All pastes #558654 Raw Edit

Something

public text v1 · immutable
·published 2007-06-11 13:31 UTC
rendered paste body
<?php
#   Copyright by: Horfic
#   Support: ICQ 282892739

defined ('main') or die ( 'no direct access' );
defined ('admin') or die ( 'only admin access' );

$design = new design ( 'Admins Area', 'Admins Area', 2 );
$design->header();
function icUpload () {

	$seitenname = escape($_POST['seitenname'], 'string');
  $link = escape($_POST['link'], 'string');
  $zweck = escape($_POST['zweck'], 'string');
  $ersteller = escape($_POST['ersteller'], 'string');
  $status = escape($_POST['status'], 'string');
  $screenshot = ( empty($_POST['screenshot']) ? '' : escape($_POST['screenshot'],'string') ); 
  	
  $file = ( empty($_POST['file']) ? '' : escape($_POST['file'],'string') ); 	
  
    //Vorschaubild
        $pfad="./include/images/works/";
		$speichername= $pfad.basename($_FILES['file']['name']);
		$file = $_FILES['file']['tmp_name'];
		move_uploaded_file($file,$speichername);
        @chmod($speichername, 0777);
    // Screenshot
		$speichername1= $pfad.basename($_FILES['screenshot']['name']);
		$file1 = $_FILES['screenshot']['tmp_name'];
		move_uploaded_file($file1,$speichername1);
        @chmod($speichername1, 0777);
        
        db_query('INSERT INTO `prefix_works` (seitenname,link,ersteller,vorschaubild,screenshot,status,zweck) VALUES ( "'.$seitenname.'","'.$link.'","'.$ersteller.'","'.$speichername.'","'.$speichername1.'","'.$status.'","'.$zweck.'" ) ' );
		echo $file;
      return (true);
}

$um = '';
if (isset($_REQUEST['um'])) {
  $um = $_REQUEST['um'];
}

if (!empty($_POST['sub'])) {
  $seitenname = escape($_POST['seitenname'], 'string');
  $link = escape($_POST['link'], 'string');
  $zweck = escape($_POST['zweck'], 'string');
  $ersteller = escape($_POST['ersteller'], 'string');
  $vorschaubild  = escape($_POST['file'], 'string');
  $screenshot = escape($_POST['screenshot'], 'string');
  $status = escape($_POST['status'], 'string');
  
  
  
  if ( empty($_POST['sid']) ) {
  icUpload();
    
  } else {
    $sid = escape($_POST['sid'], 'integer');
    db_query('UPDATE `prefix_works` SET seitenname = "'.$seitenname.'", link = "'.$link.'", ersteller = "'.$ersteller.'", vorschaubild = "'.$vorschaubild.'", screenshot = "'.$screenshot.'", status = "'.$status.'", zweck = "'.$zweck.'" WHERE id = "'.$sid.'"');
  }
}
if (!empty($_GET['delete']) ) {
  $delete = escape($_GET['delete'], 'integer');
  db_query('DELETE FROM `prefix_works` WHERE id = "'.$delete.'" LIMIT 1');
}

if ( $menu->get(1) == 'status' ) {
db_query('UPDATE `prefix_works` SET status = IF(status=ONLINE,OFFLINE,ONLINE) WHERE id = "'.$menu->get(2).'" LIMIT 1');
}

if ( empty($_GET['sid']) ) {
  $row = array();
        $row['sub'] = 'Eintragen';
        $row['seitenname'] = '';
        $row['link'] = '';
		    $row['zweck'] = '';
        $row['ersteller'] = '';
        $row['vorschaubild'] = '';
        $row['screenshot'] = '';
        $row['status'] = '';
        $row['sid'] = '';
} else {
        $abf = 'SELECT seitenname,link,ersteller,vorschaubild,screenshot,zweck,status,id as sid FROM `prefix_works` WHERE id = "'.$_GET['sid'].'"';
        $erg = db_query($abf);
        $row = db_fetch_assoc($erg);
        $row['sub'] = '&Auml;ndern';
}

$clas = '';
$tpl = new tpl ( 'works', 1);
$tpl->set_ar_out($row,0);
$erg = db_query('SELECT * FROM `prefix_works` ORDER BY id');
while ($row = db_fetch_assoc($erg) ) {
  $clas = ($clas == 'Cmite' ? 'Cnorm' : 'Cmite' );
        $row['class'] = $clas;
        $tpl->set_ar_out($row,1);
}
$tpl->out(2);

$design->footer();
?>


-------- HTM

<script language="JavaScript" type="text/javascript">
<!--
 function del ( id1 ) {
  var x = confirm ( "wirklich loeschen?" );
   if ( x ) {
    document.location.href="admin.php?works&delete="+id1;
            }
                      }
//-->

function statuscheck ( STATUSID ) {
document.location.href="?works-status-"+STATUSID;
}

//<!--
if( document.getElementById('enablestatus').checked){
	enableStatus();
}
preview();
//-->
</script>

<table cellpadding="0" cellspacing="0" border="0">
 <tr>
  <td><img src="include/images/icons/admin/works.png" />
  </td>
  <td width="30">
  </td>
  <td valign="bottom"><h1>Referenzen</h1>
  </td>
 </tr>
</table>
<table width="100%">
 <tr>
  <td valign="top" width="60%">
   <form action="admin.php?works" enctype="multipart/form-data" method="POST">
   	<input type="hidden" name="sid" value="{sid}">
    <table cellspacing="1" cellpadding="2" broder="0" class="border">
     <tr>
      <td class="Cmite">Seitenname</td>
      <td class="Cnorm"><input type="text" name="seitenname" value="{seitenname}" size="50">
      </td>
     </tr>
     <tr>
      <td class="Cmite">Homepage Link</td>
      <td class="Cnorm"><input size="50" type="text" name="link" value="{link}">
      </td>
     </tr>
	   <tr>
      <td class="Cmite">Verwendungszweck</td>
      <td class="Cnorm"><input size="50" type="text" name="zweck" value="{zweck}">
      </td>
     </tr>
     <tr>
      <td class="Cmite">Ersteller</td>
      <td class="Cnorm"><input size="50" type="text" name="ersteller" value="{ersteller}">
      </td>
     </tr>
     <tr>
      <td class="Cmite">Vorschaubild</td>
      <td class="Cnorm"><input size="50" type="file" name="file" id="file" value="{file}">
      </td>
     </tr>
     <tr>
      <td class="Cmite">Screenshot</td>
      <td class="Cnorm"><input size="50" type="file" name="screenshot" id="screenshot" value="{screenshot}">
      </td>
     </tr>
     <tr>
      <td class="Cmite">Status</td>
      <td class="Cnorm"><select name="status" value="enablestatus" onchange="enableStatus();" id="enablestatus">
              <option {_if_{status}=='ONLINE'}checked="checked"{/_endif}>ONLINE</option>
              <option {_if_{status}=='OFFLINE'}checked="checked"{/_endif}>OFFLINE</option>
                        </select>
      </td>
     </tr>
     <tr>
      <td class="Cdark">
      </td>
      <td class="Cdark"><input type="submit" value="{sub}" name="sub">
      </td>
     </tr>
    </table>
   </form>
  </td>
  <td valign="top" width="40%">
   <table cellspacing="1" cellpadding="2" broder="0" align="center" class="border">
    <tr class="Chead">
     <td>Seitenname
     </td>
     <td>Link
     </td>
     <td>
     </td>
     <td>
     </td>
    </tr>
{EXPLODE}
    <tr class="{class}">
     <td align="center">{seitenname}
     </td>
     <td align="center">{link}
     </td>
     <td align="center"><a href="?works-status-{id}"><img src="include/images/icons/{status}.gif" alt="Status ändern"></a>
     </td>
     <td><a href="?works&sid={id}">Bearbeiten</a>
     </td>
     <td><a href="javascript:del('{id}')">L&ouml;schen</a>
     </td>
    </tr>
{EXPLODE}
   </table>
  </td>
 </tr>
</table>