load_sod.php at ERPSOD - Free PHP Code

<?PHP
include_once("config.php");

// Are you authorised?
$ok=role_check('Admin');
if (!$ok){
	$fout = 'No Access for chosen option';
	header("Location: login.php?error=$fout"); 
}

$form1=$_POST["form"];
$action=$_POST["command"];
if ($form1=="load_sod"){
	if ($action == "Cancel") {
		header('Location: copyright.php');
	}
	
	$f=&$_FILES['csv_file'];
	$filelocal = $f['tmp_name'] ;
	$serverfile = _DIR_HOME . _DIR_UPLOAD . safe_filename($f['name']);
	
	// Do we have the upload directory?
	if (!is_dir(_DIR_HOME . _DIR_UPLOAD)) {
		//  Let's try to create it.
		if (!@mkdir(_DIR_HOME . _DIR_UPLOAD)) {
			//  If directory can't be made Set error message and output
			echo $serverfile;
			die(" problems creating upload directory, please verify installation");	
		}
	}
	if (!is_file($filelocal)) {
		echo $filelocal;
		die(" file does not exist");
	}
	// delete existing copy
	if (is_file($serverfile)) {
		unlink($serverfile);
	}	
	if (!copy($filelocal, $serverfile)) {
		//  Set error message and output
		die("cannot copy file to server, check installation");
	}

	// clean the tables
	$sql="truncate table tasksodtemp";
	$result = mysql_query($sql);
	$sql="truncate table tasksod";
	$result = mysql_query($sql);


	// load the fresh data
	$sql  ="LOAD DATA LOCAL INFILE '";
	$sql .= $serverfile;
	$sql .= "' INTO TABLE tasksodtemp FIELDS TERMINATED BY ';' LINES TERMINATED BY '\n' (taskname, sodname,reason)"; 
	$result = mysql_query($sql);
	?>
	SOD conflicts have been loaded, now converting dataset........
	<?PHP
	// use the temp table to fill the relational table
	$sql1= "select * from tasksodtemp";
	$result1 = mysql_query($sql1);
	while ($row1 = mysql_fetch_array($result1, MYSQL_NUM)) {
		// retrieve taskid
		$taskname = trim($row1[0]);
		$sql2 = "select taskid from erptask where taskname='$taskname'";
		$result2 = mysql_query($sql2);
		$tasktel= mysql_num_rows($result2);
		if ($tasktel>0){
			$row2 = mysql_fetch_array($result2, MYSQL_NUM);
			$taskid= $row2[0];
			$reason= $row2[2];
			// retrieve the sodid
			$sodname=trim($row1[1]);
			$sql3= "select taskid from erptask where taskname='$sodname'";
			$result3 = mysql_query($sql3);
			$sodtel= mysql_num_rows($result3);
			if ($sodtel >0){
				$row3 = mysql_fetch_array($result3, MYSQL_NUM);
				$sodid=trim($row3[0]);
				$sql9="select * from tasksod where taskid=$taskid and sodid=$sodid";
				$result9 = mysql_query($sql9);
				$tel= mysql_num_rows($result9);
				if ($tel<1){
					$sql4= "insert into tasksod (taskid,sodid,mitigated,proces,reason,sodform) values($taskid,$sodid,'N','','','')";
					$result4 = mysql_query($sql4);
					if (!$result4) {
						die('Invalid query: ' . $sql4);
					}

					$sql5= "insert into tasksod (taskid,sodid,mitigated,proces,reason,sodform) values($sodid,$taskid,'N','','','')";
					$result5 = mysql_query($sql5);
										if (!$result5) {
						die('Invalid query: ' . $sql5);
					}

				}
			}
		}
	}
	?>
	SOD conflicts have been converted to dataset........
	<?PHP
}
?>
<HTML>
<HEAD>
<link rel="stylesheet" type="text/css" href="<?PHP echo $style ?>">
<script language="JavaScript1.2" src="js/coolmenus4.js">
</script>
</HEAD>
<body bgcolor="#ffffff">
<script language="JavaScript1.2" src="js/erpsod.js">
</script><br><br>
<center>
<h3>Loading SOD conflicts</h3>
<form enctype="multipart/form-data" method="post" >
<input type="hidden" name="form" value="load_sod" >
<table border=1 cellpadding=0 cellspacing=0 bgcolor="AQUA"><tr><td>
<tr><td align="center"><b>Select CSV file to reload known SOD conflicts from</b></td></tr>
<tr><td>
<input type="file" name="csv_file" size="50" />
</td></td><td></tr>
<tr><td align="center">
<div>
<INPUT TYPE="SUBMIT" NAME="command" VALUE="Load" style="width: 80px;"   ONCLICK="return confirm('Replace Current Dataset?')">
<INPUT TYPE="SUBMIT" NAME="command" VALUE="Cancel" style="width: 80px;"><br>
</div>
</td></tr>
</table>
</center>
</FORM>
</BODY>
<?php
include_once("footer.php");
?>
</HTML>