gest366/modules/anagrafiche/plugins/referenti.php

<?php
include_once ("../../../core.php");

$id_record = filter('id_record');
$operazione = filter('op');

if ($modules_info[$module_name]['permessi'] == 'rw') {
	switch ($operazione) {
		case "addreferente" :
			$nome = filter('nome');
			$mansione = filter('mansione');
			$telefono = filter('telefono');
			$email = filter('email');
			$idsede = filter('idsede');

			if (isset($nome) && isset($idsede)) {
				$query = "INSERT INTO `an_referenti` (`nome`, `mansione`, `telefono`, `email`, `idanagrafica`, `idsede`) VALUES (" . prepare($nome) . ", " . prepare($mansione) . ", " . prepare($telefono) . ", " . prepare($email) . ", " . prepare($id_record) . ", " . prepare($idsede) . ")";

				$dbo->query($query);
				array_push($_SESSION['infos'], "Aggiunto nuovo referente!");
			}

			break;

		case "updatereferenti" :
			foreach ($_POST["idreferente"] as $key => $value) {
				$query = "UPDATE `an_referenti` SET `nome`=" . prepare($_POST["nome"][$key]) . ", `mansione`=" . prepare($_POST["mansione"][$key]) . ", `telefono`=" . prepare($_POST["telefono"][$key]) . ", `email`=" . prepare($_POST["email"][$key]) . ", `idsede`=" . prepare($_POST["idsede"][$key]) . " WHERE `id`=" . prepare($value);

				$dbo->query($query);
			}
			array_push($_SESSION['infos'], _("Salvataggio completato!"));

			break;

		case "deletereferente" :
			$idreferente = filter('id');
			$dbo->query("DELETE FROM `an_referenti` WHERE `id`='" . $idreferente . "'");
			array_push($_SESSION['infos'], "Referente eliminato!");

			redirect($rootdir."/editor.php?id_module=".$id_module."&id_record=".$id_record."#tab_3");

			break;
	}
}

if (filter('add') != null) {
	echo '
<form action="#tab_3" method="post" role="form">
	<input type="hidden" name="backto" value="record-edit">
	<input type="hidden" name="op" value="addreferente">

	<div class="row">
		<div class="col-xs-12 col-md-6">
			{[ "type": "text", "label": "' . _("Nominativo") . '", "name": "nome", "required": 1 ]}
		</div>

		<div class="col-xs-12 col-md-6">
			{[ "type": "text", "label": "' . _("Mansione") . '", "name": "mansione", "required": 1 ]}
		</div>
	</div>

	<div class="row">
		<div class="col-xs-12 col-md-6">
			{[ "type": "text", "label": "' . _("Telefono") . '", "name": "telefono" ]}
		</div>

		<div class="col-xs-12 col-md-6">
			{[ "type": "text", "label": "' . _("Indirizzo email") . '", "name": "email" ]}
		</div>
	</div>

	<div class="row">
		<div class="col-xs-12 col-md-12">
			{[ "type": "select", "label": "' . _("Sede") . '", "name": "idsede", "values": "query=SELECT -1 AS id, \'Sede legale\' AS descrizione UNION SELECT id, CONCAT_WS(\' - \', nomesede, citta) AS descrizione FROM an_sedi WHERE idanagrafica=' . $id_record . '" ]}
		</div>
	</div>

	<!-- PULSANTI -->
	<div class="row">
		<div class="col-xs-12 col-md-12 text-right">
			<button type="submit" class="btn-app btn-primary"><i class="fa fa-plus"></i> ' . _("Aggiungi") . '</button>
		</div>
	</div>
</form>

<script src="' . $rootdir . '/lib/init.js"></script>';
}
else {
	echo '
	<div class="box">
		<div class="box-header with-border">
			<h3 class="box-title">' . _("Referenti") . '</h3>
			<a class="btn-app btn-primary pull-right" data-toggle="modal" data-target="#bs-popup" data-title="Nuovo referente" data-href="' . $rootdir . '/modules/anagrafiche/plugins/referenti.php?add=1&id_record=' . $id_record . '"><i class="fa fa-plus"></i> ' . _("Nuovo referente") . '</a>
		</div>
		<div class="box-body">
			<p>' . _("Qui hai la possibilità di gestire i referenti di questa anagrafica") . '.</p>
			<form action="" method="post">
				<input type="hidden" name="backto" value="record-edit">
				<input type="hidden" name="op" value="updatereferenti">';

	$query = "SELECT * FROM an_referenti WHERE idanagrafica=" . prepare($id_record) . " ORDER BY id DESC";
	$results = $dbo->fetchArray($query);
	if (count($results) != 0) {
		echo '
				<table class="table table-condensed table-striped table-hover">
					<thead>
						<tr>
							<th>' . _("Nominativo") . '</th>
							<th>' . _("Mansione") . '</th>
							<th>' . _("Telefono") . '</th>
							<th>' . _("Indirizzo email") . '</th>
							<th>' . _("Sede") . '</th>
							<th>' . _("Opzioni") . '</th>
						</tr>
					</thead>
					<tbody>';
		foreach ($results as $result) {
			echo '
						<tr>
							<td>
								<input type="hidden" name="idreferente[]" value="' . $result['id'] . '">
								{[ "type": "text", "label": "' . _("Nominativo") . '", "name": "nome[]", "required": 1, "value": "' . $result['nome'] . '", "no-label": "1" ]}
							</td>
							<td>
								{[ "type": "text", "label": "' . _("Mansione") . '", "name": "mansione[]", "required": 1, "value": "' . $result['mansione'] . '", "no-label": "1" ]}
							</td>
							<td>
								{[ "type": "text", "label": "' . _("Telefono") . '", "name": "telefono[]", "value": "' . $result['telefono'] . '", "no-label": "1" ]}
							</td>
							<td>
								{[ "type": "text", "label": "' . _("Indirizzo email") . '", "name": "email[]", "value": "' . $result['email'] . '", "no-label": "1" ]}
							</td>
							<td>
								{[ "type": "select", "label": "' . _("Sede") . '", "name": "idsede[]", "values": "query=SELECT -1 AS id, \'Sede legale\' AS descrizione UNION SELECT id, CONCAT( CONCAT_WS( \' (\', CONCAT_WS(\', \', `nomesede`, `citta`), `indirizzo` ), \')\') AS descrizione FROM an_sedi WHERE idanagrafica=' . $id_record . '", "value": "' . $result['idsede'] . '", "no-label": "1" ]}
							</td>
							<td>
								<a class="btn-app btn-danger pull-right ask" data-href="' . $rootdir . '/editor.php?id_module=' . $id_module . '&id_record=' . $id_record . '" data-op="deletereferente" data-id="' . $result['id'] . '"><i class="fa fa-trash"></i> ' . _("Elimina") . '</a>
							</td>
						</tr>';
		}
		echo '
					</tbody>
				</table>
				
				<div class="pull-right">
					<button type="submit" class="btn-app btn-success"><i class="fa fa-check"></i> ' . _("Salva") . '</button>
				</div>
				<div class="clearfix"></div>';
	}
	echo '

			</form>
		</div>
	</div>';
}
?>