TransWar File Browser

Path: C:\

<?php 
$host = "192.168.0.201";                      
require_once("../conexao_srvtms.php");
if (!$conn){echo "<script language='JavaScript'>alert('Erro na abertura do Banco de Dados!!!');window.close();opener.location.href=opener.location.href;</script>";}
$id = $_POST["id"];
$nome = trim($_POST["nome"]);
$urgente ='NÃO';
if ($_POST["manifesto"]!=''){$manifesto = trim($_POST["manifesto"]);}
  else
    {
        echo"<script language='JavaScript'>window.close();opener.location.href=opener.location.href;</script>";
    }
$query3 = sqlsrv_query($conn,"SELECT  id_ManifestoMovimento
    ,b.nr_NotaFiscalInteiro
    ,id_Manifesto
    ,a.id_Movimento
    ,rtrim(b.ds_ChaveNFe) as chave
  FROM dtbtransporte.dbo.tbdManifestoMovimento as a
    right join dtbtransporte.dbo.tbdmovimentoNotaFiscal as b on a.id_Movimento=b.id_Movimento
    where id_Manifesto= '$manifesto' 
    order by nr_NotaFiscalInteiro asc", array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));
  $num3 = sqlsrv_num_rows($query3);$x=0;
  if ( $num3 != 0 )
    {
      while ($res3 = sqlsrv_fetch_array($query3, SQLSRV_FETCH_ASSOC))
        {
          $x++;$ch[$x]=$res3['chave'];
        }
    }
  else
    {
        echo"<script language='JavaScript'>window.close();opener.location.href=opener.location.href;</script>";
    }
for ($i=1; $i <= $x; $i++) 
{
  $query = sqlsrv_query($conn,"SELECT 
     a.nr_NotaFiscalInteiro   as nrNF
    ,rtrim(a.ds_ChaveNFe)     as chave
    ,n.id_Movimento           as movinf
  FROM dbo.tbdMovimentoNotaFiscal as a 
    left JOIN [dtbtransporte].[dbo].tbdMovimento AS b ON  a.id_Movimento = b.id_Movimento
    left JOIN [dtbtransporte].[dbo].tbdPessoa AS c ON b.id_ClienteFaturamento = c.id_Pessoa
    left JOIN [dtbtransporte].[dbo].tbdConfiguracaoCliente AS d ON d.id_Pessoa = c.id_Pessoa
    left JOIN [dtbtransporte].[dbo].tbdManifestoMovimento AS n ON (a.id_Movimento = n.id_Movimento AND n.ds_Tipo = 'ENTREGA' AND (n.id_Ocorrencia is null or n.id_Ocorrencia<>69))
  WHERE a.ds_ChaveNFe='".$ch[$i]."' AND d.id_GrupoCliente='4' and a.ds_ChaveNFe<>''", array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));
  $num = sqlsrv_num_rows($query);
  while ($res = sqlsrv_fetch_array($query, SQLSRV_FETCH_ASSOC))
    {
      $chave=$res['chave'];
      $nrNF=$res['nrNF'];
      $movinf=$res['movinf'];
      if ($movinf!==NULL)
        {
          $query2 = sqlsrv_query($conn,"INSERT INTO [dbo].[tbdAgendaNFs]
              ([id_Agenda]
              ,[ds_Agenda]
              ,[nr_NotaFiscal]
              ,[ds_Urgente]
              ,[ds_ChaveNFe])
            VALUES (
              '"  . $id . "',
              '"  . utf8_decode($nome) . "',
              '"  . $nrNF . "',
              '"  . utf8_decode($urgente) . "',
              '"  . $chave . "')");
        }
    }
}
echo "<script type=\"text/javascript\">alert(\"Notas Fiscais Cadastradas com Sucesso.\");window.close();opener.location.href=opener.location.href;</script>";
?>