prepare("SELECT * FROM knowledge_bank WHERE id = ?"); $stmt->execute([$_GET['id']]); $record = $stmt->fetch(); if ($record && canDeleteRecord($user, $record)) { $stmt = $pdo->prepare("DELETE FROM knowledge_bank WHERE id = ?"); $stmt->execute([$_GET['id']]); $message = "ลบเนื้อหาเรียบร้อยแล้ว"; } else { $message = "ไม่มีสิทธิ์ลบเนื้อหา"; } $action = 'list'; } if ($_SERVER['REQUEST_METHOD'] == 'POST') { // บล็อกการบันทึกข้อมูลใหม่ถ้าแอดมินปิดสวิตช์ $user_k = $_SESSION['user_data'] ?? null; if (empty($_POST['id']) && $user_k && $user_k['user_type_id'] == '4' && !isAddAllowed($pdo, 'knowledge')) { $message = "ขณะนี้ระบบปิดการเพิ่มคลังความรู้ชั่วคราว"; $action = 'list'; } else { $title = $_POST['title']; $category = $_POST['category']; $content = $_POST['content']; $media = $_POST['media_url']; $username_owner = $_SESSION['user_data']['username'] ?? ''; if (isset($_POST['id']) && !empty($_POST['id'])) { $stmt = $pdo->prepare("UPDATE knowledge_bank SET title=?, category=?, content=?, media_url=? WHERE id=? AND created_by=?"); $stmt->execute([$title, $category, $content, $media, $_POST['id'], $username_owner]); $message = "แก้ไขเนื้อหาเรียบร้อยแล้ว"; } else { $stmt = $pdo->prepare("INSERT INTO knowledge_bank (created_by, title, category, content, media_url) VALUES (?, ?, ?, ?, ?)"); $stmt->execute([$username_owner, $title, $category, $content, $media]); $message = "เพิ่มเนื้อหาเรียบร้อยแล้ว"; } $action = 'list'; } // end else (permission check) } // ดึง knowledge ตามสิทธิ์ (สำหรับ knowledge ที่ไม่เกี่ยวกับสถานที่ ให้ใช้เฉพาะตัวเอง) $username_owner = $_SESSION['user_data']['username'] ?? ''; $stmt_items = $pdo->prepare("SELECT * FROM knowledge_bank WHERE created_by = ? ORDER BY id DESC"); $stmt_items->execute([$username_owner]); $items = $stmt_items->fetchAll(); $editData = null; if ($action == 'edit' && isset($_GET['id'])) { $stmt = $pdo->prepare("SELECT * FROM knowledge_bank WHERE id = ? AND created_by = ?"); $stmt->execute([$_GET['id'], $username_owner]); $editData = $stmt->fetch(); } ?>