HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux ip-172-31-18-78 6.17.0-1017-aws #17~24.04.1-Ubuntu SMP Tue May 26 21:09:53 UTC 2026 aarch64
User: ubuntu (1000)
PHP: 8.2.31
Disabled: NONE
Upload Files
File: /var/www/grapossconnect/admin-dash/employee-document.php
<?php require('include/header.php'); ?>
<?php require('include/sidebar.php'); ?>
<?php
$empID = $_REQUEST['emp'];
if(!empty($empID)){
$msg='';
$uploadPath = "uploads/";
$currentDate = date('Y-m-d H:i:s');
if(isset($_POST['uploaddocument'])){
    if (!empty($_FILES["document_file"]["name"])) {
        $doc_name = mysqli_real_escape_string($conn,$_POST['document_name']);
        $changename = str_replace(' ','_',$doc_name);
        $documentfile = basename($_FILES["document_file"]["name"]);
        $documentname =  $changename.'_'.time().$documentfile;
        $documentUpload = $uploadPath . $documentname;
        $fileType = pathinfo($documentUpload, PATHINFO_EXTENSION);
        $allowTypes = array('jpg','png','jpeg','pdf','doc');
        if (in_array($fileType, $allowTypes)) {
            if (move_uploaded_file($_FILES["document_file"]["tmp_name"], $documentUpload)) {
                $insertQry = $conn->query("INSERT INTO `grp_document_files` SET `employee_id`='$empID',`document`='$documentname',`document_name`='$doc_name',`created_at`='$currentDate'"); 
                if ($insertQry) {
                    $msg = '<div class="alert alert-success alert-dismissible fade show"><strong>New employee added successfully</strong><button type="button" class="btn-close" data-bs-dismiss="alert"></button></div>';
                    $_POST = array();
                } else {
                    $msg = '<div class="alert alert-danger alert-dismissible fade show"><strong>Something went wrong. Please try again</strong><button type="button" class="btn-close" data-bs-dismiss="alert"></button></div>';
                } 
        }else{
            $msg = '<div class="alert alert-danger alert-dismissible fade show"><strong>Sorry, there was an error uploading your file.</strong><button type="button" class="btn-close" data-bs-dismiss="alert"></button></div>';
        } 
        }else{ 
        $msg= '<div class="alert alert-warning alert-dismissible fade show"><strong>Sorry, only JPG, JPEG & PNG files are allowed to upload</strong><button type="button" class="btn-close" data-bs-dismiss="alert"></button></div>'; 
        }
    }else{ 
        $msg= '<div class="alert alert-warning alert-dismissible fade show"><strong>Please select an image file to upload</strong><button type="button" class="btn-close" data-bs-dismiss="alert"></button></div>'; 
    } 
}
//show
$empdetail = $conn->query("SELECT `id`, `first_name`, `last_name` FROM `grp_employees` WHERE `id` ='$empID'");
$emp_result = $empdetail->fetch_assoc();
$employeedocQry = $conn->query("SELECT `id`, `employee_id`, `document`, `document_name`, `created_at` FROM `grp_document_files` WHERE `employee_id`='$empID'");
$checkDoc = $employeedocQry->num_rows;
if(!empty($emp_result['first_name'])){
    $fname = $emp_result['first_name'];
}else{
    $fname = 'Employee';
}
?>
<div id="content" class="app-content">
    <div class="d-flex align-items-center mb-3">
        <div>
            <ol class="breadcrumb">
                <li class="breadcrumb-item"><a href="dashboard.php">Home</a></li>
                <li class="breadcrumb-item"><a href="javascript:;">Employee</a></li>
                <li class="breadcrumb-item active"><i class="fa fa-arrow-back"></i>Employee Document</li>
            </ol>
            <h1 class="page-header mb-0"><?php echo $fname; ?> Document's</h1>
        </div>
        <div class="ms-auto">
            <a href="employee-add.php" class="btn btn-primary btn-sm px-4"><i class="fa fa-user-plus me-2"></i> Add New Employee</a>
        </div>
    </div>

    <div class="row">
        <div class="col-lg-12">
            <div class="card border-0 mb-4">
                <div class="card-header h6 mb-0 bg-none p-3">
                    <i class="fa fa-user fa-lg fa-fw text-dark text-opacity-50 me-1"></i>upload Employee Document
                </div>
                <?php echo $msg; ?>
                <form method="post" enctype="multipart/form-data">
                    <div class="card-body">
                        <div class="row">
                            <div class="col-md-6"> 
                                <div class="mb-3">
                                    <label class="form-label">Document File <span class="text-danger">*</span></label>
                                    <input type="file" class="form-control" name="document_file" id="document_file" placeholder="Upload Document File">
                                </div>
                            </div>
                            <div class="col-md-6">
                                <div class="mb-3">
                                    <label class="form-label">Document Name <span class="text-danger">*</span></label>
                                    <input type="text" class="form-control" id="document_name" name="document_name" placeholder="Upload Document Name" <?php if (isset($_POST['document_file'])) echo "value='" . $_POST['document_file'] . "'"; ?>>
                                </div>
                            </div>
                        </div>
                    </div>
                    <div class="card-footer bg-none d-flex p-3">
                        <button class="btn btn-primary" name="uploaddocument" type="submit"><i class="fas fa-check"></i> CLICK TO UPLOAD DOCUMENT </button>
                        <a href="employee-list.php" class="btn btn-danger ms-2">CANCEL</a>
                    </div>
                </form>
            </div>
        </div>
    </div>
<?php if($checkDoc >0){ ?>
    <div class="row">
        <div class="col-lg-12">
            <div class="card border-0 mb-4">
                <div class="card-header h6 mb-0 bg-none p-3">
                    <i class="fa fa-user fa-lg fa-fw text-dark text-opacity-50 me-1"></i> Employee Document's
                </div>
                <div class="card-body">
                    <!-------------->
                    <div class="document_card">
                        <ul class="attached-document clearfix">
                            <?php foreach ($employeedocQry as $doc) {
                                $extension = pathinfo($doc['document'], PATHINFO_EXTENSION);
                                if ($extension == 'pdf' || $extension == 'PDF') {
                                    $document_type = '<i class="fa fa-file-pdf" style="color:red;"></i>';
                                } else if ($extension == 'txt' || $extension == 'jpg' || $extension == 'jpeg' || $extension == 'png' || $extension == 'webp') {
                                    $document_type = '<i class="fa fa-image" style="color: black;"></i>';
                                } else if ($extension == 'doc' || $extension == 'docx' || $extension == 'DOCX') {
                                    $document_type = '<i class="fa fa-file-word"></i>';
                                } else {
                                    $document_type = '<i class="fa fa-folder" style="color:#f0d907;"></i>';
                                }
                            ?>
                                <li>
                                    <!-- <a class="deletedoc" href="del"><i class="fa fa-close"></i></a> -->
                                    <a href="uploads/<?php echo $doc['document']; ?>" download>
                                        <div class="document-file">
                                            <?php echo $document_type; ?>
                                        </div>
                                    </a>
                                    <div class="document-name"><a href="javascript:;"><?php echo $doc['document_name']; ?></a></div>
                                </li>
                            <?php } ?>
                        </ul>
                    </div>
                    <!-------------->
                </div>
            </div>
        </div>
    </div>
<?php } ?>    
</div>
<?php } else{
    echo "<script>window.location.href='employee-list.php';</script>";
}  
?>
<?php require('include/footer-data.php'); ?>