<%
if SESSION("UserID")="" then
SESSION("MyURL")=request.ServerVariables("SCRIPT_NAME")&"?"&request.ServerVariables("QUERY_STRING")
response.Redirect "login.asp?message=expired"
response.End
end if
if not CheckSecurity(SESSION("OwnerID"),"Search") and not CheckSecurity(SESSION("OwnerID"),"Add") then
response.Write "" & "Non hai il permesso per accedere a questa tabella" & " " & "Torna alla pagina di login" & "
"
response.End
end if
%>
<%
on error resume next
dbConnection=""
db_connect()
call ReportError
Set rs = server.CreateObject("ADODB.Recordset")
Set rss = server.CreateObject("ADODB.Recordset")
' process reqest data, fill session variables
if (Request.Form="" and Request.QueryString="") then
For Each key in Session.Contents
if left(key, len(strTableName)+1 ) = strTableName & "_" and _
InStr(Mid(key, len(strTableName)+2), "_" )<1 then
Session.Contents.Remove(key)
end if
Next
set strTableName_asearchnot = CreateObject("Scripting.Dictionary")
set strTableName_asearchopt = CreateObject("Scripting.Dictionary")
set strTableName_asearchfor = CreateObject("Scripting.Dictionary")
set strTableName_asearchfortype = CreateObject("Scripting.Dictionary")
set strTableName_asearchfor2 = CreateObject("Scripting.Dictionary")
set session(strTableName & "_asearchnot")= strTableName_asearchnot
set session(strTableName & "_asearchopt") = strTableName_asearchopt
set session(strTableName & "_asearchfor") = strTableName_asearchfor
set session(strTableName & "_asearchfor2") = strTableName_asearchfor2
set session(strTableName & "_asearchfortype") = strTableName_asearchfortype
end if
if REQUEST("a")="showall" then
SESSION(strTableName & "_search")=0
elseif REQUEST("a")="search" then
SESSION(strTableName & "_searchfield")=postvalue("SearchField")
SESSION(strTableName & "_searchoption")=postvalue("SearchOption")
SESSION(strTableName & "_searchfor")=postvalue("SearchFor")
if postvalue("SearchFor")<>"" or postvalue("SearchOption")="Empty" then
SESSION(strTableName & "_search")=1
else
SESSION(strTableName & "_search")=0
end if
SESSION(strTableName & "_pagenumber")=1
elseif REQUEST("a")="advsearch" then
set strTableName_asearchnot = CreateObject("Scripting.Dictionary")
set strTableName_asearchopt = CreateObject("Scripting.Dictionary")
set strTableName_asearchfor = CreateObject("Scripting.Dictionary")
set strTableName_asearchfor2 = CreateObject("Scripting.Dictionary")
set strTableName_asearchfortype = CreateObject("Scripting.Dictionary")
tosearch=0
asearchfield = postvalue("asearchfield[]")
if not isarray(asearchfield) then
dim t
t=asearchfield
redim asearchfield(1)
asearchfield(0)=t
end if
SESSION(strTableName & "_asearchtype") = postvalue("type")
if SESSION(strTableName & "_asearchtype")="" then SESSION(strTableName & "_asearchtype")="and"
for field=0 to ubound(asearchfield)-1
gfield=asearchfield(field)
asopt=postvalue("asearchopt_" & GoodFieldName(asearchfield(field)))
value1=postvalue("value_" & GoodFieldName(asearchfield(field)))
if value1="" then value1=postvalue("value_" & GoodFieldName(asearchfield(field)) & "[]")
ttype=postvalue("type_" & GoodFieldName(asearchfield(field)))
value2=postvalue("value1_" & GoodFieldName(asearchfield(field)))
if value2="" then value2=postvalue("value_1" & GoodFieldName(asearchfield(field)) & "[]")
nnot=postvalue("not_" & GoodFieldName(asearchfield(field)))
if not SafeIsEmpty(value1) or asopt="Empty" then
tosearch=1
strTableName_asearchopt.Add gfield,asopt
if not isArray(value1) then
strTableName_asearchfor.Add gfield,value1
else
strTableName_asearchfor.Add gfield,combinevalues(value1)
end if
strTableName_asearchfortype.Add gfield,ttype
if not SafeIsEmpty(value2) then strTableName_asearchfor2.Add gfield,value2
strTableName_asearchnot.Add gfield,nnot
end if
next
set SESSION(strTableName & "_asearchnot")= strTableName_asearchnot
set SESSION(strTableName & "_asearchfortype")= strTableName_asearchfortype
set SESSION(strTableName & "_asearchopt") = strTableName_asearchopt
set SESSION(strTableName & "_asearchfor") = strTableName_asearchfor
set SESSION(strTableName & "_asearchfor2") = strTableName_asearchfor2
if tosearch<>0 then
SESSION(strTableName & "_search")=2
else
SESSION(strTableName & "_search")=0
end if
SESSION(strTableName & "_pagenumber")=1
end if
if REQUEST("orderby")<> "" then SESSION(strTableName & "_orderby")=REQUEST("orderby")
if REQUEST("pagesize")<>"" then
SESSION(strTableName & "_pagesize")=REQUEST("pagesize")
SESSION(strTableName & "_pagenumber")=1
end if
if REQUEST("goto")<>"" then SESSION(strTableName & "_pagenumber")=REQUEST("goto")
' process reqest data - end
smarty.Add "includes",""
' process session variables
' order by
strOrderBy=""
order_ind=-1
smarty.Add "order_dir_Descrizione","a"
smarty.Add "order_dir_Ruolo_Svolto","a"
smarty.Add "order_dir_Allegato","a"
smarty.Add "order_dir_Periodo","a"
if SESSION(strTableName & "_orderby")<> "" then
order_field=mid(SESSION(strTableName & "_orderby"),2)
order_dir=mid(SESSION(strTableName & "_orderby"),1,1)
order_ind=GetFieldIndex(order_field,"")
if smarty.Exists("order_dir_Descrizione") then smarty.Remove("order_dir_Descrizione")
smarty.Add "order_dir_Descrizione","a"
if order_field="Descrizione" then
if order_dir="a" then
if smarty.Exists("order_dir_Descrizione") then smarty.Remove("order_dir_Descrizione")
smarty.Add "order_dir_Descrizione","d"
img="up"
else
img="down"
end if
if smarty.Exists("order_image_Descrizione") then smarty.Remove("order_image_Descrizione")
smarty.Add "order_image_Descrizione","![]()
"
end if
if smarty.Exists("order_dir_Ruolo_Svolto") then smarty.Remove("order_dir_Ruolo_Svolto")
smarty.Add "order_dir_Ruolo_Svolto","a"
if order_field="Ruolo Svolto" then
if order_dir="a" then
if smarty.Exists("order_dir_Ruolo_Svolto") then smarty.Remove("order_dir_Ruolo_Svolto")
smarty.Add "order_dir_Ruolo_Svolto","d"
img="up"
else
img="down"
end if
if smarty.Exists("order_image_Ruolo_Svolto") then smarty.Remove("order_image_Ruolo_Svolto")
smarty.Add "order_image_Ruolo_Svolto","![]()
"
end if
if smarty.Exists("order_dir_Allegato") then smarty.Remove("order_dir_Allegato")
smarty.Add "order_dir_Allegato","a"
if order_field="Allegato" then
if order_dir="a" then
if smarty.Exists("order_dir_Allegato") then smarty.Remove("order_dir_Allegato")
smarty.Add "order_dir_Allegato","d"
img="up"
else
img="down"
end if
if smarty.Exists("order_image_Allegato") then smarty.Remove("order_image_Allegato")
smarty.Add "order_image_Allegato","![]()
"
end if
if smarty.Exists("order_dir_Periodo") then smarty.Remove("order_dir_Periodo")
smarty.Add "order_dir_Periodo","a"
if order_field="Periodo" then
if order_dir="a" then
if smarty.Exists("order_dir_Periodo") then smarty.Remove("order_dir_Periodo")
smarty.Add "order_dir_Periodo","d"
img="up"
else
img="down"
end if
if smarty.Exists("order_image_Periodo") then smarty.Remove("order_image_Periodo")
smarty.Add "order_image_Periodo","![]()
"
end if
if order_ind<>"" then
if order_dir="a" then
strOrderBy="order by " & (order_ind) & " asc"
else
strOrderBy="order by " & (order_ind) & " desc"
end if
end if
end if
if strOrderBy="" then strOrderBy=gstrOrderBy
' page number
mypage=cint(SESSION(strTableName & "_pagenumber"))
if mypage=0 then mypage=1
' page size
PageSize=cint(SESSION(strTableName & "_pagesize"))
if PageSize=0 then PageSize=gPageSize
s=""
if PageSize=10 then s="selected"
smarty.Add "rpp10_selected",s
s=""
if PageSize=20 then s="selected"
smarty.Add "rpp20_selected",s
s=""
if PageSize=30 then s="selected"
smarty.Add "rpp30_selected",s
s=""
if PageSize=50 then s="selected"
smarty.Add "rpp50_selected",s
s=""
if PageSize=100 then s="selected"
smarty.Add "rpp100_selected",s
s=""
if PageSize=500 then s="selected"
smarty.Add "rpp500_selected",s
' delete record
if request("a")="delete" and request("mdelete[]").Count>0 then
set keys = CreateObject("Scripting.Dictionary")
for ind=1 to request("mdelete[]").Count
if keys.Exists("ID") then keys.Remove("ID")
keys.Add "ID",request("mdelete1[]").Item(request("mdelete[]").Item(ind))
strSQL="delete from " & AddTableWrappers(strOriginalTableName) & " where " & KeyWhere(keys,"")
retval=true
where = mid(strSQL,len("delete from " & AddTableWrappers(strOriginalTableName) & " where "))
DoEvent "retval = BeforeDelete(""" & replace(where,"""","""""") & """)"
if retval then
' // delete associated uploaded files if any
DeleteUploadedFiles(where)
LogInfo(strSQL)
dbConnection.Execute strSQL
DoEvent "AfterDelete()"
end if
next
DoEvent "AfterMassDelete()"
end if
' make sql "select" string
strSQL = gstrSQL
' add search params
if SESSION(strTableName & "_search")=1 then
' regular search
strSearchFor=trim(SESSION(strTableName & "_searchfor"))
strSearchOption=trim(SESSION(strTableName & "_searchoption"))
if SESSION(strTableName & "_searchfield")<> "" then
strSearchField = SESSION(strTableName & "_searchfield")
where = StrWhere(strSearchField, strSearchFor, strSearchOption, "")
if where <>"" then
strSQL = AddWhere(strSQL,where)
else
strSQL = AddWhere(strSQL,"1=0")
end if
else
sstrWhere = "1=0"
strSQL = AddWhere(strSQL,sstrWhere)
end if
else
if SESSION(strTableName & "_search")=2 then
' advanced search
set strTableName_asearchfortype = SESSION(strTableName & "_asearchfortype")
set strTableName_asearchnot = SESSION(strTableName & "_asearchnot")
set strTableName_asearchopt = SESSION(strTableName & "_asearchopt")
set strTableName_asearchfor = SESSION(strTableName & "_asearchfor")
set strTableName_asearchfor2 = SESSION(strTableName & "_asearchfor2")
sWhere=""
for each f in strTableName_asearchfor
strSearchFor=trim(strTableName_asearchfor.item(f))
strSearchFor2=""
ttype=strTableName_asearchfortype.item(f)
for each i in strTableName_asearchfor2
if f=i then strSearchFor2=trim(strTableName_asearchfor2.item(i))
next
if strSearchFor<>"" or true then
if sWhere="" then
if session(strTableName & "_asearchtype")="and" then
sWhere="1=1"
else
sWhere="1=0"
end if
end if
snot=strTableName_asearchnot.item(f)
strSearchOption=trim(strTableName_asearchopt.Item(f))
where=""
where=StrWhereAdv(f, strSearchFor, strSearchOption, strSearchFor2,ttype)
if where<>"" then
if snot<>"" then where="not (" & where & ")"
if SESSION(strTableName & "_asearchtype")="and" then
sWhere=sWhere & " and " & where
else
sWhere=sWhere & " or " & where
end if
end if
end if
next
strSQL = AddWhere(strSQL,sWhere)
end if
end if
' order by
strSQL=strSQL & " " & trim(strOrderBy)
' save SQL for use in "Export" and "Printer-friendly" pages
SESSION(strTableName & "_sql") = strSQL
LogInfo(strSQL)
' select and display records
if CheckSecurity(SESSION("OwnerID"),"Search") then
' Pagination:
numrows=GetRowCount(strSQL)
if numrows=0 then
smarty.Add "rowsfound",false
smarty.Add "message", "Non sono stati trovati Record"
else
smarty.Add "rowsfound",true
smarty.Add "records_found",numrows
maxRecords = numrows
maxpages=int(maxRecords/PageSize)
if maxRecords mod PageSize <> 0 then maxpages=maxpages+1
if mypage > maxpages then mypage = maxpages
if mypage<1 then mypage=1
maxrecs=PageSize
smarty.Add "page",mypage
smarty.Add "maxpages",maxpages
' write pagination
smarty.Add "pagination",""
strSQL = AddTop(strSQL, mypage*PageSize)
end if
rs.Open strSQL, dbConnection,1,2
call ReportError
if not rs.EOF then rs.Move(PageSize*(mypage-1))
' hide colunm headers if needed
recordsonpage=numrows-(mypage-1)*PageSize
if recordsonpage>PageSize then _
recordsonpage=PageSize
if recordsonpage>=1 then
smarty.Add "column1show",true
else
smarty.Add "column1show",false
end if
Set rowinfo = CreateObject("Scripting.Dictionary")
shade=false
recno=1
editlink=""
copylink=""
ri=0
Set fso = CreateObject("Scripting.FileSystemObject")
while not rs.eof and recno<=PageSize
Set row = CreateObject("Scripting.Dictionary")
if not shade then
row.Add "shadeclass","class=""shade"""
row.Add "shadeclassname","shade"
shade=true
else
row.Add "shadeclass",""
row.Add "shadeclassname",""
shade=false
end if
col=0
while not rs.EOF and recno<=PageSize and col<1
col=col+1
' key fields
row.Add col & "id1",my_htmlspecialchars(dbvalue(rs("ID")))
row.Add col & "recno",recno
recno=recno+1
' detail tables
masterquery="mastertable=Schede"
masterquery=masterquery & "&masterkey1=" & SafeURLEncode(dbvalue(rs("ID")))
row.Add col & "Foto_masterkeys",masterquery
' edit page link
editlink=""
editlink=editlink & "editid1=" & my_htmlspecialchars(SafeURLEncode(dbvalue(rs("ID"))))
row.Add col & "editlink",editlink
copylink=""
copylink=copylink & "copyid1=" & my_htmlspecialchars(SafeURLEncode(dbvalue(rs("ID"))))
row.Add col & "copylink",copylink
keylink=""
keylink=keylink & "&key1=" & my_htmlspecialchars(SafeURLEncode(dbvalue(rs("ID"))))
' Descrizione - HTML
value=""
value = GetData(rs,"Descrizione", "HTML")
row.Add col & "Descrizione_value",value
' Ruolo Svolto -
value=""
value = ProcessLargeText(GetData(rs,"Ruolo Svolto", ""),"field=Ruolo+Svolto" & keylink,"",MODE_LIST)
row.Add col & "Ruolo_Svolto_value",value
' Allegato - Document Download
value=""
value = GetData(rs,"Allegato", "Document Download")
row.Add col & "Allegato_value",value
' Periodo -
value=""
value = ProcessLargeText(GetData(rs,"Periodo", ""),"field=Periodo" & keylink,"",MODE_LIST)
row.Add col & "Periodo_value",value
row.Add col & "show",true
rs.MoveNext
wend
rowinfo.add ri,row
ri=ri+1
wend
smarty.Add "rowinfo",rowinfo
rs.Close
end if
smarty.Add "userid",my_htmlspecialchars(SESSION("UserID"))
' table selector
strPerm = GetUserPermissions("Foto")
f=false
if instr(strPerm, "A")<>0 or instr(strPerm, "S")<>0 then f=true
smarty.Add "allow_Foto",f
strPerm = GetUserPermissions("Schede")
f=false
if instr(strPerm, "A")<>0 or instr(strPerm, "S")<>0 then f=true
smarty.Add "allow_Schede",f
smarty.Add "allow_delete",CheckSecurity(SESSION("OwnerID"),"Delete")
smarty.Add "allow_add",CheckSecurity(SESSION("OwnerID"),"Add")
smarty.Add "allow_edit",CheckSecurity(SESSION("OwnerID"),"Edit")
smarty.Add "allow_export",CheckSecurity(SESSION("OwnerID"),"Export")
smarty.Add "allow_search",CheckSecurity(SESSION("OwnerID"),"Search")
strSQL=SESSION(strTableName & "_sql")
smarty_display("Schede_list.htm")
%>