TransWar File Browser

Path: C:\

<?php 
require_once("../conexao_srvtms.php");
if (!$conn){echo "<script language='JavaScript'>alert('Erro na abertura do Banco de Dados!!!');window.close();opener.location.href=opener.location.href;</script>";}
$id = $_POST["id"];
$nome = trim($_POST["nome"]);
$urgente =$_POST["urgente"];
if ($_POST["ch"]!='')
  {$ch = trim($_POST["ch"]);}
else
  {
    echo"<script language='JavaScript'>window.close();opener.location.href=opener.location.href;</script>";
  }
$query = sqlsrv_query($conn,"SELECT 
   a.nr_NotaFiscalInteiro   as nrNF
  ,a.ds_ChaveNFe
FROM dbo.tbdMovimentoNotaFiscal as a 
  left JOIN [dtbtransporte].[dbo].tbdMovimento AS b ON  a.id_Movimento = b.id_Movimento
  left JOIN [dtbtransporte].[dbo].tbdPessoa AS c ON b.id_ClienteFaturamento = c.id_Pessoa
  left JOIN [dtbtransporte].[dbo].tbdConfiguracaoCliente AS d ON d.id_Pessoa = c.id_Pessoa
WHERE ltrim(a.ds_ChaveNFe)='".$ch."' AND d.id_GrupoCliente='4' and a.ds_ChaveNFe<>''", array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));
$num = sqlsrv_num_rows($query);

if ( $num == 0 )
  {
    echo'<script language="JavaScript">alert("Essa Nota Fiscal NÃO está no sistema!!!");window.close();opener.location.href=opener.location.href;</script>';
  }
else 
  {
    $query1 = sqlsrv_query($conn,"SELECT 
         id_AgendaNFs as agendaNF
        ,id_Agenda
        ,ds_Agenda as agenda
        ,ds_ChaveNFe
    FROM dbo.tbdAgendaNFs
    WHERE ds_ChaveNFe='".$ch."'", array(), array( "Scrollable" => SQLSRV_CURSOR_KEYSET ));
    $num = sqlsrv_num_rows($query1);
    if ( $num != 0 )
      {
        while ($res1 = sqlsrv_fetch_array($query1, SQLSRV_FETCH_ASSOC))
          {
              $agenda=trim($res1['agenda']);$agendaNF=$res1['agendaNF'];
          }
        echo"<script language='JavaScript'>decisao = confirm('JÁ está na agenda ($agenda). Confirma a Alteração?');if (decisao){location.href='alteraNFagenda.php?id=".$id."&agenda=".$agenda."&urgente=".$urgente."&agendaNF=".$agendaNF."';}else{window.close();opener.location.href=opener.location.href;}</script>";
      }
    else
      {
        while ($res = sqlsrv_fetch_array($query, SQLSRV_FETCH_ASSOC))
          {
            $nrNF=$res['nrNF'];
            $query2 = sqlsrv_query($conn,"INSERT INTO [dbo].[tbdAgendaNFs]
                ([id_Agenda]
                ,[ds_Agenda]
                ,[nr_NotaFiscal]
                ,[ds_Urgente]
                ,[ds_ChaveNFe])
              VALUES (
                '"  . $id . "',
                '"  . $nome . "',
                '"  . $nrNF . "',
                '"  . $urgente . "',
                '"  . $ch . "')");
            if(sqlsrv_rows_affected($query2) != 0)
              {  
                echo "<script type=\"text/javascript\">alert(\"Nota Fiscal Cadastrada com Sucesso.\");window.close();opener.location.href=opener.location.href;</script>";
              }
            else
              {
                echo "<script type=\"text/javascript\">alert(\"Houve ERRO no cadastro dessa Nota Fiscal.\");window.close();opener.location.href=opener.location.href;</script>";
              }     
          }
      }
  }
?>