OverLord Shell

<?php session_start();
include("db/conn.php");
include_once("header.inc.php");
include("sidebar.php");

if(!isset($_SESSION['company_id']) || !isset($_SESSION['company_name'])){session_destroy();header("location:login.php");}
if(!in_array($_SESSION['loggedin_user'],array('admin','company'))){
	header("location:404.php");
}

$_SESSION['company_id'] = (empty($_SESSION['company_id'])) ? base64_decode($_GET['id']) : $_SESSION['company_id']; 
$pagename=substr(basename($_SERVER['PHP_SELF']),0,-4);
$webpagetitle="Company Location";

?>
			<?php if(in_array($_SESSION['loggedin_user'],array('admin','company'))){ ?>
            <a href="<?php echo $pagename?>add.php" class="btn btn-primary pull-right" style="margin-right: 4%; margin-top: 1%;">Add New<i class="fa fa-plus mlm"></i></a>
            <?php }?>
            <?php if($_SESSION['loggedin_user'] == 'admin') {?>
             <a href="company.php" class="btn btn-info mrm pull-right"><i class="fa fa-angle-left mrm"></i>Go Back</a>
             <?php
			}
			 ?>
            
        <!--BEGIN CONTENT-->
        <div class="page-content">
            <div class="row">
                <div class="col-md-8">
                         <div class="panel-body">
                            <?php if(!empty($_GET['msg']) && strpos($_GET['msg'],'success')!=FALSE){?>
                            <div class="note note-success note-dismissable" id="msg">
                                <button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>
                                <?php if($_GET['msg']=='add_success'){?>Record added Successfully!!!<?php }?>
                                <?php if($_GET['msg']=='update_success'){?>Record updated Successfully!!!<?php }?>
                                <?php if($_GET['msg']=='delete_success'){?>Record deleted Successfully!!!<?php }?>
                            </div>
                            <?php }?>
                            <div class="table-responsive">
                                <table class="table table-striped table-hover" id="dataTables-listing">
                                    <thead>
                                        <tr>
                                            <th>Name</th>
                                            <th>Mobile</th>
                                            <th>Email</th>
                                            <?php if(in_array($_SESSION['loggedin_user'],array('admin','company'))){?>
                                            
                                            <th class="text-center">View</th>
                                            <th class="text-center">Approved</th>
                                            <th class="text-center">Enable / Disable</th>
<!--                                            <th class="text-center">Delete</th>
-->                                            <?php }?>
                                        </tr>
                                    </thead>
                                    <tbody>
                                        <?php
                                        $listq="SELECT * FROM busdir_mst_company_review WHERE company_id = '".$_SESSION['company_id']."'";
                                        $listr=$connection->query($listq);
                                        while($listrow=$listr->fetch_assoc()){
                                        ?>
                                        <tr>
                                            <td><?php echo $listrow['name']?></td>
                                            <td><?php echo $listrow['mobile']?></td>
                                            <td><?php echo $listrow['email']?></td>
                                            <?php if(in_array($_SESSION['loggedin_user'],array('admin','company'))){?>
                                            <td class="text-center"><a href="<?php echo $pagename?>_view.php?id=<?php echo base64_encode($listrow['review_id'])?>" class="btn btn-warning btn-sm fancyboxajax">View<i class="fa fa-eye mlm"></i></a></td>
                                             <td class="text-center"><button type="button" value="<?php echo $listrow['review_id']?>" class="btn btn-sm btn-<?php if($listrow['approved']!='0')echo "info";else echo "default"?> approved"><?php if($listrow['approved']=='0')echo 'Mark as Approved<i class="fa fa-thumbs-o-up mlm"></i>';else echo 'Approved<i class="fa fa-thumbs-up mlm"></i>'?></button></td>
                                              <td class="text-center"><button type="button" value="<?php echo $listrow['review_id']?>" class="btn btn-sm btn-<?php if($listrow['active']!='n')echo "danger";else echo "success"?> delbtn"><?php if($listrow['active']=='n')echo 'Make Enable<i class="fa fa-check mlm"></i>';else echo 'Make Disable<i class="fa fa-close mlm"></i>'?></button></td>
                                            <!--<td class="text-center"><button type="button" value="<?php echo $listrow['review_id']?>" class="btn btn-sm btn-warning recyclebtn">Delete<i class="fa fa-trash-o mlm"></i></button></td>-->
                                            <?php }?>
                                        </tr>
                                        <?php }$listr->free()?>
                                    </tbody>
                                </table>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <!--END CONTENT-->
<link type="text/css" rel="stylesheet" href="css/dataTables/dataTables.bootstrap.min.css">
<script src="js/validate.js"></script>
<script src="js/dataTables/jquery.dataTables.min.js"></script>
<script src="js/dataTables/dataTables.bootstrap.min.js"></script>
<script src="js/validate.js"></script>
<script>
$('#dataTables-listing').dataTable( {
    "bSort": false
  } );
if($('#msg').html()!==''){
	setTimeout(function(){$('#msg').hide();},5000);
	if(location.search.substring(1).length){if(history!==undefined && history.pushState!==undefined){history.pushState({}, document.title, location.pathname+'<?php if(isset($_GET['id']))echo "?id=".$_GET['id']?>');}}
}
</script>
<?php $connection->close();include("footer.inc.php")?>