|
Server : LiteSpeed System : Linux terra.hostitbro.com 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64 User : outerorb ( 1091) PHP Version : 8.1.34 Disable Function : mail Directory : /home2/outerorb/emp.outerorbittech.in/admin/ | |
|
Path: /home2/outerorb/emp.outerorbittech.in/admin/restore.php
Size: 1.08 KB
Permissions: 0666
<?php
require __DIR__ . '/../includes/helpers.php';
require_admin();
ensure_employees_table();
if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
redirect_with_message('trash.php', 'Invalid request.', 'error');
}
if (!isset($_POST['csrf_token']) || !verify_csrf($_POST['csrf_token'])) {
redirect_with_message('trash.php', 'Session expired. Try again.', 'error');
}
$id = isset($_POST['id']) ? (int) $_POST['id'] : 0;
if ($id <= 0) {
redirect_with_message('trash.php', 'Invalid record.', 'error');
}
$pdo = db();
$stmt = $pdo->prepare('SELECT id, deleted_at, department FROM employees WHERE id = ? LIMIT 1');
$stmt->execute([$id]);
$emp = $stmt->fetch();
if (!$emp) {
redirect_with_message('trash.php', 'Record not found.', 'error');
}
enforce_department_access($emp);
if ($emp['deleted_at'] === null) {
redirect_with_message('dashboard.php', 'Record is already active.', 'success');
}
$pdo->prepare('UPDATE employees SET deleted_at = NULL WHERE id = ?')->execute([$id]);
redirect_with_message('dashboard.php', 'Record restored successfully.');