R E D

NAME	SIZE	PERMISSION
Controller.php	8.92 KB	-rwxr-xr-x
SaveCouseManage.php	2.58 KB	-rwxr-xr-x
couseFetch.php	3.72 KB	-rwxr-xr-x
couseSelect.php	3.52 KB	-rwxr-xr-x
saveControl.php	13.35 KB	-rwxr-xr-x
save_couse.php	2.01 KB	-rwxr-xr-x

Code Editor : saveControl.php

<?php
try {

require_once("../../server/server.php");
    if ($_SERVER["REQUEST_METHOD"] == "POST") {
        // var_dump($_POST); exit;
        $CategoryId = ($_POST['CategoryId']) ? $_POST['CategoryId'] : null;
        $Unitdata = json_decode($_POST["Unitdata"], true);
        $UnitID = isset($_POST['UnitID']) ? $_GET['UnitID'] : null; 
        $UnitImgTitleOri = isset($_POST['UnitImgTitleOri']) ? $_POST['UnitImgTitleOri'] : null;
        $UnitValueOri = isset($_POST['UnitValueOri']) ? $_POST['UnitValueOri'] : null;
        // $db->query("TRUNCATE TABLE couse");
        // $db->query("TRUNCATE TABLE dataunit");
        // $db->query("TRUNCATE TABLE unit");
        // $db->query("TRUNCATE TABLE form");
        $Unitdetail = $_POST["Unitdetail"];
        $Unitname = $_POST["Unitname"];
        // $LinkYoutube = ($_POST['LinkYoutube']) ? $_POST['LinkYoutube'] : null;
        // $LinkPdf = ($_POST['LinkPdf']) ? $_POST['LinkPdf'] : null;
        $fileType = $_POST["fileType"];
        $fileTypeMedia = $_POST["fileTypeMedia"];
        $status = $_POST["status"];
        $AuthToken = $_POST["AuthToken"];
        if ($status == false) {
            $status = 405;
        } else {
            $status = 200;
        }

$id = $_SESSION["lms-ID"];
        $date = date("Y-m-d H:i:");
        $stmp = $db->prepare("SELECT ID, AuthToken from user where ID = '$id'");
        if ($stmp->execute()) {
            $data = $stmp->fetch(PDO::FETCH_ASSOC);
            if (password_verify($AuthToken, $data["AuthToken"])) {

if(empty($UnitID)){
                    $query = $db->prepare("INSERT INTO couse (userID,Unitname,detail,filetitle,detailType,value,date,rate,see,comment,status, category_id) value ('$id','$Unitname','$Unitdetail','','','','$date','0','0','0','$status', '$CategoryId')");
                } else{
                    $query = $db->prepare("UPDATE `couse` SET `Unitname` = '$Unitname', `detail` = '$Unitdetail', `detailType` = '$fileType', `status` = '$status', `category_id` = '$CategoryId' WHERE `ID` = $UnitID");
                }

if ($query->execute()) {
                    $allow = array("png", "jpg", "webp", "jpeg");
                    if(empty($UnitID)){
                        $couseID = $db->lastInsertId();
                    } else {
                        $couseID = $UnitID;
                    }
                    define('KB', 1024);
                    define('MB', 1048576);
                    define('GB', 1073741824);
                    define('TB', 1099511627776);
                    if (isset($_FILES["file"])) {
                        $file = $_FILES["file"];
                        $ext = pathinfo($file["name"], PATHINFO_EXTENSION);
                        $newFiletitle = rand(0, microtime(true)) . "." . $ext;
                        if ($file["size"] < 15 * MB && in_array($ext, $allow)) {
                            move_uploaded_file($_FILES["file"]["tmp_name"], "../../file/users/couse/" . $newFiletitle);
                            $newFiletitle = "file/users/couse/" . $newFiletitle;
                            $upd = $db->query("UPDATE couse set filetitle = '$newFiletitle' WHERE ID = '$couseID'");
                        } else {
                            echo "out";
                        }
                    }
                    if (isset($_FILES["file-detail"])) {
                        $file = $_FILES["file-detail"];
                        $ext = pathinfo($file["name"], PATHINFO_EXTENSION);
                        $newFile = rand(0, microtime(true)) . "." . $ext;
                        if ($file["size"] < 15 * MB && in_array($ext, $allow)) {
                            move_uploaded_file($_FILES["file-detail"]["tmp_name"], "../../file/users/couse/" . $newFile);
                            $newFile = "file/users/couse/" . $newFile;
                            $upd = $db->query("UPDATE couse set value = '$newFile', detailType = '$fileType' WHERE ID = '$couseID'");
                        }
                    } else if (isset($_POST["file-detail"])) {
                        $val = $_POST["file-detail"];
                        $upd = $db->query("UPDATE couse set value = '$val', detailType = '$fileType' WHERE ID = '$couseID'");
                    }

////////////////////////////////////////////////////////////////////////
                    if (isset($_FILES["file-detail-media"])) {
                        $file = $_FILES["file-detail-media"];
                        $ext = pathinfo($file["name"], PATHINFO_EXTENSION);
                        $newFileMedia = rand(0, microtime(true)) . "." . $ext;
                        if ($file["size"] < 15 * MB && in_array($ext, $allow)) {
                            move_uploaded_file($_FILES["file-detail-media"]["tmp_name"], "../../file/users/couse/" . $newFileMedia);
                            $newFileMedia = "file/users/couse/" . $newFileMedia;
                            $upd = $db->query("UPDATE couse set value_media = '$newFileMedia', detail_type_media = '$fileTypeMedia' WHERE ID = '$couseID'");
                        }
                    } else if (isset($_POST["file-detail-media"])) {
                        $val = $_POST["file-detail-media"];
                        $upd = $db->query("UPDATE couse set value_media = '$val', detail_type_media = '$fileTypeMedia' WHERE ID = '$couseID'");
                    }

// unit add
                    // echo "<pre>";
                    // print_r($Unitdata);
                    // echo "</pre>";
                    if (is_array($Unitdata)) {
                        $lsn = array();
                        foreach ($Unitdata as $val) {
                            $lsn[] = array('name' => $val['BigUnitname'], 'couseID' => $couseID);
                            
                        }
                        $query = $db->prepare("INSERT INTO lesson (name,couseID) value (:name, :couseID)");
                        $lid = array();
                        foreach ($lsn as $key=>$row) {
                            if(!empty($row['name'])){
                                $query->execute($row);
                             $lid[$key] = $db->lastInsertId();
                            }
                        }  
                    }
                    
                    for ($i = 0; $i < count($Unitdata); $i++) {
                        $bigutname = $Unitdata[$i]["BigUnitname"];
                        //$sql1 = $db->query("INSERT INTO form (name) value ('$bigutname')");
                        for ($t = 0; $t < count($Unitdata[$i]["dataUnit"]); $t++) {
                            $data = $Unitdata[$i]["dataUnit"][$t];
                            if ($data["type"] == "unit" && !empty($data["Unitname"])) {
                                $see = $data["see"];
                                $skip = $data["skip"];
                                $end = $data["end"];
                                $video = $data["video"];
                                /*
                                $ebook = $data["ebook"];
                                if (isset($_FILES["pdf"])) {
                                    $pdf = $_FILES["pdf"];
                                    $ext = pathinfo($pdf["name"], PATHINFO_EXTENSION);
                                    $newFilePDF = rand(0, microtime(true)) . "." . $ext;
                                    if ($file["size"] < 15 * MB && in_array($ext, $allow)) {
                                        move_uploaded_file($_FILES["pdf"]["tmp_name"], "../../file/users/couse/" . $newFilePDF);
                                        $newFilePDF = "file/users/couse/" . $newFilePDF;
                                        // $upd = $db->query("UPDATE couse set filetitle = '$newFilePDF' WHERE ID = '$couseID'");
                                    } else {
                                        echo "out";
                                    }
                                }
                                */
                                $Unitname = $data["Unitname"];

if ($see == false) {
                                    $see = 405;
                                } else {
                                    $see = 200;
                                }
                                if ($end == false) {
                                    $end = 405;
                                } else {
                                    $end = 200;
                                }
                                if ($skip == false) {
                                    $skip = 405;
                                } else {
                                    $skip = 200;
                                }

$stmp = $db->query("SELECT role FROM unit ORDER BY role DESC limit 1")->fetch(PDO::FETCH_ASSOC);
                                if (count($stmp) == 0) {
                                    $sql1 = $db->query("INSERT INTO dataunit (name,video,see,skip,study) value ('$Unitname','$video','$see','$skip','$end')");// ;
                                    // $sql1 = $db->query("INSERT INTO dataunit (name,video,ebook,see,skip,study) value ('$Unitname','$video','$ebook','$see','$skip','$end')");// ;
                                    // $sql1 = $db->query("INSERT INTO dataunit (name,video,pdf,see,skip,study) value ('$Unitname','$video','$newFilePDF','$see','$skip','$end')");// ;
                                    $unitID = $db->lastInsertId();
                                    $sql2 = $db->query("INSERT INTO unit (couseID,lsnid,type,role,unitID) value ('$couseID',$lid[$i],'unit','0','$unitID')");
                                } else {
                                    $order = isset($stmp["order"]) + 1;
                                    $sql1 = $db->query("INSERT INTO dataunit (name,video,see,skip,study) value ('$Unitname','$video','$see','$skip','$end')");
                                    // $sql1 = $db->query("INSERT INTO dataunit (name,video,ebook,see,skip,study) value ('$Unitname','$video','$ebook','$see','$skip','$end')");
                                    // $sql1 = $db->query("INSERT INTO dataunit (name,video,pdf,see,skip,study) value ('$Unitname','$video','$newFilePDF','$see','$skip','$end')");
                                    $unitID = $db->lastInsertId();
                                    $sql2 = $db->query("INSERT INTO unit (couseID,lsnid,type,role,unitID) value ('$couseID',$lid[$i],'unit','$order','$unitID')");
                                }
                            } else {
                                $done = $data["done"];
                                $study = $data["study"];
                                $Unitname = $data["Unitname"];

if ($done == false) {
                                    $done = 405;
                                } else {
                                    $done = 200;
                                }
                                if ($study == false) {
                                    $study = 405;
                                } else {
                                    $study = 200;
                                }
                                $stmp = $db->query("SELECT role FROM unit ORDER BY role DESC limit 1")->fetch(PDO::FETCH_ASSOC);
                                if (count($stmp) == 0) {
                                    $sql1 = $db->query("INSERT INTO form (name,study,done,testID) value ('$Unitname','$study','$done','0')");
                                    $formID = $db->lastInsertId();
                                    $sql2 = $db->query("INSERT INTO unit (couseID,lsnid,type,role,unitID) value ('$couseID',$lid[$i],'test','0','$formID')");
                                } else {
                                    $sql1 = $db->query("INSERT INTO form (name,study,done,testID) value ('$Unitname','$study','$done','0')");
                                    $formID = $db->lastInsertId();
                                    $order = $stmp["order"] + 1;
                                    $sql2 = $db->query("INSERT INTO unit (couseID,lsnid,type,role,unitID) value ('$couseID',$lid[$i],'test','$order','$formID')");
                                }
                            }
                        }
                    }

http_response_code(200);
                    echo json_encode(array("status" => true, "message" => " Success!"));
                    exit;
                    
                } else {
                    http_response_code(405);
                    echo json_encode(array("status" => false, "message" => "Server Error!!"));
                    exit;
                }
            } else {
                http_response_code(405);
                echo json_encode(array("status" => false, "message" => " AuthToken Invalid!!"));
                exit;
            }
        } else {
            http_response_code(405);
            echo json_encode(array("status" => false, "message" => " Server Error!!"));
            exit;
        }
    } else {
        http_response_code(405);
        echo json_encode(array("status" => false, "message" => "Request method Not accept!!"));
        exit;
    }
} catch (Exception $e) {
    http_response_code(405);
    echo json_encode(array("status" => false, "message" => $e->getMessage()));
    // dev errot report
    // echo json_encode(array("status" => false, "message" => "เกิดข้อผิดพลาด!!")); 
    exit;
}

${this.title}

Code Editor : saveControl.php