Warning: chmod(): Operation not permitted in /data/html/improve/wp-content/plugins/wordfence/wordfence.php on line 8
403WebShell
403Webshell
Server IP : 52.9.100.119  /  Your IP : 216.73.216.135
Web Server : Apache/2.4.61 (Amazon) OpenSSL/1.0.2k-fips PHP/7.3.30 Phusion_Passenger/5.1.5
System : Linux ip-172-31-9-35 4.14.355-196.618.amzn1.x86_64 #1 SMP Mon Apr 7 17:09:50 UTC 2025 x86_64
User : root ( 0)
PHP Version : 7.3.30
Disable Function : exec,passthru,shell_exec,system,popen,proc_open
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /data/html/domik-general/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /data/html/domik-general/orders_api.php
<?php
header('Access-Control-Allow-Origin: *');
header('Content-Type: application/json,application/x-www-form-urlencoded,multipart/form-data');
header('Access-Control-Allow-Headers: Content-Type');
error_reporting(error_reporting() ^ E_DEPRECATED); 
require 'lib/rb_conf.php';
require_once 'lib/api_token.php';

require('vendor/phpmailer/phpmailer/PHPMailerAutoload.php');


R::fancyDebug(false);

$data                = array();
$error_code        = 0;
$error_description = "";

if(isset($_POST['api_token']) & isset($_POST['user_id']) & isset($_POST['option'])){

    if(validate_token($_POST['user_id'],$_POST['api_token'])){

        switch ($_POST['option']){
            case 'get_order':
                if(isset($_POST['order_id'])){
                    getOrder($_POST['order_id']);
                }
                else{
                    $error_code        = 2;
                    $error_description = 'missing order_id';
                    $data['error']           = array("code" => $error_code, "description" => $error_description);

                    echo json_encode($data, JSON_UNESCAPED_UNICODE);
                }
                break;

            case 'get_catalogs':
                getCatalogs();
                break;

            case 'new_order':
                $orders_bean = R::findAll("order","id_hospital = ? AND collaborator_number = ?",[$_POST['order_id_hospital'],$_POST['collaborator_number']]);
                $user_bean = R::load('collaborator',$_POST['id_collaborator']);
                if (empty($user_bean->maxOrders) || count($orders_bean) < $user_bean->maxOrders){
                    newOrder();
                }
                else{
                    $error_code        = 4;
                    $error_description = 'Orden no concretada. El número máximo de órdenes que puede realizar este usuario es '.$user_bean->maxOrders;
                    $data['error']           = array("code" => $error_code, "description" => $error_description);

                    echo json_encode($data, JSON_UNESCAPED_UNICODE);
                }
                break;

            case 'get_orders':
                getOrders();
                break;

            case 'edit_order':
                if(isset($_POST['order_id'])){
                    editOrder($_POST['order_id']);
                }
                else{
                    $error_code        = 2;
                    $error_description = 'missing order_id';
                    $data['error']           = array("code" => $error_code, "description" => $error_description);

                    echo json_encode($data, JSON_UNESCAPED_UNICODE);
                }
            break;

            case 'edit_item':
                if(isset($_POST['item_id'])){
                    editItem($_POST['item_id']);
                }
                else{
                    $error_code        = 2;
                    $error_description = 'missing item_id';
                    $data['error']           = array("code" => $error_code, "description" => $error_description);

                    echo json_encode($data, JSON_UNESCAPED_UNICODE);
                }
                break;

            case 'edit_order_status':
                if(isset($_POST['order_id'])){
                    $user_bean = R::load('user',$_POST['user_id']);
                    if ($user_bean->role == "Store" or $user_bean->role == "Super"){
                        editOrderStatus($_POST['order_id']);
                    }
                    else{
                        $error_code        = 3;
                        $error_description = 'user is not allowed to edit status';
                        $data['error']           = array("code" => $error_code, "description" => $error_description);

                        echo json_encode($data, JSON_UNESCAPED_UNICODE);
                    }

                }
                else{
                    $error_code        = 2;
                    $error_description = 'missing order_id';
                    $data['error']           = array("code" => $error_code, "description" => $error_description);

                    echo json_encode($data, JSON_UNESCAPED_UNICODE);
                }
                break;
            case 'bulk_edit_order_status':
                    if(isset($_POST['order_id_list'])){
                        $user_bean = R::load('user',$_POST['user_id']);
                        if ($user_bean->role == "Store" or $user_bean->role == "Super"){
                            bulkEditOrderStatus($_POST['order_id_list']);
                        }
                        else{
                            $error_code        = 3;
                            $error_description = 'user is not allowed to edit status';
                            $data['error']           = array("code" => $error_code, "description" => $error_description);
    
                            echo json_encode($data, JSON_UNESCAPED_UNICODE);
                        }
    
                    }
                    else{
                        $error_code        = 2;
                        $error_description = 'missing order_id';
                        $data['error']           = array("code" => $error_code, "description" => $error_description);
    
                        echo json_encode($data, JSON_UNESCAPED_UNICODE);
                    }
                    break;

        }
    }
    else{
        $error_code        = 1;
        $error_description = 'Invalid Token. ';
        $data['error']           = array("code" => $error_code, "description" => $error_description);

        echo json_encode($data, JSON_UNESCAPED_UNICODE);
    }

}
else{
    $error_code        = 2;
    $error_description = 'Required fields are missing. ';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);
}

// - - - Functions - - -

function getCatalogs(){

    $user_bean = R::load("user",$_POST['user_id']);
    $hospital_bean = $user_bean->hospital;

    if ($user_bean->role ==  "Super" or $user_bean->role ==  "Store" ){
        $hospital_beans = R::findAll('hospital');
        $areas_beans = R::findAll('area');
        $models_beans = R::findAll('model');
    }
    elseif ($user_bean->role ==  "Admin" or $user_bean->role ==  "User"){
        $hospital_beans = R::findAll('hospital',"id = ?",[$hospital_bean->id]);
        $areas_beans = R::findAll('area',"hospital_id = ?",[$hospital_bean->id]);
        if($_POST['all_model']=='YES'){
            $models_beans = R::findAll('model');
        } else {
            $models_beans = R::findAll('model',"inner join hospital_model hm on model.id = hm.model_id where hospital_id = ?",[$hospital_bean->id]);
        }
    }

    $thread_color_beans = R::findAll('threadcolor');
    $color_beans = R::findAll('color');


    foreach ($hospital_beans as $hospital){
        $hospital->ownAreaList;
    }

    foreach ($models_beans as $model){
        $model->brand;
        $model->gender;
        $model->sharedSizeList;
        $model->sharedSizeList;
        $model->sharedAreaList;
        $model->sharedColorList;
        $model->sharedHospitalList;
        $model->sharedThreadColorList;
    }


    $data['hospitals'] = $hospital_beans;
    $data['areas'] = $areas_beans;
    $data['thread_colors'] = $thread_color_beans;
    $data['colors'] = $color_beans;
    $data['models'] = $models_beans;

    $error_code        = 0;
    $error_description = 'Success.';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);

}

function getOrder($id){
    $order_bean = R::load("order",$id);
    $order_bean->ownItemList;
    $data['order'] = $order_bean;
    $error_code        = 0;
    $error_description = 'Success.';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);
}

function getOrders(){


    $user_bean = R::load("user",$_POST['user_id']);
    $hospital_bean = $user_bean->hospital;

    if ($user_bean->role ==  "Super" or $user_bean->role ==  "Store" ){
        $orders_bean = R::findAll("order");
        $orders_bean_solicitud = R::findAll("order","status = ?",["Solicitud"]);
        $orders_bean_produccion = R::findAll("order","status = ?",["Producción"]);
        $orders_bean_importacion = R::findAll("order","status = ?",["Proceso de importación"]);
        $orders_bean_almacen = R::findAll("order","status = ?",["Almacén Domik"]);
        $orders_bean_bordado = R::findAll("order","status = ?",["Bordado"]);
        $orders_bean_pick = R::findAll("order","status = ?",["Pick & Pack"]);
        $orders_bean_calidad = R::findAll("order","status = ?",["Calidad"]);
        $orders_bean_transito = R::findAll("order","status = ?",["En tránsito a destino"]);
        $orders_bean_pendiente = R::findAll("order","status = ?",["Pendientes de entrega"]);
        $orders_bean_entregado = R::findAll("order","status = ?",["Entregado"]);
        $orders_bean_rechazado = R::findAll("order","status = ?",["Rechazado"]);
    }
    elseif ($user_bean->role ==  "Admin"){ 
        $orders_bean = R::findAll("order","id_hospital = ? ",[$hospital_bean->id]);
        $orders_bean_solicitud = R::findAll("order","status = ? and hospital = ?",["Solicitud",$hospital_bean->id]);
        $orders_bean_produccion = R::findAll("order","status = ? and hospital = ?",["Producción",$hospital_bean->id]);
        $orders_bean_importacion = R::findAll("order","status = ? and hospital = ?",["Proceso de importación",$hospital_bean->id]);
        $orders_bean_almacen = R::findAll("order","status = ? and hospital = ?",["Almacén Domik",$hospital_bean->id]);
        $orders_bean_bordado = R::findAll("order","status = ? and hospital = ?",["Bordado",$hospital_bean->id]);
        $orders_bean_pick = R::findAll("order","status = ? and hospital = ?",["Pick & Pack",$hospital_bean->id]);
        $orders_bean_calidad = R::findAll("order","status = ? and hospital = ?",["Calidad",$hospital_bean->id]);
        $orders_bean_transito = R::findAll("order","status = ? and hospital = ?",["En tránsito a destino",$hospital_bean->id]);
        $orders_bean_pendiente = R::findAll("order","status = ? and hospital = ?",["Pendientes de entrega",$hospital_bean->id]);
        $orders_bean_entregado = R::findAll("order","status = ? and hospital = ?",["Entregado",$hospital_bean->id]);
        $orders_bean_rechazado = R::findAll("order","status = ? and hospital = ?",["Rechazado",$hospital_bean->id]);
    }
    elseif ($user_bean->role ==  "User"){
        $orders_bean = R::findAll("order","user = ? ",[$user_bean->id]);
    }
    elseif ($user_bean->role ==  "Ejecutivo"){
        $orders_bean = R::findAll("order","id_hospital = ? ",[$hospital_bean->id]);
    }

    foreach ($orders_bean as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders'] = $orders_bean;

    foreach ($orders_bean_solicitud as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_solicitud'] = $orders_bean_solicitud;

    foreach ($orders_bean_produccion as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_produccion'] = $orders_bean_produccion;

    foreach ($orders_bean_importacion as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_importacion'] = $orders_bean_importacion;

    foreach ($orders_bean_almacen as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_almacen'] = $orders_bean_almacen;

    foreach ($orders_bean_bordado as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_bordado'] = $orders_bean_bordado;

    foreach ($orders_bean_pick as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_pick'] = $orders_bean_pick;

    foreach ($orders_bean_calidad as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_calidad'] = $orders_bean_calidad;

    foreach ($orders_bean_transito as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_transito'] = $orders_bean_transito;

    foreach ($orders_bean_entregado as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_entregado'] = $orders_bean_entregado;

    foreach ($orders_bean_pendiente as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_pendiente'] = $orders_bean_pendiente;

    foreach ($orders_bean_rechazado as $order_bean){
        $order_bean->ownItemList;
    }
    $data['orders_rechazado'] = $orders_bean_rechazado;
    $error_code        = 0;
    $error_description = 'Success.';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);
}

function newOrder(){

    
    $user = $_POST['user_id'];
    $items_arr = (array) json_decode($_POST['items_array']);
    $image_repeat =  isset($_POST['image_all']) ? $_POST['image_all'] : "No";
    $order_bean = R::dispense( 'order' );
    $order_bean->gender = isset($_POST['order_gender']) ? $_POST['order_gender'] : "";
    $order_bean->name = isset($_POST['order_name']) ? $_POST['order_name'] : "";
    $order_bean->firstLastname = isset($_POST['order_firstLastname']) ? $_POST['order_firstLastname'] : "";
    $order_bean->secondLastname = isset($_POST['order_secondLastname']) ? $_POST['order_secondLastname'] : "";
    $order_bean->specialty = isset($_POST['order_specialty']) ? $_POST['order_specialty'] : "";
    $order_bean->specialty2 = isset($_POST['order_specialty2']) ? $_POST['order_specialty2'] : "";
    $order_bean->idHospital = isset($_POST['order_id_hospital']) ? $_POST['order_id_hospital'] : "";
    $order_bean->collaboratorNumber = isset($_POST['collaborator_number']) ? $_POST['collaborator_number'] : "";
    $order_bean->hospital = isset($_POST['order_hospital']) ? $_POST['order_hospital'] : "";
    $order_bean->area = isset($_POST['order_area']) ? $_POST['order_area'] : "";
    $order_bean->user = $user;
    $order_bean->dayb = isset($_POST['order_dayBirth']) ? $_POST['order_dayBirth'] : "";
    $order_bean->monthb = isset($_POST['order_monthBirth']) ? $_POST['order_monthBirth'] : "";
    $order_bean->mail = isset($_POST['order_mail']) ? $_POST['order_mail'] : "";
    $order_bean->phone = isset($_POST['order_phone']) ? $_POST['order_phone'] : "";
    $order_bean->phoneOffice = isset($_POST['order_phone_office']) ? $_POST['order_phone_office'] : "";
    $order_bean->category = isset($_POST['order_category']) ? $_POST['order_category'] : "";
    $order_bean->status = "Solicitud";
    $order_bean->date = date("Y-m-d");
    $order_bean->dateEdit = null;
    $order_bean->partial = 0;
    $order_bean->partialEditDate = null;
    $id = R::store($order_bean);
    mkdir("/sites/domik-general/uploads/".$id, 0777,true);

    $total_count = 0;

    if ($image_repeat == "Yes"){

        $item_image = isset($_FILES['image']) ? $_FILES['image'] : NULL;
        if (!empty($item_image)){
            $extension = pathinfo($item_image['name'], PATHINFO_EXTENSION);
            $ruta_destino_archivo = "/sites/domik-general/uploads/".$id."/Logo.".$extension;
            $origin = "Ruta y nombre del archivo: ".$item_image['tmp_name'];
            $save =  "Ruta y nombre del destino: ".$ruta_destino_archivo;
            $archivo_ok = move_uploaded_file($item_image['tmp_name'], $ruta_destino_archivo);
            $item_image = "https://"."{$_SERVER['HTTP_HOST']}"."/uploads/".$id."/Logo.".$extension;
        }


        foreach($items_arr as $item){

            $model_bean = R::load("model",$item->id);
            
            if($item->size=='2XL' || $item->size=='XXL' || $item->size=='3XL' || $item->size=='XXXL' || $item->size=='4XL' || $item->size=='XXXXL'){
                $price = $model_bean->priceextras;
            } else {
                $price = $model_bean->price;
            }

            $iteam_bean = R::dispense( 'item' );
            $iteam_bean->order_id = $order_bean->id;
            $iteam_bean->qty = $item->qty;
            $total_count = $total_count + $item->qty;
            $iteam_bean->model = $item->model;
            $iteam_bean->type = $item->type;
            $iteam_bean->size = $item->size;
            $iteam_bean->color = $item->color;
            $iteam_bean->price = $price;
            $iteam_bean->logo = $item->logo;
            if($item->logo == "Yes"){
                $iteam_bean->logoImage = $item_image;
            }
            else{
                $iteam_bean->logoImage = "";
            }
            $iteam_bean->embroid = $item->embroid;
            $iteam_bean->embroidText = $item->embroidText;
            $iteam_bean->embroidPosition  = $item->embroidPosition;
            $iteam_bean->embroidFont = $item->embroidFont;
            $iteam_bean->embroidFontColor = $item->embroidFontColor;
            $iteam_bean->logoPosition = $item->logoPosition;
            $iteam_bean->logoName = $item->logoName;
            R::store($iteam_bean);
        }
    }
    else{

        $images_array = array();
        foreach ($_FILES as $key => $file) {
            $images_array[] = $key;
        }

        $cont_file = 0;

        foreach($items_arr as $item){
            
            $model_bean = R::load("model",$item->id);
            
            if($item->size=='2XL' || $item->size=='XXL' || $item->size=='3XL' || $item->size=='XXXL' || $item->size=='4XL' || $item->size=='XXXXL'){
                $price = $model_bean->priceextras;
            } else {
                $price = $model_bean->price;
            }
            $iteam_bean = R::dispense( 'item' );
            $iteam_bean->order_id = $order_bean->id;

            $iteam_bean->qty = $item->qty;
            $total_count = $total_count + $item->qty;
            $iteam_bean->model = $item->model;
            $iteam_bean->type = $item->type;
            $iteam_bean->size = $item->size;
            $iteam_bean->color = $item->color;
            $iteam_bean->price = $price;
            $iteam_bean->logo = $item->logo;
            if($item->logo == "Sí" || $item->logo == "Si"){

                mkdir("/sites/domik-general/uploads/order/".$id."/", 0777,true);

                // $item_image = $_FILES[$images_array[$cont_file]];
                $filenameo = "logo_".$item->type."_".$item->id;
                $item_image = $_FILES[$filenameo];
                $extension = pathinfo($item_image['name'], PATHINFO_EXTENSION);
                $ruta_destino_archivo = "/sites/domik-general/uploads/order/".$id."/".$item_image['name'];
                
                $origin = "Ruta y nombre del archivo: ".$item_image['tmp_name'];
                $save =  "Ruta y nombre del destino: ".$ruta_destino_archivo;
                $archivo_ok = move_uploaded_file($item_image['tmp_name'], $ruta_destino_archivo);
                $item_image = "https://"."{$_SERVER['HTTP_HOST']}"."/uploads/order/".$id."/".$item_image['name'];

                $iteam_bean->logoImage = $item_image;

                $cont_file = $cont_file+1;

            }
            else{
                $iteam_bean->logoImage = "";
            }
            $iteam_bean->embroid = $item->embroid;
            $iteam_bean->embroidText = $item->embroidText;
            $iteam_bean->embroidPosition  = $item->embroidPosition;
            $iteam_bean->embroidFont = $item->embroidFont;
            $iteam_bean->embroidFontColor = $item->embroidFontColor;
            $iteam_bean->logoPosition = $item->logoPosition;
            $iteam_bean->logoName = $item->logoName;
            R::store($iteam_bean);

        }

    }

    $order_bean->total = $total_count;
    R::store($order_bean);



    $final_order_bean = R::load("order",$id);
    $models = $final_order_bean->ownItemList;

    $user_bean = R::load('user',$user);

    $mailUser = $user_bean->mail ? $user_bean->mail : 'sistemas@domikuniformes.com';

    $hospital_bean = R::load("hospital",$_POST['order_id_hospital']);

    $mailHost = $hospital_bean->mail ? $hospital_bean->mail : 'sistemas@domikuniformes.com';
    


    //Create an instance; passing `true` enables exceptions
   $mail = new PHPMailer();

    try {
        //Server settings
        $mail->SMTPDebug = false;                      //Enable verbose debug output
        $mail->CharSet = 'UTF-8';
        $mail->isSMTP();                                            //Send using SMTP
        $mail->Host       = 'mail.domikuniformes.com';                     //Set the SMTP server to send through
        $mail->SMTPAuth   = true;                                   //Enable SMTP authentication
        $mail->Username   = 'portal@domikuniformes.com';                     //SMTP username
        $mail->Password   = 'fujNshw7n2wx';                               //SMTP password
        $mail->SMTPSecure = "tls";            //Enable implicit TLS encryption
        $mail->Port       = 25;                                    //TCP port to connect to; use 587 if you have set `SMTPSecure = PHPMailer::ENCRYPTION_STARTTLS`


        //Recipients
        $mail->setFrom('portal@domikuniformes.com', 'Portal Domik');
        
        $mail->addAddress($mailHost);

        if($final_order_bean->mail){
            $mail->addAddress($final_order_bean->mail);
        }

        $mail->addAddress($mailUser);           
        
        $mail->addBCC('sistemas@domikuniformes.com');
        
	$mail->addAddress('coordventas@domikuniformes.com');

       $mail->addAddress('ventas3@domikuniformes.com');

        $mail->addBCC('coordventas@domikuniformes.com');

        $mail->addBCC('consultor_comercial@domikuniformes.com');

      $mail->addBCC('dir.comercial@domikuniformes.com');

      $mail->addBCC('operaciones@domikuniformes.com');
        
        //Content
        $mail->isHTML(true);
        $subject = "Confirmación de orden Hospital ".$final_order_bean->hospital." colaborador # ".$final_order_bean->collaboratorNumber;
        $subject = utf8_decode($subject);//Set email format to HTML
        $mail->Subject = $subject;

        $body = file_get_contents('lib/correo_domik_orden_nueva.html');
        //se cambian los parametros generales de la orden
        $body = str_replace('$hospital', $final_order_bean->hospital, $body);
        $body = str_replace('$especialidad', $final_order_bean->specialty, $body);
        $body = str_replace('$2especialidad', $final_order_bean->specialty2, $body);
        $body = str_replace('$genero', $final_order_bean->gender, $body);
        $body = str_replace('$nombrecompleto', $final_order_bean->name." ".$final_order_bean->firstLastname." ".$final_order_bean->secondLastname, $body);
        $body = str_replace('$telefono', $final_order_bean->phone, $body);
        $body = str_replace('$correoelectronico', $final_order_bean->mail, $body);

        //condicional de parametros en base  a la orden para cada item
        foreach($models as $model){
            $item  = file_get_contents('lib/item.html');
            $item = str_replace('$uniforme',$model->type,$item);
            $item = str_replace('$modelo',$model->model,$item);
            $item = str_replace('$genero',$final_order_bean->gender,$item);
            $item = str_replace('$talla',$model->size,$item);
            $item = str_replace('$cantidad',$model->qty,$item);
            $item = str_replace('$conjuntocolor',$model->color,$item);

            if($model->embroid == "No"){
                $item = str_replace('$posicionbordado',"No",$item);
                $item = str_replace('$letrabordado',"No",$item);
                $item = str_replace('$colorbordado',"No",$item);
            }
            else{
                $item = str_replace('$posicionbordado',$model->embroid_position,$item);
                $item = str_replace('$letrabordado',$model->embroid_font,$item);
                $item = str_replace('$colorbordado',$model->embroid_font_color,$item);
            }

            // if($final_order_bean->scrubLogo == "No"){
            //     $item = str_replace('$logotipo',$final_order_bean->scrubLogo,$item);
            // }
            // elseif($final_order_bean->scrubLogo == "Si"){
            //     $scrub_logo_image = $final_order_bean->scrubLogo_image;
            //     $scrub_logo_image = str_replace("/sites/domik-general/", "https://api-tallero.domikuniformes.com//", $scrub_logo_image);
            //     $item = str_replace('$logotipo',$scrub_logo_image,$item);
            // }

            $body = $body.$item;
        }

        //finaliza
        $body = $body.file_get_contents('lib/end.html');
        $mail->Body    = $body;
        //$mail->AltBody = 'This is the body in plain text for non-HTML mail clients';

        $mail->send();
        $mail_response = 'Message has been sent';
    } catch (Exception $e) {
        $mail_response = "Message could not be sent. Mailer Error: {$mail->ErrorInfo}";
    }


    $data['order'] = $final_order_bean;
    $error_code        = 0;
    $error_description = 'Success.';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);

}

function editItem($id){

    $iteam_bean = R::load( 'item',$id);

    $item_image = isset($_FILES['item_image']) ? $_FILES['item_image'] : NULL;
    if (!empty($scrubLogo_image)){
        $extension = pathinfo($item_image['name'], PATHINFO_EXTENSION);
        $ruta_destino_archivo = "/sites/domik-general/uploads/".$id."/".$item_image['name'];
        $origin = "Ruta y nombre del archivo: ".$item_image['tmp_name'];
        $save =  "Ruta y nombre del destino: ".$ruta_destino_archivo;
        $archivo_ok = move_uploaded_file($item_image['tmp_name'], $ruta_destino_archivo);
        $item_image = "https://"."{$_SERVER['HTTP_HOST']}"."/uploads/".$id."/".$item_image['name'];
        $iteam_bean->logoImage = $item_image;
    }

    $iteam_bean->qty = (isset($_POST['item_qty'])) ? $_POST['item_qty'] : 0;
    $iteam_bean->model = (isset($_POST['item_model'])) ? $_POST['item_model'] : "";
    $iteam_bean->size = (isset($_POST['item_size'])) ? $_POST['item_size'] : "";
    $iteam_bean->color = (isset($_POST['item_color'])) ? $_POST['item_color'] : "";
    $iteam_bean->logo = (isset($_POST['item_logo'])) ? $_POST['item_logo'] : "";
    $iteam_bean->embroid = (isset($_POST['item_embroid'])) ? $_POST['item_embroid'] : "";
    $iteam_bean->embroidText = (isset($_POST['item_embroid_text'])) ? $_POST['item_embroid_text'] : "";
    $iteam_bean->embroidPosition =  (isset($_POST['item_embroid_position'])) ? $_POST['item_embroid_position'] : "";
    $iteam_bean->embroidFont = (isset($_POST['item_embroid_font'])) ? $_POST['item_embroid_font'] : "";
    $iteam_bean->embroidFontColor = (isset($_POST['item_embroid_font_color'])) ? $_POST['item_embroid_font_color'] : "";

    R::store($iteam_bean);

    $items = R::findAll('item',"order_id = ?",[$iteam_bean->order_id]);

    $new_order_total = 0;

    foreach ($items as $item) {
        $new_order_total = $new_order_total + $item->qty;
    }

    $order = R::load('order',$iteam_bean->order_id);

    $order->total = $new_order_total;

    R::store($order);

    $data['item'] = $iteam_bean;
    $error_code        = 0;
    $error_description = 'Success.';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);
}

function editOrder($order_id)
{
    $order_bean = R::load('order', $order_id);
    $order_bean->gender = isset($_POST['order_gender']) ? $_POST['order_gender'] : "";
    $order_bean->name = isset($_POST['order_name']) ? $_POST['order_name'] : "";
    $order_bean->firstLastname = isset($_POST['order_firstLastname']) ? $_POST['order_firstLastname'] : "";
    $order_bean->secondLastname = isset($_POST['order_secondLastname']) ? $_POST['order_secondLastname'] : "";
    $order_bean->specialty = isset($_POST['order_specialty']) ? $_POST['order_specialty'] : "";
    $order_bean->specialty2 = isset($_POST['order_specialty2']) ? $_POST['order_specialty2'] : "";
    $order_bean->hospital = isset($_POST['order_hospital']) ? $_POST['order_hospital'] : "";
    $order_bean->area = isset($_POST['order_area']) ? $_POST['order_area'] : "";
    $order_bean->mail = isset($_POST['order_mail']) ? $_POST['order_mail'] : "";
    $order_bean->phone = isset($_POST['order_phone']) ? $_POST['order_phone'] : "";
    $order_bean->status = isset($_POST['order_status']) ? $_POST['order_status'] : $order_bean->status;
    $order_bean->dateEdit = date("Y-m-d");

    //$order_bean->total = $order_bean->coatQty+$order_bean->jacketQty+$order_bean->pantsQty+$order_bean->scrubQty ;

    if (isset($_POST['order_partial'])){

        $order_bean->partial = $_POST['order_partial'];
        $order_bean->partialEditDate = date("Y-m-d");

    }

    R::store($order_bean);
    $order_bean->ownItemList;

    $data['order'] = $order_bean;
    $error_code        = 0;
    $error_description = 'Success.';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);

}

function editOrderStatus($order_id)
{
    $order_bean = R::load('order', $order_id);
    $order_bean->status = isset($_POST['order_status']) ? $_POST['order_status'] : $order_bean->status;
    $order_bean->dateEdit = date("Y-m-d");

    if (isset($_POST['order_partial'])){
        $order_bean->partial = $_POST['order_partial'];
        $order_bean->partialEditDate = date("Y-m-d");
    }

    R::store($order_bean);

    $data['order'] = $order_bean;
    $error_code        = 0;
    $error_description = 'Success.';
    $data['error']           = array("code" => $error_code, "description" => $error_description);

    echo json_encode($data, JSON_UNESCAPED_UNICODE);

}

function bulkEditOrderStatus($id_list)
{
    $id_list = explode(",",$id_list);
    foreach ($id_list as $or_id){
        $order_bean = R::load('order', $or_id);
        $order_bean->status = isset($_POST['order_status']) ? $_POST['order_status'] : $order_bean->status;

        R::store($order_bean);
    }

    getOrders();

}



Youez - 2016 - github.com/yon3zu
LinuXploit