Repository navigation
Expand file tree
/
Copy pathmanage_expense.php
More file actions
101 lines (96 loc) · 3.95 KB
/
Copy pathmanage_expense.php
File metadata and controls
101 lines (96 loc) · 3.95 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
<?php
include('header.php');
checkUser();
userArea();
$msg="";
$category_id="";
$item="";
$price="";
$details="";
$expense_date=date('Y-m-d');
$label="Add";
if(isset($_GET['id']) && $_GET['id']>0){
$label="Edit";
$id=get_safe_value($_GET['id']);
$res=mysqli_query($con,"select * from expense where id=$id");
if(mysqli_num_rows($res)==0){
redirect('expense.php');
die();
}
$row=mysqli_fetch_assoc($res);
$category_id=$row['category_id'];
$item=$row['item'];
$price=$row['price'];
$details=$row['details'];
$expense_date=$row['expense_date'];
if($row['added_by']!=$_SESSION['UID']){
redirect('expense.php');
}
}
if(isset($_POST['submit'])){
$category_id=get_safe_value($_POST['category_id']);
$item=get_safe_value($_POST['item']);
$price=get_safe_value($_POST['price']);
$details=get_safe_value($_POST['details']);
$expense_date=get_safe_value($_POST['expense_date']);
$added_on=date('Y-m-d h:i:s');
$type="add";
$sub_sql="";
if(isset($_GET['id']) && $_GET['id']>0){
$type="edit";
$sub_sql="and id!=$id";
}
$added_by=$_SESSION['UID'];
$sql="insert into expense(category_id,item,price,details,added_on,expense_date,added_by) values('$category_id','$item','$price','$details','$added_on','$expense_date','$added_by')";
if(isset($_GET['id']) && $_GET['id']>0){
$sql="update expense set category_id='$category_id',item='$item',price='$price',details='$details',expense_date='$expense_date' where id=$id";
}
mysqli_query($con,$sql);
redirect('expense.php');
}
?>
<script>
setTitle("Manage Expense");
selectLink('expense_link');
</script>
<div class="main-content">
<div class="section__content section__content--p30">
<div class="container-fluid">
<div class="row">
<div class="col-lg-12">
<h2><?php echo $label?> Expense</h2>
<a href="expense.php">Back</a>
<div class="card">
<div class="card-body card-block">
<form method="post" class="form-horizontal">
<div class="form-group"> <label class="control-label mb-1">Category</label>
<?php echo getCategory($category_id);
?>
</div>
<div class="form-group"> <label class="control-label mb-1">Item</label>
<input type="text" name="item" required value="<?php echo $item?>" class="form-control" rquired>
</div>
<div class="form-group"> <label class="control-label mb-1">Price</label>
<input type="text" name="price" required value="<?php echo $price?>" class="form-control" rquired>
</div>
<div class="form-group"> <label class="control-label mb-1">Details</label>
<input type="text" name="details" required value="<?php echo $details?>" class="form-control" rquired>
</div>
<div class="form-group"> <label class="control-label mb-1">Expense Date</label>
<input type="date" name="expense_date" required value="<?php echo $expense_date?>" class="form-control" rquired max="<?php echo date('Y-m-d')?>">
</div>
<div class="form-group">
<input type="submit" name="submit" value="Submit" class="btn btn-lg btn-info btn-block">
</div>
<div id="msg"><?php echo $msg?></div>
</form>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<?php
include('footer.php');
?>