tuttogare/public_html/backend/cpn/atti/save.php

<?
  
  $configPath = substr(__DIR__,0,strpos(__DIR__,"public_html/"))."config.php";
  include_once($configPath);
  $error = true;
  $id_modulo = "atti";
  if (!empty($_POST) && !empty($_SESSION["utente"]) && $_SESSION["utente"]->permission($radice,$_POST["codice_cpn"],$id_modulo) &&  tokenVerify() && $_SESSION["utente"]->unlockSupporto()) {
    $cpn = attiCPN::init($_POST["codice_cpn"]);
    if (!empty($cpn)) {
      $error = false;
      $return = $cpn->saveAtto($_POST,true);
      if ($return["esito"] == true) {
        ?>
        swal({title:js_dict["success-msg"],type:"success"}).then(function(){
          <?
            if (!empty($cpn->getAllegati($return["codice"]))) {
              if ($_POST["send"] == "S") {
                ?>
                showModalWithURL('/backend/cpn/send.php?token=<?= tokenGen() ?>&method=sendAtto&codice_atto=<?= $return["codice"] ?>&codice=<?= $cpn->info["codice"] ?>');
                <?
              } else {
                ?>
                window.location.reload();
                <?
              }
            } else {
              ?>
              showModalWithURL('/backend/cpn/atti/allegati.php?codice=<?= $return["codice"] ?>&codice_cpn=<?= $cpn->info["codice"] ?>');
              <?
            }
          ?>
        });
        <?
      } else {
        $msg = "";
        if (!empty($return["errori"])) {
          $msg = implode("<br>",$return["errori"]);
        }
        ?>
        swal({title:js_dict.error,html:<?= (!empty($msg)) ? "\"{$msg}\"" : "js_dict[\"error-generic\"]" ?>,type:"error"});
        <?
      }
    } 
  }
  if ($error) {
    header('HTTP/1.0 403 Forbidden');
    die();
  }
?>