116
Приложение. Листинги основных программных модулей
auth.php
<?php
session_start();
require "dbconnect.php";
if(isset($_POST['parol']))
{
$res=mysql_query("SELECT idu, status FROM user WHERE login='".$_POST['login']."'
AND password='".$_POST['password']."' AND udaluser=0");
if(mysql_num_rows($res))
{
while($prise_mas=mysql_fetch_row($res))
{
if ($prise_mas[1]==1)
{
$_SESSION['admin']="$prise_mas[0]";
Header ("Location: admin/zavnewadmin.php");
}
if ($prise_mas[1]==2)
{
$_SESSION['user']="$prise_mas[0]";
Header ("Location: zav.php");
}
if ($prise_mas[1]==3)
{
$_SESSION['disp']="$prise_mas[0]";
Header ("Location: disp/dispzav.php");
}
if ($prise_mas[1]==4)
{
117
$_SESSION['ispolnit']="$prise_mas[0]";
Header ("Location: isp/ispzav.php");
}
}
}
else
{ //такого пользователя нет
echo "<center><br><br>Введены неверные логин или пароль<br><br> <span><a
href='index.php'>Попробуйте еще раз</a></span> <br> или обратитесь к
администратору системы<br>
";
}
}
?>
dbconnect.php
<?php
$id_con=mysql_connect("localhost", "root", "")
or die("Невозможно соединиться с сервером");
mysql_query('SET NAMES cp1251');
mysql_select_db("ruselsez") or die("Невозможно выбрать БД");
?>
menu.php
<?php session_start();
?>
<head>
<meta http-equiv='content-type' content='text/html; charset=windows-1251' />
<title>
<?php include "name.php";
echo $title;
118
?>
</title>
<link rel="stylesheet" media="screen" type="text/css" href="css/style.css" />
<link rel='stylesheet' type='text/css' href='css/index.css' />
<link rel='stylesheet' type='text/css' href='css/menu.css' media="screen"/>
</head>
<body>
<br>
<center>
<div id='main' class='noifixpng'> </div>
<center>
<div id='headadmin'>
<div id='head-madmin'>
<div id='head-madmin'>
<table> <tr> <td width="60" >
<img src="../image/rusel.png" width="269" height="50"> </td>
<td width="60"> </td>
<td width="60"> </td>
<td width="44"> </td>
<td>
<br>Система технической поддержки
</td> </tr> </table>
</div>
</div>
</head>
<body>
<html>
<div id="menu">
<ul class="menu">
<li>
<a href='zav.php' class='c1'>Подать заявку</a>
119
<li>
<a href='spiszav.php' class='c1'>Заявки</a>
</li>
<li>
<a href='closzav.php' class='c1'> Архив </a>
<ul class="submenu">
<li><a href='closzav.php'>Закрытые заявки </a></li>
<li><a href='delzav.php'>Удаленные заявки</a></li>
</ul>
</li>
<li>
<a href='contact.php' class='c4'>Информация </a>
</li>
<li>
<a href='../index.php' class='c1'>Выход</a>
</li>
</div>
</body>
</html>
ispuser.php
<?php session_start();
<head>
<meta http-equiv='content-type' content='text/html; charset=windows-1251' />
<title><?php include "../name.php";
echo $title;
?>
</title>
<link rel="stylesheet" type="text/css" href="../style.css">
<script type="text/javascript" src="../js/jquery-ui-1.7.2.custom.min.js"></script>
120
<link rel="stylesheet" type="text/css" href="../css/style.css">
</head>
<body>
<?php include "menuisp.php"; ?>
<div id='content'>
<div id='content1'>
<br>
<br>
<?php
require "../dbconnect.php";
$res_id1=mysql_query("SELECT ido, nameo FROM `otdel` where delo=0")
or die(mysql_error());
$res_id2=mysql_query("SELECT idpk, namepk FROM `pk` where udalpk=0")
or die(mysql_error());
?>
<table width="100%" border="1" cellspacing="5" cellpadding="5">
<tr align="center">
<td valign="top" ><h3> Список пользователей </h3></td> <td valign="top">
</td>
</tr>
<tr class="line"> <td colspan="2"> </td> </tr> </table>
<?php
require "../dbconnect.php";
if(isset($_POST['search']))
{
if ($_POST['status']==5){
$res=mysql_query("SELECT idu, nameuser, iduserotd, status, password, login, nameo,
namepk FROM user, otdel, pk where udaluser=0 and iduserotd=ido and idpkuser=idpk and
iduserotd like ('%".$_POST['otdel']."%') and nameuser like ('%".$_POST['fio']."%')");
}
else {
121
$res=mysql_query("SELECT idu, nameuser, iduserotd, status, password, login, nameo,
namepk FROM user, otdel, pk where udaluser=0 and iduserotd=ido and idpkuser=idpk and
iduserotd like ('%".$_POST['otdel']."%')
and status like ('%".$_POST['status']."%') and nameuser like ('%".$_POST['fio']."%')");
}
$a=1;
while($res_id=mysql_fetch_row($res))
{
switch ($res_id[3]) {
case 1:
$title="Администратор";
break;
case 2:
$title="Пользователь";
break;
case 3:
$title="Диспетчер";
break;
case 4:
$title="Исполнитель";
break;
}
echo " <center> <table> <tr>
<td width='30' class='but1'> <b> $a </b> </td>
<td width='150' class='tz'> $res_id[6] </td>
<td width='200' class='tz'> $res_id[1] </td>
<td width='100' class='tz'> $title </td>
<td width='100' class='tz'> $res_id[7] </td>
</tr> </table>\n";
$a=$a+1;
}
122
}
else
{
$res=mysql_query("SELECT idu, nameuser, iduserotd, status, password, login, nameo,
namepk FROM user, otdel, pk where udaluser=0 and iduserotd=ido and idpkuser=idpk");
$a=1;
while($res_id=mysql_fetch_row($res))
{
switch ($res_id[3]) {
case 1:
$title="Администратор";
break;
case 2:
$title="Пользователь";
break;
case 3:
$title="Диспетчер";
break;
case 4:
$title="Исполнитель";
break;
}
echo " <center> <table> <tr>
<td width='30' class='but1'> <b> $a </b> </td>
<td width='150' class='tz'> $res_id[6] </td>
<td width='200' class='tz'> $res_id[1] </td>
<td width='100' class='tz'> $title </td>
<td width='100' class='tz'> $res_id[7] </td>
</tr> </table>\n";
$a=$a+1;
}
123
}
?>
</td>
<br><br>
</div>
</div>
<br>
<br>
</body>
</html>
adduser.php
<?php session_start();
?>
<head>
<meta http-equiv='content-type' content='text/html; charset=windows-1251' />
<title><?php include "../name.php";
echo $title;
?>
</title>
<link rel="stylesheet" type="text/css" href="../style.css">
<link rel="stylesheet" type="text/css" href="../css/style.css">
<script type="text/javascript">
hs.graphicsDir = '../js/highslide/graphics/';
hs.outlineType = 'rounded-white';
hs.wrapperClassName = 'draggable-header';
</script>
</head>
124
<body>
<?php include "menuadmin.php"; ?>
<div id='content'>
<div id='content1'>
<br>
<br>
<table width="100%" border="1" cellspacing="5" cellpadding="5">
<tr align="center">
<td valign="top" ><h3> Добавление сотрудников </h3></td> <td
valign="top">
</td>
</tr>
<tr class="line"> <td colspan="2"> </td> </tr> </table>
<?php
require "../dbconnect.php";
$res_id1=mysql_query("SELECT ido, nameo FROM `otdel` where delo=0")
or die(mysql_error());
$res_id2=mysql_query("SELECT idpk, namepk FROM `pk` where udalpk=0")
or die(mysql_error());
?>
<table align="center" cellspacing="2" cellpadding="2" border="0" bgcolor="white"
width="910">
<tr>
<td><center> </td>
<td bgcolor="ffffff" valign="top" >
125
<center> <table align="center" cellspacing="2" cellpadding="2"
border="0" bgcolor="ffffff">
<tr>
<form method="post" id="signup">
<td class="but1">Фамилия, имя и отчество</td>
<td class=" "> <input type="text" size="40" name="nameuser" value=""
class="required"
title="<p class=' '>Только русский алфавит</p>"></td>
<td class="tr">Русские буквы</td>
</tr>
<tr>
<td class="but1">Отдел</td>
<td class=" ">
<select name="iduserotd"><center>
<?php
while ($tip=mysql_fetch_row($res_id1))
{
echo "<option value='$tip[0]'>$tip[1]</option>\n";
}
?>
</select>
</td>
<td class="tr">Выбор отдела</td>
</tr>
<tr>
<td class="but1">Статус в системе</td>
<td class=" ">
<select name="status"><center>
<option value="2">Пользователь</option>