-
附件上傳
-
+
\ No newline at end of file
diff --git a/wms/board-record-submit.php b/wms/board-record-submit.php
index d3adb28b..bfae3908 100644
--- a/wms/board-record-submit.php
+++ b/wms/board-record-submit.php
@@ -3,7 +3,8 @@ if ($_SERVER["REQUEST_METHOD"] == "POST") {
//print_r($_POST);
//print_r($_FILES);exit;
foreach ($_POST as $k => $v) {
- $$k = htmlspecialchars(stripslashes(trim($v)));
+ // $$k = htmlspecialchars(stripslashes(trim($v)));
+ $$k = trim($v);
}
function get_basename($filename) {
diff --git a/wms/css/view/wipwhole-index.php b/wms/css/view/wipwhole-index.php
index c24af508..e1f5e17e 100644
--- a/wms/css/view/wipwhole-index.php
+++ b/wms/css/view/wipwhole-index.php
@@ -126,51 +126,61 @@
/* 旋转动画 */
}
-/* The Modal (background) */
-.modal {
- display: none; /* Hidden by default */
- position: fixed; /* Stay in place */
- z-index: 1; /* Sit on top */
- padding-top: 100px; /* Location of the box */
- left: 0;
- top: 0;
- width: 100%; /* Full width */
- height: 100%; /* Full height */
- overflow: auto; /* Enable scroll if needed */
-
-}
-.modal .back{
- position: absolute;
- top: 0;
- left:0;
- width: 100%;
- height: 100%;
- background-color: rgba(0,0,0,0.4); /* Black w/ opacity */
-}
-/* Modal Content */
-.modal-content {
- z-index: 9;
- background-color: #fefefe;
- margin: auto;
- padding: 20px;
- border: 1px solid #888;
- width: 80%;
-}
-
-/* The Close Button */
-.close {
- color: #aaaaaa;
- float: right;
- font-size: 28px;
- font-weight: bold;
-}
-
-.close:hover,
-.close:focus {
- color: #000;
- text-decoration: none;
- cursor: pointer;
-}
+ /* The Modal (background) */
+ .modal {
+ display: none;
+ /* Hidden by default */
+ position: fixed;
+ /* Stay in place */
+ z-index: 1;
+ /* Sit on top */
+ padding-top: 100px;
+ /* Location of the box */
+ left: 0;
+ top: 0;
+ width: 100%;
+ /* Full width */
+ height: 100%;
+ /* Full height */
+ overflow: auto;
+ /* Enable scroll if needed */
+
+ }
+
+ .modal .back {
+ position: absolute;
+ top: 0;
+ left: 0;
+ width: 100%;
+ height: 100%;
+ background-color: rgba(0, 0, 0, 0.4);
+ /* Black w/ opacity */
+ }
+
+ /* Modal Content */
+ .modal-content {
+ z-index: 9;
+ background-color: #fefefe;
+ margin: auto;
+ padding: 20px;
+ border: 1px solid #888;
+ width: 80%;
+ }
+
+ /* The Close Button */
+ .close {
+ color: #aaaaaa;
+ float: right;
+ font-size: 28px;
+ font-weight: bold;
+ }
+
+ .close:hover,
+ .close:focus {
+ color: #000;
+ text-decoration: none;
+ cursor: pointer;
+ }
@keyframes spin {
diff --git a/wms/css/view/wipwhole-renovate-index.php b/wms/css/view/wipwhole-renovate-index.php
index 9bd7eef9..70b3576f 100644
--- a/wms/css/view/wipwhole-renovate-index.php
+++ b/wms/css/view/wipwhole-renovate-index.php
@@ -126,6 +126,62 @@
/* 旋转动画 */
}
+ /* The Modal (background) */
+ .modal {
+ display: none;
+ /* Hidden by default */
+ position: fixed;
+ /* Stay in place */
+ z-index: 1;
+ /* Sit on top */
+ padding-top: 100px;
+ /* Location of the box */
+ left: 0;
+ top: 0;
+ width: 100%;
+ /* Full width */
+ height: 100%;
+ /* Full height */
+ overflow: auto;
+ /* Enable scroll if needed */
+
+ }
+
+ .modal .back {
+ position: absolute;
+ top: 0;
+ left: 0;
+ width: 100%;
+ height: 100%;
+ background-color: rgba(0, 0, 0, 0.4);
+ /* Black w/ opacity */
+ }
+
+ /* Modal Content */
+ .modal-content {
+ z-index: 9;
+ background-color: #fefefe;
+ margin: auto;
+ padding: 20px;
+ border: 1px solid #888;
+ width: 80%;
+ }
+
+ /* The Close Button */
+ .close {
+ color: #aaaaaa;
+ float: right;
+ font-size: 28px;
+ font-weight: bold;
+ }
+
+ .close:hover,
+ .close:focus {
+ color: #000;
+ text-decoration: none;
+ cursor: pointer;
+ }
+
@media screen and (max-width: 600px) {
table {
diff --git a/wms/frame/api_getdata.php b/wms/frame/api_getdata.php
index 7da622b0..c99767a6 100644
--- a/wms/frame/api_getdata.php
+++ b/wms/frame/api_getdata.php
@@ -1,4 +1,5 @@
"ok","err"=>"","errCode"=>"");
+$json = array("st" => "ok", "err" => "", "errCode" => "");
/**
* 表單列表
*/
-function get_forms() {
+function get_forms()
+{
global $link;
$i = 1;
@@ -45,7 +47,8 @@ function get_forms() {
/**
* 公告欄列表
*/
-function get_board() {
+function get_board()
+{
global $link;
$i = 1;
@@ -70,16 +73,17 @@ function get_board() {
/**
* 系統通知列表
*/
-function get_notice($token) {
+function get_notice($token)
+{
global $link;
if (!$token) throw new \Exception("token empty", 802);
list($user_id) = explode(".", $token);
$i = 1;
$data = [];
$sql = "select id, kind, related_id, title from notice ";
- $sql .= "where (permission like '%".$user_id."%' or permission = 'ALL' or creater = '$user_id') ";
- $sql .= "and haveread != '1' ";
- $sql .= "order by create_at desc limit 0, 6";
+ $sql .= "where (permission like '%" . $user_id . "%' or permission = 'ALL' or creater = '$user_id') ";
+ $sql .= "and (haveread != '1' or haveread is null) ";
+ $sql .= "order by id desc limit 0, 6";
$res = mysqli_query($link, $sql);
while ($row = mysqli_fetch_assoc($res)) {
$data[$i]["id"] = $row["id"];
@@ -95,24 +99,64 @@ function get_notice($token) {
/**
* 待我簽核
*/
-function get_pending($token) {
+function get_pending($token)
+{
global $link;
if (!$token) throw new \Exception("token empty", 802);
list($user_id) = explode(".", $token);
$i = 1;
$data = [];
+ $sql = "
+ SELECT
+ t.system_id,
+ t.system_name,
+ t.flow_id,
+ t.flow_name,
+ COUNT(*)
+ FROM (
+ SELECT s.form_key,
+ m.system_id,
+ y.system_name,
+ m.flow_id,
+ m.flow_name,
+ m.path
+ FROM subflow s,
+ flow f,
+ flow_main m,
+ system_main y
+ WHERE EXISTS (
+ SELECT form_key,
+ MAX(seq)
+ FROM subflow
+ GROUP BY form_key
+ HAVING SUBSTRING(s.form_key, 1, 10) = form_key
+ AND s.seq = max(seq)
+ )
+ AND SUBSTRING(s.form_key, 1, 10) = f.form_key
+ AND f.flow_id = m.flow_id
+ AND f.system_id = y.system_id
+ AND s.current_assigner = '$user_id'
+ AND f.flow_code != 'Z'
+ ) t
+ GROUP BY t.system_id,
+ t.flow_id,
+ t.system_name,
+ t.flow_name
+ LIMIT 0, 6
+ ";
+
+ // $sql = "select t.system_id, t.system_name, t.flow_id, t.flow_name, count(*) from (";
+ // $sql .= "select s.form_key, m.system_id, y.system_name, m.flow_id, m.flow_name, m.path from subflow s, flow f, flow_main m, system_main y ";
+ // $sql .= "where ";
+ // $sql .= "EXISTS (
+ // select form_key, max(seq) from subflow
+ // group by form_key
+ // having SUBSTRING(s.form_key,1,10) = form_key and s.seq = max(seq)
+ // ) ";
+ // $sql .= "and SUBSTRING(s.form_key,1,10) = f.form_key and f.flow_id = m.flow_id and f.system_id = y.system_id and s.current_assigner = '$user_id'";
+ // $sql .= ") t group by t.system_id, t.flow_id, t.system_name, t.flow_name ";
+ // $sql .= "limit 0, 6";
- $sql = "select t.system_id, t.system_name, t.flow_id, t.flow_name, count(*) from (";
- $sql .= "select s.form_key, m.system_id, y.system_name, m.flow_id, m.flow_name, m.path from subflow s, flow f, flow_main m, system_main y ";
- $sql .= "where ";
- $sql .= "EXISTS (
- select form_key, max(seq) from subflow
- group by form_key
- having SUBSTRING(s.form_key,1,10) = form_key and s.seq = max(seq)
- ) ";
- $sql .= "and SUBSTRING(s.form_key,1,10) = f.form_key and f.flow_id = m.flow_id and f.system_id = y.system_id and s.current_assigner = '$user_id'";
- $sql .= ") t group by t.system_id, t.flow_id, t.system_name, t.flow_name ";
- $sql .= "limit 0, 6";
$res = mysqli_query($link, $sql);
while ($row = mysqli_fetch_row($res)) {
$data[$i]["sid"] = $row[0];
@@ -139,7 +183,7 @@ function get_pending($token) {
return $data;
}
-try{
+try {
if (empty($_REQUEST)) throw new \Exception("post empty", 801);
if (empty($_REQUEST["p"])) throw new \Exception("post p empty", 801);
@@ -161,13 +205,10 @@ try{
default:
echo "error";
}
-
-
-}catch(\Exception $ex){
- $json["st"] = "err";
- $json["err"] = $ex->getMessage();
- $json["errCode"] = (!empty($ex->getCode()))?$ex->getCode():701;
+} catch (\Exception $ex) {
+ $json["st"] = "err";
+ $json["err"] = $ex->getMessage();
+ $json["errCode"] = (!empty($ex->getCode())) ? $ex->getCode() : 701;
}
-echo json_encode($json,JSON_UNESCAPED_UNICODE);
-?>
\ No newline at end of file
+echo json_encode($json, JSON_UNESCAPED_UNICODE);
diff --git a/wms/fun_global.php b/wms/fun_global.php
index aacd5577..5e735cd9 100644
--- a/wms/fun_global.php
+++ b/wms/fun_global.php
@@ -1,4 +1,5 @@
M0107,,"; // 業務部專員：M0024許伃廷、M0107許紓晴(第2關有多位審核人)
@@ -108,7 +113,8 @@ function pricereview_class($rate, $user_id, &$ret=[]) {
* @return array
*
*/
-function pricereview_renovate_class($rate, $user_id, $renovate_flag) {
+function pricereview_renovate_class($rate, $user_id, $renovate_flag)
+{
global $link;
$sql = "select manager from account where accountid = '$user_id'";
@@ -142,11 +148,20 @@ function pricereview_renovate_class($rate, $user_id, $renovate_flag) {
* @param string $token
* @return string
*/
-function check_user_permission($user_id, $token) {
+function check_user_permission($user_id, $token)
+{
global $link;
// 不檢查清單
- $ignore_url_arr = ['/wms/index.php', '/wms/notice-index.php', '/wms/notice-edit.php', '/wms/change-password.php', '/wms/wipwhole-change-contractdate.php', '/wms/wipwhole-change-planning-customer-name.php','/wms/test.php', '/wms/mkt/pricereview_mi-api.php'];
+ $ignore_url_arr = [
+ '/wms/index.php',
+ '/wms/notice-index.php',
+ '/wms/notice-edit.php',
+ '/wms/change-password.php',
+ '/wms/wipwhole-change-contractdate.php',
+ '/wms/wipwhole-change-planning-customer-name.php',
+ '/wms/test.php',
+ ];
if (in_array($_SERVER["SCRIPT_NAME"], $ignore_url_arr)) return;
$do = "";
@@ -169,9 +184,12 @@ function check_user_permission($user_id, $token) {
mysqli_free_result($res);
if (!$do) {
- // echo "無權限操作，請洽管理員。";
- // exit;
- echo "";
+ // 判斷是否從藍凌過來
+ if (!empty($_GET['employee_no'])) {
+ echo "無權限操作，請洽管理員。";
+ exit;
+ }
+ echo "";
} else return $do;
}
@@ -179,7 +197,8 @@ function check_user_permission($user_id, $token) {
* 員工編號對應姓名表
* @return array
*/
-function accountid2name() {
+function accountid2name()
+{
global $link;
$arr = [];
@@ -198,7 +217,8 @@ function accountid2name() {
* @param array $uid 員工編號
* @return array
*/
-function accountid2email($uid) {
+function accountid2email($uid)
+{
global $link;
if (is_array($uid)) $accountid = implode("','", $uid);
@@ -224,7 +244,8 @@ function accountid2email($uid) {
* @param string|array $user_id:下位簽核者
* @param string $seq:順序
*/
-function do_assign($flow_id, $id, $content, $user_id, $seq=0) {
+function do_assign($flow_id, $id, $content, $user_id, $seq = 0)
+{
global $link;
$tds = date("Y-m-d H:i:s");
@@ -279,7 +300,8 @@ function do_assign($flow_id, $id, $content, $user_id, $seq=0) {
* @param string $id:價審單序號
* @param string $content:卷號
*/
-function end_flow($system_id, $flow_id, $id, $content) {
+function end_flow($system_id, $flow_id, $id, $content)
+{
global $link;
$tds = date("Y-m-d H:i:s");
@@ -297,7 +319,7 @@ function end_flow($system_id, $flow_id, $id, $content) {
$sql = "select ekind, person from pricereview_main where id = '$id'";
$res = mysqli_query($link, $sql);
if ($row = mysqli_fetch_row($res)) {
- $content = $row[0]."價格審查結案通知 > ".$content;
+ $content = $row[0] . "價格審查結案通知 > " . $content;
$kind = ($row[0] == "新梯") ? 3 : 4;
$sql2 = "insert into notice (kind, related_id, title, permission, creater, create_at) values (";
$sql2 .= "'$kind', '$id', '$content', '$row[1]', 'system', '$tds')";
@@ -388,7 +410,7 @@ function postCheck($post_val, $default_val = null)
*/
function do_wws2_assign($user_id, $form_id, $flow_code)
{
-
+
global $link;
$tds = date("Y-m-d H:i:s");
$sql = "select appwms.nextval('form_key') form_key";
@@ -493,47 +515,50 @@ function accountidToRoleName($accountid)
* @param array $arr:[電梯種類,人乘/載重,停數,開門方式,速度]
* @return string 規格名,載重
*/
-function facility_spec($arr) {
+function facility_spec($arr)
+{
if (empty($arr)) return;
list($kind, $seat, $stop, $op, $speed) = $arr;
if (strlen($speed) == 1) $speed = str_pad($speed, 2, "0", STR_PAD_LEFT);
- $seat2weight_arr = ["A3" => 320, "A8" => 320, "G10" => 320, "G20" => 320, "G5" => 320, "G6" => 320,
- "280-1-A" => 280, "280-1-L" => 280, "280-2-A" => 280, "280-2-L" => 280,
- "320-1-A" => 320, "320-1-L" => 320, "320-2-A" => 320, "320-2-L" => 320,
- "6" => 450, "8" => 550, "9" => 600, "10" => 700, "11" => 750, "12" => 800,
- "13" => 900, "15" => 1000, "17" => 1150, "20" => 1350, "24" => 1600];
+ $seat2weight_arr = [
+ "A3" => 320, "A8" => 320, "G10" => 320, "G20" => 320, "G5" => 320, "G6" => 320,
+ "280-1-A" => 280, "280-1-L" => 280, "280-2-A" => 280, "280-2-L" => 280,
+ "320-1-A" => 320, "320-1-L" => 320, "320-2-A" => 320, "320-2-L" => 320,
+ "6" => 450, "8" => 550, "9" => 600, "10" => 700, "11" => 750, "12" => 800,
+ "13" => 900, "15" => 1000, "17" => 1150, "20" => 1350, "24" => 1600
+ ];
switch ($kind) {
case "MAQ100":
$weight = $seat2weight_arr[$seat];
- $ret = $kind."-".$weight."-".$stop."-".$op.$speed;
+ $ret = $kind . "-" . $weight . "-" . $stop . "-" . $op . $speed;
break;
case "MAP100":
$weight = $seat2weight_arr[$seat];
- $ret = $kind."-".$weight."*".$stop."-".$op.$speed;
+ $ret = $kind . "-" . $weight . "*" . $stop . "-" . $op . $speed;
break;
case "MAM200":
case "MAH100":
$weight = $seat2weight_arr[$seat];
- $ret = $kind."-".$seat."*".$stop."-".$op.$speed;
+ $ret = $kind . "-" . $seat . "*" . $stop . "-" . $op . $speed;
break;
case "MAF100":
$weight = $seat;
- $ret = $kind."-".$seat."*".$stop."-".$op.$speed;
+ $ret = $kind . "-" . $seat . "*" . $stop . "-" . $op . $speed;
break;
case "MAE100":
$weight = $seat2weight_arr[$seat];
- $ret = $kind."-".$seat."*".$stop."-".$op.$speed;
+ $ret = $kind . "-" . $seat . "*" . $stop . "-" . $op . $speed;
break;
case "M1+M4(2:1)":
case "M1+M4(1:1)":
case "M1":
$weight = $seat2weight_arr[$seat];
- $ret = "P".$seat."-".$seat2weight_arr[$seat]."-".$op."-".$speed."-".$stop;
+ $ret = "P" . $seat . "-" . $seat2weight_arr[$seat] . "-" . $op . "-" . $speed . "-" . $stop;
break;
default:
$weight = $ret = "";
}
- return $ret.",".$weight;
+ return $ret . "," . $weight;
}
/**
@@ -541,7 +566,8 @@ function facility_spec($arr) {
* @param array $arr:[簽核人1,簽核人2,簽核人3,簽核人4]
* @return array 進度,下位審批人
*/
-function sign_status($arr) {
+function sign_status($arr)
+{
$ret = [];
foreach ($arr as $k => $sign) {
$sign_nos = 0;
@@ -554,7 +580,7 @@ function sign_status($arr) {
}
}
if (count($sign_arr) == $sign_nos) {
- $ret["sign_st"] = $k+1;
+ $ret["sign_st"] = $k + 1;
$ret["sign_nt"] = $sign_nt_arr;
return $ret;
}
@@ -566,9 +592,10 @@ function sign_status($arr) {
return $ret;
}
-function getAccounttype($link,$user_id){
- $sql = "SELECT * FROM account where accountid = '$user_id'";
- $data = mysqli_query($link, $sql);
+function getAccounttype($link, $user_id)
+{
+ $sql = "SELECT * FROM account where accountid = '$user_id'";
+ $data = mysqli_query($link, $sql);
$row = mysqli_fetch_array($data, MYSQLI_ASSOC);
return $row['accounttype'];
-}
\ No newline at end of file
+}
diff --git a/wms/gary.php b/wms/gary.php
index d18ed12d..9521d352 100644
--- a/wms/gary.php
+++ b/wms/gary.php
@@ -1,6 +1,67 @@
";
+ date_default_timezone_set('Asia/Taipei');
+ $currentTimestamp = time();
+ $hashReferer = "";
+ for ($i = -3; $i <= 3; $i++) {
+ $modifiedTimestamp = strtotime("$i seconds", $currentTimestamp);
+ $formattedTime = date("Y-m-d H:i:s", $modifiedTimestamp);
+ $hashReferer .= md5("https://bpm.masada.com.twMasada@2023".$formattedTime);
+ }
+ echo $hashReferer;
+ if (strpos($hashReferer, $referer)) {
+ echo "login";
+ }
+} else {
+ echo "沒有 HTTP_REFERER 資訊可用";
+}
+echo "
";
+if(isset($_SERVER['HTTP_REFERER'])) {
+ $referrer = $_SERVER['HTTP_REFERER'];
+ echo "來自於: $referrer";
+} else {
+ echo "沒有 referrer 資訊可用";
+}
+echo "
";
+if (isset($_SERVER['REMOTE_ADDR'])) {
+ $visitor_ip = $_SERVER['REMOTE_ADDR'];
+ echo "訪問者的 IP 地址是： $visitor_ip";
+} else {
+ echo "REMOTE_ADDR : 無法獲取訪問者的 IP 地址";
+}
+echo "
";
+if (isset($_SERVER['HTTP_CLIENT_IP'])) {
+ $visitor_ip = $_SERVER['HTTP_CLIENT_IP'];
+ echo "訪問者的 IP 地址是： $visitor_ip";
+} else {
+ echo "HTTP_CLIENT_IP : 無法獲取訪問者的 IP 地址";
+}
+echo "
";
+
+if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
+ $visitor_ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
+ echo "訪問者的 IP 地址是： $visitor_ip";
+} else {
+ echo "HTTP_X_FORWARDED_FOR : 法獲取訪問者的 IP 地址";
+}
+echo "
";
+
+
+?>
+
+displayPage();
-function CreateToken($user_id, $user_name) {
- date_default_timezone_set("Asia/Taipei");
- $start_time = date("Y-m-d H:i:s");
- $end_time = date('Y-m-d H:i:s',strtotime('+24 hour')); #设定24小时
- $info = $user_id . '.' . base64_encode(urlencode($user_name)) . '.' . $start_time . '.' . $end_time; //设置token过期时间为一天
- $encryption_code = "MASADA!^***";
- //根据以上信息信息生成签名（密钥为 SIGNATURE 自定义全局常量)
- $signature = hash_hmac('md5', $info, $encryption_code);
- //最后将这两部分拼接起来，得到最终的Token字符串
- return $token = $info . '.' . $signature;
+function CreateToken($user_id, $user_name)
+{
+ date_default_timezone_set("Asia/Taipei");
+ $start_time = date("Y-m-d H:i:s");
+ $end_time = date('Y-m-d H:i:s', strtotime('+24 hour')); #设定24小时
+ $info = $user_id . '.' . base64_encode(urlencode($user_name)) . '.' . $start_time . '.' . $end_time; //设置token过期时间为一天
+ $encryption_code = "MASADA!^***";
+ //根据以上信息信息生成签名（密钥为 SIGNATURE 自定义全局常量)
+ $signature = hash_hmac('md5', $info, $encryption_code);
+ //最后将这两部分拼接起来，得到最终的Token字符串
+ return $token = $info . '.' . $signature;
}
require_once dirname(__FILE__) . "/../mkt/database.php";
include "fun_global.php";
if (isset($_REQUEST["function_name"])) {
- $function_name = $_REQUEST["function_name"];
- $function_flag = True;
+ $function_name = $_REQUEST["function_name"];
+ $function_flag = True;
} else {
- $function_name = "";
- $function_flag = False;
+ $function_name = "";
+ $function_flag = False;
}
/**
* 連線T8 MSSQL
*/
-// try {
-// $conn = new PDO("sqlsrv:Server=10.10.145.2;Database=T8MASADA", "masada", "@m222222");
-// if ($conn) {
-// $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
-// }
-// } catch (PDOException $e) {
-// //echo "fail";
-// //echo $e->getMessage();
-// }
+try {
+ $conn = new PDO("sqlsrv:Server=erp.masada.com.tw;Database=T8MASADA", "masada", "ztPmPP!HRoV6SL3E");
+ if ($conn) {
+ $conn->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+ }
+} catch (PDOException $e) {
+ //echo "fail";
+ //echo $e->getMessage();
+}
@@ -53,34 +54,49 @@ if (isset($_REQUEST["function_name"])) {
* $login_dt 登入時間
* $user_auth 使用權限:1,2,3
*****************************/
-$token = $_REQUEST["token"];
+$token = isset($_REQUEST["token"]) ? $_REQUEST["token"] : "";
if (count(explode(".", $token)) > 1) {
- $token_link = "token=" . $_REQUEST["token"];
- list($user_id, $enc_user_name, $login_dt) = explode(".", $token);
- $user_name = urldecode(base64_decode($enc_user_name));
+ $token_link = "token=" . $_REQUEST["token"];
+ list($user_id, $enc_user_name, $login_dt) = explode(".", $token);
+ $user_name = urldecode(base64_decode($enc_user_name));
} else {
- $user_id = !empty($_GET["employee_no"]) ? $_GET["employee_no"] : $user_id;
- $login_dt = !empty($_GET["timestamp"]) ? substr($_GET["timestamp"], 0, 10) : $login_dt;
- $login_dt = date('Y-m-d H:i:s', $login_dt);
- $user_name = accountid2name()[$user_id];
- $token = CreateToken($user_id,$user_name);
- $token_link = "token=" . $token;
+ $referrer = isset($_GET['referer']) ? $_GET['referer'] : "";
+ date_default_timezone_set('Asia/Taipei');
+ $currentTimestamp = time();
+ $hashReferer = "";
+ for ($i = -3; $i <= 3; $i++) {
+ $modifiedTimestamp = strtotime("$i seconds", $currentTimestamp);
+ $formattedTime = date("Y-m-d H:i:s", $modifiedTimestamp);
+ $hashReferer .= md5("https://bpm.masada.com.twMasada@2023" . $formattedTime);
+ }
+ if (strpos($hashReferer, $referrer)) {
+ $user_id = !empty($_GET["employee_no"]) ? $_GET["employee_no"] : $user_id;
+ $login_dt = !empty($_GET["timestamp"]) ? substr($_GET["timestamp"], 0, 10) : $login_dt;
+ $login_dt = date('Y-m-d H:i:s', $login_dt);
+ // 藍凌超連結過來 token 設置永久
+ $login_dt = (date("Y") + 100) . "-12-31 23:59:59";
+ $user_name = accountid2name()[$user_id];
+ $token = CreateToken($user_id, $user_name);
+ $token_link = "token=" . $token;
+ } else {
+ echo "非法訪問！";
+ echo "";
+ }
}
-
include 'IncludeCommon.php';
$includecommon = new IncludeCommon();
$accounttype = getAccounttype($link, $user_id);
$login_json = null;
if (strlen($accounttype) != 0) {
- $jsonres['menu'] = $includecommon->menu_v3($user_id, $accounttype);
- $login_json = json_encode($jsonres, JSON_UNESCAPED_UNICODE);
+ $jsonres['menu'] = $includecommon->menu_v3($user_id, $accounttype);
+ $login_json = json_encode($jsonres, JSON_UNESCAPED_UNICODE);
}
?>
-
-
-
-
Masada後臺系統
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
-
-
-
-
-
-
-
\ No newline at end of file
+
+
\ No newline at end of file
diff --git a/wms/loginapi.php b/wms/loginapi.php
index 63a1cbb2..38ccc299 100644
--- a/wms/loginapi.php
+++ b/wms/loginapi.php
@@ -18,7 +18,7 @@ if(!empty($_REQUEST["account"])&& !empty($_REQUEST["password"])) {
$accounttype = $row['accounttype'];
$user_name = $row['name'];
// 修正小寫登入 token 會帶入小寫的bug //M0117修改于 2023/07/31 13:45
- $accountid = $row['accountid'];
+ $accountid = strtoupper($row['accountid']);
if (strlen($accounttype) != 0) {
// B=保養員 M=永佳捷員工 E=管理員
if ($accounttype == "B" || $accounttype == "M" || $accounttype == "E" || $accounttype == "W"){
diff --git a/wms/rib01-check.php b/wms/rib01-check.php
index ebbda72e..2aad50ad 100644
--- a/wms/rib01-check.php
+++ b/wms/rib01-check.php
@@ -107,7 +107,7 @@ elseif ($state == 1 && ($user_id == "M0056" || $user_id == "M0209")) :
diff --git a/wms/rib01-create.php b/wms/rib01-create.php
index 7c42f97a..09ea8c1f 100644
--- a/wms/rib01-create.php
+++ b/wms/rib01-create.php
@@ -127,8 +127,8 @@ if ($MaxBillNo < 10) {
echo "selected";
} ?>> -->
" >
+ echo "selected";
+ } ?>>
@@ -142,18 +142,15 @@ if ($MaxBillNo < 10) {
收款人
-
+
請選擇收款人
$value) {
foreach ($member as $key => $value) {
?>
-
- " >
+
+ " style="display:flex" >
@@ -180,7 +177,12 @@ if ($MaxBillNo < 10) {