توضیحات برای این کدهای php
اینم سری دوم :
<?php
include 'include/config.php';
include 'function.php';
include 'include/jdf.php';
$Option = $_GET['option'];
iHeader();
Center1();
switch ($Option)
{
default:
echo 'Hello';
break;
case 'singup':
Hsingup();
break;
case 'singup_save':
$name = $_POST['name'];
$fname = $_POST['fname'];
$username = $_POST['username'];
$password = $_POST['password'];
$tel = $_POST['tel'];
$mail = $_POST['mail'];
$age = $_POST['age'];
$adrs = $_POST['adrs'];
$com = $_POST['com'];
if($name and $fname and $username and $password)
{
$query = "select * from users WHERE user='$username'";
$result = $db->query($query);
$num_result = $result->num_rows;
if($num_result)
{
alert("این نام کاربری در بانک اطلاعاتی وجود دارد.ثبت نام با یک نام کاربری برای ۲ نفر مقدور نیست");
Hsingup();
}else{
$query = "INSERT INTO `users` (
`id` ,
`name` ,
`fname` ,
`user` ,
`pass` ,
`tel` ,
`mail` ,
`age` ,
`address` ,
`comment`
)
VALUES (
'null', '$name', '$fname', '$username', '$password', '$tel', '$mail', '$age', '$adrs', '$com'
);
";
$result = $db->query($query);
if($result)
{
alert("ثبت نام با موفقیت به پایان رسید");
go_to('?');
}
}
}else{
alert("فیلد های مهم را پر کنید");
Hsingup();
}
break;
case 'login':
Hlogin();
break;
case 'login_check';
$username = $_POST['user'];
$password = $_POST['pass'];
$value = $_POST['value'];
switch ($value)
{
case '1':
$query = "select * from users where user='$username' and pass='$password';";
$result = $db->query($query);
$num_result = $result->num_rows;
if ($num_result)
{
$row = $result->fetch_assoc();
setcookie("login", True);
setcookie("ranklogin", 1);
setcookie("userid", $row['id']);
setcookie("fname", $row['fname']);
go_to('?');
}else{
alert("نام کاربری و کلمه عبور اشتباه است");
Hlogin();
}
break;
case '2':
$query = "select * from pezeshk where user='$username' and pass='$password';";
$result = $db->query($query);
$num_result = $result->num_rows;
if ($num_result)
{
$row = $result->fetch_assoc();
setcookie("login", True);
setcookie("ranklogin", 2);
setcookie("userid", $row['id']);
setcookie("fname", $row['fname']);
go_to('?');
}else{
alert("نام کاربری و کلمه عبور اشتباه است");
Hlogin();
}
break;
case '4':
$query = "select * from setting where useradmin='$username' and passadmin='$password';";
$result = $db->query($query);
$num_result = $result->num_rows;
if ($num_result)
{
$row = $result->fetch_assoc();
setcookie("login", True);
setcookie("ranklogin", 4);
setcookie("fname", "مدیریت");
go_to('?');
}else{
alert("نام کاربری و کلمه عبور اشتباه است");
Hlogin();
}
break;
}
break;
################################################## ###
case 'pmtoadmin':
if($_COOKIE['ranklogin'] == 1 or $_COOKIE['ranklogin'] == 2)
pmtoadmin();
else
exit('No Access !!!');
break;
case 'pmtoadmin_save':
$subject = $_POST['subject'];
$text = nl2br($_POST['text']);
$time = time();
$user = $_COOKIE['userid'];
$rank = $_COOKIE['ranklogin'];
if($subject and $text)
{
$query = "
INSERT INTO `adminpm` (
`id` ,
`date` ,
`title` ,
`text` ,
`read` ,
`userid` ,
`rank`
)
VALUES (
'null', '$time', '$subject', '$text', '0', '$user', '$rank'
);
";
$result = $db->query($query);
if($result)
{
alert("متن شما ارسال شد");
go_to('?option=pmtoadmin');
}
}
break;
################################################## ###
case 'rozekari':
if($_COOKIE['ranklogin'] != 2) exit('No Access !!!');
$user = $_COOKIE['userid'];
echo '<center><a href="?option=rozekari_add"><img border=0 src="images/time-add.png"></a><div>اضافه کردن زمان</div></center><hr>';
rozekari_list_title();
$query = "select * from kartbl where pezashk='$user'";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
rozekari_list($row['id'],$row['com'],$row['work'],$row['time']);
}
break;
case 'rozekari_add':
if($_COOKIE['ranklogin'] != 2) exit('No Access !!!');
rozekari_add();
break;
case 'rozekari_delete':
if($_COOKIE['ranklogin'] != 2) exit('No Access !!!');
$id = intval($_GET['id']);
$user = $_COOKIE['userid'];
if($id)
{
$query = "DELETE FROM `kartbl` WHERE id = '$id' and pezashk='$user'";
$result = $db->query($query);
if($result)
{
alert("روز مورد نظر حذف شد");
go_to('?option=rozekari');
}
}
break;
case 'rozekari_add_save':
if($_COOKIE['ranklogin'] != 2) exit('No Access !!!');
$work = $_POST['work'];
$com = $_POST['com'];
$time = $_POST['time'];
$user = $_COOKIE['userid'];
if($work and $time)
{
$query = "INSERT INTO `kartbl` (
`id` ,
`pezashk` ,
`com` ,
`work` ,
`time`
)
VALUES (
'null', '$user', '$com', '$work', '$time'
);
";
$result = $db->query($query);
if($result)
{
alert("زمان مورد نظر ثبت شد");
go_to('?option=rozekari');
}
}
break;
case 'nobat':
if($_COOKIE['ranklogin'] != 2) exit('No Access !!!');
$user = $_COOKIE['userid'];
nobat_list_title();
$query = "SELECT * FROM `nobat` WHERE `pezeshk`='$user';";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
$from=$row['user'];
$query_form = "select * from users where id = '$from'";
$result_form = $db->query($query_form);
$row_form = $result_form->fetch_assoc();
$from_name = $pishvand.' '.$row_form['name'].' '.$row_form['fname'];
nobat_list($row['id'],$row['date'],$from_name,$row['nobate'],$row['ok']);
}
break;
case 'nobat_save':
if($_COOKIE['ranklogin'] != 2) exit('No Access !!!');
$id = intval($_GET['id']);
$value = $_POST['value'];
if($id and $value)
{
$query = "UPDATE `nobat` SET `nobate` = '$value',`ok` = '1' WHERE `nobat`.`id` =$id;";
$result = $db->query($query);
if($result)
{
alert("زمان مورد نظر ثبت شد");
go_to('?option=nobat');
}
}
break;
case 'darkhastnobat':
if($_COOKIE['ranklogin'] != 1) exit('No Access !!!');
pezeshk_list_title();
$query = "select * from pezeshk order by id";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
pezeshk_list($row['id'],$row['name'],$row['takhasos'],$row['fname']);
}
break;
################################################## ###
case 'jooziatepezeshk':
if($_COOKIE['ranklogin'] != 1) exit('No Access !!!');
$id = intval($_GET['id']);
if($id)
{
jooziatepezeshk_list_title();
$query = "select * from kartbl where pezashk='$id';";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
jooziatepezeshk_list($row['id'],$row['work'],$row['time'],$row['com'],$id);
}
}
break;
case 'nobate_sabte':
if($_COOKIE['ranklogin'] != 1) exit('No Access !!!');
$pezeshkid = intval($_GET['pezeshkid']);
$nobateid = intval($_GET['nobateid']);
$time = $_GET['time'];
$user = $_COOKIE['userid'];
if($pezeshkid and $nobateid and $time)
{
$query = "
INSERT INTO `nobat` (
`id` ,
`pezeshk` ,
`nobate` ,
`date` ,
`ok` ,
`user`
)
VALUES (
'null', '$pezeshkid', '', '$time', '0', '$user'
);
";
$result = $db->query($query);
if($result)
{
alert("نوبت خواسته شده ثبت شد و بزودی توسط پزشک تایید میشود");
go_to('?option=darkhastnobat');
}
}
break;
case 'residegibenobat':
if($_COOKIE['ranklogin'] != 1) exit('No Access !!!');
$user = $_COOKIE['userid'];
residegibenobat_list_title();
$query = "select * from nobat where user='$user'";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
$from=$row['pezeshk'];
$query_form = "select * from pezeshk where id = '$from'";
$result_form = $db->query($query_form);
$row_form = $result_form->fetch_assoc();
$from_name = $pishvand.' '.$row_form['name'].' '.$row_form['fname'];
residegibenobat_list($row['date'],$row['nobate'],$from_name,$row['ok']);
}
break;
break;
################################################## ###
case 'manage_doctor':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
echo '<center><a href="?option=manage_doctor_add"><img border=0 src="images/list-add-user.png"></a><div>اضافه کردن پزشک</div></center><hr>';
manage_doctor_list_title();
$query = "select * from pezeshk order by id";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
manage_doctor_list($row['id'],$row['comment'],$row['address'],$row['tel'],$row['takhasos'],$row['fname'],$row['name']);
}
break;
case 'manage_doctor_delete':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = intval($_GET['id']);
if($id)
{
$query = "DELETE FROM `pezeshk` WHERE `pezeshk`.`id` = $id";
$result = $db->query($query);
if($result)
{
alert("پزشک مورد نظر حذف شد");
go_to('?option=manage_doctor');
}
}
break;
case 'manage_doctor_edit':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = intval($_GET['id']);
if($id)
{
$query = "select * from pezeshk where id='$id';";
$result = $db->query($query);
$num_result = $result->num_rows;
if ($num_result)
{
$row = $result->fetch_assoc();
manage_doctor_edit($row['id'],$row['comment'],$row['address'],$row['tel'],$row['takhasos'],$row['fname'],$row['name'],$row['user'],$row['pass']);
}
}
break;
case 'manage_doctor_edit_save':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = $_POST['id'];
$name = $_POST['name'];
$fname = $_POST['fname'];
$takhasos = $_POST['takhasos'];
$tel = $_POST['tel'];
$adrs = $_POST['adrs'];
$com = $_POST['com'];
$username = $_POST['user'];
$passwd = $_POST['pass'];
if($id and $name and $fname and $username and $passwd)
{
$query = "
UPDATE `pezeshk` SET
`name` = '$name',
`fname` = '$fname',
`takhasos` = '$takhasos',
`tel` = '$tel',
`address` = '$adrs',
`comment` = '$com',
`pass` = '$passwd',
`user` = '$username' WHERE `pezeshk`.`id` =$id;";
$result = $db->query($query);
if($result)
alert("اطلاعات پزشک با موفقیت ویرایش شد شد");
go_to('?option=manage_doctor_edit&id='.$id);
}else{
alert("فیلد های مهم را پر کنید");
manage_doctor_add();
}
break;
case 'manage_doctor_add':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
manage_doctor_add();
break;
case 'manage_doctor_add_save':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$name = $_POST['name'];
$fname = $_POST['fname'];
$takhasos = $_POST['takhasos'];
$tel = $_POST['tel'];
$adrs = $_POST['adrs'];
$com = $_POST['com'];
$username = $_POST['user'];
$passwd = $_POST['pass'];
if($name and $fname and $username and $passwd)
{
$query = "INSERT INTO `pezeshk` (
`id` ,
`name` ,
`fname` ,
`takhasos` ,
`tel` ,
`address` ,
`comment` ,
`pass` ,
`user`
)
VALUES (
'null', '$name', '$fname', '$takhasos', '$tel', '$adrs', '$com', '$passwd', '$username'
);";
$result = $db->query($query);
if($result)
alert("اطلاعات پزشک با موفقیت ثبت شد");
go_to('?option=manage_doctor');
}else{
alert("فیلد های مهم را پر کنید");
manage_doctor_add();
}
break;
case 'manage_pm':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
manage_pm_list_title();
$query = "select * from adminpm order by id";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
$from = $row['userid'];
$id = $row['id'];
$date = $row['date'];
$title = $row['title'];
$read = $row['read'];
switch($row['rank'])
{
case 1:
$Table = "users";$pishvand = "<b><font color=green>کاربر</font></b>";
break;
case 2:
$Table = "pezeshk";$pishvand = "<b><font color=red>دکتر</font></b>";
break;
}
$query_form = "select * from $Table where id = '$from'";
$result_form = $db->query($query_form);
$row_form = $result_form->fetch_assoc();
$from_name = $pishvand.' '.$row_form['name'].' '.$row_form['fname'];
manage_pm_list($id,sysdate($date),$from_name,$titl e,$read);
}
break;
case 'manage_pm_delete':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = intval($_GET['id']);
if($id)
{
$query = "DELETE FROM `adminpm` WHERE `adminpm`.`id` = $id";
$result = $db->query($query);
if($result)
{
alert("پیام انتخاب شده حذف شد");
go_to('?option=manage_pm');
}
}
break;
case 'manage_pm_show':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = intval($_GET['id']);
if($id)
{
$query = "select * from adminpm where id='$id';"; $query = "select * from kartbl where pezashk='$user'";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
rozekari_list($row['id'],$row['com'],$row['work'],$row['time']);
}
$result = $db->query($query);
$num_result = $result->num_rows;
if ($num_result)
{
$row = $result->fetch_assoc();
manage_pm_show($row['id'],$row['title'],$row['text'],sysdate($row['date']));
$query = "UPDATE `adminpm` SET `read` = '1' WHERE `adminpm`.`id` ='$id';";
$result = $db->query($query);
}
}
break;
case 'manage_user':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
manage_user_list_title();
$query = "select * from users order by id";
$result = $db->query($query);
$num_result = $result->num_rows;
for ($i=0 ; $i < $num_result ; $i++)
{
$row = $result->fetch_assoc();
manage_user_list($row['id'],$row['comment'],$row['address'],$row['tel'],$row['age'],$row['fname'],$row['name'],$row['mail']);
}
break;
case 'manage_user_delete':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = intval($_GET['id']);
if($id)
{
$query = "DELETE FROM `users` WHERE `users`.`id` = $id";
$result = $db->query($query);
if($result)
{
alert("کاربر مورد نظر حذف شد");
go_to('?option=manage_user');
}
}
break;
case 'manage_user_edit':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = intval($_GET['id']);
if($id)
{
$query = "select * from users where id='$id';";
$result = $db->query($query);
$num_result = $result->num_rows;
if ($num_result)
{
$row = $result->fetch_assoc();
manage_user_edit($row['id'],$row['name'],$row['fname'],$row['user'],$row['mail'],$row['pass'],$row['tel'],$row['age'],$row['address'],$row['comment']);
}
}
break;
case 'manage_user_edit_save':
if($_COOKIE['ranklogin'] != 4) exit('No Access !!!');
$id = $_POST['id'];
$name = $_POST['name'];
$fname = $_POST['fname'];
$username = $_POST['username'];
$password = $_POST['password'];
$tel = $_POST['tel'];
$mail = $_POST['mail'];
$age = $_POST['age'];
$adrs = $_POST['adrs'];
$com = $_POST['com'];
if($name and $fname and $username and $password)
{
$query = "
UPDATE `users` SET `name` = '$name',
`fname` = '$fname',
`user` = '$username',
`pass` = '$password',
`tel` = '$tel',
`mail` = '$mail',
`age` = '$age',
`address` = '$adrs',
`comment` = '$com' WHERE `users`.`id` ='$id';
";
$result = $db->query($query);
if($result)
{
alert("کاربر مورد نظر ویرایش شد");
go_to('?option=manage_user');
}
}
break;
################################################## ###
case 'logout':
$_COOKIE = '';
setcookie("login", False);
go_to('?');
break;
}
Center2();
ifooter();
?>