<?php
/** ensure this file is being included by a parent file */
defined( '_VALID_' ) or die( 'Direct Access to this location is not allowed.' );
if(isset($_REQUEST['page'])){
$page=$_REQUEST['page'];
}else{
$page="";
}
if(isset($_REQUEST['person_id'])){
$person_id=$_REQUEST['person_id'];
}else{
$person_id="";
}
if(isset($_REQUEST['switch_index'])){
$switch_index=$_REQUEST['switch_index'];
}else{
$switch_index="";
}
if(isset($_REQUEST['name_search'])){
$name_search=$_REQUEST['name_search'];
}else{
$name_search="";
}
if(!isset($_POST['sendto'])){
$_POST['sendto']="";
}
if(!isset($_POST['subject'])){
$_POST['subject']="";
}
if(!isset($_POST['detail'])){
$_POST['detail']="";
}
$upfile1 ="";
$sizelimit1 ="";
$upfile2 ="";
$sizelimit2 ="";
$upfile3 ="";
$sizelimit3 ="";
$upfile4 ="";
$sizelimit4 ="";
$upfile5 ="";
$sizelimit5 ="";
if(!($_SESSION['login_status']<=14)){
exit();
}
require_once "modules/mail/time_inc.php";
$user=$_SESSION['login_user_id'];
//ส่วนหัว
echo "<br />";
if(!(($index==1) or ($index==2) or ($index==7))){
echo "<table width='100%' border='0' align='center'>";
echo "<tr align='center'><td><font color='#006666' size='3'><strong>ทะเบียนจดหมายส่ง</strong></font></td></tr>";
echo "</table>";
}
//ส่วนฟอร์มรับข้อมูล
if($index==1){
$timestamp = mktime(date("H"), date("i"),date("s"), date("m") ,date("d"), date("Y")) ;
//timestamp เวลาปัจจุบัน
$ref_id = $user.$timestamp ;
$_SESSION ['ref_id'] = $ref_id ;
echo "<form Enctype = multipart/form-data id='frm1' name='frm1'>";
echo "<Center>";
echo "<Font color='#006666' Size=3><B>เขียนจดหมาย</Font>";
echo "</Cener>";
echo "<Br>";
echo "<table border='1' width='700' id='table1' style='border-collapse: collapse' bordercolor='#C0C0C0'>";
echo "<tr bgcolor='#003399'>";
echo "<td colspan='4' height='23' align='left'><font size='2' color='#FFFFFF'> กรุณาระบุรายละเอียด</font></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ถึง </font></span></td>";
echo "<td colspan='3' align='left'> <input type='radio' value='all' name='sendto'> ทุกคนในสพท";
echo "<br>\n";
echo " <input type='radio' value='some' name='sendto' onClick=\"window.open('modules/mail/main/select_send.php?sd_index=some','PopUp','width=700,height=600,scrollbars,status'); \"> บางคนในสพท";
$sql_group= "select * from mail_group";
$dbquery_group = mysqli_query($connect,$sql_group);
While ($result_group = mysqli_fetch_array($dbquery_group)){
echo "<br> <input type='radio' name='sendto' value='$result_group[grp_id]' onClick=\"window.open('modules/mail/main/select_send.php?sd_index=$result_group[grp_id]','PopUp','width=700,height=600,scrollbars,status'); \"> $result_group[grp_name]";
}
//school
if($_SESSION['login_status']<=12){
echo "<br>\n";
echo " <input type='radio' value='some' name='sendto' onClick=\"window.open('modules/mail/main/select_send_2.php?sd_index=some','PopUp','width=700,height=600,scrollbars,status'); \"> ผู้อำนวยการโรงเรียน";
}
if($_SESSION['login_status']<=4){
echo "<br>\n";
echo " <input type='radio' value='some' name='sendto' onClick=\"window.open('modules/mail/main/select_send_3.php?sd_index=some','PopUp','width=700,height=600,scrollbars,status'); \"> ครูและบุคลากรในสถานศึกษา";
}
echo "</td></tr>";
echo "<tr>";
echo "<td width='94' align='right'><span lang='th'><font size='2' color='#0000FF'>เรื่อง </font></span></td>";
echo "<td width='514' colspan='3' align='left'> <input type='text' name='subject' size='76' style='background-color: #99ccff'></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right' height='47'><span lang='th'><font size='2' color='#0000FF'>ข้อความ </font></span></td>";
echo "<td height='47' width='514' colspan='3' align='left'> <textarea rows='10' name='detail' cols='55' style='background-color: #99ccff' ></textarea></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='371' align='right' colspan='2'><p align='center'><font size='2' color='#800000'>แนบไฟล์(ถ้ามี)</font></td>";
echo "<td width='238' align='center' colspan='2'><p align='center'><font size='2' color='#800000'>คำอธิบายไฟล์</font></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ไฟล์แนบ 1 </font></td>";
echo "<td width='274'> <input type='file' name='myfile1' size='26' style='background-color: #99ccff'></td>";
echo "<td width='238' align='center' colspan='2'><input type='text' name='dfile1' size='31' style='background-color: #BBD1FF'></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ไฟล์แนบ 2 </font></td>";
echo "<td width='274'> <input type='file' name='myfile2' size='26' style='background-color: #99ccff'> </td>";
echo "<td width='238' align='center' colspan='2'><input type='text' name='dfile2' size='31' style='background-color: #BBD1FF'></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ไฟล์แนบ 3 </font></td>";
echo "<td width='274'> <input type='file' name='myfile3' size='26' style='background-color: #99ccff'> </td>";
echo "<td width='238' align='center' colspan='2'><input type='text' name='dfile3' size='31' style='background-color: #BBD1FF'></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ไฟล์แนบ 4 </font></td>";
echo "<td width='274'> <input type='file' name='myfile4' size='26' style='background-color: #99ccff'> </td>";
echo "<td width='238' align='center' colspan='2'><input type='text' name='dfile4' size='31' style='background-color: #BBD1FF'></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ไฟล์แนบ 5 </font></td>";
echo "<td width='274'> <input type='file' name='myfile5' size='26' style='background-color: #99ccff'> </td>";
echo "<td width='238' align='center' colspan='2'><input type='text' name='dfile5' size='31' style='background-color: #BBD1FF'></td>";
echo "</tr>";
echo "<tr>";
echo "<td align='center' colspan='4'><FONT SIZE='2' COLOR='#CC9900'>เฉพาะไฟล์ doc, pdf, xls, gif, jpg, zip, rar เท่านั้น</FONT></td>";
echo "</tr>";
echo "<input name='ref_id' type='hidden' value='$ref_id'>";
echo "<tr>";
echo "<td align='center' colspan='4'><BR><INPUT TYPE='button' name='smb' class='btn btn-success' value='ตกลง' onclick='goto_url(1)' class=entrybutton> <input type='reset' class='btn btn-warning' value='Reset' name='reset'></td>";
echo "</tr>";
echo "</Table>";
echo "</form>";
}
//ส่วนยืนยันการลบข้อมูล
if($index==2) {
echo "<table width='500' border='0' align='center'>";
echo "<tr><td align='center'><font color='#990000' size='4'>โปรดยืนยันความต้องการลบข้อมูลอีกครั้ง</font><br></td></tr>";
echo "<tr><td align=center>";
echo "<INPUT TYPE='button' name='smb' class='btn btn-success' value='ยืนยัน' onclick='location.href=\"?option=mail&task=main/send&index=3&id=$_GET[id]&page=$page\"'>
<INPUT TYPE='button' name='back' class='btn btn-warning' value='ยกเลิก' onclick='location.href=\"?option=mail&task=main/send&page=$page\"'";
echo "</td></tr></table>";
}
//ส่วนลบข้อมูล
if($index==3){
$sql="select * from mail_main where ms_id='$_GET[id]'";
$dbquery = mysqli_query($connect,$sql);
$ref_result = mysqli_fetch_array($dbquery);
$ref_id=$ref_result['ref_id'];
$sql="select * from mail_filebook where ref_id='$ref_id'";
$dbquery_file = mysqli_query($connect,$sql);
While ($result_file = mysqli_fetch_array($dbquery_file)){
$file= $result_file['file_name'];
$path_file="modules/mail/upload_files/".$file;
if(file_exists($path_file)){
unlink($path_file);
}
}
$sql = "delete from mail_filebook where ref_id='$ref_id'";
$dbquery = mysqli_query($connect,$sql);
$sql = "delete from mail_sendto_answer where ref_id='$ref_id'";
$dbquery = mysqli_query($connect,$sql);
$sql = "delete from mail_main where ms_id='$_GET[id]'";
$dbquery = mysqli_query($connect,$sql);
//ลบคอมเม้น
$sql = "DELETE FROM mail_comment WHERE ref_id='$ref_id'";
$dbquery = mysqli_query($connect,$sql);
$index="";
}
//ส่วนบันทึกข้อมูล
if($index==4){
$sizelimit = 20000*1024 ; //ขนาดไฟล์ที่ให้แนบ 9 Mb.
$subject = $_POST ['subject'] ;
$detail = $_POST ['detail'] ;
$dfile1 = $_POST ['dfile1'] ;
$dfile2 = $_POST ['dfile2'] ;
$dfile3 = $_POST ['dfile3'] ;
$dfile4 = $_POST ['dfile4'] ;
$dfile5 = $_POST ['dfile5'] ;
/// file
$myfile1 = $_FILES ['myfile1'] ['tmp_name'] ;
$myfile1_name = $_FILES ['myfile1'] ['name'] ;
$myfile1_size = $_FILES ['myfile1'] ['size'] ;
$myfile1_type = $_FILES ['myfile1'] ['type'] ;
$array_last1 = explode("." ,$myfile1_name) ;
$c1 =count ($array_last1) - 1 ;
$lastname1 = strtolower ($array_last1 [$c1] ) ;
if ($myfile1<>"") {
if ($lastname1 =="doc" or $lastname1 =="docx" or $lastname1 =="rar" or $lastname1 =="pdf" or $lastname1 =="xls" or $lastname1 =="xlsx" or $lastname1 =="zip" or $lastname1 =="jpg" or $lastname1 =="gif" or $lastname1 =="png" ) {
$upfile1 = "" ;
}else {
$upfile1 = "-ไม่อนุญาตให้ทำการแนบไฟล์ $myfile1_name<BR> " ;
}
If ($myfile1_size>$sizelimit) {
$sizelimit1 = "-ไฟล์ $myfile1_name มีขนาดใหญ่กว่าที่กำหนด<BR>" ;
}else {
$sizelimit1 = "" ;
}
}
####
$myfile2 = $_FILES ['myfile2'] ['tmp_name'] ;
$myfile2_name = $_FILES ['myfile2'] ['name'] ;
$myfile2_size = $_FILES ['myfile2'] ['size'] ;
$myfile2_type = $_FILES ['myfile2'] ['type'] ;
$array_last2 = explode("." ,$myfile2_name) ;
$c2 =count ($array_last2) - 1 ;
$lastname2 = strtolower ($array_last2 [$c2] ) ;
if ($myfile2<>"") {
if ($lastname2 =="doc" or $lastname2 =="docx" or $lastname2 =="rar" or $lastname2 =="pdf" or $lastname2 =="xls" or $lastname2 =="xlsx" or $lastname2 =="zip" or $lastname2 =="jpg" or $lastname2 =="gif" or $lastname2 =="png") {
$upfile2 = "" ;
}else {
$upfile2 = "-ไม่อนุญาตให้ทำการแนบไฟล์ $myfile2_name<BR> " ;
}
If ($myfile2_size>$sizelimit) {
$sizelimit2 = "-ไฟล์ $myfile2_name มีขนาดใหญ่กว่าที่กำหนด<BR>" ;
}else {
$sizelimit2 = "" ;
}
}
####
$myfile3 = $_FILES ['myfile3'] ['tmp_name'] ;
$myfile3_name = $_FILES ['myfile3'] ['name'] ;
$myfile3_size = $_FILES ['myfile3'] ['size'] ;
$myfile3_type = $_FILES ['myfile3'] ['type'] ;
$array_last3 = explode("." ,$myfile3_name) ;
$c3 =count ($array_last3) - 1 ;
$lastname3 = strtolower ($array_last3 [$c3] ) ;
if ($myfile3<>"") {
if ($lastname3 =="doc" or $lastname3 =="docx" or $lastname3 =="rar" or $lastname3 =="pdf" or $lastname3 =="xls" or $lastname3 =="xlsx" or $lastname3 =="zip" or $lastname3 =="jpg" or $lastname3 =="gif" or $lastname3 =="png") {
$upfile3 = "" ;
}else {
$upfile3 = "-ไม่อนุญาตให้ทำการแนบไฟล์ $myfile3_name <BR>" ;
}
If ($myfile3_size>$sizelimit) {
$sizelimit3 = "-ไฟล์ $myfile3_name มีขนาดใหญ่กว่าที่กำหนด<BR>" ;
}else {
$sizelimit3 = "" ;
}
}
####
$myfile4 = $_FILES ['myfile4'] ['tmp_name'] ;
$myfile4_name = $_FILES ['myfile4'] ['name'] ;
$myfile4_size = $_FILES ['myfile4'] ['size'] ;
$myfile4_type = $_FILES ['myfile4'] ['type'] ;
$array_last4 = explode("." ,$myfile4_name) ;
$c4 =count ($array_last4) - 1 ;
$lastname4 = strtolower ($array_last4 [$c4] ) ;
if ($myfile4<>"") {
if ($lastname4 =="doc" or $lastname4 =="docx" or $lastname4 =="rar" or $lastname4 =="pdf" or $lastname4 =="xls" or $lastname4 =="xlsx" or $lastname4 =="zip" or $lastname4 =="jpg" or $lastname4 =="gif" or $lastname4 =="png") {
$upfile4 = "" ;
}else {
$upfile4 = "-ไม่อนุญาตให้ทำการแนบไฟล์ $myfile4_name<BR> " ;
}
If ($myfile4_size>$sizelimit) {
$sizelimit4 = "-ไฟล์ $myfile4_name มีขนาดใหญ่กว่าที่กำหนด<BR>" ;
}else {
$sizelimit4 = "" ;
}
}
####
$myfile5 = $_FILES ['myfile5'] ['tmp_name'] ;
$myfile5_name = $_FILES ['myfile5'] ['name'] ;
$myfile5_size = $_FILES ['myfile5'] ['size'] ;
$myfile5_type = $_FILES ['myfile5'] ['type'] ;
$array_last5 = explode("." ,$myfile5_name) ;
$c5 =count ($array_last5) - 1 ;
$lastname5 = strtolower ($array_last5 [$c5] ) ;
if ($myfile5<>"") {
if ($lastname5 =="doc" or $lastname5 =="docx" or $lastname5 =="rar" or $lastname5 =="pdf" or $lastname5 =="xls" or $lastname5 =="xlsx" or $lastname5 =="zip" or $lastname5 =="jpg" or $lastname5 =="gif" or $lastname5 =="png") {
$upfile5 = "" ;
}else {
$upfile5 = "-ไม่อนุญาตให้ทำการแนบไฟล์ $myfile5_name<BR> " ;
}
If ($myfile5_size>$sizelimit) {
$sizelimit5 = "-ไฟล์ $myfile5_name มีขนาดใหญ่กว่าที่กำหนด<BR>" ;
}else {
$sizelimit5 = "" ;
}
}
####
////
if($_POST['sendto']=="" || $_POST['subject']=="" ||$_POST['detail'] ==""){
echo "<CENTER><font size=\"2\" color=\"#008000\">กรุณากรอกข้อมูลให้ครบ<br><br>";
echo "<input type=\"button\" value=\"แก้ไขข้อมูล\" onClick=\"javascript:history.go(-1)\" ></CENTER>" ;
exit();
} #จบ
// check file size file name
if ($upfile1<> "" || $sizelimit1<> "" || $upfile2<> "" || $sizelimit2<> "" || $upfile3<> "" || $sizelimit3<> "" || $upfile4<> "" || $sizelimit4<> "" || $upfile5<> "" || $sizelimit5<> "") {
echo "<B><FONT SIZE=2 COLOR=#990000>มีข้อผิดพลาดเกี่ยวกับไฟล์ของคุณ ดังรายละเอียด</FONT></B><BR>" ;
echo "<FONT SIZE=2 COLOR=#990099>" ;
echo $upfile1 ;
echo $sizelimit1 ;
echo $upfile2 ;
echo $sizelimit2 ;
echo $upfile3 ;
echo $sizelimit3 ;
echo $upfile4 ;
echo $sizelimit4 ;
echo $upfile5 ;
echo $sizelimit5 ;
echo "</FONT>" ;
echo " <input type=\"button\" value=\" แก้ไข \" onClick=\"javascript:history.go(-1)\" ></CENTER>" ;
exit () ;
}
//ตรวจสอบว่ามีผู้รับหรือยัง
$sql_send_num = mysqli_query($connect,"SELECT * FROM mail_sendto_answer WHERE ref_id='$_POST[ref_id]' ") ;
$send_num = mysqli_num_rows ($sql_send_num) ;
if ($send_num==0 and $_POST['sendto']!='all') {
echo "<div align='center'>";
echo "<B><FONT SIZE=2 COLOR=#990000>ยังไม่ได้ระบุผู้รับจดหมาย</FONT></B><BR><BR>" ;
echo " <input type=\"button\" value=\" แก้ไข \" onClick=\"javascript:history.go(-1)\" ></CENTER>" ;
echo "</div>";
exit () ;
}
$day_now=date("Y-m-d H:i:s");
//ตรวจสอบ ref_id
if(!isset($_POST['ref_id'])){
echo "<script>alert('มีข้อผิดพลาดเกี่ยวกับเลขอ้างอิงในระบบ ยกเลิกการเขียนจดหมายในครั้งนี้ กรุณาเขียนใหม่อีกครั้ง'); document.location.href='?option=mail&task=main/send&index=1';</script>";
exit();
}
if($_POST['ref_id']==""){
echo "<script>alert('มีข้อผิดพลาดเกี่ยวกับเลขอ้างอิงในระบบ ยกเลิกการเขียนจดหมายในครั้งนี้ กรุณาเขียนใหม่อีกครั้ง'); document.location.href='?option=mail&task=main/send&index=1';</script>";
exit();
}
$sql = "insert into mail_main (sender, subject, detail, ref_id, send_date) values ('$user', '$_POST[subject]','$_POST[detail]','$_POST[ref_id]','$day_now')";
$dbquery = mysqli_query($connect,$sql);
if ($myfile1<>"" ) {
$myfile1name=$_POST['ref_id']."_1.".$lastname1 ;
copy ($myfile1, "modules/mail/upload_files/".$myfile1name) ;
$sql = "insert into mail_filebook (ref_id, file_name, file_des) values ('$_POST[ref_id]','$myfile1name','$dfile1')";
$dbquery = mysqli_query($connect,$sql);
unlink ($myfile1) ;
}
if ($myfile2<>"") {
$myfile2name=$_POST['ref_id']."_2.".$lastname2 ;
copy ($myfile2, "modules/mail/upload_files/".$myfile2name) ;
$sql = "insert into mail_filebook (ref_id, file_name, file_des) values ('$_POST[ref_id]','$myfile2name','$dfile2')";
$dbquery = mysqli_query($connect,$sql);
unlink ($myfile2) ;
}
if ($myfile3<>"") {
$myfile3name=$_POST['ref_id']."_3.".$lastname3 ;
copy ($myfile3, "modules/mail/upload_files/".$myfile3name) ;
$sql = "insert into mail_filebook (ref_id, file_name, file_des) values ('$_POST[ref_id]','$myfile3name','$dfile3')";
$dbquery = mysqli_query($connect,$sql);
unlink ($myfile3) ;
}
if ($myfile4<>"") {
$myfile4name=$_POST['ref_id']."_4.".$lastname4 ;
copy ($myfile4, "modules/mail/upload_files/".$myfile4name) ;
$sql = "insert into mail_filebook (ref_id, file_name, file_des) values ('$_POST[ref_id]','$myfile4name','$dfile4')";
$dbquery = mysqli_query($connect,$sql);
unlink ($myfile4) ;
}
if ($myfile5<>"") {
$myfile5name=$_POST['ref_id']."_5.".$lastname5 ;
copy ($myfile5, "modules/mail/upload_files/".$myfile5name) ;
$sql = "insert into mail_filebook (ref_id, file_name, file_des) values ('$_POST[ref_id]','$myfile5name','$dfile5')";
$dbquery = mysqli_query($connect,$sql);
unlink ($myfile5) ;
}
if($_POST['sendto']=='all') {
$sql_sendto = "select person_id from person_main where status='0' and person_id!='$user' ";
$dbquery_sendto = mysqli_query($connect,$sql_sendto);
While ($result_sendto = mysqli_fetch_array($dbquery_sendto)){
$sql= "insert into mail_sendto_answer (ref_id, send_to, answer_time) values ('$_POST[ref_id]','$result_sendto[person_id]','$day_now')";
$dbquery = mysqli_query($connect,$sql);
}
}
} //end index4
if ($index==7){
if(($name_search=="") and ($person_id=="")){
$return_index="";
}
else{
$return_index=8;
}
echo "<Br>";
echo "<Table align='center' width='700' Border='0'>";
echo "<Tr ><Td align='right'><INPUT TYPE='button' name='smb' class='btn btn-warning' value='<<กลับหน้าก่อน' onclick='location.href=\"?option=mail&task=main/send&page=$page&name_search=$name_search&person_id=$person_id&return_index=$return_index\"'></Td></Tr>";
echo "</table>";
$sql = "select * from mail_main where ms_id='$_GET[id]' ";
$dbquery = mysqli_query($connect,$sql);
$result = mysqli_fetch_array($dbquery);
$id=$result['id'];
$ref_id=$result['ref_id'];
$ref_id_mail =$result['ref_id'];
$detail=$result['detail'];
$send_date=$result['send_date'];
echo "<table border='1' width='50%' id='table1' style='border-collapse: collapse' bordercolor='#C0C0C0' align='center'>";
echo "<tr bgcolor='#0000FF'>";
echo "<td colspan='2' height='23' align='left'><font size='2' color='#FFFFFF'> รายละเอียดของจดหมาย</font></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ถึง </font></span></td>";
echo "<td align='left'>";
echo "<div align='left'><Select name='person_sended' size='1'>";
$sql_name = "select * from mail_sendto_answer left join person_main on mail_sendto_answer.send_to=person_main.person_id where mail_sendto_answer.ref_id='$ref_id' order by person_main.name";
$dbquery_name = mysqli_query($connect,$sql_name);
$M=1;
while ($result_name=mysqli_fetch_array($dbquery_name)) {
$send_to=$result_name['send_to'];
$prename=$result_name['prename'];
$name= $result_name['name'];
$surname = $result_name['surname'];
//กรณีโรงเรียน
if($name==""){
$sql_sch= "select * from person_sch_main where person_id='$send_to'";
$dbquery_sch= mysqli_query($connect,$sql_sch);
$result_sch=mysqli_fetch_array($dbquery_sch);
$prename=$result_sch['prename'];
$name= $result_sch['name'];
$surname = $result_sch['surname'];
}
$full_name="$prename$name $surname";
echo "<option value =''>$M.$full_name</option>" ;
//echo $M.$full_name." ";
$M++;
}
echo "</select></div>";
echo "</td></tr>";
echo "<tr>";
echo "<td width='94' align='right'><span lang='th'><font size='2' color='#0000FF'>เรื่อง </font></span></td>";
echo "<td align='left'> <input type='text' name='subject' size='76' style='background-color: #E5E5FF' value='$result[subject]' readonly> </td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right' height='47'><span lang='th'><font size='2' color='#0000FF'>ข้อความ </font></span></td>";
echo "<td height='47' align='left'> <textarea rows='10' name='detail' cols='55' style='background-color: #E5E5FF' readonly>$result[detail]</textarea></td>";
echo "</tr>";
echo "<tr>";
echo "<td width='94' align='right'><font size='2' color='#0000FF'>ไฟล์ </font></span></td>";
echo "<td align='left'>";
$query_file=mysqli_query($connect,"SELECT * FROM mail_filebook WHERE ref_id='$ref_id' ") ;
$M=1;
While ($result_file = mysqli_fetch_array($query_file)){
echo " <a href=modules/mail/upload_files/$result_file[file_name] target='_blank'>$M.$result_file[file_des]</a><br>";
$M++;
}
echo "</td></tr>";
echo "</Table>";
//แสดงความเห็น
$sql = "SELECT
mail_comment.id,
mail_comment.ref_id,
mail_comment.person_id,
mail_comment.comment_txt,
mail_comment.time_up,
person_main.prename,
person_main.`name`,
person_main.surname,
person_main.person_id,
person_position.position_name
FROM
mail_comment
INNER JOIN person_main ON mail_comment.person_id = person_main.person_id
LEFT JOIN person_position ON person_main.position_code = person_position.position_code
WHERE
mail_comment.ref_id = '$ref_id_mail'
ORDER BY
mail_comment.id ASC";
$dbquery = mysqli_query($connect,$sql);
$result = mysqli_fetch_array($dbquery);
$total = mysqli_num_rows($dbquery);
$i = 1;
$ms_id = (get_magic_quotes_gpc()) ? $_GET["id"] : addslashes($_GET["id"]);
?>
<?php if($total > 0){ //แสดงความเห็นถ้ามี ?><br />
<table width="100%" border="0" cellpadding="0" cellspacing="0" align="center">
<tr>
<td bgcolor="#669966" align="center" height="20"><strong><font color="#FFFFFF"><font size="2">ความเห็น</font></font></strong></td>
</tr>
<tr>
<td><?php do { ?>
<br />
<table width="70%" border="0" align="center" cellpadding="0" cellspacing="0">
<tr>
<td bgcolor="#E9E9E9"><span class="style2"><font size="2"><strong><A HREF="?option=mail&task=main/send&index=7&p=del&id_mail=<?php echo $ms_id?>&id_commet=<?php echo $result['id'];?>" title="คลิกเพื่อลบ" onClick="return confirm ('ต้องการลบ : ความเห็น ?')"><img src="images/drop.png" width="16" height="16" /></A> ความเห็นที่ <?php echo $i++?></strong> : <?php echo $result['comment_txt'];?> <strong>โดย</strong> : <?php echo $result['prename'];?><?php echo $result['name'];?> <?php echo $result['surname'];?> <?php echo $result['position_name'];?> [<?php echo $result['time_up'];?> น.]</font></span></td>
</tr>
</table>
<?php } while ($result = mysqli_fetch_assoc($dbquery)); ?></td>
</tr>
</table>
<br /><?php } //ความเห็น ?>
<?php if($total == 0){ //ไม่มีความเห็น ?>
<center><br /> -ยังไม่มีความเห็น-</center>
<?php } //ความเห็น ?>
<table width="100%" border="0">
<tr>
<td colspan="3" bgcolor="#FF9966" align="center"><strong><font color="#FFFFFF"><font size="2"> ลงความเห็น</font></font></strong></td>
</tr>
<tr>
<td colspan="3" align="center">
<?php
$p = (get_magic_quotes_gpc()) ? $_GET["p"] : addslashes($_GET["p"]);
$ms_id = (get_magic_quotes_gpc()) ? $_GET["id"] : addslashes($_GET["id"]);
?>
<form id="form1" name="form1" method="post" action="?option=mail&task=main/send&index=7&id=<?php echo $ms_id?>&p=save">
<textarea name="comment_txt" id="comment_txt" cols="80" rows="5"></textarea>
<input name="ref_id" type="hidden" id="ref_id" value="<?php echo $ref_id?>" size="50" />
<input name="person_id" type="hidden" id="person_id" value="<?php echo $user?>" />
<input name="ms_id" type="hidden" id="ms_id" value="<?php echo $ms_id?>" />
<br />
<br />
<input type="submit" name="button" id="button" class='btn btn-success' value="บันทึกความเห็น" />
</form>
<?php
if($p == "save"){ //บันทึก
$id_mail = $_POST['ms_id'];
$person_id = $_POST['person_id'];
$ref_id = $_POST['ref_id'];
$comment_txt = $_POST['comment_txt'];
//ตรวจสอบค่าว่าง
if ($person_id =="") {
echo "<center><h2>ไม่กรอกข้อมูล ผู้ลงความเห็น</h2> <br><input type=\"button\" value=\"กลับไปแก้ไข\" onClick=\"javascript:history.go(-1)\" ></center>" ;
exit () ;
}
if ($ref_id =="") {
echo "<center><h2>ไม่กรอกข้อมูล เลขอ้างอิง</h2> <br><input type=\"button\" value=\"กลับไปแก้ไข\" onClick=\"javascript:history.go(-1)\" ></center>" ;
exit () ;
}
if ($comment_txt =="") {
echo "<center><h2>ไม่กรอกข้อมูล ยังไม่พิมพ์ความเห็น</h2> <br><input type=\"button\" value=\"กลับไปแก้ไข\" onClick=\"javascript:history.go(-1)\" ></center>" ;
exit () ;
}
if ($person_id > "" and $comment_txt > "" and $ref_id > "") {
$sql2 = "insert into mail_comment (ref_id,person_id,comment_txt) values ('$ref_id','$person_id','$comment_txt')";
$dbquery2 = mysqli_query($connect,$sql2);
?>
<meta http-equiv="refresh" content="0;url=?option=mail&task=main/send&index=7&id=<?php echo $id_mail?>">
<?php
}else{
echo" <center><h2>บันทึกข้อมูลไม่สำเร็จ</h2> <br> <input type=\"button\" value=\"กลับหน้าหลัก\" onClick=\"window.location='?option=mail&task=main/send&index=7&id=$id_mail'\"></center> ";
}
} //end บันทึก
if($p == "del"){ //ลบ
$id_mail = (get_magic_quotes_gpc()) ? $_GET["id_mail"] : addslashes($_GET["id_mail"]);
$id_commet = (get_magic_quotes_gpc()) ? $_GET["id_commet"] : addslashes($_GET["id_commet"]);
//ตรวจสอบค่าว่าง
if ($id_commet > ""){
$sql2 = "DELETE FROM mail_comment WHERE id=$id_commet and person_id=$user";
$dbquery2 = mysqli_query($connect,$sql2);
//echo" <center><h2>ลบเรียบร้อย</h2> <br> <input type=\"button\" value=\"กลับหน้าหลัก\" onClick=\"window.location='?option=mail&task=main/send&index=7&id=$id_mail'\"></center> ";
?>
<meta http-equiv="refresh" content="0;url=?option=mail&task=main/send&index=7&id=<?php echo $id_mail?>">
<?php
}else{
echo" <center><h2>ลบข้อมูลไม่สำเร็จ</h2> <br> <input type=\"button\" value=\"กลับหน้าหลัก\" onClick=\"window.location='?option=mail&task=main/send&index=7&id=$id_mail\"></center> ";
}
} //end ลบ
?>
</td>
</tr>
</table>
<?php
} //endindex
?>
<?php
//ส่วนแสดงผล
if(!(($index==1) or ($index==2) or ($index==7))){
if(isset($_REQUEST['return_index'])==8){
$index=8;
}
//ส่วนของการแยกหน้า
if($switch_index==1){
$person_id="";
}
if($switch_index==2){
$name_search="";
}
if($index==8 and $name_search!=""){
$sql="select * from mail_main where sender='$user' and subject like '%$name_search%' ";
}
else if($index==8 and $person_id!=""){
$sql="select * from mail_main left join mail_sendto_answer on mail_main.ref_id=mail_sendto_answer.ref_id where mail_main.sender='$user' and mail_sendto_answer.send_to='$person_id' order by ms_id ";
}
else{
$sql="select ms_id from mail_main where sender='$user' ";
}
$dbquery = mysqli_query($connect,$sql);
$num_rows = mysqli_num_rows($dbquery );
$pagelen=20; // 1_กำหนดแถวต่อหน้า
$url_link="option=mail&task=main/send&index=$index&name_search=$name_search&person_id=$person_id"; // 2_กำหนดลิงค์
$totalpages=ceil($num_rows/$pagelen);
if(!isset($_REQUEST['page'])){
$_REQUEST['page']="";
}
if($_REQUEST['page']==""){
$page=$totalpages;
if($page<2){
$page=1;
}
}
else{
if($totalpages<$_REQUEST['page']){
$page=$totalpages;
if($page<1){
$page=1;
}
}
else{
$page=$_REQUEST['page'];
}
}
$start=($page-1)*$pagelen;
if(($totalpages>1) and ($totalpages<16)){
echo "<div align=center>";
echo "หน้า ";
for($i=1; $i<=$totalpages; $i++) {
if($i==$page){
echo "[<b><font size=+1 color=#990000>$i</font></b>]";
}
else {
echo "<a href=$PHP_SELF?$url_link&page=$i>[$i]</a>";
}
}
echo "</div>";
}
if($totalpages>15){
if($page <=8){
$e_page=15;
$s_page=1;
}
if($page>8){
if($totalpages-$page>=7){
$e_page=$page+7;
$s_page=$page-7;
}
else{
$e_page=$totalpages;
$s_page=$totalpages-15;
}
}
echo "<div align=center>";
if($page!=1){
$f_page1=$page-1;
echo "<<a href=$PHP_SELF?$url_link&page=1>หน้าแรก </a>";
echo "<<<a href=$PHP_SELF?$url_link&page=$f_page1>หน้าก่อน </a>";
}
else {
echo "หน้า ";
}
for($i=$s_page; $i<=$e_page; $i++){
if($i==$page){
echo "[<b><font size=+1 color=#990000>$i</font></b>]";
}
else {
echo "<a href=$PHP_SELF?$url_link&page=$i>[$i]</a>";
}
}
if($page<$totalpages) {
$f_page2=$page+1;
echo "<a href=$PHP_SELF?$url_link&page=$f_page2> หน้าถัดไป</a>>>";
echo "<a href=$PHP_SELF?$url_link&page=$totalpages> หน้าสุดท้าย</a>>";
}
echo " <select onchange=\"location.href=this.options[this.selectedIndex].value;\" size=\"1\" name=\"select\">";
echo "<option value=\"\">หน้า</option>";
for($p=1;$p<=$totalpages;$p++){
echo "<option value=\"?$url_link&page=$p\">$p</option>";
}
echo "</select>";
echo "</div>";
}
//จบแยกหน้า
////////////////////ค้นหาบุคคล
echo "<form id='frm1' name='frm1'>";
echo "<table width='85%' align='center'><tr><Td align='left'><INPUT TYPE='button' name='smb' class='btn btn-success' value=' + ส่งจดหมายเวียน' onclick='location.href=\"?option=mail&task=main/send&index=1\"'></Td><td align='right'>";
echo "ค้นหาด้วยชื่อเรื่อง ";
if($index==8){
echo "<Input Type='Text' Name='name_search' value='$name_search' >";
}
else{
echo "<Input Type='Text' Name='name_search' Size='30'>";
}
echo " <INPUT TYPE='button' name='smb' class='btn btn-info' value='ค้นหา' onclick='goto_display(1)'>";
echo "   ";
echo "ค้นหาด้วยชื่อผู้รับ(เจ้าหน้าที่สพท) ";
echo "<Select name='person_id' size='1'>";
echo '<option value ="" >เลือก</option>' ;
$sql = "select * from person_main where status='0' order by name";
$dbquery = mysqli_query($connect,$sql);
While ($result = mysqli_fetch_array($dbquery)){
if($person_id==""){
echo "<option value=$result[person_id]>$result[name] $result[surname]</option>";
}
else{
if($person_id==$result['person_id']){
echo "<option value=$result[person_id] selected>$result[name] $result[surname]</option>";
}
else{
echo "<option value=$result[person_id]>$result[name] $result[surname]</option>";
}
}
}
echo "</select>";
echo " <INPUT TYPE='button' name='smb' class='btn btn-success' value='เลือก' onclick='goto_display(2)' class='entrybutton'>";
echo "</td></tr></table>";
echo "</form>";
//////////////////////////////////////////
if($index==8 and $name_search!=""){
$sql="select * from mail_main where sender='$user' and subject like '%$name_search%' order by ms_id limit $start,$pagelen";
}
else if($index==8 and $person_id!=""){
$sql="select * from mail_main left join mail_sendto_answer on mail_main.ref_id=mail_sendto_answer.ref_id where mail_main.sender='$user' and mail_sendto_answer.send_to='$person_id' order by ms_id limit $start,$pagelen";
}else{
$sql="select * from mail_main where sender='$user' order by ms_id limit $start,$pagelen";
}
$dbquery = mysqli_query($connect,$sql);
echo "<table width='85%' border='1' align=center style='border-collapse: collapse'>";
echo "<Tr bgcolor='#99ccff' align='center'><Td width='60'>เลขที่</Td><Td width='20%'>วันที่ส่ง</Td><Td>เรื่อง</Td><Td width='40'>File</Td><Td width='40'>ส่งถึง</Td><Td width='40'>ลบ</Td></Tr>";
$N=(($page-1)*$pagelen)+1; //*เกี่ยวข้องกับการแยกหน้า
$M=1;
While ($result = mysqli_fetch_array($dbquery)){
$id = $result['ms_id'];
$subject = $result['subject'];
$ref_id = $result['ref_id'];
$rec_date = $result['send_date'];
if(($M%2) == 0)
$color="#E5E5FF";
else $color="#FFFFFF";
echo "<Tr bgcolor='$color'><Td valign='top' align='center'>$id</Td><Td valign='top' align='left'>";
echo thai_date_4($rec_date);
echo "</Td><Td align='top' align='left'><a href=?option=mail&task=main/send&index=7&id=$id&page=$page&name_search=$name_search&person_id=$person_id>$subject</a></Td>";
$query_file=mysqli_query($connect,"SELECT * FROM mail_filebook WHERE ref_id='$ref_id' ") ;
$num_file=mysqli_num_rows($query_file);
if($num_file>=1){
echo "<td align='center'><img src=images/b_bookmark.png border='0' alt='ไฟล์'></td>";
}
else{
echo "<td></td>";
}
echo "<td align='center'><a href='modules/mail/main/sendto_show.php?ref_id=$ref_id' target='_blank'><img src=images/admin/user.gif border='0' alt='ส่งถึง'></a></td>";
echo "<td align='center'><a href=?option=mail&task=main/send&index=2&id=$id&page=$page><img src=images/drop.png border='0' alt='ลบ'></a></td>";
echo "</Tr>";
$M++;
$N++; //*เกี่ยวข้องกับการแยกหน้า
}
echo "</Table>";
}
?>
<script>
function goto_url(val){
if(val==0){
callfrm("?option=mail&task=main/send"); // page ย้อนกลับ
}else if(val==1){
var v2 = document.frm1.subject.value;
var v3 = document.frm1.detail.value;
var file1 = document.frm1.myfile1.value;
var file2 = document.frm1.myfile2.value;
var file3 = document.frm1.myfile3.value;
var file4 = document.frm1.myfile4.value;
var file5 = document.frm1.myfile5.value;
var vdfile1 = document.frm1.dfile1.value;
var vdfile2 = document.frm1.dfile2.value;
var vdfile3 = document.frm1.dfile3.value;
var vdfile4 = document.frm1.dfile4.value;
var vdfile5 = document.frm1.dfile5.value;
if (v2.length==0)
{
alert("กรุณากรอกชื่อเรื่อง");
document.frm1.subject.focus();
}
else if (v3.length==0)
{
alert("กรุณากรอกรายละเอียด");
document.frm1.detail.focus();
}
else if ((file1!="") && (vdfile1==""))
{
alert("กรุณากรอก คำอธิบายไฟล์");
document.frm1.dfile1.focus();
}
else if ((file2 !="") && (vdfile2==""))
{
alert("กรุณากรอก คำอธิบายไฟล์");
document.frm1.dfile2.focus();
}
else if ((file3!="") && (vdfile3==""))
{
alert("กรุณากรอก คำอธิบายไฟล์");
document.frm1.dfile3.focus();
}
else if ((file4 !="") && (vdfile4==""))
{
alert("กรุณากรอก คำอธิบายไฟล์");
document.frm1.dfile4.focus();
}
else if ((file5!="") && (vdfile5==""))
{
alert("กรุณากรอก คำอธิบายไฟล์");
document.frm1.dfile5.focus();
}
else{
callfrm("?option=mail&task=main/send&index=4"); //page ประมวลผล
}
}
}
function goto_display(val){
if(val==1){
callfrm("?option=mail&task=main/send&index=8&switch_index=1");
}
else if(val==2){
callfrm("?option=mail&task=main/send&index=8&switch_index=2");
}
}
</script>