| Server IP : 103.48.194.25 / Your IP : 216.73.217.33 Web Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.33 System : Linux VMHostDefault 3.10.0-1160.42.2.el7.x86_64 #1 SMP Tue Sep 7 14:49:57 UTC 2021 x86_64 User : sieuthimay ( 1016) PHP Version : 8.2.20 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/nhadatkhangdien.net-bk/public_html/admin/sources/ |
Upload File : |
<?php if(!defined('_source')) die("Error");
$idcat=$_REQUEST['id_cat'];
$idlist=$_REQUEST['id_list'];
$iditem=$_REQUEST['id_item'];
$idproduct=$_REQUEST['id_product'];
$act = (isset($_REQUEST['act'])) ? addslashes($_REQUEST['act']) : "";
switch($act){
case "default":
get_news();
$template = "vdsp/news";
break;
case "add":
$template = "vdsp/news_add";
break;
case "edit":
get_news_edit();
$template = "vdsp/news_add";
break;
case "save":
save_news();
break;
case "delete":
delete_news();
break;
default:
$template = "order_num";
}
function fns_Rand_digit($min,$max,$num)
{
$result = '';
for($i = 0;$i<$num;$i++){
$result .= rand($min,$max);
}
return $result;
}
function get_news(){
global $d, $news, $paging;
$news_query = "SELECT * FROM #_vdsp where id_product='".$_REQUEST['id_product']."' ORDER BY stt ,id DESC";
$d->query($news_query);
$news = $d->result_array();
$curPage = isset($_GET['curPage']) ? $_GET['curPage'] : 1;
$url = getCurrentPageURL();
$maxR = 20;
$maxP = 4;
$paging = paging($news, $url, $curPage, $maxR, $maxP);
$news = $paging['source'];
}
function get_news_edit(){
global $d, $news,$idcat,$idlist,$iditem,$idproduct;
$id_news = isset($_GET['id']) ? themdau($_GET['id']) : "";
if(!$id_news){
transfer("Không nhận được dữ liệu", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
}
$news_query = "SELECT * FROM #_vdsp WHERE id = '" . $id_news . "'";
$d->query($news_query);
if($d->num_rows() == 0) transfer("Dữ liệu không có thực", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
$news = $d->fetch_array();
}
function save_news(){
global $d,$idcat,$idlist,$iditem,$idproduct;
$file_name = fns_Rand_digit(0,9,8);
if(empty($_POST)) transfer("Không nhận được dữ liệu", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
$id_news = isset($_POST['id']) ? themdau($_POST['id']) : "";
if($id_news){
$id_news = themdau($_POST['id']);
if($photo = upload_image("file", 'jpg|png|gif',_upload_tintuc,$file_name)){
$data['photo'] = $photo;
$d->setTable('vdsp');
$d->setWHERE('id', $id_news);
$d->SELECT();
if($d->num_rows() > 0){
$row = $d->fetch_array();
delete_file(_upload_tintuc . $row['photo']);
}
}
$data['ten'] = $_POST['ten'];
$data['tenkhongdau'] = $_POST['ten2'];
$data['id_product'] = $_REQUEST['id_product'];
$data['stt'] = $_POST['stt'];
$d->setTable('vdsp');
$d->setWHERE('id', $id_news);
if($d->update($data))
redirect("index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
else
transfer("Cập nhật dữ liệu bị lỗi", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
}else{
if($photo = upload_image("file", 'jpg|png|gif',_upload_tintuc,$file_name)){
$data['photo'] = $photo;
}
alert( $_POST['ten2']);
$data['ten'] = $_POST['ten'];
$data['tenkhongdau'] = $_POST['ten2'];
$data['id_product'] = $_REQUEST['id_product'];
$data['stt'] = $_POST['stt'];
$d->setTable('vdsp');
if($d->insert($data))
redirect("index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
else
transfer("Lưu dữ liệu bị lỗi", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
}
}
function delete_news(){
global $d,$idcat,$idlist,$iditem,$idproduct;
if(isset($_GET['id'])){
$id = themdau($_GET['id']);
$d->reset();
$sql = "SELECT * FROM #_vdsp WHERE id = '" . $id . "'";
$d->query($sql);
if($d->num_rows()>0){
while($row = $d->fetch_array()){
delete_file(_upload_tintuc . $row['photo']);
delete_file(_upload_tintuc . $row['thumb']);
}
$sql = "delete FROM #_vdsp WHERE id = '" . $id . "'";
$d->query($sql);
}
if($d->query($sql))
redirect("index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
else
transfer("Xóa dữ liệu bị lỗi", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
}else transfer("Không nhận được dữ liệu", "index.php?com=vdsp&act=default&id_product=$idproduct&id_cat=$idcat&id_list=$idlist&id_item=$iditem");
}
$news_active = 'style="color:#f66;"';
?>