| 1 | <?php
|
|---|
| 2 | /************************************************************************/
|
|---|
| 3 | /* Eleonline - Raccolta e diffusione dei dati elettorali */
|
|---|
| 4 | /* by Roberto Gigli & Luciano Apolito */
|
|---|
| 5 | /* http://www.eleonline.it */
|
|---|
| 6 | /* info@eleonline.it luciano@aniene.net rgigli@libero.it */
|
|---|
| 7 | /************************************************************************/
|
|---|
| 8 | /* Modulo Permessi */
|
|---|
| 9 | /* Amministrazione */
|
|---|
| 10 | /************************************************************************/
|
|---|
| 11 |
|
|---|
| 12 | if (!defined('ADMIN_FILE')) {
|
|---|
| 13 | die ("You can't access this file directly...");
|
|---|
| 14 | }
|
|---|
| 15 |
|
|---|
| 16 | $param=strtolower($_SERVER['REQUEST_METHOD']) == 'get' ? $_GET : $_POST;
|
|---|
| 17 | $id_cons_gen=$param['id_cons_gen'];
|
|---|
| 18 |
|
|---|
| 19 | $perms=ChiSei($id_cons_gen);
|
|---|
| 20 | if ($perms<64 or !$id_cons_gen) die("Non hai i permessi per inserire dati ($perms)($id_cons_gen), o non hai scelto la consultazione!");
|
|---|
| 21 | $sql="SELECT t1.tipo_cons,t2.id_cons FROM ".$prefix."_ele_consultazione as t1, ".$prefix."_ele_cons_comune as t2 where t1.id_cons_gen=t2.id_cons_gen and t2.id_cons_gen='$id_cons_gen' and t2.id_comune='$id_comune'";
|
|---|
| 22 | $res = $dbi->prepare("$sql");
|
|---|
| 23 | $res->execute();
|
|---|
| 24 | list($tipo_cons,$id_cons) = $res->fetch(PDO::FETCH_NUM);
|
|---|
| 25 | if (isset($param['aid2'])) $aid2=addslashes($param['aid2']); else $aid2='';
|
|---|
| 26 | if (isset($param['id_sede'])) $id_sede=intval($param['id_sede']); else $id_sede='';
|
|---|
| 27 | if (isset($param['do'])) $do=addslashes($param['do']); else $do='';
|
|---|
| 28 | if (isset($param['permessi'])) $permessi=addslashes($param['permessi']); else $permessi='';
|
|---|
| 29 | if (isset($param['id_comune2'])) $id_comune2=intval($param['id_comune2']); else $id_comune2='';
|
|---|
| 30 | if (isset($param['ok'])) $ok=intval($param['ok']); else $ok='';
|
|---|
| 31 | if (isset($param['mex'])) $mex=addslashes($param['mex']); else $mex='';
|
|---|
| 32 |
|
|---|
| 33 | include("modules/Elezioni/funzionidata.php");
|
|---|
| 34 | include("modules/Elezioni/ele.php");
|
|---|
| 35 |
|
|---|
| 36 | /******************************************************/
|
|---|
| 37 | /*Funzione di visualizzazione globale */
|
|---|
| 38 | /*****************************************************/
|
|---|
| 39 | //crea la pagina delle affluenze
|
|---|
| 40 | function all() {
|
|---|
| 41 | global $adminop,$adminsuper,$admincomune,$aid, $offset, $prefix, $dbi,$id_cons,$aid2,$permessi,$id_sede,$id_cons_gen,$id_comune,$mex;
|
|---|
| 42 | $bgcolor1=$_SESSION['bgcolor1'];
|
|---|
| 43 | if (isset($mex)){
|
|---|
| 44 | echo "<table align=\"center\"><tr><td style=\"background-color: rgb(255, 0, 0)\">";
|
|---|
| 45 | echo $mex;
|
|---|
| 46 | echo "</td></tr></table>";
|
|---|
| 47 | }
|
|---|
| 48 | OpenTable();
|
|---|
| 49 | $sql="SELECT * FROM ".$prefix."_ele_operatori where id_cons=$id_cons and permessi<64 order by aid";
|
|---|
| 50 | $resmod = $dbi->prepare("$sql");
|
|---|
| 51 | $resmod->execute();
|
|---|
| 52 |
|
|---|
| 53 | echo "<br><table><tr align=\"center\" bgcolor=\"$bgcolor1\">";
|
|---|
| 54 | echo "<td><b>"._UTENTE."</b></td>"
|
|---|
| 55 | ."<td bgcolor=\"$bgcolor1\"><b>"._SEDE."</b></td>"
|
|---|
| 56 | ."<td bgcolor=\"$bgcolor1\"><b>"._PERMESSI."</b></td>";
|
|---|
| 57 | echo "<td bgcolor=\"$bgcolor1\"><b>"._FUNZIONI."</b></td></tr>";
|
|---|
| 58 |
|
|---|
| 59 |
|
|---|
| 60 |
|
|---|
| 61 | $sql="SELECT aid FROM ".$prefix."_ele_operatori where id_cons=$id_cons and permessi<64 order by aid";
|
|---|
| 62 | $restmp = $dbi->prepare("$sql");
|
|---|
| 63 | $restmp->execute();
|
|---|
| 64 | if($restmp) {
|
|---|
| 65 | $listmp='';$virg='';
|
|---|
| 66 | while (list($artmp) = $restmp->fetch(PDO::FETCH_NUM)){ //elenco degli operatori gia' autorizzati
|
|---|
| 67 | $listmp .= $virg."'".$artmp."'";
|
|---|
| 68 | $virg=',';
|
|---|
| 69 | }
|
|---|
| 70 | }
|
|---|
| 71 |
|
|---|
| 72 | if (!$listmp) $listmp="''";
|
|---|
| 73 | $sql="select aid from ".$prefix."_authors where id_comune=$id_comune and (admincomune=1 and aid not in ($listmp)) order by aid"; // operatori registrati ma non ancora autorizzati
|
|---|
| 74 | $resins = $dbi->prepare("$sql");
|
|---|
| 75 | $resins->execute();
|
|---|
| 76 |
|
|---|
| 77 |
|
|---|
| 78 | echo "<form name=\"autorizza\" action=\"admin.php\">"
|
|---|
| 79 | ."<input type=\"hidden\" name=\"op\" value=\"permessi\">";
|
|---|
| 80 | echo "<tr align=\"center\">";
|
|---|
| 81 | echo "<td><select name=\"aid2\">";
|
|---|
| 82 | echo "<option value=\"\">";
|
|---|
| 83 | if($resins->rowCount()) {
|
|---|
| 84 | while(list($utente)=$resins->fetch(PDO::FETCH_NUM)){
|
|---|
| 85 | echo "<option value=\"$utente\">$utente";
|
|---|
| 86 | }
|
|---|
| 87 | }
|
|---|
| 88 | echo "</select></td>";
|
|---|
| 89 | $sql="SELECT id_sede, indirizzo from ".$prefix."_ele_sede where id_cons=$id_cons";
|
|---|
| 90 | $ressede = $dbi->prepare("$sql");
|
|---|
| 91 | $ressede->execute();
|
|---|
| 92 | echo "<td><select name=\"id_sede\">";
|
|---|
| 93 | echo "<option value=\"0\"> "._TUTTESEDI;
|
|---|
| 94 | if($ressede->rowCount())
|
|---|
| 95 | while(list($id,$descr)=$ressede->fetch(PDO::FETCH_NUM)){
|
|---|
| 96 | $sel= ($id == $id_sede) ? "selected":"";
|
|---|
| 97 | $arr[$id]=$descr;
|
|---|
| 98 | echo "<option value=\"$id\" $sel>$descr";
|
|---|
| 99 | }
|
|---|
| 100 | echo "</select></td>";
|
|---|
| 101 | echo "<td><select name=\"permessi\">";
|
|---|
| 102 | if(!isset($permessi)) $permessi=16;
|
|---|
| 103 | $sel=($permessi==32) ? "selected":"";
|
|---|
| 104 | echo "<option value=\"32\" $sel>"._IMPOSTA_DATI;
|
|---|
| 105 | $sel=($permessi==16) ? "selected":"";
|
|---|
| 106 | echo "<option value=\"16\" $sel>"._INSERISCE_DATI;
|
|---|
| 107 | $sel=($permessi==0) ? "selected":"";
|
|---|
| 108 | echo "<option value=\"0\" $sel>"._SOSPESO;
|
|---|
| 109 | echo "</select></td>";
|
|---|
| 110 | echo "<input type=\"hidden\" name=\"id_cons_gen\" value=\"$id_cons_gen\">";
|
|---|
| 111 | echo "<input type=\"hidden\" name=\"ok\" value=0>";
|
|---|
| 112 | echo "<input type=\"hidden\" name=\"do\" value=\"autorizza\">";
|
|---|
| 113 | echo "<td><input type=\"submit\" name=\"add\" value=\""._AGGIUNGI."\"></td></tr></form></table>";
|
|---|
| 114 | echo "<br><hr><br><table>";
|
|---|
| 115 | if($resmod->rowCount()){
|
|---|
| 116 | $i=1;
|
|---|
| 117 | while (list($id_cons2,$id_sede2,$id_comunetemp,$perm,$utente) = $resmod->fetch(PDO::FETCH_NUM)){
|
|---|
| 118 | $bgcolor1=($bgcolor1==$_SESSION['bgcolor1'])?$_SESSION['bgcolor2']:$_SESSION['bgcolor1'];
|
|---|
| 119 | echo "<form name=\"modello$i\" action=\"admin.php\">"
|
|---|
| 120 | ."<input type=\"hidden\" name=\"op\" value=\"permessi\">";
|
|---|
| 121 | echo "<input type=\"hidden\" name=\"do\" value=\"update\">";
|
|---|
| 122 | echo "<input type=\"hidden\" name=\"aid2\" value=\"$utente\">";
|
|---|
| 123 | echo "<input type=\"hidden\" name=\"id_cons_gen\" value=\"$id_cons_gen\">";
|
|---|
| 124 | echo "<input type=\"hidden\" name=\"ok\" value=0>";
|
|---|
| 125 | echo "<tr align=\"center\" bgcolor=\"$bgcolor1\">";
|
|---|
| 126 | echo "<td align=\"center\" width=\"32\"><b>$utente</b></td>";
|
|---|
| 127 | $sql="SELECT id_sede, indirizzo from ".$prefix."_ele_sede where id_cons=$id_cons";
|
|---|
| 128 | $ressede = $dbi->prepare("$sql");
|
|---|
| 129 | $ressede->execute();
|
|---|
| 130 | echo "<td><select name=\"id_sede\">";
|
|---|
| 131 | echo "<option value=\"0\"> "._TUTTESEDI;
|
|---|
| 132 | while(list($id,$descr)=$ressede->fetch(PDO::FETCH_NUM)){
|
|---|
| 133 | $sel= ($id == $id_sede2) ? "selected":"";
|
|---|
| 134 | $arr[$id]=$descr;
|
|---|
| 135 | echo "<option value=\"$id\" $sel>$descr";
|
|---|
| 136 | }
|
|---|
| 137 | echo "</select></td>";
|
|---|
| 138 | echo "<td><select name=\"permessi\">";
|
|---|
| 139 | if(!isset($perm)) $perm=16;
|
|---|
| 140 | $sel=($perm==32) ? "selected":"";
|
|---|
| 141 | echo "<option value=\"32\" $sel>"._IMPOSTA_DATI;
|
|---|
| 142 | $sel=($perm==16) ? "selected":"";
|
|---|
| 143 | echo "<option value=\"16\" $sel>"._INSERISCE_DATI;
|
|---|
| 144 | $sel=($perm==0) ? "selected":"";
|
|---|
| 145 | echo "<option value=\"0\" $sel>"._SOSPESO;
|
|---|
| 146 | echo "</select></td>";
|
|---|
| 147 | echo "<td><input type=\"submit\" name=\"add\" value=\""._OK."\"></td></tr></form>";
|
|---|
| 148 | $i++;
|
|---|
| 149 | }
|
|---|
| 150 | }
|
|---|
| 151 | echo "</table>";
|
|---|
| 152 | CloseTable();
|
|---|
| 153 | }
|
|---|
| 154 |
|
|---|
| 155 | function permessi($ok, $do,$aid2,$id_sede,$permessi,$id_comune) {
|
|---|
| 156 | global $prefix, $dbi, $id_cons,$id_cons_gen,$currentlang;
|
|---|
| 157 | $perms=ChiSei($id_cons_gen);
|
|---|
| 158 | if ($perms!=256) $id_comune=$_SESSION['id_comune'];
|
|---|
| 159 | if ($perms>32 and $permessi<$perms and $aid2) {
|
|---|
| 160 | if ($do == "autorizza") {
|
|---|
| 161 | $sql="insert into ".$prefix."_ele_operatori (id_cons,id_sede,id_comune,permessi,aid) values ('$id_cons','$id_sede','$id_comune','$permessi','$aid2')";
|
|---|
| 162 | $res = $dbi->prepare("$sql");
|
|---|
| 163 | $res->execute();
|
|---|
| 164 | Header("Location: admin.php?op=permessi&id_cons_gen=$id_cons_gen");
|
|---|
| 165 | } elseif ($do == "update") {
|
|---|
| 166 | $sql="update ".$prefix."_ele_operatori set id_sede='$id_sede' , permessi='$permessi' where id_cons='$id_cons' and aid='$aid2' ";
|
|---|
| 167 | $res = $dbi->prepare("$sql");
|
|---|
| 168 | $res->execute();
|
|---|
| 169 | $result=$res->rowCount();
|
|---|
| 170 | if (!$result) return;
|
|---|
| 171 | Header("Location: admin.php?op=permessi&id_cons_gen=$id_cons_gen");
|
|---|
| 172 | }
|
|---|
| 173 | }
|
|---|
| 174 | }
|
|---|
| 175 |
|
|---|
| 176 |
|
|---|
| 177 | //****************************
|
|---|
| 178 | // switch
|
|---|
| 179 | //****************************
|
|---|
| 180 | if ($do) permessi($ok, $do,$aid2,$id_sede,$permessi,$id_comune);
|
|---|
| 181 | ele();
|
|---|
| 182 | all();
|
|---|
| 183 | include("footer.php");
|
|---|
| 184 | ?>
|
|---|
| 185 |
|
|---|
