rendered paste body<?include "lib/config.obj.php";include_once "$site_dir/lib/db.obj.php";include_once "$site_dir/lib/db.obj.php";if(!isset($_SESSION['userid']) || $_SESSION['userid'] == "") { header("location: ".$site_url."/users/login.php"); exit;}if(!$db) { $db = new db();}$type = $_GET['type'];$mes = $_GET['mes'];$eid = $_GET['eid'];$cid = $_GET['cid'];$showq = "";if(isset($_GET['show'])) { $show = $_GET['show']; if($show == "mais") { $showq = " AND value >= 0 "; } else if($show == "menos") { $showq = " AND value < 0 "; }}$ms = 1;$me = 12;$limitmonth = "";$cyear = 0;$cmonth = 0;$mdiff = 2;if(isset($_GET['cyear']) && is_numeric($_GET['cyear'])) { $cyear = $_GET['cyear'];} else { $cyear = date('Y');}if(isset($_GET['cmonth']) && is_numeric($_GET['cmonth'])) { $cmonth = $_GET['cmonth'];} else { $cmonth = date('m');}if(isset($_GET['mdiff']) and is_numeric($_GET['mdiff'])) { $mdiff = $_GET['mdiff']-1; if($mdiff < 0) $mdiff = 0; if($mdiff > 12) $mdiff = 12;}if(!isset($_GET['cmonth']) || $cmonth < 1 || $cmonth > 12) { $cmonth = date('m');} else { $ms = $cmonth - $mdiff; $me = $cmonth + $mdiff; if($ms < 1) $ms = 1; if($me > 12) $me = 12; $limitmonth = " AND ((year = $cyear AND month >= $ms AND month <= $me)) "; $limitmonthurl = "&cyear=$cyear&cmonth=$cmonth&mdiff=$mdiff";}$querystr = $_SERVER['QUERY_STRING'];$queryA = split("&", $querystr);$queryB = array();foreach($queryA as $key => $value) { list($left, $right) = split("=", $value); if($left != "ord") { $queryB[] = "$left=$right"; }}$querystr = join("&", $queryB);if($eid != "") $query .= "eid = $eid ";if($eid != "" AND $mes != "") $query .= " AND ";if($mes != "") $query .= " month = $mes ";if($eid != "" OR $mes != "") $query .= " AND ";if($eid != "") { $query = "SELECT * FROM entidades WHERE id = $eid "; $entidade = $db->query($query); $type = $entidade[0]['type']; if(!isSuperAdmin() && !hasPermissionForType($type)) { header("location: index.php"); exit; }}if($cid != "") { $query = "SELECT conta.*, entidades.name, entidades.type as type FROM conta, entidades WHERE "; $query .= " conta.id = $cid AND entidades.id = conta.eid $limitmonth $showq "; $conta = $db->query($query); $type = $conta[0]['type']; if($type != "" && !isSuperAdmin() && !hasPermissionForType($type)) { header("location: index.php"); exit; } $query = "SELECT conta.*, entidades.name, entidades.type as type FROM conta, entidades WHERE "; $query .= " conta.id = $cid AND entidades.id = conta.eid $limitmonth $showq "; $contas = $db->query($query); if($contas[0][month] == "13") { header("location: detail_info.php?cid=$cid"); exit; }}$order = "month ASC, day ASC, conta.eid ASC";if($_GET['ord'] == "valor") { $order = "value ASC, " . $order; //month ASC, day ASC, conta.eid ASC";} else if($_GET['ord'] == "id") { $order = "id ASC, " . $order; //month ASC, day ASC, conta.eid ASC";}$query2 = "SELECT conta.*, entidades.name, entidades.type as type FROM conta, entidades WHERE ";if($eid != "") $query2 .= "eid = $eid ";if($eid != "" AND $mes != "") $query2 .= " AND ";if($mes != "") $query2 .= " month = $mes ";if($eid != "" OR $mes != "") $query2 .= " AND ";$query2 .= " entidades.id = conta.eid AND entidades.type = $type ";if(!$limitmonth) $query2 .= " AND month >= 1 AND month <= 12 ";$query2 .= " $limitmonth $showq ORDER BY $order ";if($cid != "") { $query2 = "SELECT conta.*, entidades.name, entidades.type as type FROM conta, entidades WHERE "; $query2 .= " conta.id = $cid AND entidades.id = conta.eid $limitmonth $showq ";}$contas = $db->query($query2);if($contas[0][month] == "13") { header("location: detail_info.php?cid=$cid"); exit;}include "$site_dir/lib/top.inc.php";?><br /><? if($eid != "") { ?><b><?=$types[$entidade[0][type]]?></b> <?=$entidade[0][name]?><br /><? } ?><? if($mes != "") { ?><b>Ms:</b> <?=$months[$mes]?><br /><? } ?><? if($cid == "") { ?><b>Ordenar por:</b> <a href="?<?=$querystr?>&ord=data">Data</a> | <a href="?<?=$querystr?>&ord=valor">Valor</a> | <a href="?<?=$querystr?>&ord=id">ID</a><br /><br /><? } ?><table cellspacing="0" cellpadding="2" border="0"><tr> <th width="30">ID</th> <th width="140">Título</th> <th width="100">Data</th> <th width="100">Valor</th> <th width="100"></th></tr><?$total = 0;for($k=0; $k<count($contas); $k++) {?><tr><? $i = 0; foreach($operation_type[$contas[$k][type]] as $key => $sign) { if($i == $contas[$k][operation]) { $operation = $key; break; } $i++; } $title = $contas[$k][titulo]; if($title == "") $title = "CONTA-".$contas[$k][id]; $daystr = $contas[$k][day]? $contas[$k][day]:""; if($daystr != "") $daystr .= " de "; $total += $contas[$k][value];?> <td align="right"><?=$contas[$k][id]?></td> <td align="center"><a href="<?=$site_url?>/detail_completo.php?cid=<?=$contas[$k][id]?>" title="<?=str_replace("\n", "<br />", $contas[0][desc]);?>"><?=$title?></a></td> <td align="center"><?=$daystr?><?=$months[$contas[$k][month]]?></td> <td align="right"><?=formatar($contas[$k][value])?> € </td> <td align="right"><? if(isSuperAdmin() || (isAdmin() && hasPermissionForType($contas[$k][type]))) { ?> <a href="insert_data.php?cid=<?=$contas[$k][id]?>">editar</a> | <a onclick="javascript:value = confirm('Deseja apagar esta conta?\n<?=formatar($contas[$k][value])?> €'); if(value == false) return false;" href="delete.php?id=<?=$contas[$k][id]?>">apagar</a><? } ?> </td></tr><?}?><tr> <td colspan="6" align="right"><hr width="93%" /></td></tr><tr> <td colspan="5"></td> <td align="right"><?=formatar($total)?> €</td> <td></td></tr></table><?include "$site_dir/lib/bottom.inc.php";?>