xXx

Hexid M1n1 5h3ll MobiLe

home/knhihi/public_html/manage/_[ Writable ]

File:/home/knhihi/public_html/manage/picture.php

<?
 require('../include/function.php');
 require('../include/chkSession.php');
 require('../include/conn.php');
 
 $id = fixsql("id",0);
 
 $ctid = fixsql("ctid",0);
 $title = fixsql("title",1);
 $short_1 = fixsql("short_1",1);
 $info = fixsql("info",1);
 $url = fixsql("url",1);
 $url = getUrlHttp($url);
 $int_flag_1 = fixsql("int_flag_1",0);
 $indexNo = fixsql("indexNo",0);
 $upordown = fixsql("upordown",0);
 $udate = fixsql("udate",1);
 if($udate==""){
 	$udate = getRealDate();
 } 
 
 $u = fixsql("u",1);

 if($u == 'del_pic'){
 
	    $sql = "select " . fixsql("pic",1) . " as db_pic from webpage where webpage_id=$id";
		mysql_query("set NAMES 'UTF8'");
		$rs = mysql_query($sql,$link) or die("db query false");
		$line = mysql_fetch_array($rs,MYSQL_ASSOC);
		if(isset($line)){
			$db_pic = $line["db_pic"];
		}
		mysql_free_result($rs);	
		
		if($db_pic != ""){
			$db_pic = iconv('utf-8','BIG5',$db_pic);
			del("../upload",$db_pic);
		} 
		
		$sql = "update webpage set " . fixsql("pic",1) . "='' where webpage_id=" . $id;
		mysql_query($sql,$link) or die(mysql_error()); 
 
 }else if($u =='ok'){
	
    $store_dir = realpath("../upload") . "/";
	$file_size_max = 3*1000*1000;
	
	$flag = true;
    for($i=0;$i<1;$i++){
		$upload_file_size = $_FILES['upload_file']['size'][$i];
		if ($upload_file_size > $file_size_max) {
			$strErr = "檔案" . $i . "容量大于3MB.";
			$flag = false;
		}
	}
	
	
	if($flag){
	
		for($i=0;$i<1;$i++){
		
		    $upload_file_size = $_FILES['upload_file']['size'][$i];
			if($upload_file_size>0){
				$upload_file_name = time() . rand(1000,2000);
				$tmp_file_name = $_FILES['upload_file']['name'][$i];
				$tmp_int = strripos($tmp_file_name,".");
				$ext = substr($tmp_file_name,$tmp_int);
				//echo $ext;exit;
				$upload_file_name .= $ext;
				
				if($retain_flag){
					//保留原檔案標題
					$upload_file_name = iconv('utf-8','BIG5',$tmp_file_name); 
					if(file_exists($store_dir.$upload_file_name)){
					
						$upload_file_name = substr($tmp_file_name,0,$tmp_int) . "(" . time() . ")" . $ext;
						//echo $upload_file_name;exit;
						$to_file_name = $upload_file_name;
						$upload_file_name = iconv('utf-8','BIG5',$upload_file_name); 
						
					}else{
						$to_file_name = $tmp_file_name;
					}			
				}else{
					$to_file_name = $upload_file_name;
				}
				
				move_uploaded_file($_FILES['upload_file']['tmp_name'][$i],$store_dir.$upload_file_name);
				chmod($store_dir.$upload_file_name, 0777);
				if($i==0){
					$pic_1 = $to_file_name;
				}
			}
			
		}

		
	
	
		if($id > 0){
		
			$sql = "select pic_1 from webpage where webpage_id=$id";
			mysql_query("set NAMES 'UTF8'");
			$rs = mysql_query($sql,$link) or die("db query false");
			$line = mysql_fetch_array($rs,MYSQL_ASSOC);
			if(isset($line)){
				$db_pic = $line["pic_1"];
			}
			mysql_free_result($rs);	
				
			$tmp = "";
			if($pic_1 != ""){
				$db_pic = iconv('utf-8','BIG5',$db_pic);
				del("../upload",$db_pic);
				$tmp .= ",pic_1='" . $pic_1 . "'";
			}
	
			$sql = "select indexNo,category_id from webpage where webpage_id=$id";
			//echo $sql;
			mysql_query("set NAMES 'UTF8'");
			$rs = mysql_query($sql,$link) or die("db query false");	
			$line = mysql_fetch_array($rs,MYSQL_ASSOC);
			if(isset($line)){
				$db_indexNo = $line["indexNo"];
				$db_ctid = $line["category_id"];
			}
			mysql_free_result($rs);
	
			if($db_ctid == $ctid){
			
				if($db_indexNo > $indexNo){	
					$sql = "update webpage set indexNo=indexNo+1 where logo='$logo' and indexNo >=$indexNo and indexNo < $db_indexNo and category_id=$ctid and language='$cookie_language'";
					mysql_query($sql,$link) or die(mysql_error()); 
					
				}else if($db_indexNo < $indexNo){	
					$sql = "update webpage set indexNo=indexNo-1 where logo='$logo' and indexNo >$db_indexNo and indexNo <= $indexNo and category_id=$ctid and language='$cookie_language'";
					mysql_query($sql,$link) or die(mysql_error()); 
				}
	
						
			}else{
			
				$sql = "update webpage set indexNo=indexNo+1 where logo='$logo' and indexNo >=$indexNo and category_id=$ctid and language='$cookie_language'";
				mysql_query($sql,$link) or die(mysql_error()); 		
			
				//如果更改了分類，則調整原分類下項目的indexNo
				if($db_indexNo !=""){
					$sql = "update webpage set indexNo=indexNo-1 where logo='$logo' and indexNo > $db_indexNo and category_id=$db_ctid and language='$cookie_language'"; 
					mysql_query($sql,$link) or die(mysql_error()); 	
				}	
			
			}	
			
			$sql = "update webpage set ";
			$sql.= "category_id=$ctid,title='$title',short_1='$short_1',url='$url',";
			$sql.= "info='$info',upordown=$upordown,indexNo=$indexNo,udate='$udate',int_flag_1=$int_flag_1 $tmp where webpage_id=$id";
			//echo $sql;exit;
			mysql_query($sql,$link) or die(mysql_error());	
						
			
		}else{
	
			$sql = "update webpage set indexNo=indexNo+1 where logo='$logo' and indexNo >=$indexNo and category_id=$ctid and language='$cookie_language'";
			mysql_query($sql,$link) or die(mysql_error()); 
			
			$sql = "insert into webpage(category_id,logo,title,short_1,pic_1,info,url,int_flag_1,upordown,indexNo,udate,language) values(";
			$sql.= "$ctid,'$logo','$title','$short_1','$pic_1','$info','$url',$int_flag_1,$upordown,$indexNo,'$udate','$cookie_language')";
			//echo $sql;exit;
			mysql_query($sql,$link) or die(mysql_error());
	
		}
		//echo $sql;
		
		
		mysql_close($link);
		redirect("picture_list.php?logo=$logo");	
		exit;
		
	}	
		
 }else if($u == "chgct"){
 
    $indexNo = 0;
	$sql = "select indexNo from webpage where category_id=$ctid and language='$cookie_language' order by indexNo desc limit 0,1";
	//echo $sql;
	mysql_query("set NAMES 'UTF8'");
	$rs = mysql_query($sql,$link) or die("db query false");
    $line = mysql_fetch_array($rs,MYSQL_ASSOC);
    if(isset($line)){
		$indexNo = $line["indexNo"];
	}
    mysql_free_result($rs);	 
	if($indexNo!=""){
		$indexNo++;
	}else{
		$indexNo = 1;
	}
	 
 }else if($id !=0){
 
 	 $sql = "select * from webpage where webpage_id=$id";
	 //echo $sql;
	 mysql_query("set NAMES 'UTF8'");
	 $rs = mysql_query($sql,$link) or die("db query false");
	 $line = mysql_fetch_array($rs,MYSQL_ASSOC);
	 if(isset($line)){
		$ctid = $line["category_id"]; 
		$logo = $line["logo"];
		$title = $line["title"];
		$short_1 = $line["short_1"];
		$info = $line["info"];	
		$pic_1 = $line["pic_1"];
		$url = $line["url"];
		$int_flag_1 = $line["int_flag_1"];
		$upordown = $line["upordown"];
		$indexNo = $line["indexNo"];
		$udate = $line["udate"];
	 }
	 mysql_free_result($rs);
	 
 }else{
 	$upordown = 1;
	$indexNo = 0;
	if($logo == "news"){
		$indexNo = 1;
	}else{
		$sql = "select indexNo from webpage where logo='$logo' and language='$cookie_language' order by indexNo desc limit 0,1";
		//echo $sql;
		mysql_query("set NAMES 'UTF8'");
		$rs = mysql_query($sql,$link) or die("db query false");
		$line = mysql_fetch_array($rs,MYSQL_ASSOC);
		if(isset($line)){
			$indexNo = $line["indexNo"];
		}
		mysql_free_result($rs);	 
		if($indexNo!=""){
			$indexNo++;
		}else{
			$indexNo = 1;
		}	
	}
 }
 $indexNo = addZero($indexNo,$DEFAULT_INDEXNO);	
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>後端維護系統</title>
<link href="management.css" rel="stylesheet" type="text/css" />
<script type="text/javascript" src="ckeditor/ckeditor.js"></script>
<script type="text/javascript" src="ckfinder/ckfinder.js"></script>
<script src="js/date.js" type="text/javascript"></script>
<script src="js/js.js" type="text/javascript"></script>
<script>
function delPic(txt){
	if(confirm("您確定要刪除嗎？")){
		var obj = document.form1;
		obj.u.value = "del_pic";
		obj.action = "<? echo $web_url;?>?pic=" + txt;
		obj.submit();
	}
}
</script>
</head>
<body>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td align="left" valign="top" background="images/main_01.jpg" style="background-repeat:no-repeat;"><table width="100%" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td height="100" valign="top"><? include("_top.php");?></td>
      </tr>
      
      <tr>
        <td height="80" valign="bottom"><? include("_info.php");?></td>
      </tr>
      <tr>
        <td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td width="10%" align="left" valign="top" background="images/left-bg.jpg" style="background-repeat:repeat-y; background-position:left;"><? include("_left.php");?></td>
            <td width="80%" align="left" valign="top">
			
			
			<table width="95%" border="0" cellspacing="0" cellpadding="0">
                
                <tr>
                  <td align="left" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
                      <tr>
                        <td width="97%"><table width="100%" border="0" cellspacing="0" cellpadding="0">
                            <tr>
                              <td width="3%"><img src="images/icon.jpg" width="39" height="44" hspace="5" /></td>
                              <td width="97%" align="left" valign="bottom"><span class="word-title"><? echo $logo_title;?>管理</span></td>
                            </tr>
                        </table></td>
                        </tr>
                      <tr>
                        <td align="left" valign="middle">&nbsp;</td>
                        </tr>
                      <tr>
                        <td align="left" valign="middle"><table width="404" border="0" cellspacing="0" cellpadding="0">
                          <tr>
                            <td width="137" align="left"><a href="javascript:resetForm();" class="hp_btn">重新整理</a></td>
                            <td width="251" align="left"><a href="javascript:window.history.back(-1);" class="hp_btn">回上一層</a></td>
                            <td width="16" align="left">&nbsp;</td>
                          </tr>
                        </table></td>
                        </tr>
                      <tr>
                        <td align="left" valign="top" height="35">
						
						  <table width="100%" border="0" cellspacing="0" cellpadding="0">
							  <tr>
							    <td height="20">&nbsp;</td>
							    </tr>
							  <tr>
								<td height="30"><img src="images/icon-7.gif" width="11" height="11" hspace="5" />新增/修改<? echo $logo_title;?></td>
								</tr>
						  </table>

                          <div class="CollapsiblePanelContent">
                            <table width="100%" border="0" cellpadding="0" cellspacing="0" class="tablebox">
                              <tr>
                                <td align="left" valign="top"><table width="100%" border="0" cellpadding="0" cellspacing="1" bgcolor="#CCCCCC" class="infor0">
                                    <tbody>
									<FORM id="form1" name="form1" enctype="multipart/form-data" action="<? echo $web_url?>" method="post">
									<INPUT type="hidden" value="<? echo $id;?>" name="id">
									<input type="hidden" name="logo" value="<? echo $logo;?>">
									<input type="hidden" name="u" value="ok">								
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">順序</td>
                                        <td align="left">
										<INPUT size=6 name="indexNo" value="<? echo $indexNo?>">
										<span class="word-path">(例:<? echo addZero("1",$DEFAULT_INDEXNO);?>)										</span></td>
                                      </tr>

                                      <? if($cat_flag){?>
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">分類</td>
                                        <td align="left">
										
										
										  <select name="ctid" <? if($logo != "news"){?> onChange="document.form1.u.value='chgct';document.form1.submit();"<? }?>>
											<? if($ctid==0){?>
											<option value="">請選擇</option>
											<? }?>
											<?
											  $sql = "SELECT category_id,title from category where logo='$logo' order by indexNo asc";   
											  //echo $query;
											  mysql_query("SET NAMES 'UTF8'");
											  $rs = mysql_query($sql,$link) or die("Query failed"); 
											  while($line=mysql_fetch_array($rs,MYSQL_ASSOC)){	
												$tmp_select = "";
												if($ctid==$line["category_id"]){
													$tmp_select = " selected";
												}	
											?>
											<option value="<? echo $line["category_id"];?>"<?echo $tmp_select;?>><? echo $line["title"];?></option>
											<?
											}
											mysql_free_result($rs);
											?>
										  </select>
										  </td>
                                      </tr>
									  <? }?>
									  
                                      <? if($flag_4){?>
                                      <tr bgcolor="#FFFFFF">
                                        <td width="120" align="center" bgcolor="#F6F6F6" class="word-table">標題</td>
                                        <td align="left"><input name="title" type="text" value="<? echo $title;?>" size="60" />                                        </td>
                                      </tr>	
									  <? }?>								  
									  
									  <? if($flag_1){?>
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">简短说明</td>
                                        <td align="left"><textarea name="short_1" cols="50" rows="3"><? echo $short_1;?></textarea></td>
                                      </tr>
									  <? }?>
									  <? if($flag_2){?>
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">內容</td>
                                        <td align="left">
										 	<textarea name="info" id="info"><? echo $info;?></textarea>
											<script type="text/javascript">
											CKEDITOR.replace( 'info',{
											filebrowserBrowseUrl : 'ckfinder/ckfinder.html',
											filebrowserImageBrowseUrl : 'ckfinder/ckfinder.html?Type=Images',
											filebrowserFlashBrowseUrl : 'ckfinder/ckfinder.html?Type=Flash',
											filebrowserUploadUrl :'ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Files',
											filebrowserImageUploadUrl :'ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Images',
											filebrowserFlashUploadUrl :'ckfinder/core/connector/php/connector.php?command=QuickUpload&type=Flash'
											});
											</script>
										</td>
                                      </tr>
									  <? }?>
									  
									  <? if($flag_3){?>
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table"><span class="yellow">圖片</span></td>
                                        <td align="left" class="word-path">						
											<input name="upload_file[]" type="file" onChange="chgFile(this);" size="48">
											<?
											$store_dir = "../upload/";
											if($pic_1!=""){
												$show_pic = $pic_1;
												$pic_1 = iconv('utf-8','BIG5',$pic_1);
												//echo $pic_1;exit;
												if(file_exists($store_dir.$pic_1)){
													$arr = GetImageSize($store_dir.$pic_1);
											?>
											&nbsp;&nbsp;&nbsp;&nbsp;
											<a href="javascript:showPic('<? echo $show_pic;?>',<? echo $arr[0];?>,<? echo $arr[1];?>);" class="word-table">預覽</a> &nbsp;&nbsp;<a href="javascript:delPic('pic_1');" class="word-table">刪除</a>
											<?
												}
											}
											?>
											<br />
											<? echo $pic_size_show;?>
											</td>
                                      </tr>
									  <? }?>								  
									  <? if($flag_5){?>
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">網址</td>
                                        <td align="left"><input name="url" type="text" size="60" value="<? echo $url;?>"></td>
                                      </tr>
                                      <? }?>
                                      <tr style="display:none;" bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">首頁顯示</td>
                                        <td align="left"><input type="checkbox" name="int_flag_1" value="1" <? if($int_flag_1==1) echo "checked";?> /></td>
                                      </tr>
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">上架</td>
                                        <td align="left"><input type="checkbox" name="upordown" value="1" <? if($upordown==1) echo "checked";?> /></td>
                                      </tr>
                                      <tr bgcolor="#FFFFFF">
                                        <td align="center" bgcolor="#F6F6F6" class="word-table">發布日期</td>
                                        <td align="left">
										<input name="udate" type="text" size="12" value="<? echo $udate?>" onClick="fPopCalendar(event,this,this)"  onfocus="this.select()"></td>
                                      </tr>
									 </form> 
                                    </tbody>
                                </table></td>
                              </tr>
                              <tr>
                                <td height="20" align="center">&nbsp;</td>
                              </tr>
                              <tr>
                                <td height="40" align="center"><a href="javascript:sbForm();" class="hp_query">確認提交</a></td>
                              </tr>
                            </table>
                          </div>
                        </div></td>
                        </tr>
                  </table></td>
                </tr>
              </table>
			  
			  
			
			</td>
          </tr>
        </table></td>
      </tr>
      <tr>
        <td valign="top" bgcolor="#88B423"><? include("_footer.php");?></td>
      </tr>
    </table></td>
  </tr>
</table>
<script>
function chkForm(){
	var obj = document.form1;
	var strVar = "";

	strVar = obj.indexNo.value;
	if(strVar == ""){
		alert("請輸入順序。");
		obj.indexNo.focus();
		return false;
	} 
	if(!isdigit(strVar)){
		alert("請輸入數字。");
		obj.indexNo.focus();
		return false;		
	}
	<? if($cat_flag){?>
	strVar = obj.ctid.value; 
	if(strVar==""){
		alert("請選擇分類。");
		obj.ctid.focus();
		return false;
	}	
	<? }?>
	/**
	strVar = obj.title.value; 
	if(strVar==""){
		alert("請輸入標題。");
		obj.title.focus();
		return false;
	}
	**/
	return true;
}
</script>
</body>
</html>
<? mysql_close($link);?>

Your Access Expired	Date. in : 15-09-2025
Regist : 09-12-2024	Expired : 01-12-2027