tuttogare/public_html/backend/task/edit.php

<?
  $configPath = substr(__DIR__,0,strpos(__DIR__,"/public_html"))."/config.php";
  include_once($configPath);
  $error = true;
  $codice = $_GET["codice"] ?? 0;
  if (isset($_SESSION["utente"]) && !empty($_SESSION["ente"]) && $_SESSION["utente"]->permission("task",$codice)) {
    $error = false;
    if (empty($codice)) {
      $record = get_campi("b_tasks");
     if (!empty($_GET["date"])) { $record["data"] = $_GET["date"] . " 09:00:00"; }
    } else {
      $record = $_SESSION["utente"]->getTasks($codice);
    }
    ?>
    <form action="/backend/task/save.php" rel="validate">
      <input name="token" type="hidden" value="<?= tokenGen() ?>">
      <input name="codice" type="hidden" value="<?= $codice ?>">
      <div class="row">
        <div class="col-12 col-lg-3">
          <div class="form-group">
            <label for="data"><?= __("Data e ora") ?></label>
            <input type="text" name="data" rel="S;16;16;DT" class="form-control datetimepick" title="<?= __("Data e ora") ?>" value="<?= mysql2datetime($record["data"]) ?>">
          </div>
        </div>
        <div class="col-12 col-lg-9">
          <div class="form-group">
            <label for="oggetto"><?= __("Oggetto") ?></label>
            <input type="text" name="oggetto" rel="S;1;255;A" class="form-control" title="<?= __("oggetto") ?>" value="<?= $record["oggetto"] ?>">
          </div>
        </div>
      </div>
      <div class="form-group">
        <label for="descrizione"><?= __("Descrizione") ?></label>
        <textarea name="descrizione" class="form-control" rows="8" rel="N;0;0;A" title="<?= __("Descrizione") ?>"><?= $record["descrizione"] ?></textarea>
      </div>
      <div class="card mb-2">
        <div class="card-header">
          <span class="fa fa-bell"></span> <?= __("Avvisi") ?>
        </div>
        <div class="card-body">
          <div id="alertsBody" class="row">
            <?
              $bind = [];
              $bind[":task"] = $codice;
              $bind[":codice_ente"] = $_SESSION["ente"]->codice;
              $bind[":codice_utente"] = $_SESSION["utente"]->codice;
              $alerts = $pdo->go("SELECT codice, dataOra FROM r_alert_task WHERE codice_task = :task AND codice_ente = :codice_ente AND codice_utente = :codice_utente",$bind);
              if ($alerts->rowCount() > 0) {
                while($alert = $alerts->fetch(PDO::FETCH_ASSOC)) {
                  $id = $alert["codice"];
                  $dataOra = mysql2datetime($alert["dataOra"]);
                  include(__DIR__."/alert.php");
                }
              }
            ?>
          </div>
          <div class="text-right">
            <button class="btn btn-sm btn-default" onClick="aggiungi('/backend/task/alert.php','#alertsBody');" type="button"><span class="fa fa-plus"></span> <?= __("Aggiungi avviso") ?></button>
          </div>
        </div>
      </div>
      <button class="btn btn-block btn-success"><span class="fa fa-save"></span> <?= __("Salva") ?></button>
      <? if (!empty($record["codice"])) { ?>
        <button type="button" onClick="elimina(<?= $record["codice"] ?>,'task'); return false;" class="btn btn-block btn-danger"><span class="fa fa-times"></span> <?= __("Elimina") ?></button>
      <? } ?>
    </form>
    <?
  }
  if ($error) {
    header('HTTP/1.0 403 Forbidden');
    die();
  }
?>