37 lines
1.4 KiB
PHP
37 lines
1.4 KiB
PHP
<?php
|
|
session_start();
|
|
if (!isset($_SESSION["loggedin"]) || $_SESSION["loggedin"] !== true || !isset($_SESSION['is_admin']) || !$_SESSION['is_admin']) {
|
|
header("location: ../index.php");
|
|
exit;
|
|
}
|
|
|
|
require_once '../includes/db_assessment.php';
|
|
|
|
if ($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['id'])) {
|
|
$id = $_POST['id'];
|
|
|
|
// Get info for logging
|
|
$stmt = $pdo_assess->prepare("SELECT fullname, assess_year FROM it_assessments WHERE id = ?");
|
|
$stmt->execute([$id]);
|
|
$assessment = $stmt->fetch();
|
|
|
|
if ($assessment) {
|
|
// Delete
|
|
$del_stmt = $pdo_assess->prepare("DELETE FROM it_assessments WHERE id = ?");
|
|
$del_stmt->execute([$id]);
|
|
|
|
// Log the action
|
|
$admin_cid = $_SESSION['cid'];
|
|
$admin_name = $_SESSION['fullname'] ?? 'Admin';
|
|
$action_detail = "ลบข้อมูลประเมินของ: " . $assessment['fullname'] . " (ปี " . $assessment['assess_year'] . ")";
|
|
logAdminAction($pdo_assess, $admin_cid, $admin_name, 'DELETE_ASSESSMENT', $action_detail);
|
|
|
|
$_SESSION['success_msg'] = "ลบข้อมูลแบบประเมินเรียบร้อยแล้ว";
|
|
}
|
|
}
|
|
|
|
// Redirect back to summary, retaining the year filter if possible
|
|
$year = $_POST['filter_year'] ?? '';
|
|
header("Location: ../summary.php" . ($year ? "?year=$year" : ""));
|
|
exit;
|