'.str_replace(array("{var site_name}","{var site_url}","{var client_name}","{var email}","{var password}"),array($cinfo[0]->company_name,site_url(),$full_name,$this->input->post('email'),$this->input->post('password')),htmlspecialchars_decode(stripslashes($template[0]->message))).'
';
hrsale_mail($cinfo[0]->email,$cinfo[0]->company_name,$this->input->post('email'),$subject,$message);
}
}
} else {
if(is_uploaded_file($_FILES['client_photo']['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','gif');
$filename = $_FILES['client_photo']['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES["client_photo"]["tmp_name"];
$bill_copy = "uploads/clients/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$lname = basename($_FILES["client_photo"]["name"]);
$newfilename = 'client_photo_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $bill_copy.$newfilename);
$fname = $newfilename;
} else {
$Return['error'] = $this->lang->line('xin_error_attatchment_type');
}
}
$options = array('cost' => 12);
$password_hash = password_hash($this->input->post('password'), PASSWORD_BCRYPT, $options);
$data = array(
'name' => $this->input->post('name'),
'company_name' => $this->input->post('company_name'),
'email' => $this->input->post('email'),
'client_password' => $password_hash,
'client_profile' => $fname,
'contact_number' => $this->input->post('contact_number'),
'website_url' => $this->input->post('website'),
'address_1' => $this->input->post('address_1'),
'address_2' => $this->input->post('address_2'),
'city' => $this->input->post('city'),
'state' => $this->input->post('state'),
'zipcode' => $this->input->post('zipcode'),
'country' => $this->input->post('country'),
'is_active' => 1,
'created_at' => date('Y-m-d H:i:s'),
);
$result = $this->Clients_model->add($data);
if ($result == TRUE) {
//get setting info
$setting = $this->Xin_model->read_setting_info(1);
$company = $this->Xin_model->read_company_setting_info(1);
if($setting[0]->enable_email_notification == 'yes') {
// load email library
//$this->load->library('email');
$this->email->set_mailtype("html");
//get company info
$cinfo = $this->Xin_model->read_company_setting_info(1);
//get email template
$template = $this->Xin_model->read_email_template(16);
$subject = $template[0]->subject.' - '.$cinfo[0]->company_name;
$logo = base_url().'uploads/logo/signin/'.$company[0]->sign_in_logo;
// get user full name
$full_name = $this->input->post('name');
$message = '
'.str_replace(array("{var site_name}","{var site_url}","{var username}","{var email}","{var password}"),array($cinfo[0]->company_name,site_url(),$this->input->post('username'),$this->input->post('email'),$this->input->post('password')),htmlspecialchars_decode(stripslashes($template[0]->message))).'
';
hrsale_mail($cinfo[0]->email,$cinfo[0]->company_name,$this->input->post('email'),$subject,$message);
}
}
}
if($Return['error']!=''){
$this->output($Return);
}
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_project_client_added');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and update info in database
public function update() {
if($this->input->post('edit_type')=='client') {
$id = $this->uri->segment(4);
// Check validation for user input
$this->form_validation->set_rules('name', 'Name', 'trim|required|xss_clean');
$this->form_validation->set_rules('website', 'Website', 'trim|required|xss_clean');
$this->form_validation->set_rules('city', 'City', 'trim|required|xss_clean');
$name = $this->input->post('name');
$company_name = $this->input->post('company_name');
$email = $this->input->post('email');
$contact_number = $this->input->post('contact_number');
$website = $this->input->post('website');
$address_1 = $this->input->post('address_1');
$address_2 = $this->input->post('address_2');
$city = $this->input->post('city');
$state = $this->input->post('state');
$zipcode = $this->input->post('zipcode');
$country = $this->input->post('country');
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
/* Server side PHP input validation */
if($name==='') {
$Return['error'] = $this->lang->line('xin_clcontact_person_field_error');
} /*else if($company_name==='') {
$Return['error'] = $this->lang->line('xin_employee_error_company_name');
} else if($contact_number==='') {
$Return['error'] = $this->lang->line('xin_error_contact_field');
}*/ else if($email==='') {
$Return['error'] = $this->lang->line('xin_error_cemail_field');
} else if($this->Xin_model->check_client_email($email) > 1) {
$Return['error'] = $this->lang->line('xin_check_client_email_error');
} /*else if($city==='') {
$Return['error'] = $this->lang->line('xin_error_city_field');
} else if($zipcode==='') {
$Return['error'] = $this->lang->line('xin_error_zipcode_field');
}*/ else if($country==='') {
$Return['error'] = $this->lang->line('xin_error_country_field');
} /*else if($this->input->post('username')==='') {
$Return['error'] = $this->lang->line('xin_employee_error_username');
}*/
/* Check if file uploaded..*/
else if($_FILES['client_photo']['size'] == 0) {
//$fname = 'no file';
$no_logo_data = array(
'name' => $this->input->post('name'),
'company_name' => $this->input->post('company_name'),
'email' => $this->input->post('email'),
'contact_number' => $this->input->post('contact_number'),
'website_url' => $this->input->post('website'),
'address_1' => $this->input->post('address_1'),
'address_2' => $this->input->post('address_2'),
'city' => $this->input->post('city'),
'state' => $this->input->post('state'),
'zipcode' => $this->input->post('zipcode'),
'country' => $this->input->post('country'),
'is_active' => $this->input->post('status'),
);
$result = $this->Clients_model->update_record($no_logo_data,$id);
} else {
if(is_uploaded_file($_FILES['client_photo']['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','gif');
$filename = $_FILES['client_photo']['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES["client_photo"]["tmp_name"];
$bill_copy = "uploads/clients/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$lname = basename($_FILES["client_photo"]["name"]);
$newfilename = 'client_photo_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $bill_copy.$newfilename);
$fname = $newfilename;
$data = array(
'name' => $this->input->post('name'),
'company_name' => $this->input->post('company_name'),
'email' => $this->input->post('email'),
//'client_username' => $this->input->post('username'),
'client_profile' => $fname,
'contact_number' => $this->input->post('contact_number'),
'website_url' => $this->input->post('website'),
'address_1' => $this->input->post('address_1'),
'address_2' => $this->input->post('address_2'),
'city' => $this->input->post('city'),
'state' => $this->input->post('state'),
'zipcode' => $this->input->post('zipcode'),
'country' => $this->input->post('country'),
'is_active' => $this->input->post('status'),
);
// update record > model
$result = $this->Clients_model->update_record($data,$id);
} else {
$Return['error'] = $this->lang->line('xin_error_attatchment_type');
}
}
}
if($Return['error']!=''){
$this->output($Return);
}
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_project_client_updated');
} else {
$Return['error'] = $Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
public function delete() {
if($this->input->post('is_ajax')==2) {
$session = $this->session->userdata('username');
if(empty($session)){
redirect('admin/');
}
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$id = $this->uri->segment(4);
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$result = $this->Clients_model->delete_record($id);
if(isset($id)) {
$Return['result'] = $this->lang->line('xin_project_client_deleted');
} else {
$Return['error'] = $Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
}
}
}