<?php
    session_start();

    /** Set Timezone **/
    date_default_timezone_set('Asia/Bangkok');
    
    /**  Define Validate Access  */
    define( '_VALID_ACCESS' , 1 );

    /**  Check Session User Login  */
    if( !session_is_registered("valid_user") && !session_is_registered("Priority") ) {
        echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
        echo "<p style=padding-top:115px><p align=center><br /><font color=red><strong>กรุณาทำการ Login ก่อน</strong></font></p></p>";
        echo "<meta http-equiv=\"refresh\" content=\"1; URL=../login.php\" />";
        exit();
    } 
    else {
        /**  Configuration  */
        require_once( "../configuration.php" );
        require_once( $_Config_absolute_path . "/includes/framework.php" );
        require_once( "../includes/Function.php" );
        require_once( "../includes/FunctionDB.php" );
    
        /**  Create Database Object  */
        $dbObj = new DBConn;  
            //=== SESSION
        $Username = $valid_user; 
        $Report_name  = htmlspecialchars(trim($Report_name));
        $Path = "../Qa_pic"; 

        $query1 = "select * from qa_qareport_tb WHERE ReportqaId='".$_REQUEST["ReportqaId"]."'";
        $result1 = mysql_query($query1);
        $rs = mysql_fetch_array($result1);
    
        //###  Upload Image File
        if( $_FILES['Filename']['name'] != "" ) {
            //ลบไฟล์เอกสารเดิม                        
            if(!empty($rs["Filename"])) unlink($QAPicPath.$rs["Filename"]);            
            
            //Upload ไฟล์เอกสารใหม่
            //$Filetex = $_FILES['Filetex']['name'];
            $Filename = date('YmdHis').strrchr($_FILES['Filename']['name'], ".");
            @copy( $_FILES['Filename']['tmp_name'] , $QAPicPath.$Filename);
            @unlink( $_FILES['Filename']['tmp_name'] );            

            $query ="UPDATE qa_qareport_tb SET Report_name='$Report_name', Filename='$Filename' WHERE ReportqaId = '".$_REQUEST["ReportqaId"]."'";
            $dbObj->runQuery($query);

            echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
            echo "<script>alert('ระบบแก้ไขข้อมูลเรียบร้อยแล้ว');</script>";
            echo "<script>window.close(); window.opener.location.reload(); </script>";            
        }
        else{
            $query ="UPDATE qa_qareport_tb SET Report_name='$Report_name' WHERE ReportqaId = '".$_REQUEST["ReportqaId"]."'";
            $dbObj->runQuery($query);

            echo "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=windows-874\" />";
            echo "<script>alert('ระบบแก้ไขข้อมูลเรียบร้อยแล้ว');</script>";
            echo "<script>window.close(); window.opener.location.reload(); </script>";
        }

        $dbObj->freeresult($result1);

    } # else    
?>