load_trans.php at ERPSOD

<?PHP
include_once("config.php");

// Are you authorised?
$ok=role_check('Admin');
if (!$ok){
	$fout = 'No Access for chosen option';
	header("Location: login.php?error=$fout"); 
}


$form1=$_POST["form"];
$action=$_POST["command"];
if ($form1=="load_trans"){
	if ($action == "Cancel") {
		header('Location: copyright.php');
	}
	
	$f=&$_FILES['csv_file'];
	$filelocal = $f['tmp_name'] ;
	$serverfile = _DIR_HOME . _DIR_UPLOAD . safe_filename($f['name']);
	
	// Do we have the upload directory?
	if (!is_dir(_DIR_HOME . _DIR_UPLOAD)) {
		//  Let's try to create it.
		if (!@mkdir(_DIR_HOME . _DIR_UPLOAD)) {
			//  If directory can't be made Set error message and output
			echo $serverfile;
			die(" problems creating upload directory, please verify installation");	
		}
	}
	if (!is_file($filelocal)) {
		echo $filelocal;
		die(" file does not exist");
	}
	// delete existing copy
	if (is_file($serverfile)) {
		unlink($serverfile);
	}	
	if (!copy($filelocal, $serverfile)) {
		//  Set error message and output
		die("cannot copy file to server, check installation");
	}

	// clean the table
	$sql="truncate table erptrans";
	$result = mysql_query($sql);
	// load the fresh data
	$sql  ="LOAD DATA LOCAL INFILE '";
	$sql .= $serverfile;
	$sql .= "' INTO TABLE erptrans FIELDS TERMINATED BY ';' LINES TERMINATED BY '\n' (transname, transdesc)"; 
	$result = mysql_query($sql);
	?>
	Transaction Data has been loaded.............
	<?PHP
}
?>
<HTML>
<HEAD>
<link rel="stylesheet" type="text/css" href="<?PHP echo $style ?>">
<script language="JavaScript1.2" src="js/coolmenus4.js">
</script>
</HEAD>
<body bgcolor="#ffffff">
<script language="JavaScript1.2" src="js/erpsod.js">
</script><br><br>
<center>
<h3>Loading Transactions</h3>
<form enctype="multipart/form-data" method="post" >
<input type="hidden" name="form" value="load_trans" >
<table border=1 cellpadding=0 cellspacing=0 bgcolor="AQUA"><tr><td>
<tr><td align="center"><b>Select CSV file to reload transactions from</b></td></tr>
<tr><td>
<input type="file" name="csv_file" size="50" />
</td></td><td></tr>
<tr><td align="center">
<div>
<INPUT TYPE="SUBMIT" NAME="command" VALUE="Load" style="width: 80px;"   ONCLICK="return confirm('Replace Current Dataset?')">
<INPUT TYPE="SUBMIT" NAME="command" VALUE="Cancel" style="width: 80px;"><br>
</div>
</td></tr>
</table>
</center>
</FORM>
</BODY>
<?php
include_once("footer.php");
?>
</HTML>