igamebox
/
mtb_crm_asp


			
				
					
						
						
							123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331
							<?php
require_once 'conn.php';
checkLogin();
?>
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <title>管理区域</title>
    <link rel="stylesheet" href="system/css/common.css" type="text/css" />
    <script src="system/js/jquery-1.7.2.min.js"></script>
    <script src="js/js.js"></script>
</head>
<body class="clear">
<?php
// Get query parameters
$page = $_GET['Page'] ?? '';
$keys = urlencode($_GET['Keys'] ?? '');
$fliterBusiness = $_GET['fliterBusiness'] ?? '';
$fliterDeal = $_GET['Deal'] ?? '';

// Get form data
$id = $_POST['id'] ?? '';
$cs_code = textEncode($_POST['cs_code'] ?? '');
$cs_company = textEncode($_POST['cs_company'] ?? '');
$cs_name = textEncode($_POST['cs_name'] ?? '');
$cs_country = $_POST['cs_country'] ?? '';
$cs_from = $_POST['cs_from'] ?? '';
$cs_tel = textEncode($_POST['cs_tel'] ?? '');
$cs_wechat = textEncode($_POST['cs_wechat'] ?? '');
$cs_whatsapp = textEncode($_POST['cs_whatsapp'] ?? '');
$cs_email = textEncode($_POST['cs_email'] ?? '');
$cs_linkedin = textEncode($_POST['cs_linkedin'] ?? '');
$cs_facebook = textEncode($_POST['cs_facebook'] ?? '');
$cs_alibaba = textEncode($_POST['cs_alibaba'] ?? '');
$cs_alibaba = str_replace(':', ':', $cs_alibaba);
$cs_alibaba = str_replace('ID:', '', $cs_alibaba);
$cs_address = textEncode($_POST['cs_address'] ?? '');
$cs_type = textEncode($_POST['cs_type'] ?? '');
$cs_belongclient = $_POST['cs_belongclient'] ?? '';
$cs_addtime = $_POST['cs_addtime'] ?? '';
$cs_updatetime = date('Y-m-d H:i:s');
$cs_belong = $_SESSION['employee_id'];
$cs_state = 1;
$cs_deal = $_POST['cs_deal'] ?? '';
$cs_telformat = numFormat($_POST['cs_tel'] ?? '');
$cs_whatsappformat = numFormat($_POST['cs_whatsapp'] ?? '');
$allowedit = $_POST['Permissions'] ?? '0';

// Validate numeric values
$allowedit = is_numeric($allowedit) ? $allowedit : 0;
$cs_country = (is_numeric($cs_country) && $cs_country !== '') ? $cs_country : 0;
$cs_from = (is_numeric($cs_from) && $cs_from !== '') ? $cs_from : 0;
$cs_deal = (is_numeric($cs_deal) && $cs_deal !== '') ? $cs_deal : 1;
$cs_type = (is_numeric($cs_type) && $cs_type !== '') ? $cs_type : 5;
$cs_belongClient = (is_numeric($cs_belongclient) && $cs_belongclient !== '') ? $cs_belongclient : 0;

$cs_note = htmlEncode($_POST['cs_note'] ?? '');
$mytag = textEncode($_POST['mytag'] ?? '');
$mytag = str_replace(['&#60;&#47;span&#62;&#60;span&#62;', '&#60;&#47;span&#62;', '&#60;span&#62;'], [',', '', ''], $mytag);
$mytag = explode(',', $mytag);

// Auto-detect source from code
if (strpos($cs_code, ';1688') !== false) {
    $cs_from = 1; // 1688
}
if (strpos($cs_code, ';阿里') !== false) {
    $cs_from = 2; // International station
}

// Validation checks
if ($allowedit != 1) {
    // Alibaba validation
    if (($cs_from == 1 || $cs_from == 2) && empty($cs_alibaba)) {
        echo "<script>alert('阿里旺旺为必填项');history.back();</script>";
        exit;
    }

    // Website source validation
    if (strpos($cs_code, '官网') !== false) {
        $cs_from = 3;
    }

    if ($cs_from == 3 && empty($cs_tel) && empty($cs_whatsapp) && empty($cs_wechat)) {
        echo "<script>alert('电话和WhatsApp为必填项');history.back();</script>";
        exit;
    }

    // Market customer validation
    if ($cs_from == 8 && empty($cs_wechat)) {
        echo "<script>alert('微信为必填项');history.back();</script>";
        exit;
    }

    // Facebook validation
    if ($cs_from == 12 && empty($cs_facebook)) {
        echo "<script>alert('Facebook为必填项');history.back();</script>";
        exit;
    }
}

// Determine action type
$act = empty($id) || !is_numeric($id) ? 'addSave' : 'editSave';

if ($act === 'editSave') {
    // Verify customer ownership
    $stmt = $conn->prepare("SELECT cs_belong FROM Customer WHERE id = ?");
    $stmt->bind_param("i", $id);
    $stmt->execute();
    $result = $stmt->get_result();
    
    if ($row = $result->fetch_assoc()) {
        if ($row['cs_belong'] != $cs_belong) {
            echo "<script>alert('抱歉，该客户属于另一业务,你没有权限修改');history.back();</script>";
            exit;
        }
    } else {
        echo "<script>alert('没有此客户!');history.back();</script>";
        exit;
    }
}

// Validate customer code
if (empty($cs_code)) {
    echo "<script>alert('客户编码不能为空');history.back();</script>";
    exit;
}

// Check for duplicate customer information
$checkStr = "SELECT * FROM Customer WHERE cs_belong != " . $_SESSION['employee_id'] . " AND (id = 0 ";

$Dupli = "";

if (!empty($cs_tel)) {
    $checkStr .= " OR cs_telformat LIKE '%" . substr($cs_telformat, 3, 9) . "%'" . 
                 " OR cs_wechat LIKE '%" . substr($cs_telformat, 3, 9) . "%'" . 
                 " OR cs_whatsappformat LIKE '%" . $cs_telformat . "%'";
    $Dupli .= "电话:" . $cs_tel;
}

if (!empty($cs_email)) {
    $checkStr .= " OR cs_email = '" . $conn->real_escape_string($cs_email) . "'";
    $Dupli .= "邮箱:" . $cs_email;
}

if (!empty($cs_whatsapp)) {
    $checkStr .= " OR cs_whatsappformat LIKE '%" . substr($cs_whatsappformat, 3, 9) . "%'" . 
                 " OR cs_telformat LIKE '%" . substr($cs_whatsappformat, 3, 9) . "%'";
    $Dupli .= "WhatsApp:" . $cs_whatsapp;
}

if (!empty($cs_wechat)) {
    if (strlen($cs_wechat) < 10) {
        $checkStr .= " OR cs_wechat LIKE '%" . $conn->real_escape_string($cs_wechat) . "%'" . 
                    " OR cs_telformat LIKE '%" . $conn->real_escape_string($cs_wechat) . "%'";
    } else {
        $checkStr .= " OR cs_wechat LIKE '%" . substr($cs_wechat, 2, 12) . "%'" . 
                    " OR cs_telformat LIKE '%" . substr($cs_wechat, 2, 12) . "%'";
    }
    $Dupli .= "微信:" . $cs_wechat;
}

if (!empty($cs_linkedin)) {
    $checkStr .= " OR cs_linkedin LIKE '%" . $conn->real_escape_string($cs_linkedin) . "%'";
    $Dupli .= "Linked:" . $cs_linkedin;
}

if (!empty($cs_facebook)) {
    $checkStr .= " OR cs_facebook LIKE '%" . $conn->real_escape_string($cs_facebook) . "%'";
    $Dupli .= "Facebook:" . $cs_facebook;
}

if (!empty($cs_alibaba)) {
    if (strlen($cs_alibaba) < 10) {
        $checkStr .= " OR cs_alibaba LIKE '" . $conn->real_escape_string($cs_alibaba) . "'";
    } else {
        $checkStr .= " OR cs_alibaba LIKE '%" . substr($cs_alibaba, 3, 12) . "%'";
    }
    $Dupli .= "阿里旺旺:" . $cs_alibaba;
}

$checkStr .= " ) ORDER BY id ASC";

if ($allowedit != 1) {
    $result = $conn->query($checkStr);
    if ($result && $result->num_rows > 0) {
        $row = $result->fetch_assoc();
        
        // Get owner name
        $ownerResult = $conn->query("SELECT em_user FROM employee WHERE id = " . $row['cs_belong']);
        $ownerRow = $ownerResult->fetch_assoc();
        $owner = textUncode($ownerRow['em_user']);
        
        // Determine who entered first
        if (strtotime($cs_addtime) > strtotime($row['cs_addtime'])) {
            $tstr = "INSERT INTO logRecord (loginName, loginIp, loginTime, loginAct) VALUES ('" .
                   $_SESSION['employee_name'] . "', '" . getIp() . "', '" . date('Y-m-d H:i:s') . "', '" .
                   $_SESSION['employee_name'] . "编辑客户\"" . $cs_code . "\"，该客户与\"" . 
                   textUncode($row['cs_code']) . "\"高度类似，<br>重复项为:" . $Dupli . "<br>客户由:" .
                   $_SESSION['employee_name'] . $cs_addtime . "首次录入')";
        } else {
            $tstr = "INSERT INTO logRecord (loginName, loginIp, loginTime, loginAct) VALUES ('" .
                   $_SESSION['employee_name'] . "', '" . getIp() . "', '" . date('Y-m-d H:i:s') . "', '" .
                   $_SESSION['employee_name'] . "编辑客户\"" . $cs_code . "\"，该客户与\"" . 
                   textUncode($row['cs_code']) . "\"高度类似，<br>重复项为:" . $Dupli . "<br>客户由:" .
                   $owner . $row['cs_addtime'] . "首次录入')";
        }
        
        $conn->query($tstr);
        echo "<script>alert('录入信息\\n与" . $owner . "客户编号:" . textUncode($row['cs_code']) . 
             "\\n高度类似，未能保存，请联系管理员核实！');history.back();</script>";
        exit;
    }
}

// Save or update customer data
if ($act == "editSave" || $allowedit == 1) {
    $hrefstr = "/customers.php?Keys=" . $keys . "&fliterBusiness=" . $fliterBusiness . 
               "&fliterDeal=" . $fliterDeal . "&Page=" . $page;
    
    // 直接使用SQL拼接，与ASP版本保持一致
    $updateSql = "UPDATE Customer SET 
        cs_code='" . $conn->real_escape_string($cs_code) . "',
        cs_company='" . $conn->real_escape_string($cs_company) . "',
        cs_name='" . $conn->real_escape_string($cs_name) . "',
        cs_country=" . $cs_country . ",
        cs_from=" . $cs_from . ",
        cs_tel='" . $conn->real_escape_string($cs_tel) . "',
        cs_wechat='" . $conn->real_escape_string($cs_wechat) . "',
        cs_whatsapp='" . $conn->real_escape_string($cs_whatsapp) . "',
        cs_email='" . $conn->real_escape_string($cs_email) . "',
        cs_linkedin='" . $conn->real_escape_string($cs_linkedin) . "',
        cs_facebook='" . $conn->real_escape_string($cs_facebook) . "',
        cs_address='" . $conn->real_escape_string($cs_address) . "',
        cs_type=" . $cs_type . ",
        cs_alibaba='" . $conn->real_escape_string($cs_alibaba) . "',
        cs_updatetime='" . $cs_updatetime . "',
        cs_belong=" . $cs_belong . ",
        cs_belongclient=" . $cs_belongClient . ",
        cs_state=" . $cs_state . ",
        cs_telformat='" . $conn->real_escape_string($cs_telformat) . "',
        cs_whatsappformat='" . $conn->real_escape_string($cs_whatsappformat) . "',
        cs_deal=" . $cs_deal . ",
        cs_note='" . $conn->real_escape_string($cs_note) . "'";

    // 处理cs_dealdate
    if ($cs_deal == 3) {
        $updateSql .= ", cs_dealdate = CASE WHEN cs_dealdate IS NULL THEN NOW() ELSE cs_dealdate END";
    }
    
    $updateSql .= " WHERE id=" . intval($id);

    $conn->query($updateSql);

    // Update tags
    $conn->query("DELETE FROM tagTable WHERE customerId = " . intval($id));
    foreach ($mytag as $tag) {
        if (!empty(trim($tag))) {
            $tagSql = "INSERT INTO tagTable (tagName, employeeId, customerId) VALUES ('" . 
                     $conn->real_escape_string($tag) . "', " . 
                     intval($_SESSION['employee_id']) . ", " . 
                     intval($id) . ")";
            $conn->query($tagSql);
        }
    }

    echo "<script>location.href='$hrefstr';</script>";
} else {
    // Insert new customer using direct SQL
    $insertSql = "INSERT INTO Customer (
        cs_code, cs_company, cs_name, cs_country, cs_from, cs_tel, cs_wechat, 
        cs_whatsapp, cs_email, cs_linkedin, cs_facebook, cs_alibaba, cs_address,
        cs_telBu, cs_wechatBu, cs_whatsappBu, cs_emailBu, cs_linkedinBu, 
        cs_facebookBu, cs_alibabaBu, cs_type, cs_addtime, cs_updatetime, 
        cs_belong, cs_belongClient, cs_state, cs_telformat, cs_whatsappformat,
        cs_deal, cs_note, cs_chain, is_silent, cs_dealdate
    ) VALUES (
        '" . $conn->real_escape_string($cs_code) . "',
        '" . $conn->real_escape_string($cs_company) . "',
        '" . $conn->real_escape_string($cs_name) . "',
        " . $cs_country . ",
        " . $cs_from . ",
        '" . $conn->real_escape_string($cs_tel) . "',
        '" . $conn->real_escape_string($cs_wechat) . "',
        '" . $conn->real_escape_string($cs_whatsapp) . "',
        '" . $conn->real_escape_string($cs_email) . "',
        '" . $conn->real_escape_string($cs_linkedin) . "',
        '" . $conn->real_escape_string($cs_facebook) . "',
        '" . $conn->real_escape_string($cs_alibaba) . "',
        '" . $conn->real_escape_string($cs_address) . "',
        '" . $conn->real_escape_string($cs_tel) . "',
        '" . $conn->real_escape_string($cs_wechat) . "',
        '" . $conn->real_escape_string($cs_whatsapp) . "',
        '" . $conn->real_escape_string($cs_email) . "',
        '" . $conn->real_escape_string($cs_linkedin) . "',
        '" . $conn->real_escape_string($cs_facebook) . "',
        '" . $conn->real_escape_string($cs_alibaba) . "',
        " . $cs_type . ",
        NOW(),
        NOW(),
        " . $cs_belong . ",
        " . $cs_belongClient . ",
        " . $cs_state . ",
        '" . $conn->real_escape_string($cs_telformat) . "',
        '" . $conn->real_escape_string($cs_whatsappformat) . "',
        " . $cs_deal . ",
        '" . $conn->real_escape_string($cs_note) . "',
        " . $cs_belong . ",
        0,
        " . ($cs_deal == 3 ? "NOW()" : "NULL") . "
    )";

    $conn->query($insertSql);
    $id = $conn->insert_id;

    // Save tags for new customer
    foreach ($mytag as $tag) {
        if (!empty(trim($tag))) {
            $tagSql = "INSERT INTO tagTable (tagName, employeeId, customerId) VALUES ('" . 
                     $conn->real_escape_string($tag) . "', " . 
                     intval($_SESSION['employee_id']) . ", " . 
                     intval($id) . ")";
            $conn->query($tagSql);
        }
    }

    echo "<script>location.href='customerAdd.php';</script>";
}
?>
</body>
</html>