HEX
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.30
System: Linux iZj6c1151k3ad370bosnmsZ 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64
User: root (0)
PHP: 7.4.30
Disabled: NONE
Upload Files
File: /var/www/html/inventory.breadsecret.com/script/supplierList.php
<?php
include_once('../inc/global.php');
include_once("../config/route.php");
$user = unserialize($_SESSION['user']);
$today = Utility\WebSystem::displayDate(date("Y-m-d H:i:s"), 'Y-m-d');

$map = [

    'column_supplierID' => 'supplier.id',
    'column_supplierCategoryName' => 'supplierCategory.name',
    'column_supplierName' => 'supplier.name',
    'column_supplierContactPerson' => 'supplier.contactPerson',
    'column_supplierContactPhone' => 'supplier.contactPhone',
    'column_supplierContactEmail' => 'supplier.contactEmail',
    'column_supplierStatus' => 'status.name',
    'column_function' => 'supplier.id'
];

$draw = $_POST['draw'];
$row = $_POST['start'];
$rowperpage = $_POST['length']; // Rows display per page
$columnIndex = $_POST['order'][0]['column']; // Column index
$columnName = $_POST['columns'][$columnIndex]['data']; // Column name
$columnSortOrder = $_POST['order'][0]['dir']; // asc or desc
$searchValue = $_POST['search']['value']; // Search value
$searchQuery = " ";


$sqlAll = Database\Sql::select(['supplier', 'supplier'])->leftJoin(['supplier_category', 'supplierCategory'], "supplier.supplierCategoryID = supplierCategory.id")->leftJoin(['status', 'status'], "supplier.status = status.id");
$sqlAll->setFieldValue('
   supplier.id supplierID, 
   supplierCategory.name supplierCategoryName, 
   supplier.name supplierName, 
   supplier.contactPerson supplierContactPerson, 
   supplier.contactPhone supplierContactPhone, 
   supplier.contactEmail supplierContactEmail, 
   status.name statusName                         
');

$stmAll = $sqlAll->prepare();
$stmAll->execute();

if($searchValue != ''){
    $searchValue = addslashes($searchValue);
    $sqlAll->whereOp("(supplier.id LIKE '%".$searchValue."%'
        OR supplierCategory.name LIKE '%".$searchValue."%'
        OR supplier.name LIKE '%".$searchValue."%'
        OR supplier.contactPerson LIKE '%".$searchValue."%'
        OR supplier.contactPhone LIKE '%".$searchValue."%'
        OR supplier.contactEmail LIKE '%".$searchValue."%'
        OR status.name LIKE '%".$searchValue."%'
    )");
}

foreach($_POST['columns'] as $idx => $column){
    if(!empty($column['search']['value'])) {
        $idxSearchValue = substr($column['search']['value'], 1, -1);
        if($_POST['columns'][$idx]['data']=="column_supplierStatus"){
           if($idxSearchValue=="有效") {
             $idxSearchValue="Enabled";
           }

           if($idxSearchValue=="無效") {
             $idxSearchValue="Disabled";
           }           
        } 

        $sqlAll->where([$map[$_POST['columns'][$idx]['data']], '=', '"'.strip_tags($idxSearchValue).'"']);
    }
}

if($stmAll->rowCount()==0 && $filter) {
    $sqlAll = Database\Sql::select(['supplier', 'supplier'])->leftJoin(['supplier_category', 'supplierCategory'], "supplier.supplierCategoryID = supplierCategory.id")->leftJoin(['status', 'status'], "supplier.status = status.id");
    $sqlAll->setFieldValue('
       supplier.id supplierID, 
       supplierCategory.name supplierCategoryName, 
       supplier.name supplierName, 
       supplier.contactPerson supplierContactPerson, 
       supplier.contactPhone supplierContactPhone, 
       supplier.contactEmail supplierContactEmail, 
       status.name statusName                         
    ');
};

$sql = $sqlAll->order($map[$columnName],$columnSortOrder)->limit($rowperpage, $row);

$stm = $sql->prepare();
$stm->execute();

$returnArr = [];
$contentArr = [];
$lineCount = 0;
foreach($stm as $data){    

    $dataArr = [        
        "column_supplierID"=>$data['supplierID'],
        "column_supplierCategoryName"=>$data['supplierCategoryName'],  
        "column_supplierName"=>$data['supplierName'], 
        "column_supplierContactPerson"=>$data['supplierContactPerson'], 
        "column_supplierContactPhone"=>$data['supplierContactPhone'], 
        "column_supplierContactEmail"=>$data['supplierContactEmail'],   
        "column_supplierStatus"=>L($data['statusName']),
        "column_function"=>"
            <div class='btn-group' role='group' aria-label=''>
                <button class='btn btn-sm btn-dark btnView' type='button' data-bs-toggle='tooltip' data-bs-placement='top' title='".L('menu.inventoryMain')."' data-id='".$data['supplierID']."'><i class='fas fa-sm fa-th'></i></button>
                <button class='btn btn-sm btn-success btnEdit' type='button' data-bs-toggle='tooltip' data-bs-placement='top' title='".L('Edit')."' data-id='".$data['supplierID']."'><i class='fas fa-sm fa-edit'></i></button>
                <button class='btn btn-sm btn-danger btnDel' type='button' data-bs-toggle='tooltip' data-bs-placement='top' title='".L('Delete')."' data-id='".$data['supplierID']."'><i class='fas fa-sm fa-trash-alt'></i></button>
            </div>
        "
    ];    

    $lineCount++;
    $contentArr[] = $dataArr;
}

$returnArr['draw'] = intval($draw);
$returnArr["iTotalDisplayRecords"] = $stm->rowCount();
$returnArr["iTotalRecords"] = $stmAll->rowCount();
$returnArr["data"] = $contentArr;

echo json_encode($returnArr);

?>