whoami7 - Manager
:
/
home
/
gracious
/
mail
/
ledgerless.graciousphils.com
/
Upload File:
files >> /home/gracious/mail/ledgerless.graciousphils.com/lcRequestAction.php
<?php include 'connection.php'; if(isset($_POST['btnSend'])){ $requestedBy = $_SESSION['user']; $dateRequested = date("Y-m-d H:i:s"); $status = "Pending"; $message = "#LC " . $_SESSION['agentCode'] . " " . $_POST['clientName'] . " " . $_POST['message'] . " TIME:" . $dateRequested; $rDate = date("Y-m-d H:i:s"); $salesOffice = "PAL+"; try{ $searchvalue = $message; $search = "SELECT * FROM tbltextpool WHERE message LIKE CONCAT(:search,'%') AND receivedDate = :rDate;"; $stmt = $pdo->prepare($search); $stmt->bindParam(':search', $searchvalue); $stmt->bindParam(':rDate', $rDate); $stmt->execute(); if($stmt->rowCount() == 0){ $haystack = strtolower($message); if (str_contains($haystack, 'post')) { $status = "Posted"; } $query = "INSERT INTO tbltextpool (message, status, receivedDate) VALUES (?,?,?);"; $st = $pdo->prepare($query); $st->bindParam(1,$message); $st->bindParam(2,$status); $st->bindParam(3,$rDate); $st->execute(); } $pdo = new PDO("mysql:host=localhost; dbname=gracious_inquiryverifier","gracious_administrator","Cronica2020",array('charset'=>'utf8')); $searchvalue = $message; $search = "SELECT * FROM tblinquiry WHERE message LIKE CONCAT(:search,'%') AND InquiryDate = :rDate;"; $stmt = $pdo->prepare($search); $stmt->bindParam(':search', $searchvalue); $stmt->bindParam(':rDate', $rDate); $stmt->execute(); if($stmt->rowCount() == 0){ $query = "INSERT INTO tblinquiry (message, SaleOffices, InquiryDate) VALUES (?, ?, ?);"; $st = $pdo->prepare($query); $st->bindParam(1,$message); $st->bindParam(2,$salesOffice); $st->bindParam(3,$rDate); $st->execute(); } echo "<script>alert('Message Sent Successfully!');window.location.href='lcRequests.php';</script>"; } catch(PDOException $e) { echo "<script>alert('There was an error in your request, please contact IT!');</script>"; echo $query . "<br>" . $e->getMessage(); } } ?>
Copyright ©2021 || Defacer Indonesia