load->model("Complaints_model");
$this->load->model("Xin_model");
$this->load->model("Department_model");
}
/*Function to set JSON output*/
public function output($Return=array()){
/*Set response header*/
header("Access-Control-Allow-Origin: *");
header("Content-Type: application/json; charset=UTF-8");
/*Final JSON response*/
exit(json_encode($Return));
}
public function index()
{
$session = $this->session->userdata('username');
if(empty($session)){
redirect('admin/');
}
$data['title'] = $this->lang->line('left_complaints').' | '.$this->Xin_model->site_title();
$data['all_employees'] = $this->Xin_model->all_employees();
$data['get_all_companies'] = $this->Xin_model->get_companies();
$data['breadcrumbs'] = $this->lang->line('left_complaints');
$data['path_url'] = 'complaints';
$role_resources_ids = $this->Xin_model->user_role_resource();
if(in_array('19',$role_resources_ids)) {
if(!empty($session)){
$data['subview'] = $this->load->view("admin/complaints/complaint_list", $data, TRUE);
$this->load->view('admin/layout/layout_main', $data); //page load
} else {
redirect('admin/');
}
} else {
redirect('admin/dashboard');
}
}
public function complaint_list()
{
$data['title'] = $this->Xin_model->site_title();
$session = $this->session->userdata('username');
if(!empty($session)){
$this->load->view("admin/complaints/complaint_list", $data);
} else {
redirect('admin/');
}
// Datatables Variables
$draw = intval($this->input->get("draw"));
$start = intval($this->input->get("start"));
$length = intval($this->input->get("length"));
$role_resources_ids = $this->Xin_model->user_role_resource();
$user_info = $this->Xin_model->read_user_info($session['user_id']);
if($user_info[0]->user_role_id==1){
$complaint = $this->Complaints_model->get_complaints();
} else {
if(in_array('237',$role_resources_ids)) {
$complaint = $this->Complaints_model->get_company_complaints($user_info[0]->company_id);
} else {
$complaint = $this->Complaints_model->get_employee_complaints($session['user_id']);
}
}
$data = array();
foreach($complaint->result() as $r) {
/*if(in_array('376',$role_resources_ids)) {
$aim = explode(',',$r->complaint_against);
foreach($aim as $dIds) {
if($session['user_id'] == $dIds) {
// get user > added by
$user = $this->Xin_model->read_user_info($r->complaint_from);
// user full name
if(!is_null($user)){
$complaint_from = $user[0]->first_name.' '.$user[0]->last_name;
} else {
$complaint_from = '--';
}
if($r->complaint_against == '') {
$ol = '--';
} else {
$ol = '';
foreach(explode(',',$r->complaint_against) as $desig_id) {
$_comp_name = $this->Xin_model->read_user_info($desig_id);
if(!is_null($_comp_name)){
$ol .= '- '.$_comp_name[0]->first_name.' '.$_comp_name[0]->last_name.'
';
} else {
$ol .= '';
}
}
$ol .= '
';
}
// get complaint date
$complaint_date = $this->Xin_model->set_date_format($r->complaint_date);
if(in_array('223',$role_resources_ids)) { //edit
$edit = '';
} else {
$edit = '';
}
if(in_array('224',$role_resources_ids)) { // delete
$delete = '';
} else {
$delete = '';
}
if(in_array('237',$role_resources_ids)) { //view
$view = '';
} else {
$view = '';
}
// get company
$company = $this->Xin_model->read_company_info($r->company_id);
if(!is_null($company)){
$comp_name = $company[0]->name;
} else {
$comp_name = '--';
}
// get status
if($r->status==0): $status = $this->lang->line('xin_pending');
elseif($r->status==1): $status = $this->lang->line('xin_accepted'); else: $status = $this->lang->line('xin_rejected'); endif;
$icomplaint_from = $complaint_from.'
'.$this->lang->line('xin_description').': '.$r->description.'
'.$status.'';
$combhr = $edit.$view.$delete;
$data[] = array(
$combhr,
$icomplaint_from,
$ol,
$comp_name,
$r->title,
$complaint_date
);
}
}
} else {*/
// get user > added by
$user = $this->Xin_model->read_user_info($r->complaint_from);
// user full name
if(!is_null($user)){
$complaint_from = $user[0]->first_name.' '.$user[0]->last_name;
} else {
$complaint_from = '--';
}
if($r->complaint_against == '') {
$ol = '--';
} else {
$ol = '';
foreach(explode(',',$r->complaint_against) as $desig_id) {
$_comp_name = $this->Xin_model->read_user_info($desig_id);
if(!is_null($_comp_name)){
$ol .= '- '.$_comp_name[0]->first_name.' '.$_comp_name[0]->last_name.'
';
} else {
$ol .= '';
}
}
$ol .= '
';
}
// get complaint date
$complaint_date = $this->Xin_model->set_date_format($r->complaint_date);
if(in_array('223',$role_resources_ids)) { //edit
$edit = '';
} else {
$edit = '';
}
if(in_array('224',$role_resources_ids)) { // delete
$delete = '';
} else {
$delete = '';
}
if(in_array('237',$role_resources_ids)) { //view
$view = '';
} else {
$view = '';
}
// get company
$company = $this->Xin_model->read_company_info($r->company_id);
if(!is_null($company)){
$comp_name = $company[0]->name;
} else {
$comp_name = '--';
}
// get status
if($r->status==0): $status = ''.$this->lang->line('xin_pending').'';
elseif($r->status==1): $status = ''.$this->lang->line('xin_accepted').''; else: $status = ''.$this->lang->line('xin_rejected').'';endif;
// info
$icomplaint_from = $complaint_from.'
'.$this->lang->line('xin_description').': '.$r->description.'
'.$status.'';
$combhr = $edit.$view.$delete;
$data[] = array(
$combhr,
$icomplaint_from,
$ol,
$comp_name,
$r->title,
$complaint_date
);
//}
}
$output = array(
"draw" => $draw,
"recordsTotal" => $complaint->num_rows(),
"recordsFiltered" => $complaint->num_rows(),
"data" => $data
);
echo json_encode($output);
exit();
}
public function read()
{
$data['title'] = $this->Xin_model->site_title();
$id = $this->input->get('complaint_id');
$result = $this->Complaints_model->read_complaint_information($id);
$data = array(
'complaint_id' => $result[0]->complaint_id,
'company_id' => $result[0]->company_id,
'complaint_from' => $result[0]->complaint_from,
'title' => $result[0]->title,
'complaint_date' => $result[0]->complaint_date,
'complaint_against' => $result[0]->complaint_against,
'description' => $result[0]->description,
'status' => $result[0]->status,
'attachment' => $result[0]->attachment,
'all_employees' => $this->Xin_model->all_employees(),
'get_all_companies' => $this->Xin_model->get_companies()
);
$session = $this->session->userdata('username');
if(!empty($session)){
$this->load->view('admin/complaints/dialog_complaint', $data);
} else {
redirect('admin/');
}
}
// get company > employees
public function get_employees() {
$data['title'] = $this->Xin_model->site_title();
$id = $this->uri->segment(4);
$data = array(
'company_id' => $id
);
$session = $this->session->userdata('username');
if(!empty($session)){
$this->load->view("admin/complaints/get_employees", $data);
} else {
redirect('admin/');
}
// Datatables Variables
$draw = intval($this->input->get("draw"));
$start = intval($this->input->get("start"));
$length = intval($this->input->get("length"));
}
// get company > employees
public function get_complaint_employees() {
$data['title'] = $this->Xin_model->site_title();
$id = $this->uri->segment(4);
$data = array(
'company_id' => $id
);
$session = $this->session->userdata('username');
if(!empty($session)){
$this->load->view("admin/complaints/get_complaint_employees", $data);
} else {
redirect('admin/');
}
// Datatables Variables
$draw = intval($this->input->get("draw"));
$start = intval($this->input->get("start"));
$length = intval($this->input->get("length"));
}
// Validate and add info in database
public function add_complaint() {
if($this->input->post('add_type')=='complaint') {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
/* Server side PHP input validation */
$description = $this->input->post('description');
$qt_description = htmlspecialchars(addslashes($description), ENT_QUOTES);
if($this->input->post('company_id')==='') {
$Return['error'] = $this->lang->line('error_company_field');
} else if($this->input->post('employee_id')==='') {
$Return['error'] = $this->lang->line('xin_error_complaint_from');
} else if($this->input->post('title')==='') {
$Return['error'] = $this->lang->line('xin_error_complaint_title');
} else if($this->input->post('complaint_date')==='') {
$Return['error'] = $this->lang->line('xin_error_complaint_date');
} else if($this->input->post('complaint_against')==='') {
$Return['error'] = $this->lang->line('xin_error_complaint_against');
}
if($Return['error']!=''){
$this->output($Return);
}
$complaint_against_ids = implode(',',$this->input->post('complaint_against'));
if(is_uploaded_file($_FILES['attachment']['tmp_name'])) {
//checking image type
$allowed = array('png','jpg','jpeg','pdf','gif');
$filename = $_FILES['attachment']['name'];
$ext = pathinfo($filename, PATHINFO_EXTENSION);
if(in_array($ext,$allowed)){
$tmp_name = $_FILES["attachment"]["tmp_name"];
$profile = "uploads/complaints/";
$set_img = base_url()."uploads/complaints/";
// basename() may prevent filesystem traversal attacks;
// further validation/sanitation of the filename may be appropriate
$name = basename($_FILES["attachment"]["name"]);
$newfilename = 'complaints_'.round(microtime(true)).'.'.$ext;
move_uploaded_file($tmp_name, $profile.$newfilename);
$fname = $newfilename;
} else {
$Return['error'] = $this->lang->line('xin_error_attatchment_type');
}
} else {
$fname = '';
}
$data = array(
'complaint_from' => $this->input->post('employee_id'),
'company_id' => $this->input->post('company_id'),
'title' => $this->input->post('title'),
'description' => $qt_description,
'attachment' => $fname,
'complaint_date' => $this->input->post('complaint_date'),
'complaint_against' => $complaint_against_ids,
'created_at' => date('d-m-Y'),
);
$result = $this->Complaints_model->add($data);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_success_complaint_added');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
// Validate and update info in database
public function update() {
if($this->input->post('edit_type')=='complaint') {
$id = $this->uri->segment(4);
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$Return['csrf_hash'] = $this->security->get_csrf_hash();
/* Server side PHP input validation */
$description = $this->input->post('description');
$qt_description = htmlspecialchars(addslashes($description), ENT_QUOTES);
if($this->input->post('title')==='') {
$Return['error'] = $this->lang->line('xin_error_complaint_title');
} else if($this->input->post('complaint_date')==='') {
$Return['error'] = $this->lang->line('xin_error_complaint_date');
}
if($Return['error']!=''){
$this->output($Return);
}
$data = array(
'title' => $this->input->post('title'),
'description' => $qt_description,
'complaint_date' => $this->input->post('complaint_date'),
'status' => $this->input->post('status'),
);
$result = $this->Complaints_model->update_record($data,$id);
if ($result == TRUE) {
$Return['result'] = $this->lang->line('xin_success_complaint_updated');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
exit;
}
}
public function delete() {
/* Define return | here result is used to return user data and error for error message */
$Return = array('result'=>'', 'error'=>'', 'csrf_hash'=>'');
$id = $this->uri->segment(4);
$Return['csrf_hash'] = $this->security->get_csrf_hash();
$result = $this->Complaints_model->delete_record($id);
if(isset($id)) {
$Return['result'] = $this->lang->line('xin_success_complaint_deleted');
} else {
$Return['error'] = $this->lang->line('xin_error_msg');
}
$this->output($Return);
}
}