($count_module_attributes > 0){
foreach($module_attributes as $mattribute) {
if($mattribute->validation == 1){
if($i!=1) {
} else if($this->input->post($mattribute->attribute)=='') {
$Return['error'] = $this->lang->line('xin_hrsale_custom_field_the').' '.$mattribute->attribute_label.' '.$this->lang->line('xin_hrsale_custom_field_is_required');
}
}
}
if($Return['error']!=''){
$this->output($Return);
}
}
if(is_uploaded_file($_FILES['award_picture']['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','gif');
$filename = $_FILES['award_picture']['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES["award_picture"]["tmp_name"];
$bill_copy = "uploads/award/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$lname = basename($_FILES["award_picture"]["name"]);
$newfilename = 'award_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $bill_copy.$newfilename);
$fname = $newfilename;
$data = array(
'employee_id' => $this->input->post('employee_id'),
'company_id' => $this->input->post('company_id'),
'award_type_id' => $this->input->post('award_type_id'),
'created_at' => $this->input->post('award_date'),
'award_photo' => $fname,
'award_month_year' => $this->input->post('month_year'),
'gift_item' => $this->input->post('gift'),
'cash_price' => $this->input->post('cash'),
'description' => $qt_description,
'award_information' => $this->input->post('award_information'),
);
// update record > model
$result = $this->Awards_model->update_record($data,$id);
} else {
$Return['error'] = $this->lang->line('xin_error_attatchment_type');
}
}
}
if($Return['error']!=''){
$this->output($Return);
}
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_award_success_updated');
if($count_module_attributes > 0){
foreach($module_attributes as $mattribute) {
//
$count_exist_values = $this->Custom_fields_model->count_module_attributes_values($id,$mattribute->custom_field_id);
if($count_exist_values > 0){
if($mattribute->attribute_type == 'fileupload'){
if($_FILES[$mattribute->attribute]['size'] != 0) {
if(is_uploaded_file($_FILES[$mattribute->attribute]['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','pdf','gif','xls','doc','xlsx','docx');
$filename = $_FILES[$mattribute->attribute]['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES[$mattribute->attribute]["tmp_name"];
$profile = "uploads/custom_files/";
$set_img = base_url()."uploads/custom_files/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$name = basename($_FILES[$mattribute->attribute]["name"]);
$newfilename = 'custom_file_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $profile.$newfilename);
$fname = $newfilename;
}
$iattr_data = array(
'attribute_value' => $fname
);
$this->Custom_fields_model->update_att_record($iattr_data, $id,$mattribute->custom_field_id);
}
} else {
}
} else if($mattribute->attribute_type == 'multiselect') {
$multisel_val = $this->input->post($mattribute->attribute);
if(!empty($multisel_val)){
$newdata = implode(',', $this->input->post($mattribute->attribute));
$iattr_data = array(
'attribute_value' => $newdata,
);
$this->Custom_fields_model->update_att_record($iattr_data, $id,$mattribute->custom_field_id);
}
} else {
$attr_data = array(
'attribute_value' => $this->input->post($mattribute->attribute),
);
$this->Custom_fields_model->update_att_record($attr_data, $id,$mattribute->custom_field_id);
}
} else {
if($mattribute->attribute_type == 'fileupload'){
if($_FILES[$mattribute->attribute]['size'] != 0) {
if(is_uploaded_file($_FILES[$mattribute->attribute]['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','pdf','gif','xls','doc','xlsx','docx');
$filename = $_FILES[$mattribute->attribute]['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES[$mattribute->attribute]["tmp_name"];
$profile = "uploads/custom_files/";
$set_img = base_url()."uploads/custom_files/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$name = basename($_FILES[$mattribute->attribute]["name"]);
$newfilename = 'custom_file_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $profile.$newfilename);
$fname = $newfilename;
}
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'attribute_value' => $fname,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
} else {
if($this->input->post($mattribute->attribute) == ''){
$file_val = '';
} else {
$file_val = $this->input->post($mattribute->attribute);
}
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
} else if($mattribute->attribute_type == 'multiselect') {
if(!empty($this->input->post($mattribute->attribute))){
$newdata = implode(',', $this->input->post($mattribute->attribute));
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'attribute_value' => $newdata,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
} else {
if($this->input->post($mattribute->attribute) == ''){
$file_val = '';
} else {
$file_val = $this->input->post($mattribute->attribute);
}
$iattr_data = array(
'user_id' => $id,
'module_attributes_id' => $mattribute->custom_field_id,
'attribute_value' => $file_val,
'created_at' => date('Y-m-d h:i:s')
);
$this->Custom_fields_model->add_values($iattr_data);
}
}
}
}
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
public function delete() {
$session = $this->session->userdata('username');
if(empty($session)){
redirect('admin/');
}
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$id = $this->uri->segment(4);
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$result = $this->Awards_model->delete_record($id);
if(isset($id)) {
$Return['result'] = $this->lang->line('xin_award_success_updated');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
}
}