Devil Killer Is Here MiNi Shell
MiNi SheLL

Current Path : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_ecom/admin/
Linux boscustweb5006.eigbox.net 5.4.91 #1 SMP Wed Jan 20 18:10:28 EST 2021 x86_64
Current File : /hermes/bosnacweb04/bosnacweb04ac/b1072/ipg.liuyuan7592410/wb_ecom/admin/product.php
<?PHP 
	require "top.inc.php";
	$allowedRole = SUPER_ADMIN|ADMIN|VENDOR_ADMIN|VENDOR_USER|RETAILER_ADMIN|RETAILER_USER;
	whoAllowed($allowedRole);

	$condition = "";
	$condition1 = "";
	if(($_SESSION['ADMIN_ROLE']&(VENDOR_ADMIN|VENDOR_USER))!=0){
		$condition = " left join t_admin_users a1 on a.added_by=a1.id left join t_admin_users a2 on a1.vendor_id=a2.vendor_id where a2.id='".$_SESSION['ADMIN_ID']."'";
		$condition1 = " and a.added_by=b.id and b.vendor_id=c.vendor_id and c.id='".$_SESSION['ADMIN_ID']."'";
	}elseif(($_SESSION['ADMIN_ROLE']&(RETAILER_ADMIN|RETAILER_USER))!=0){
		$condition = " left join t_admin_users a1 on a.added_by=a1.id left join t_admin_users a2 on a1.retailer_id=a2.retailer_id where a2.id='".$_SESSION['ADMIN_ID']."'";
		$condition1 = " and a.added_by=b.id and b.retailer_id=c.retailer_id and c.id='".$_SESSION['ADMIN_ID']."'";
	}

	if(isset($_GET["type"]) && $_GET["type"]!=""){
		$type = get_safe_value($con,$_GET["type"]);
		switch($type){
			case "status":
				changeProductStatus($con,$condition1); 
			break;
			case "delete":
				deleteProduct($con,$condition1);
			break;
			default;
		}
		if($type="status"){
		}
	}

	function changeProductStatus($con,$condition){
		$operation = get_safe_value($con,$_GET["operation"]);
		$id = get_safe_value($con,$_GET["id"]);
		if($operation=="active"){
			$status = "1";
		}else{
			$status = "0";
		}
		$update_sql = "update t_product a,t_admin_users b,t_admin_users c set a.status=\"".$status."\" where a.id=\"".$id."\"".$condition;
		mysqli_query($con,$update_sql);
	}

	function deleteProduct($con,$condition){
		$id = get_safe_value($con,$_GET["id"]);
		$backup_sql = "insert into t_product_deleted select a.* from t_product a,t_admin_users b,t_admin_users c where a.id=\"".$id."\"".$condition;
		mysqli_query($con,$backup_sql);
		$delete_sql = "delete a from t_product a,t_admin_users b,t_admin_users c where a.id=\"".$id."\"".$condition;
		mysqli_query($con,$delete_sql);
	}

	$sql = "select a.*, e.sold_qty,a.qty-e.sold_qty available_qty,b.str_value str_status,c.categories,c.categories_en,d.sub_categories,d.sub_categories_en from t_product a left join (select * from t_sys_defination where t_name='t_product' and field='status') b on a.status=b.value left join t_categories c on a.categories_id=c.id left join t_sub_categories d on a.sub_categories_id=d.id left join (select f.pid, sum(f.qty) sold_qty from t_order_details f left join t_order g on g.id=f.order_id group by f.pid) e on e.pid=a.id ".$condition." order by a.id DESC";

	$res = mysqli_query($con,$sql);
?>
	<div class="content pb-0">
		<div class="orders">
			<div class="row">
				<div class="col-xl-12">
					<div class="card">
						<div class="card-body">
							<h4 class="box-title">Products </h4>
							<div class="box-link"><span class="badge"><a href="manage_product.php">Add Product</a> </span></div>
						</div>
						<div class="card-body--">
							<div class="table-stats order-table ov-h">
								<table class="table ">
									<thead>
										<tr>
											<th class="serial">#</th>
											<th>Product_code</th>
											<th>Name</th>
											<th>Image</th>
											<th>Categories</th>
											<th>Sub_Categories</th>
											<?PHP
												if($_SESSION['ADMIN_ROLE']==ADMIN){
													echo "<th>Vendor</th>";
												}
											?>
											<th>MRP</th>
											<th>Price</th>
											<th>Qty</th>
											<th></th>
										</tr>
									</thead>
									<tbody>
										<?PHP
											$i = 1; 
											while($row = mysqli_fetch_assoc($res)){
										?>
										<tr pid="<?PHP echo $row['id'];?>">
											<td class="serial"><?PHP echo $i;?>.</td>
											<td id="pcode"><?PHP echo $row['code'];?></td>
											<td id="pname"><?PHP echo $row['name'];?><br><?PHP echo $row['name_en'];?></td>
											<td>
												<?PHP
													if($row['video']!=""){
												?>
													<video controls muted poster="<?PHP echo  PRODUCT_IMAGE_SITE_PATH.$row['image'];?>">
														<source  src="<?PHP echo  PRODUCT_VIDEO_SITE_PATH.$row['video'];?>" type="video/mp4">
													</video>
												<?PHP
													}else{
												?>
													<img src="<?PHP echo PRODUCT_IMAGE_SITE_PATH.$row['image'];?>" alt="product images">
												<?PHP
													}
												?>
											</td>
											<td><?PHP echo $row['categories'];?><br><?PHP echo $row['categories_en'];?></td>
											<td><?PHP echo $row['sub_categories'];?><br><?PHP echo $row['sub_categories_en'];?></td>
											<?PHP
												if($_SESSION['ADMIN_ROLE']==ADMIN){
													echo "<td>".(($row['vendor']==0)?("r_".$row['r_vendor']):$row['vendor'])."</td>";
												}
											?>
											<td><?PHP echo cvrtToDollar($row['mrp']);?></td>
											<td><?PHP echo cvrtToDollar($row['price']);?></td>
											<td><?PHP echo "Total: ".$row['qty'];?><br>
												<?PHP echo "Sold: ".(($row['sold_qty'])?$row['sold_qty']:0);?><br>
												<?PHP echo "In Stock: ".(($row['sold_qty'])?$row['available_qty']:$row['qty']);?></td>
											<td>
											<?PHP
												$operation = ($row['str_status']=="Active")?"deactive":"active";
												$class = ($row['str_status']=="Active")?"badge-complete":"badge-pending";
												echo "<span class='badge ".$class."'><a href='?type=status&operation=".$operation."&id=".$row['id']."'>".$row['str_status']."</a></span>&nbsp;";
												echo "<span class='badge badge-edit'><a href='manage_product.php?type=edit&id=".$row['id']."'>Edit</a></span>&nbsp;";
												//echo "<span class='badge badge-delete'><a href='?type=delete&id=".$row['id']."'>Delete</a></span>";
												echo "<span class='badge badge-delete'><a href='javascript:void(0)' onclick='deleteRecord(".$row['id'].")'>Delete</a></span>";
											?>
											</td>
										</tr>
										<?PHP 
												$i++;
											};
										?>
									</tbody>
								</table>
							</div>
						</div>
					</div>
				</div>
			</div>
		</div>
	</div>

<script src="../js/vendor/jquery-3.2.1.min.js"></script>
<script type="text/javascript">
$(function(){
	$("video").on("play",function(){
		$(this).get(0).playing=true;
	}).on("ended",function(){
		$(this).get(0).playing=false;
		$(this).get(0).autoplay=false;
		$(this).get(0).load();
	}).on("mouseover",function(){
//		$(this).css({"max-width":"100%"});
		if(!($(this).get(0).playing)){
			$(this).get(0).play();
		}
	}).on("mouseout",function(){
//		$(this).css({"max-width":"45px"});
	});
});
</script>
<?PHP 
	require "footer.inc.php";
?>
Creat By MiNi SheLL
Email: devilkiller@gmail.com