createNewUser.php

<?php
include "home.php";

$role = $_SESSION['hrrolesession'];
if (strpos($role, "hradmin") === false) {
  session_destroy();
  exit();
}
?>
<script>
  $(document).ready(function() {
    $("#myInput").on("keyup", function() {
      var value = $(this).val().toLowerCase();
      $("#myTable tr").filter(function() {
        $(this).toggle($(this).text().toLowerCase().indexOf(value) > -1)
      });
    });
  });
</script>






<script>
  $(function() {
    $("#startDate").datepicker({
      appendText: "(yy-mm-dd)",
      changeMonth: true,
      changeYear: true,
      yearRange: "c-0:c+1",
      dateFormat: "yy-mm-dd"
    });
    $("#endDate").datepicker({
      appendText: "(yy-mm-dd)",
      changeMonth: true,
      changeYear: true,
      yearRange: "c-0:c+1",
      dateFormat: "yy-mm-dd"
    });
    $(".dateElement").datepicker({
      appendText: "(yy-mm-dd)",
      changeMonth: true,
      changeYear: true,
      yearRange: "c-65:c+0",
      dateFormat: "yy-mm-dd"
    });
  });

  $("#indiv").click(function() {
    $("#impo").toggle();
  });
</script>
<script>
  $(document).ready(function() {
    //$("#impo").hide();
    $("#indiv").click(function() {
      $("#impo").show();
      $("#all").prop("checked", false);
    });
    $("#all").click(function() {
      $("#indiv").prop("checked", false);
      $('#impo option:first').prop('selected', true);
      $("#impo").hide();
    });



    $("#days").click(function() {
      for (var c = 0, e = 0, d = new Date($("#startDate").val()), a = (new Date($("#endDate").val()) - d) / 864E5; 0 <= a; a--) {
        var b = new Date(d);
        b.setDate(b.getDate() + a);
        1 == Math.ceil(b.getDay() % 6 / 6) ? c++ : e++
      }
      $("#days").val(c);
      $("#days").attr('readonly', 'readonly');
    });



  });
</script>





<script>
  function pass_validation() {
    var firstpassword = document.createUserForm.password.value;
    var secondpassword = document.createUserForm.passwordConf.value;

    if (firstpassword == secondpassword) {
      return true;
    } else {
      alert("password one and two must be same!");
      return false;
    }
  }
</script>
<style type="text/css">
  body,
  td {
    font-size: 10pt;
  }

  table#tablelist {
    background-color: black;
    border: 1px black solid;
    border-collapse: collapse;
  }

  th {
    border: 1px outset silver;
    background-color: grey;
    color: white;
  }

  tr.nostriped {
    background-color: white;
    margin: 1px;
  }

  tr.striped {
    background-color: whitesmoke;
  }

  td {
    padding: 1px 8px;
  }

  .tableFixHead {
    overflow-y: auto;
    height: 100px;
  }

  .tableFixHead thead th {
    position: sticky;
    top: 0;
  }
</style>

<script type="text/javascript">
  $(function() {
    $("#tablelist tr:nth-child(even)").addClass("striped");
    $("#tablelist tr:nth-child(odd)").addClass("nostriped");
  });


  $(document).ready(function() {
    $('#dtBasicExample').DataTable();
    $('.dataTables_length').addClass('bs-select');
  });
  console.log("____________________")
</script>

<h1>Create new employee<h2>
    <br />
    <form name="createUserForm" action="createNewUser.php" method="post" onsubmit="return pass_validation()" enctype="multipart/form-data">
      <fieldset>
        <legend>1.User/Employee Details</legend>
        <table>
          <tr>
            <td>First Name</td>
            <td><input type="text" name="firstName"></td>
          </tr>
          <tr>
            <td>Last Name</td>
            <td><input type="text" name="lastName"></td>
          </tr>
          <tr>
            <td>Phone Number</td>
            <td><input type='text' name='phonenumber'></td>
          </tr>
          <tr>
            <td>Email</td>
            <td><input type="text" name="email"></td>
          </tr>
          <tr>
            <td>Position</td>
            <td><select name="position">
                <option value='Program staff'>Program staff</option>
                <option value='Coordinator'>Coordinator</option>
                <option value='Manager'>Manager</option>
                <option value='Director'>Director</option>
                <option value='Senior director'>Senior director</option>
                <option value='Chief'>Chief</option>
                <option value='Executive Director'>Executive Director</option>
              </select></td>
          </tr>
          <tr>
            <td>Detailed Position</td>
            <td> <input type="text" name="detaildposition"> </td>
          </tr>
          <tr>
            <td>Site Location</td>
            <td><select name="site">
                <option value="KIGALI">KIGALI</option>
                 <option value="ZL">Zanmi Lasante</option>
                <option value="BURERA">BURERA</option>
                <option value="KAYONZA">KAYONZA</option>
                <option value="KIREHE">KIREHE</option>
                <option value="CROSS_SITE">CROSS SITE</option>
              </select></td>
          </tr>


          <tr>
            <td>Head of Department</td>
            <td><select name="headofdepartment">
                <option value="" selected="">-- Select Select Head of Department</option> <?php
                                                                                          include("connect.php");
                                                                                          $date = date("Y-m-d H:i:s");
                                                                                          $users = mysqli_query($conn, "select *  from users where role like '%head_of_department%' and userid!=1 order by firstname");
                                                                                          if (mysqli_num_rows($users)) {
                                                                                            while ($row = mysqli_fetch_array($users)) {
                                                                                              $userid = $row['userid'];
                                                                                              $firstname = $row['firstname'];
                                                                                              $lastname = $row['lastname'];
                                                                                              print("<option value='$userid'>$firstname $lastname</option>");
                                                                                            }
                                                                                          }
                                                                                          ?>
              </select></td>
          </tr>


          <tr>
            <td>Office</td>
            <td><select name="department">
                <?php
                include("connect.php");
                $dpt = mysqli_query($conn, "select name  from hr_dpt_leaders");
                if (mysqli_num_rows($dpt)) {
                  while ($row = mysqli_fetch_array($dpt)) {
                    $name = $row['name'];
                    print("<option value='$name'>$name</option>");
                  }
                }
                ?>
              </select>
            </td>
          </tr>
          <tr>
            <td>Program</td>
            <td><select name='program'>
                <?php
                include("connect.php");
                $program = mysqli_query($conn, "select name  from program_leaders order by name");
                if (mysqli_num_rows($program)) {
                  while ($row = mysqli_fetch_array($program)) {
                    $name = $row['name'];
                    print("<option value='$name'>$name</option>");
                  }
                }
                ?>
              </select></td>
          </tr>


          <tr>
            <td>Type of contract</td>
            <td><select name="typeofcotract">
                <option value="Fixed contract">Fixed contract</option>
                <option value="Open-ended contract">Open-ended contract</option>
              </select></td>
          </tr>

          <tr>
            <td>National ID/Passport</td>
            <td><input type="text" name="nationalID"></td>
          </tr>
          <tr>
            <td>Date of Birth</td>
            <td><input type="text" name="dateofbirth" class="dateElement"></td>
          </tr>

          <tr>
            <td>Date Employment</td>
            <td><input type="text" name="dateofemployment" class="dateElement"></td>
          </tr>
          <tr>
            <td>Gender</td>
            <td><select name="gender">
                <option value=""></option>
                <option value="M">Male</option>
                <option value="F">Female</option>
                <option value="Other">Other</option>
              </select></td>
          </tr>
          <tr>
            <td>Employee Photo</td>
            <td><input type="file" name="filetoupload" id="imageupload" onchange="PreviewImage();">
              <img id="uploadPreview" style="width: 60px; height: 70px" />
              <script type="text/javascript">
                function PreviewImage() {
                  //alert("Innnnnnnnnnnnnnnnnn");
                  var oFReader = new FileReader();
                  oFReader.readAsDataURL(document.getElementById("imageupload").files[0]);

                  oFReader.onload = function(oFREvent) {
                    document.getElementById("uploadPreview").src = oFREvent.target.result;
                  };
                };
              </script>



            </td>
          </tr>
        </table>
      </fieldset>
      <br />
      <fieldset>
        <legend>2.Account</legend>
        <table>
          <tr>
            <td>UserName </td>
            <td><input type="text" name="username"></td>
          </tr>
          <tr>
            <td>Password</td>
            <td><input type="password" name="password"></td>
          </tr>
          <tr>
            <td>Re-enter Password</td>
            <td><input type="password" name="passwordConf"></td>
          </tr>
          <tr>
            <td>Privilege</td>
            <td><select name="privileges[]" multiple="multiple" size="12">
                <option value="employee">Employee</option>
                <option value="supervisor">Supervisor</option>
                <option value="head_of_department">Head of Office</option>
                <option value="hr_pa_officer">HR PA Officer</option>
                <option value='hr_leave_officer'>HR Leave Officer</option>
                <option value='hradmin'>HR Admin</option>
                <option value="hr_archiving">Archiving</option>
                <option value="hrsadmin">System Admin</option>
                <option value="head_of_division">head_of_division</option>
                <option value='edit_user'>Edit User</option>
                <option value='executive_director'>Executive Director</option>
                <option value='logistics'>Logistics</option>
                <option value='driver'>Driver</option>
                <option value='run_report'>Run report</option>
                <option value='site_assistant'>Site assistant</option>
                <option value='district_operation_manager'>DOM</option>
                <option value='finance_manage'>Finance manager</option>
                <option value='finance_payment'>Finance payment</option>
                <option value='finance_payment_approval'>Finance payment approval</option>
                <option value='mentorship'>Mentorship</option>


              </select></td>
          </tr>
          <tr>
            <td>Your Supervisor</td>
            <td><select name="supervisor">
                <option value="" selected="">-- Select Supervisor</option> <?php
                                                                            include("connect.php");
                                                                            $date = date("Y-m-d H:i:s");
                                                                            $users = mysqli_query($conn, "select *  from users where role like '%supervisor%' order by firstname");
                                                                            if (mysqli_num_rows($users)) {
                                                                              while ($row = mysqli_fetch_array($users)) {
                                                                                $userid = $row['userid'];
                                                                                $firstname = $row['firstname'];
                                                                                $lastname = $row['lastname'];
                                                                                print("<option value='$userid'>$firstname $lastname</option>");
                                                                              }
                                                                            }
                                                                            ?>
              </select></td>
          </tr>
        </table>

        <br>
        Authorized: <select name="authorized">
          <option value="YES">YES</option>
          <option value="NO">NO</option>
        </select>
        <br><br>
        Card UID: <input type="text" name="cuid">
        <br>
      </fieldset>
      <div style="text-align: center;"><input type="submit" name="save" value="Create User" size="20"></div>
    </form>
    <br><br>
    <?php
    include "connect.php";
    if (isset($_POST['save'])) {

      $firstName = $_POST['firstName'];
      $lastName = $_POST['lastName'];
      $position = $_POST['position'];
      $email = $_POST['email'];
      $site = $_POST['site'];
      $username = $_POST['username'];
      $password = $_POST['password'];
      $passwordConf = $_POST['passwordConf'];
      $privileges = $_POST['privileges'];
      $authorized = $_POST['authorized'];
      $supervisor = $_POST['supervisor'];
      $department = $_POST['department'];
      $program = $_POST['program'];
      $phonenumber = $_POST['phonenumber'];

      $detaildposition = $_POST['detaildposition'];
      $headofdepartment = $_POST['headofdepartment'];
      $typeofcotract = $_POST['typeofcotract'];
      $nationalID = $_POST['nationalID'];
      $dateofbirth = $_POST['dateofbirth'];
      $dateofemployment = $_POST['dateofemployment'];
      $gender = $_POST['gender'];

      $cuid = $_POST['cuid'];
      //$passenc=md5($password);
      $passenc = hash('sha256', $password);
      $privilegesString = "";

      $i = 0;
      foreach ($privileges as $privilege) {
        if ($i != 0) {
          $privilegesString .= "," . $privilege;
        } else {
          $privilegesString = $privilege;
          $i++;
        }
      }

      $file_name = "";

      if (isset($_FILES['filetoupload'])) {

        $errors = array();
        $file_name = $_FILES['filetoupload']['name'];
        $file_size = $_FILES['filetoupload']['size'];
        $file_tmp = $_FILES['filetoupload']['tmp_name'];
        $file_type = $_FILES['filetoupload']['type'];
        //$file_ext=strtolower(end(explode('.',$_FILES['filetoupload']['name'])));

        $tmp = explode('.', $file_name);
        $file_ext = strtolower(end($tmp));

        $extensions = array("jpeg", "jpg", "png", "pdf", "xls", "xlsx", "doc", "docx");

        /* if(in_array($file_ext,$extensions)=== false){
         $errors[]="extension not allowed, please choose a JPEG or PNG file.";
      }
      */

        //     if($file_size > 2097152){
        if ($file_size > 524288000) {
          $errors[] = 'File size must be small or equal to  500 MB';
        }
        //$bidNo = str_replace("/", "|", $bidNo);
        $file_name = $firstName . "_" . $lastName . "." . $file_ext;

        if (empty($errors) == true) {
          //echo realpath($file_name);
          move_uploaded_file($file_tmp, "employeephoto/" . $file_name);
          //echo "Success";
        } else {
          print_r("" + $errors);
        }
      }


      //print("Privileges: $privileges");
      $insertUsequery = mysqli_query($conn, "INSERT INTO users (firstname,lastname,username,password,role,site,position,email,authorized,supervisor,department,program,phonenumber,active,detaildposition,headofdepartment,typeofcotract,nationalID,dateofbirth,dateofemployment,gender,card_UID,photofilename) VALUES ('$firstName', '$lastName','$username', '$passenc','$privilegesString','$site','$position','$email','$authorized','$supervisor','$department','$program','$phonenumber','YES','$detaildposition','$headofdepartment','$typeofcotract','$nationalID','$dateofbirth','$dateofemployment','$gender','$cuid','$file_name')");

      $employeeLeaveTypes = mysqli_query($conn, "select name from hr_employee_leave_type order by name");
      if (mysqli_num_rows($employeeLeaveTypes)) {
        while ($row = mysqli_fetch_array($employeeLeaveTypes)) {
          $name = $row['name'];
          $considerUserInLeave = mysqli_query($conn, "INSERT INTO hr_employee_leave_days (employee_id, number_of_days,leave_type) SELECT MAX(userid),0,'$name' FROM users");
        }
      }


      echo mysqli_error($conn);
      print("
<script>
alert('New User is Saved');
</script>
");
    }
    ?>

    <?php
    include "connect.php";
    if (isset($_POST['delete'])) {
      $user_id = $_POST['userid'];
      $userId = $_SESSION['useridsession'];
      //print("Start: ".$emploId);
      $deleteUser = mysqli_query($conn, "delete from users where userid='$user_id'");
      //$deleteLeaveDaysOfEmployeequery=mysqli_query($conn,"delete from employee_leave_days where employee_id='$emploId'");
      //print("End: ".$emploId);
      print("
<script>
alert('User is deleted');
</script>
");
    }
    ?>
    <?php
    include "connect.php";
    if (isset($_POST['authorizeDeny'])) {
      $user_id = $_POST['userid'];
      $authorized = $_POST['authorized'];
      $userId = $_SESSION['useridsession'];
      if ($authorized == "YES") {
        $updateUser = mysqli_query($conn, "update users set authorized='NO' where userid='$user_id'");
      } else {
        $updateUser = mysqli_query($conn, "update users set authorized='YES' where userid='$user_id'");
      }
      //print("Start: ".$emploId);

      //$deleteLeaveDaysOfEmployeequery=mysqli_query($conn,"delete from employee_leave_days where employee_id='$emploId'");
      //print("End: ".$emploId);
      print("
<script>
alert('Access is changed');
</script>
");
    }
    ?>
    <?php
    include "connect.php";
    if (isset($_POST['becomeuser'])) {
      $current_user = $_SESSION['hruseridsession'];
      $user_id = $_POST['userid'];
      $loginDate = date("Y-m-d H:i:s:a");
      $reslog = mysqli_query($conn, "SELECT * FROM users WHERE userid='$user_id'");
      if ($num = mysqli_num_rows($reslog)) {


        $ip = "";
        if (isset($_SERVER['REMOTE_HOST'])) { //check
          $ip = $_SERVER['REMOTE_HOST'];
        } else {
          $ip = $_SERVER['REMOTE_ADDR']; //else assign the real IP
        }

        // $result = json_decode(file_get_contents('http://ip-api.io/json/'.$ip));
        //To display how data are mapped
        //var_dump($result);
        $other_info = "IP:" . $ip;
        // , Country:".$result->country_name.", City:".$result->city.", Organisation:".$result->organisation;


        while ($row = mysqli_fetch_array($reslog)) {
          //$_SESSION['timeout']=time();
          $_SESSION['hruseridsession'] = $row['userid'];
          $_SESSION['hrusernamesession'] = $row['username'];
          $_SESSION['hrpasswordsession'] = $row['password'];
          $_SESSION['firstnamesession'] = $row['firstname'];
          $_SESSION['lastnamesession'] = $row['lastname'];
          $_SESSION['hrrolesession'] = $row['role'];
          $_SESSION['sitesession'] = $row['site'];
          $_SESSION['authorizedsession'] = $row['authorized'];
          $_SESSION['department'] = $row['department'];
          $_SESSION['position'] = $row['position'];
          $_SESSION['supervisor'] = $row['supervisor'];
          $userId = $row['userid'];
          $_SESSION['headofdepartment'] = $row['headofdepartment'];

          //$loginDate=date("Y-m-d H:i:s:a");
          $log = mysqli_query($conn, "insert into user_login(user_id,date_and_time,other_info) values ('$userId','$loginDate','$other_info')");
        }
      }

      $become = mysqli_query($conn, "insert into user_become(user,userbecome,userbecomedate) values ('$current_user','$user_id','$loginDate')");


      $firstname = $_SESSION['firstnamesession'];
      print("
<script>
alert('Now you become $firstname .');
</script>
");
    }
    ?>

    <center>
      <div style='height: 400px;width: 95%;overflow: scroll;' class="tableFixHead">
        <?php

        include("connect.php");
        $userList = mysqli_query($conn, "SELECT * FROM users order by lastname");
        if (mysqli_num_rows($userList)) {
          print("<div align='right'><span>Search: <input id='myInput' type='text' placeholder='Search..'></span></div>
	<table width='100%' id='tablelist'><thead><tr>
<th>No</th>
<th>Photo</th>
<th>Last Name</th>
<th>First Name</th>
<th>User Name</th>
<th>Privilege</th>
<th>Site</th>
<th>Position</th>
<th>Email</th>
<th>Card UID</th>
<th>Authorized</th>
<th>Edit/Delete</th></tr></thead><tbody id='myTable'>");
          $no = 0;
          while ($row = mysqli_fetch_array($userList)) {
            $no = $no + 1;
            $userid = $row['userid'];
            $firstname = $row['firstname'];
            $lastname = $row['lastname'];
            $username = $row['username'];
            $userrole = $row['role'];
            $site = $row['site'];
            $position = $row['position'];
            $email = $row['email'];
            $authorized = $row['authorized'];
            $photofilename = $row['photofilename'];
            $card_UID = $row['card_UID'];
            print("<tr><td>$no</td>
<td><img src='employeephoto/$photofilename' width='60' height='70' alt='' /></td>
<td>$lastname</td>
<td>$firstname</td>
<td>$username</td>
<td>$userrole</td>
<td>$site</td>
<td>$position</td>
<td>$email</td>
<td>$card_UID</td>
<td>$authorized</td>
<td>");
            $role = $_SESSION['hrrolesession'];

            $userroleArray = explode(',', $userrole);
            $allowBocome = 0;
            foreach ($userroleArray as $value) {
              if (strpos($role, "$value") !== false) {
                $allowBocome = 1;
              } else {
                $allowBocome = 0;
                break;
              }
            }

            //if(strpos($role,"hrsadmin") !== false){ 
            if ($allowBocome == 1 || strpos($role, "hrsadmin") !== false) {
              print("
<form action='createNewUser.php' method='post'>
<input type='hidden' name='userid' value='$userid'>
<input type='hidden' name='authorized' value='$authorized'>
<input type='submit' name='authorizeDeny' value='Authorize/Deny'>
<!-- <input type='submit' name='delete' value='Delete'> -->
<input type='submit' name='becomeuser' value='Become this User'>
</form>");
            }

            if (($username != $_SESSION['hrusernamesession'] && $allowBocome == 1) || strpos($role, "edit_user") !== false) {
              print("
<form action='editUser.php' method='post'>
<input type='hidden' name='userid' value='$userid'>
<input type='submit' name='edit' value='Edit'>
</form>
</td></tr>");
            }
          }
          print("</tbody></table>");
        } else {
          print("<br> No employee registered");
        }
        ?>

      </div>
    </center>