108
$query = "INSERT INTO stages(id_tikets, stageimages, stagename,
stagedescription, stagedate, stagePrice, stageauthor, visibility)
VALUES ('" . $this->con->real_escape_string($_POST['addNewStage']) . "',
'" . serialize($done_files) . "',
'" . $this->con->real_escape_string(strip_tags($_POST['stagename'])) .
"',
'" . $this->con-
>real_escape_string(strip_tags($_POST['stagedescription'])) . "',
'" . date("Y-m-d H:i:s") . "',
" . (int)$_POST['stagePrice'] . ",
'" . $_SESSION['logined']['id'] . "',
'system')";
}
if($this->executeQuery($query)){
$this->executeQuery("INSERT INTO
tktStagesMonitoring(stageId) VALUES (".mysqli_insert_id($this->con).")");
$query = "SELECT
st.id,st.stageimages,st.stagename,st.stagedescription,st.hidstagedescription,
st.stagedate, mg.synonym as stageauthor, stagePrice, visibility
FROM stages as st join managers as mg on st.stageauthor = mg.id
WHERE id_tikets = '".$_POST['addNewStage']."' ORDER BY st.stagedate
ASC";
$dataRow['steps'] = $this->getArrFromTableBYQuery($query);
$this->smarty->assign('steps', $dataRow['steps']);
$this->smarty->assign('logined', $_SESSION['logined']);
exit($this->smarty->display('work/stepsTable.tpl'));
}else{
exit('Не получилосъ');
}
}
protected function addNewTask(){
$taskDate = date('Y-m-d H:i:s');
$query = "
INSERT INTO toDoList(taskText, authorId, taskDate, target)
VALUES ('".$this->con-
>real_escape_string($_POST['taskText'])."','".$_SESSION['logined']['id']."','".$taskDate."','".$
this->con->real_escape_string($_POST['addNewTask'])."')";
if($this->executeQuery($query)){
$query = "SELECT
tdl.id,tdl.taskText,tdl.authorId,tdl.taskDate,tdl.target,mg.synonym as taskAuthor
FROM toDoList as tdl join managers as mg on tdl.authorID =
mg.id
WHERE tdl.target = '".$_POST['addNewTask']."' ORDER BY
tdl.taskDate ASC";
$dataRow['steps'] = $this->getArrFromTableBYQuery($query);
$this->smarty->assign('toDoListArr', $this-
>getArrFromTableBYQuery($query));
$this->smarty->assign('logined', $_SESSION['logined']);
exit($this->smarty->display('work/toDoListTable.tpl'));