PHP Concerned

 

getCustomer.php:

 <?php
$USERNAME = 'root';   //database username
$PASSWORD = '123';    //database password
$DATABASE = 'asterisk';   //database name
$URL = 'localhost';        //database location

if(isset($_GET['getTutorials']))
{
    mysql_connect($URL, $USERNAME, $PASSWORD);
    mysql_select_db($DATABASE) or
    die('Cannot connect to database.');
   
    $returnArray = array();
   
    //$query = 'SELECT * FROM callerinfo';
    //$result = mysql_query($query);
    $result=mysql_query("select * from callinfo");
    while($row = mysql_fetch_assoc($result))
    {
        array_push($returnArray, $row);
    }
   
    mysql_close();
    echo json_encode($returnArray);
}
elseif(isset($_GET['updateTutorials']))
{
  $jsonString = urldecode($_GET['jsonSendData']);
  $jsonString = str_replace("//", "", $jsonString);
  $data = json_decode($jsonString, true);

  mysql_connect($URL, $USERNAME, $PASSWORD);
  mysql_select_db($DATABASE) or
    die('Cannot connect to database.');

  foreach ($data as $tutorialEntry) {
    if(!isset($tutorialEntry['deleted']))
    {
      //Handle updated entry
      $query = sprintf(
        'UPDATE callinfo SET %s = "%s" WHERE id = "%s"',
        mysql_real_escape_string($tutorialEntry['property']),
        mysql_real_escape_string($tutorialEntry['value']),
        mysql_real_escape_string($tutorialEntry['id']));
    }
    else
    {
      // Handle deleted entry
      $query = sprintf(
        'DElETE FROM callinfo WHERE id = "%s"',
        mysql_real_escape_string($tutorialEntry['deleted']));
    }
    $result = mysql_query($query);     
   
    if(!$result)
    {
      mysql_close();
      echo mysql_error();
      return;
    }
  }
  mysql_close();
  echo "database updated"; 
}
?>

editInfo.php:

<?php
$USERNAME = 'root';   //database username
$PASSWORD = '123';    //database password
$DATABASE = 'asterisk';   //database name
$URL = 'localhost';        //database location

    mysql_connect($URL, $USERNAME, $PASSWORD);
    mysql_select_db($DATABASE) or
    die('Cannot connect to database.');
 //通过此PHP文件修改两张表callInfo，ticketInfo。

 $jsonString=urldecode($_GET['jsonSendData']);
 $jsonString=str_replace("//","",$jsonString);
 $data=json_decode($jsonString,true); 

     $callerName=$data[0];
        $callNum=$data[1];
        $callAddress=$data[2]; 
  
  $callDate=$data[3];
  $dealResult=$data[4];
  $callForPerson=$data[5];
  $callForDepartment=$data[6];
  $callForNum=$data[7];
  $callItem=$data[8];
  
  $priority=$data[9];
  $bookDate=$data[10];
  $bookTime=$data[11];
  $status=$data[12];
  $dealDepartment=$data[13];
  $agentNum=$data[14];
  $agentName=$data[15];
  $outTicketDate=$data[16];
  $outTicketTime=$data[17];
  $outTicketState=$data[18];
  
  $query1="Insert into callerInfo values('$callerName','$callNum','$callAddress')";
  $result1=mysql_query($query1);
   
  $query2="Insert into ticketInfo values('$callerName','$callNum','$callAddress',  
        '$callDate','$dealResult','$callForPerson','$callForDepartment','$callForNum',
     '$callItem','$priority','$bookDate','$bookTime','$status','$dealDepartment',
     '$agentNum','$agentName','$outTicketDate','$outTicketTime','$outTicketState')";
  $result2=mysql_query($query2);
     //if($result1)
  //{echo $result1;}
  //else {echo "aaa";}
  //if($result2)
  //{echo $result2;}
  //else {echo "bbb";}
  if($result2 And $result1)
  {echo "addTicket and CallerInfo succeed";}else{ echo "fail";}  
?>

getAgent.php:

<?php
$USERNAME = 'root';   //database username
$PASSWORD = '123';    //database password
$DATABASE = 'asterisk';   //database name
$URL = 'localhost';        //database location

if(isset($_GET['getAgDt']))
{
    mysql_connect($URL, $USERNAME, $PASSWORD);
    mysql_select_db($DATABASE) or
    die('Cannot connect to database.');
   
    $returnArray = array();
   
    //$query = 'SELECT * FROM callerinfo';
    //$result = mysql_query($query);
    $result=mysql_query("select id,user_id,user_degree,user_state from auth_user");
    while($row = mysql_fetch_assoc($result))
    {
        array_push($returnArray, $row);
    }
    mysql_close();
    echo json_encode($returnArray);
}
else{}
?>

loginJun.php

<?php
$USERNAME = 'root';   //database username
$PASSWORD = '123';    //database password
$DATABASE = 'asterisk';   //database name
$URL = 'localhost';        //database location

//echo "Test Login<br>";
//if(isset($_GET['getTutorials']))
//{
    mysql_connect($URL, $USERNAME, $PASSWORD);
    mysql_select_db($DATABASE) or
    die('Cannot connect to database.');
    //echo "bbbb";
 $jsonString=urldecode($_GET['jsonSendData']);
 $jsonString=str_replace("//","",$jsonString);
 $data=json_decode($jsonString,true);
    //echo "aaaa";
 
 //foreach($data as $tutorialEntry){
    // check the login info
     $username=$data[0];
        $pwd=$data[1];
  //echo $username;
  //echo $pwd;
  //if(!isset($tutorialEntry['deleted']))
  
   $query="SELECT user_degree FROM auth_user WHERE user_id='$username' AND user_password='$pwd'";
     
  $result=mysql_query($query);
  //echo $result;
  if(!mysql_num_rows($result)==1)
  {
   mysql_close();
   echo "fail";
  }else{
  $row=mysql_fetch_row($result); 
  //echo "succeed";
  while($row)
      {
   echo $row[0];
   $row=mysql_fetch_row($result);
   }
    $query2="UPDATE auth_user SET user_state='1' WHERE user_id='$username'";
   $result2=mysql_query($query2);
   mysql_close();
  } 
 //}
    //$returnArray = array();
   
    //$query = 'SELECT * FROM asterisk';
    //$result = mysql_query($query);
//}
//else  echo "Exception occured";

?>