rendered paste body<?php
# Copyright by: Horfic
# Support: ICQ 282892739
defined ('main') or die ( 'no direct access' );
defined ('admin') or die ( 'only admin access' );
$design = new design ( 'Admins Area', 'Admins Area', 2 );
$design->header();
function icUpload () {
$seitenname = escape($_POST['seitenname'], 'string');
$link = escape($_POST['link'], 'string');
$zweck = escape($_POST['zweck'], 'string');
$ersteller = escape($_POST['ersteller'], 'string');
$status = escape($_POST['status'], 'string');
$screenshot = ( empty($_POST['screenshot']) ? '' : escape($_POST['screenshot'],'string') );
$file = ( empty($_POST['file']) ? '' : escape($_POST['file'],'string') );
//Vorschaubild
$pfad="./include/images/works/";
$speichername= $pfad.basename($_FILES['file']['name']);
$file = $_FILES['file']['tmp_name'];
move_uploaded_file($file,$speichername);
@chmod($speichername, 0777);
// Screenshot
$speichername1= $pfad.basename($_FILES['screenshot']['name']);
$file1 = $_FILES['screenshot']['tmp_name'];
move_uploaded_file($file1,$speichername1);
@chmod($speichername1, 0777);
db_query('INSERT INTO `prefix_works` (seitenname,link,ersteller,vorschaubild,screenshot,status,zweck) VALUES ( "'.$seitenname.'","'.$link.'","'.$ersteller.'","'.$speichername.'","'.$speichername1.'","'.$status.'","'.$zweck.'" ) ' );
echo $file;
return (true);
}
$um = '';
if (isset($_REQUEST['um'])) {
$um = $_REQUEST['um'];
}
if (!empty($_POST['sub'])) {
$seitenname = escape($_POST['seitenname'], 'string');
$link = escape($_POST['link'], 'string');
$zweck = escape($_POST['zweck'], 'string');
$ersteller = escape($_POST['ersteller'], 'string');
$vorschaubild = escape($_POST['file'], 'string');
$screenshot = escape($_POST['screenshot'], 'string');
$status = escape($_POST['status'], 'string');
if ( empty($_POST['sid']) ) {
icUpload();
} else {
$sid = escape($_POST['sid'], 'integer');
db_query('UPDATE `prefix_works` SET seitenname = "'.$seitenname.'", link = "'.$link.'", ersteller = "'.$ersteller.'", vorschaubild = "'.$vorschaubild.'", screenshot = "'.$screenshot.'", status = "'.$status.'", zweck = "'.$zweck.'" WHERE id = "'.$sid.'"');
}
}
if (!empty($_GET['delete']) ) {
$delete = escape($_GET['delete'], 'integer');
db_query('DELETE FROM `prefix_works` WHERE id = "'.$delete.'" LIMIT 1');
}
if ( $menu->get(1) == 'status' ) {
db_query('UPDATE `prefix_works` SET status = IF(status=ONLINE,OFFLINE,ONLINE) WHERE id = "'.$menu->get(2).'" LIMIT 1');
}
if ( empty($_GET['sid']) ) {
$row = array();
$row['sub'] = 'Eintragen';
$row['seitenname'] = '';
$row['link'] = '';
$row['zweck'] = '';
$row['ersteller'] = '';
$row['vorschaubild'] = '';
$row['screenshot'] = '';
$row['status'] = '';
$row['sid'] = '';
} else {
$abf = 'SELECT seitenname,link,ersteller,vorschaubild,screenshot,zweck,status,id as sid FROM `prefix_works` WHERE id = "'.$_GET['sid'].'"';
$erg = db_query($abf);
$row = db_fetch_assoc($erg);
$row['sub'] = 'Ändern';
}
$clas = '';
$tpl = new tpl ( 'works', 1);
$tpl->set_ar_out($row,0);
$erg = db_query('SELECT * FROM `prefix_works` ORDER BY id');
while ($row = db_fetch_assoc($erg) ) {
$clas = ($clas == 'Cmite' ? 'Cnorm' : 'Cmite' );
$row['class'] = $clas;
$tpl->set_ar_out($row,1);
}
$tpl->out(2);
$design->footer();
?>
-------- HTM
<script language="JavaScript" type="text/javascript">
<!--
function del ( id1 ) {
var x = confirm ( "wirklich loeschen?" );
if ( x ) {
document.location.href="admin.php?works&delete="+id1;
}
}
//-->
function statuscheck ( STATUSID ) {
document.location.href="?works-status-"+STATUSID;
}
//<!--
if( document.getElementById('enablestatus').checked){
enableStatus();
}
preview();
//-->
</script>
<table cellpadding="0" cellspacing="0" border="0">
<tr>
<td><img src="include/images/icons/admin/works.png" />
</td>
<td width="30">
</td>
<td valign="bottom"><h1>Referenzen</h1>
</td>
</tr>
</table>
<table width="100%">
<tr>
<td valign="top" width="60%">
<form action="admin.php?works" enctype="multipart/form-data" method="POST">
<input type="hidden" name="sid" value="{sid}">
<table cellspacing="1" cellpadding="2" broder="0" class="border">
<tr>
<td class="Cmite">Seitenname</td>
<td class="Cnorm"><input type="text" name="seitenname" value="{seitenname}" size="50">
</td>
</tr>
<tr>
<td class="Cmite">Homepage Link</td>
<td class="Cnorm"><input size="50" type="text" name="link" value="{link}">
</td>
</tr>
<tr>
<td class="Cmite">Verwendungszweck</td>
<td class="Cnorm"><input size="50" type="text" name="zweck" value="{zweck}">
</td>
</tr>
<tr>
<td class="Cmite">Ersteller</td>
<td class="Cnorm"><input size="50" type="text" name="ersteller" value="{ersteller}">
</td>
</tr>
<tr>
<td class="Cmite">Vorschaubild</td>
<td class="Cnorm"><input size="50" type="file" name="file" id="file" value="{file}">
</td>
</tr>
<tr>
<td class="Cmite">Screenshot</td>
<td class="Cnorm"><input size="50" type="file" name="screenshot" id="screenshot" value="{screenshot}">
</td>
</tr>
<tr>
<td class="Cmite">Status</td>
<td class="Cnorm"><select name="status" value="enablestatus" onchange="enableStatus();" id="enablestatus">
<option {_if_{status}=='ONLINE'}checked="checked"{/_endif}>ONLINE</option>
<option {_if_{status}=='OFFLINE'}checked="checked"{/_endif}>OFFLINE</option>
</select>
</td>
</tr>
<tr>
<td class="Cdark">
</td>
<td class="Cdark"><input type="submit" value="{sub}" name="sub">
</td>
</tr>
</table>
</form>
</td>
<td valign="top" width="40%">
<table cellspacing="1" cellpadding="2" broder="0" align="center" class="border">
<tr class="Chead">
<td>Seitenname
</td>
<td>Link
</td>
<td>
</td>
<td>
</td>
</tr>
{EXPLODE}
<tr class="{class}">
<td align="center">{seitenname}
</td>
<td align="center">{link}
</td>
<td align="center"><a href="?works-status-{id}"><img src="include/images/icons/{status}.gif" alt="Status ändern"></a>
</td>
<td><a href="?works&sid={id}">Bearbeiten</a>
</td>
<td><a href="javascript:del('{id}')">Löschen</a>
</td>
</tr>
{EXPLODE}
</table>
</td>
</tr>
</table>