📄 File: add_item.php

Path: /home2/outerorb/assetradar.outerorbittech.com/admin/add_item.php

Size: 3.44 KB

Permissions: 0666

<?php
require_once __DIR__ . '/../inc/auth.php';
require_login();
$u = current_user();
require_admin();
define('ADMIN_PAGE', true);
include __DIR__ . '/../inc/header.php';
include __DIR__ . '/admin_menu.php';

$cats = $mysqli->query('SELECT * FROM categories');
$vendors = $mysqli->query('SELECT * FROM vendors');
if (isset($_POST['save'])) { verify_csrf();
    $asset_tag = $_POST['asset_tag'];
    $item_name = $_POST['item_name'];
    $category_id = (int)$_POST['category_id'];
    $brand_model = $_POST['brand_model'];
    $serial_number = $_POST['serial_number'];
    $purchase_date = $_POST['purchase_date'];
    $warranty_to = $_POST['warranty_to'];
    $condition_status = 'Working';
    $ownership_type = $_POST['ownership_type'] ?? 'owned';
    $vendor_id = !empty($_POST['vendor_id']) ? (int)$_POST['vendor_id'] : null;
    
    $stmt = $mysqli->prepare('INSERT INTO items (asset_tag,item_name,category_id,brand_model,serial_number,purchase_date,warranty_to,condition_status,ownership_type,vendor_id,created_at) VALUES (?,?,?,?,?,?,?,?,?,?,NOW())');
    $stmt->bind_param('sissssssss',$asset_tag,$item_name,$category_id,$brand_model,$serial_number,$purchase_date,$warranty_to,$condition_status,$ownership_type,$vendor_id);
    if ($stmt->execute()) {
        header('Location: inventory.php');
        exit;
    } else {
        $error = $stmt->error;
    }
}
?>
<div class="card p-3 card-hero">
  <h5>Add Item</h5>
  <?php if (!empty($error)): ?><div class="alert alert-danger"><?php echo esc($error); ?></div><?php endif; ?>
  <form method="post">
    <?php echo csrf_field(); ?>
    <div class="row">
      <div class="col-md-6 mb-3"><label>Asset Tag</label><input class="form-control" name="asset_tag" required></div>
      <div class="col-md-6 mb-3"><label>Item Name</label><input class="form-control" name="item_name" required></div>
      <div class="col-md-6 mb-3"><label>Category</label>
        <select class="form-control" name="category_id">
        <?php while($c=$cats->fetch_assoc()): ?>
          <option value="<?php echo $c['id']; ?>"><?php echo esc($c['name']); ?></option>
        <?php endwhile; ?>
        </select>
      </div>
      <div class="col-md-6 mb-3"><label>Brand / Model</label><input class="form-control" name="brand_model"></div>
      <div class="col-md-6 mb-3"><label>Serial Number</label><input class="form-control" name="serial_number"></div>
      <div class="col-md-6 mb-3"><label>Purchase Date</label><input type="date" class="form-control" name="purchase_date"></div>
      <div class="col-md-6 mb-3"><label>Warranty To</label><input type="date" class="form-control" name="warranty_to"></div>
      <div class="col-md-6 mb-3"><label>Ownership Type</label>
        <select class="form-control" name="ownership_type">
          <option value="owned">Owned</option>
          <option value="rented">Rented</option>
        </select>
      </div>
      <div class="col-md-6 mb-3"><label>Vendor</label>
        <select class="form-control" name="vendor_id">
          <option value="">None</option>
          <?php while($v=$vendors->fetch_assoc()): ?>
            <option value="<?php echo $v['id']; ?>"><?php echo esc($v['name']); ?></option>
          <?php endwhile; ?>
        </select>
      </div>
    </div>
    <button class="btn btn-primary" name="save">Save</button>
  </form>
</div>
<script>
  // No additional scripts needed
</script>
<?php include __DIR__ . '/../inc/footer.php'; ?>

← Back to Directory Edit File 🔒 Chmod