HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/public_html/archive/demo/admin/quick_change.php
<?php
session_start();
?>

<html>
<head>
<title>Quick Change</title>
</head>
<link rel="stylesheet" type="text/css" href="../default.css">

<?php


include("../_functions.php");
dbconnect();
if (!is_logged()) auto_login();
	
if (!isset($_POST["submit"])) {
	echo "<body style=\"margin:15px;font-size:12px;\">\n";
	
	if ($_GET["a"] == "rename_cat") {
		echo "<P><b style=\"font-size:16px;color:#".COLOR_TBAR."\">Rename Category</b><br><b style=\"color:#009900;\">Please enter the new name of this category in the text field below:</b>\n";
		$oldname = quickSQL("SELECT emp_type FROM tbl_emp_types WHERE emp_type_id=".$_GET["id"]);
	}
	if ($_GET["a"] == "move_cat") {
		echo "<P><b style=\"font-size:16px;color:#".COLOR_TBAR."\">Move Employees to Another Category</b><br><b style=\"color:#009900;\">Please use the drop-downs below to complete your request:</b>\n";
		$sql = "SELECT * FROM tbl_emp_types ORDER BY emp_type_id";
		$res1 = mysql_query($sql);
		$res2 = mysql_query($sql);
	}
	if ($_GET["a"] == "addsubgrp") {
		echo "<P><b style=\"font-size:16px;color:#".COLOR_TBAR."\">Add a Sub-Group</b><br><b style=\"color:#009900;\">Please enter the name of this new organization sub-group in the text field below:</b>\n";
		$parent = quickSQL("SELECT group_name FROM tbl_groups WHERE group_id=".$_GET["id"]);
	}
	if ($_GET["a"] == "movegrp") {
		echo "<P><b style=\"font-size:16px;color:#".COLOR_TBAR."\">Move a Group</b><br><b style=\"color:#009900;\">Please select the new parent to this organization group:</b>\n";
		$grpname = quickSQL("SELECT group_name FROM tbl_groups WHERE group_id=".$_GET["id"]);
	}
	if ($_GET["a"] == "delgrp") {
		echo "<P><b style=\"font-size:16px;color:#".COLOR_TBAR."\">Delete a Group</b><br><b style=\"color:#009900;\">Please select a group where all employees in the deleted group will be moved to:</b>\n";
		$grpname = quickSQL("SELECT group_name FROM tbl_groups WHERE group_id=".$_GET["id"]);
	}
	if ($_GET["a"] == "renamegrp") {
		echo "<P><b style=\"font-size:16px;color:#".COLOR_TBAR."\">Rename a Group</b><br><b style=\"color:#009900;\">Please enter the new name for the group and group name abbreviation in the fields below:</b>\n";
		$grpname = quickSQL("SELECT group_name FROM tbl_groups WHERE group_id=".$_GET["id"]);
		$grpabbr = quickSQL("SELECT group_short FROM tbl_groups WHERE group_id=".$_GET["id"]);
	}
	if ($_GET["a"] == "movepage") {
		echo "<P><b style=\"font-size:16px;color:#".COLOR_TBAR."\">Move a Web Page</b><br><b style=\"color:#009900;\">Please select a new parent for the web page which you would like to move:</b>\n";
		$pagetitle = quickSQL("SELECT page_title FROM tbl_pages WHERE page_id=".$_GET["id"]);
	}
	
	echo "<form action=\"quick_change.php?a=".$_GET["a"]."\" method=\"post\">\n";
	echo "<input type=\"hidden\" name=\"username\" value=\"".$_SESSION["auth_user"]."\">\n";
	echo "<P><center><table class=\"textdn\" border=0 cellspacing=5 style=\"font-size:12px;\">\n";
	
	if ($_GET["a"] == "rename_cat") {
		echo "<input type=\"hidden\" name=\"id\" value=\"".$_GET["id"]."\">\n";
		echo "<tr><td>Current Name:</td><td><b>".$oldname."</b></td></tr>\n";
		echo "<tr><td>New Name:</td><td><input type=\"text\" style=\"width:200;\" name=\"newcatname\"></td></tr>\n";
		echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
	}
	if ($_GET["a"] == "move_cat") {
		echo "<input type=\"hidden\" name=\"id\" value=\"".$_GET["id"]."\">\n";
		echo "<tr><td>Move Employees From:</td><td><SELECT name=\"catfrom\">";
		for ($i=0; $i < mysql_num_rows($res1); $i++) {
			$cat = mysql_fetch_array($res1);
			echo "<OPTION value=\"".$cat["emp_type_id"]."\"".($_GET["from"]==$i?" SELECTED":"").">".$cat["emp_type"]."</OPTION>";
		}
		echo "</SELECT></td></tr>\n";
		echo "<tr><td>Move Employees To:</td><td><SELECT name=\"catto\">";
		for ($i=0; $i < mysql_num_rows($res2); $i++) {
			$cat = mysql_fetch_array($res2);
			echo "<OPTION value=\"".$cat["emp_type_id"]."\">".$cat["emp_type"]."</OPTION>";
		}
		echo "</SELECT></td></tr>\n";
		echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
	}
	if ($_GET["a"] == "addsubgrp") {
		echo "<input type=\"hidden\" name=\"id\" value=\"".$_GET["id"]."\">\n";
		echo "<tr><td>Parent Group:</td><td><b>".$parent."</b></td></tr>\n";
		echo "<tr><td>Sub-Group Name:</td><td><input type=\"text\" style=\"width:200;\" name=\"newgrpname\"></td></tr>\n";
		echo "<tr><td>Abbreviated Name:</td><td><input type=\"text\" style=\"width:200;\" name=\"newabbrname\"></td></tr>\n";
		echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
	}
	if ($_GET["a"] == "movegrp") {
		echo "<input type=\"hidden\" name=\"id\" value=\"".$_GET["id"]."\">\n";
		echo "<tr><td>Group Name:</td><td><b>".$grpname."</b></td></tr>\n";
		echo "<tr><td>New Parent:</td><td>";
		echo "<SELECT name=\"newparent\">\n";
			$def = $_GET["id"];
			group_select(0,0,$def);
		echo "</SELECT></td></tr>\n";
		echo "</td></tr>\n";
		echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
	}
	if ($_GET["a"] == "delgrp") {
		echo "<input type=\"hidden\" name=\"id\" value=\"".$_GET["id"]."\">\n";
		echo "<input type=\"hidden\" name=\"parent\" value=\"".quickSQL("SELECT group_parent FROM tbl_groups WHERE group_id=".$_GET["id"])."\">\n";
		echo "<tr><td>Deleted Group:</td><td><b>".$grpname."</b></td></tr>\n";
		echo "<tr><td>Move Group's Employees To:</td><td>";
		echo "<SELECT name=\"movetogroup\">\n";
			$GLOBALS["delgrp"] = $_GET["id"];
			$def = DEF_GROUP;
			group_select(0,0,$def);
		echo "</SELECT></td></tr>\n";
		echo "</td></tr>\n";
		echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
	}
	if ($_GET["a"] == "renamegrp") {
		echo "<input type=\"hidden\" name=\"id\" value=\"".$_GET["id"]."\">\n";
		echo "<tr><td>Current Name:</td><td><b>".$grpname." [".$grpabbr."]</b></td></tr>\n";
		echo "<tr><td>New Group Name:</td><td><input type=\"text\" style=\"width:300;\" name=\"newgrpname\"></td></tr>\n";
		echo "<tr><td>Group Abbreviation:</td><td><input type=\"text\" style=\"width:175;\" name=\"newgrpabbr\"></td></tr>\n";
		echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
	}
	if ($_GET["a"] == "movepage") {
		$def = quickSQL("SELECT parent_id FROM tbl_pages WHERE page_id=".$_GET["id"]);
		$subs = quickSQL("SELECT COUNT(page_id) FROM tbl_pages WHERE parent_id=".$_GET["id"]);
		echo "<input type=\"hidden\" name=\"id\" value=\"".$_GET["id"]."\">\n";
		echo "<input type=\"hidden\" name=\"numsubs\" value=\"".$subs."\">\n";
		echo "<input type=\"hidden\" name=\"oldparent\" value=\"".$def."\">\n";
		echo "<tr><td>Page Title:</td><td><b>".$pagetitle."</b></td></tr>\n";
		echo "<tr><td>New Parent:</td><td>";
		echo "<SELECT name=\"newparent\">\n";
			page_select(0,0,$def);
		echo "</SELECT></td></tr>\n";
		if ($subs > 0) {
			echo "<tr><td colspan=2 height=6><img src=\"/gui/clear.gif\" width=1 height=6></td></tr>\n";
			echo "<tr><td colspan=2>Move the subpages of \"".$pagetitle."\" as well?</td></tr>\n";
			echo "<tr><td colspan=2><input type=\"radio\" name=\"movesubs\" value=\"1\" CHECKED>Yes &nbsp; <input type=\"radio\" name=\"movesubs\" value=\"0\">No</td></tr>\n";
		} else echo "<input type=\"hidden\" name=\"movesubs\" value=\"0\">\n";
		echo "<tr><td colspan=2 align=\"center\"><input type=\"submit\" name=\"submit\" value=\"submit\"></td></tr>\n";
	}
	
	echo "</table>\n";
	echo "</form>\n";
	
} else {

	$bypass = FALSE;
	if ($_GET["a"] == "rename_cat") $sql = "UPDATE tbl_emp_types SET emp_type='".$_POST["newcatname"]."' WHERE emp_type_id=".$_POST["id"];
	if ($_GET["a"] == "move_cat") $sql = "UPDATE tbl_employees SET emp_type_id=".$_POST["catto"]." WHERE emp_type_id=".$_POST["catfrom"];
	if ($_GET["a"] == "addsubgrp") $sql = "INSERT INTO tbl_groups (group_parent,group_name,group_short) VALUES (".$_POST["id"].",'".$_POST["newgrpname"]."','".$_POST["newabbrname"]."')";
	if ($_GET["a"] == "movegrp") $sql = "UPDATE tbl_groups SET group_parent=".$_POST["newparent"]." WHERE group_id=".$_POST["id"];
	if ($_GET["a"] == "delgrp") { 
		$sql = "UPDATE tbl_group_user SET group_id=".$_POST["movetogroup"]." WHERE group_id=".$_POST["id"];
		$sql1 = "UPDATE tbl_groups SET group_parent=".$_POST["parent"]." WHERE group_parent=".$_POST["id"];
		$sql2 = "DELETE FROM tbl_groups WHERE group_id=".$_POST["id"];
		quickUPDATE($sql); quickUPDATE($sql1); quickUPDATE($sql2);
		$bypass = TRUE;
	}
	if ($_GET["a"] == "renamegrp") $sql = "UPDATE tbl_groups SET group_name='".$_POST["newgrpname"]."', group_short='".$_POST["newgrpabbr"]."' WHERE group_id=".$_POST["id"];
	if ($_GET["a"] == "movepage") { 
		if ($_POST["numsubs"] == 0) $sql = "UPDATE tbl_pages SET parent_id=".$_POST["newparent"]." WHERE page_id=".$_POST["id"];
		else {
			if ($_POST["movesubs"] == 1) $sql = "UPDATE tbl_pages SET parent_id=".$_POST["newparent"]." WHERE page_id=".$_POST["id"];
			else {
				$sql1 = "UPDATE tbl_pages SET parent_id=".$_POST["oldparent"]." WHERE parent_id=".$_POST["id"];
				$sql2 = "UPDATE tbl_pages SET parent_id=".$_POST["newparent"]." WHERE page_id=".$_POST["id"];
				quickUPDATE($sql1); quickUPDATE($sql2);
				$bypass = TRUE;
			}
		}
	}
	
	if ($bypass) {
		echo "<body style=\"margin:15px;font-size:12px;\" onLoad=\"window.opener.location.reload();window.close();\">\n";
		echo "<script>document.writeln(opener.location);</script>";
	} else {
		if (quickUPDATE($sql) !== FALSE) {
			echo "<body style=\"margin:15px;font-size:12px;\" onLoad=\"window.opener.location.reload();window.close();\">\n";
			echo "<script>document.writeln(opener.location);</script>";
		} else {
			echo "<body style=\"margin:15px;font-size:12px;\">\n";
			echo error("There was an error when attempting to make the change.")."<P>".$sql;
		}
	}
}
	
?>

</body>
</html>