Управление сайтом

Файловый менеджер

Имя файла	action.php
Содержимое	<?php $base_url="../"; require_once($base_url.'../func.php'); require_once('JSON.php'); require_once( $base_url . 'lib/php/JsHttpRequest.php' ); $l = db_connect(); sql('set names utf8'); class Sorter { private $needle = ''; private function _cmp($a, $b) { if ($a == $b) { return 0; } return strripos($a['name'], $this->needle) < strripos($b['name'], $this->needle) ? -1 : 1; } public function sort($array, $needle) { $this->needle = $needle; usort($array, array('Sorter', '_cmp')); } } $JsHttpRequest =& new JsHttpRequest("windows-1251"); if ( $_POST['action'] == 'go_prev') { header('location: isprav.php?id=' . $_POST['prev_id']); } elseif ($_POST['action'] == 'save_schedule') { for ($i = 0; $i < 7; $i++) { $firmaId = $_POST['id_firm']; $startTime = $_POST['days']['start_time'][$i]; $endTime = $_POST['days']['end_time'][$i]; $dayOff = isset($_POST['days']['day_off'][$i]) ? $_POST['days']['day_off'][$i] : '0'; $data = sqlval(' SELECT id FROM `firma_schedule` WHERE id_firm = '.(int)$firmaId.' AND id_day = '.$i.' '); if (isset($data['id'])) { sql(' UPDATE `firma_schedule` SET id_firm = '.$firmaId.', id_day = '.$i.', start_time = "' . $startTime . '", end_time = "' . $endTime . '", dayoff = '.(int)$dayOff.' WHERE id = '.$data['id'].' '); } else { sql(' INSERT INTO `firma_schedule` (id_firm, id_day, start_time, end_time, dayoff) VALUES('.$firmaId.', '.$i.',"' . $startTime . '", "' . $endTime . '", '.(int)$dayOff.') '); } } header('location: index.php'); } elseif ( $_POST['action'] == 'update' ) { $_POST['name'] = mysql_real_escape_string( trim($_POST['name']) ); $_POST['adress'] = mysql_real_escape_string( trim($_POST['adress']) ); $_POST['house'] = mysql_real_escape_string( trim($_POST['house']) ); $_POST['house_add'] = mysql_real_escape_string( trim($_POST['house_add']) ); $_POST['corps'] = mysql_real_escape_string( trim($_POST['corps']) ); $_POST['build'] = mysql_real_escape_string( trim($_POST['build']) ); $_POST['address-add'] = mysql_real_escape_string( trim($_POST['address-add']) ); $_POST['source'] = mysql_real_escape_string( $_POST['source'] ); $_POST['sub_adm_area_id'] = intval( $_POST['sub_adm_area_id'] ); $_POST['email'] = mysql_real_escape_string( trim($_POST['email']) ); $_POST['locality_id'] = intval( $_POST['locality_id'] ); (!isset($_POST['export'])) ? $_POST['export'] = 0 : $_POST['export'] = 1; sql("delete from firma_phone where id_firma='{$_POST['id']}'"); if($_POST['email'] and filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)){ sql("delete from firma_email where id_firma='{$_POST['id']}'"); sql("insert into firma_email set id_firma={$_POST['id']}, email='{$_POST['email']}'"); } for ( $i = 0; $i < count($_POST['phone_number']); $i++) { $_POST['phone_type'][$i] = (int) $_POST['phone_type'][$i]; $_POST['phone_number'][$i] = mysql_real_escape_string(trim($_POST['phone_number'][$i])); $_POST['phone_ext'][$i] = mysql_real_escape_string(trim($_POST['phone_ext'][$i])); $_POST['phone_info'][$i] = mysql_real_escape_string(trim($_POST['phone_info'][$i])); $activePhone = 0; if (isset($_POST['firma_active_phone_index']) && $i == $_POST['firma_active_phone_index']) { $activePhone = 1; } sql("insert into firma_phone values (NULL, '{$_POST['id']}', '{$_POST['phone_number'][$i]}', '{$_POST['phone_ext'][$i]}', '{$_POST['phone_info'][$i]}', '{$_POST['phone_type'][$i]}', {$i})"); } $urlFragmentNumber = null; $_url = $_POST['firma_url']; $numberI = 0; while (true) { $existFirma = sqlval(' SELECT COUNT(id) as total FROM firma WHERE firma_url = "' . $_url . '" AND id != '.$_POST['id'].' '); if ($existFirma['total'] > 0) { $numberI = $numberI + 1; $_url = $_POST['firma_url'] . '-' . $numberI; } else { break; } } $_POST['firma_url'] = $_url; sql("update firma set name='{$_POST['name']}', ya_export='{$_POST['export']}', firma_url = '{$_POST['firma_url']}', street='{$_POST['adress']}', house='{$_POST['house']}', house_add='{$_POST['house_add']}', corps='{$_POST['corps']}', build='{$_POST['build']}', source='{$_POST['source']}', checked='{$_POST['checked']}', locality_id='{$_POST['locality_id']}', sub_adm_area_id='{$_POST['sub_adm_area_id']}', address_add='{$_POST['address_add']}' where id='{$_POST['id']}'"); header('location: isprav.php?id='.$_POST['next_id']); } elseif ( $_POST['action'] == 'save' ) { sql('set names cp1251'); $_POST['name'] = mysql_real_escape_string( trim($_POST['name']) ); $_POST['name_ur'] = mysql_real_escape_string( trim($_POST['name_ur']) ); $_POST['info'] = mysql_real_escape_string( trim($_POST['info']) ); $_POST['client_info'] = mysql_real_escape_string( trim($_POST['client_info']) ); $_POST['keyword'] = mysql_real_escape_string( trim($_POST['keyword']) ); $_POST['meta'] = mysql_real_escape_string( trim($_POST['meta']) ); $_POST['domen'] = mysql_real_escape_string( trim($_POST['domen']) ); $_POST['path'] = mysql_real_escape_string( trim($_POST['path']) ); $_POST['adress'] = mysql_real_escape_string( trim($_POST['adress']) ); $_POST['house'] = mysql_real_escape_string( trim($_POST['house']) ); $_POST['house_add'] = mysql_real_escape_string( trim($_POST['house_add']) ); $_POST['corps'] = mysql_real_escape_string( trim($_POST['corps']) ); $_POST['build'] = mysql_real_escape_string( trim($_POST['build']) ); $_POST['address-add'] = mysql_real_escape_string( trim($_POST['address-add']) ); $_POST['email'] = mysql_real_escape_string( trim($_POST['email']) ); $_POST['url'] = mysql_real_escape_string( trim($_POST['url']) ); $_POST['url_redirect'] = mysql_real_escape_string( trim($_POST['url_redirect']) ); $_POST['short_url'] = mysql_real_escape_string( trim($_POST['short_url']) ); $_POST['source'] = mysql_real_escape_string( trim($_POST['source']) ); $_POST['template_for_buy'] = mysql_real_escape_string(trim($_POST['template_for_buy'])); $_POST['shop_enabled'] = (int) $_POST['shop_enabled']; $_POST['delivery_enabled'] = (int) $_POST['delivery_enabled']; $_POST['delivery_category_id'] = (int) $_POST['delivery_category_id']; $_POST['delivery_text'] = mysql_real_escape_string(trim($_POST['delivery_text'])); $_POST['id'] = (int) $_POST['id'] ; $_POST['id_tarif'] = (int) $_POST['id_tarif']; $_POST['sub_adm_area_id'] = (int) $_POST['sub_adm_area_id']; $_POST['locality_id'] = (int) $_POST['locality_id']; $_POST['lat'] = (double) $_POST['lat']; $_POST['lng'] = (double) $_POST['lng']; $_POST['scale'] = (int) $_POST['scale']; $_POST['regim'] = mysql_real_escape_string(trim($_POST['regim'])); (!isset($_POST['registr'])) ? $_POST['registr'] = 0 : $_POST['registr'] = 1; (!isset($_POST['registr_price'])) ? $_POST['registr_price'] = 0 : $_POST['registr_price'] = 1; (!isset($_POST['checked'])) ? $_POST['checked'] = 0 : $_POST['checked'] = 1; (!isset($_POST['export'])) ? $_POST['export'] = 0 : $_POST['export'] = 1; sql("delete from firma_phone where id_firma='{$_POST['id']}'"); for ( $i = 0; $i < count($_POST['phone_number']); $i++) { $_POST['phone_type'][$i] = (int) $_POST['phone_type'][$i]; $_POST['phone_number'][$i] = mysql_real_escape_string($_POST['phone_number'][$i]); $_POST['phone_ext'][$i] = mysql_real_escape_string($_POST['phone_ext'][$i]); $_POST['phone_info'][$i] = mysql_real_escape_string($_POST['phone_info'][$i]); $activePhone = 0; if (isset($_POST['firma_active_phone_index']) && $i == $_POST['firma_active_phone_index']) { $activePhone = 1; } sql("insert into firma_phone values (NULL, '{$_POST['id']}', '{$_POST['phone_number'][$i]}', '{$_POST['phone_ext'][$i]}', '{$_POST['phone_info'][$i]}', '{$_POST['phone_type'][$i]}', {$activePhone})"); } if ( $_POST['checked'] == 1) { $actual_date = time() . '000'; $sql_actual_date = "actual_date='{$actual_date}',"; } sql("delete from rubrik2 where id_firm='{$_POST['id']}'"); foreach ($_POST['id_rubrik'] as $rubrik) { $rubrik = (int) $rubrik; if ($rubrik > 0) { $r_ins_rubr=sql("insert into rubrik2 values (null, '{$_POST['id']}', '{$rubrik}')"); if (!$r_ins_rubr) error(); } } sql("delete from rubrik where id_firm='{$_POST['id']}'"); foreach ($_POST['id_rubrik_old'] as $rubrik_old) { $rubrik_old = (int) $rubrik_old; $r_ins_rubr=sql("insert into rubrik values (null, '{$_POST['id']}', '{$rubrik_old}')"); if (!$r_ins_rubr) error(); } if ($_POST['delete_znak'] == 1) { $sql_znak = "znak='',"; $sql_logo = "client_logo='',"; } if (is_uploaded_file($_FILES['znak']['tmp_name'])) { list($width, $height, $type, $attr) = getimagesize($_FILES['znak']['tmp_name']); if ( $type == IMAGETYPE_GIF \|\| $type == IMAGETYPE_JPEG \|\| $type == IMAGETYPE_PNG ) {//echo 88; die(); //ftp_write("../../img/" . $_FILES['znak']['name'], $_FILES['znak']['tmp_name']); $pos = strpos($_FILES['znak']['name'], '.'); $file = substr($_FILES['znak']['name'], 0, $pos); $name = translit($file); $ext = substr($_FILES['znak']['name'],$pos,strlen($_FILES['znak']['name'])); move_uploaded_file($_FILES['znak']['tmp_name'],"../../img/" . $name.$ext); copy("../../img/" . $name.$ext, "../../user_foto/company/logo/" . md5($name).$ext); } //$sql_znak = "znak='".$_FILES['znak']['name']."',"; $sql_znak = "znak='".$name.$ext."',"; $sql_logo = "client_logo='user_foto/company/logo/".md5($name).$ext."',"; } if (is_uploaded_file($_FILES['delivery_image']['tmp_name'])) { list($width, $height, $type, $attr) = getimagesize($_FILES['delivery_image']['tmp_name']); if ( $type == IMAGETYPE_GIF \|\| $type == IMAGETYPE_JPEG \|\| $type == IMAGETYPE_PNG ) {//echo 88; die(); $pos = strpos($_FILES['delivery_image']['name'], '.'); $file = substr($_FILES['delivery_image']['name'], 0, $pos); $name = 'delivery-image' . translit($file) . time(); $ext = substr($_FILES['delivery_image']['name'],$pos,strlen($_FILES['delivery_image']['name'])); move_uploaded_file($_FILES['delivery_image']['tmp_name'],"../../img/" . $name.$ext); copy("../../img/" . $name.$ext, "../../user_foto/tovar/" . md5($name).$ext); copy("../../img/" . $name.$ext, "../../user_foto/tovar/" . md5($name).'_sm'.$ext); } sql(' UPDATE `firma` SET delivery_image = "user_foto/tovar/'. md5($name).$ext .'" WHERE id = '. $_POST['id'] .' '); } sql("delete from firma_site where id_firma = '{$_POST['id']}'"); if ($_POST['url']!='') sql("insert into firma_site values (NULL, '{$_POST['id']}', '{$_POST['url']}')"); if($_POST['email'] and filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)){ sql("delete from firma_email where id_firma='{$_POST['id']}'"); sql("insert into firma_email set id_firma={$_POST['id']}, email='{$_POST['email']}'"); } $urlFragmentNumber = null; $_url = $_POST['firma_url']; $numberI = 0; while (true) { $existFirma = sqlval(' SELECT COUNT(id) as total FROM firma WHERE firma_url = "' . $_url . '" AND id != '.$_POST['id'].' '); if ($existFirma['total'] > 0) { $numberI = $numberI + 1; $_url = $_POST['firma_url'] . '-' . $numberI; } else { break; } } $_POST['firma_url'] = $_url; sql("update firma set name='{$_POST['name']}', name_ur='{$_POST['name_ur']}', firma_url = '{$_POST['firma_url']}', {$sql_znak} {$sql_logo} info='{$_POST['info']}', client_info='{$_POST['client_info']}', keyword = '{$_REQUEST['keyword']}', meta = '{$_REQUEST['meta']}', registr='{$_POST['registr']}', registr_price='{$_POST['registr_price']}', domen = '{$_POST['domen']}', path = '{$_POST['path']}', id_tarif='{$_POST['id_tarif']}', tarif_begin='{$_POST['tarif_begin']}', tarif_end='{$_POST['tarif_end']}', ya_export='{$_POST['export']}', street='{$_POST['adress']}', house='{$_POST['house']}', house_add='{$_POST['house_add']}', corps='{$_POST['corps']}', build='{$_POST['build']}', address_add='{$_POST['address_add']}', email='{$_POST['email']}', source='{$_POST['source']}', checked='{$_POST['checked']}', locality_id='{$_POST['locality_id']}', sub_adm_area_id='{$_POST['sub_adm_area_id']}', lat='{$_POST['lat']}', lng='{$_POST['lng']}', scale='{$_POST['scale']}', {$sql_actual_date} url='{$_POST['url']}', short_url='{$_POST['short_url']}', last_modified = NOW(), url_redirect='{$_POST['url_redirect']}', regim='{$_POST['regim']}', template_for_buy = '{$_POST['template_for_buy']}', shop_enabled = '{$_POST['shop_enabled']}', delivery_enabled = '{$_POST['delivery_enabled']}', delivery_category_id = '{$_POST['delivery_category_id']}', delivery_text = '{$_POST['delivery_text']}' where id='{$_POST['id']}'"); firm_indexator($_POST['id'], $l); if (isset($_POST['page'])) header('location: index.php?page='.$_POST['page']); else header('location: index.php'); } elseif ( $_POST['action'] == 'add' ) { // СѓРґР°Р»СЏРµРј РїСѓСЃС‚С‹Рµ Р·РЅР°С‡РµРЅРёСЏ РІ РѕС‚СЂР°СЃР»Рё foreach ($_POST['id_rubrik'] as $key => $id_rubrik) { if(empty($id_rubrik)) { unset($_POST['id_rubrik'][$key]); } } // РїРѕР»Рµ РѕС‚СЂР°СЃР»СЊ РѕР±СЏР·Р°С‚РµР»СЊРЅР° РґР»СЏ Р·Р°РїРѕР»РЅРµРЅРёСЏ if (!empty($_POST['id_rubrik'])){ sql('set names cp1251'); $_POST['name'] = mysql_real_escape_string( trim($_POST['name']) ); $_POST['name_ur'] = mysql_real_escape_string( trim($_POST['name_ur']) ); $_POST['info'] = mysql_real_escape_string( trim($_POST['info']) ); $_POST['client_info'] = mysql_real_escape_string( trim($_POST['client_info']) ); $_POST['keyword'] = mysql_real_escape_string( trim($_POST['keyword']) ); $_POST['meta'] = mysql_real_escape_string( trim($_POST['meta']) ); $_POST['domen'] = mysql_real_escape_string( trim($_POST['domen']) ); $_POST['path'] = mysql_real_escape_string( trim($_POST['path']) ); $_POST['adress'] = mysql_real_escape_string( trim($_POST['adress']) ); $_POST['house'] = mysql_real_escape_string( trim($_POST['house']) ); $_POST['house_add'] = mysql_real_escape_string( trim($_POST['house_add']) ); $_POST['corps'] = mysql_real_escape_string( trim($_POST['corps']) ); $_POST['build'] = mysql_real_escape_string( trim($_POST['build']) ); $_POST['address-add'] = mysql_real_escape_string( trim($_POST['address-add']) ); $_POST['email'] = mysql_real_escape_string( trim($_POST['email']) ); $_POST['url'] = mysql_real_escape_string( trim($_POST['url']) ); $_POST['url_redirect'] = mysql_real_escape_string( trim($_POST['url_redirect']) ); $_POST['short_url'] = mysql_real_escape_string( trim($_POST['short_url']) ); $_POST['source'] = mysql_real_escape_string( trim($_POST['source']) ); $_POST['shop_enabled'] = (int) $_POST['shop_enabled']; $_POST['delivery_enabled'] = (int) $_POST['delivery_enabled']; $_POST['delivery_category_id'] = (int) $_POST['delivery_category_id']; $_POST['delivery_text'] = mysql_real_escape_string(trim($_POST['delivery_text'])); $_POST['id'] = (int) $_POST['id'] ; $_POST['id_tarif'] = (int) $_POST['id_tarif']; $_POST['sub_adm_area_id'] = (int) $_POST['sub_adm_area_id']; $_POST['locality_id'] = (int) $_POST['locality_id']; $_POST['template_for_buy'] = mysql_real_escape_string(trim($_POST['template_for_buy'])); $_POST['lat'] = (double) $_POST['lat']; $_POST['lng'] = (double) $_POST['lng']; $_POST['scale'] = (int) $_POST['scale']; $_POST['regim'] = mysql_real_escape_string(trim($_POST['regim'])); (!isset($_POST['registr'])) ? $_POST['registr'] = 0 : $_POST['registr'] = 1; (!isset($_POST['registr_price'])) ? $_POST['registr_price'] = 0 : $_POST['registr_price'] = 1; (!isset($_POST['checked'])) ? $_POST['checked'] = 0 : $_POST['checked'] = 1; (!isset($_POST['export'])) ? $_POST['export'] = 0 : $_POST['export'] = 1; if ( $_POST['checked'] == 1) { $actual_date = time() . '000'; $sql_actual_date = "actual_date='{$actual_date}',"; } if (is_uploaded_file($_FILES['znak']['tmp_name'])) { list($width, $height, $type, $attr) = getimagesize($_FILES['znak']['tmp_name']); if ( $type == IMAGETYPE_GIF \|\| $type == IMAGETYPE_JPEG \|\| $type == IMAGETYPE_PNG ) { //ftp_write("img/" . $_FILES['znak']['name'], $_FILES['znak']['tmp_name']); $pos = strpos($_FILES['znak']['name'], '.'); $file = substr($_FILES['znak']['name'], 0, $pos); $name = translit($file); $ext = substr($_FILES['znak']['name'],$pos,strlen($_FILES['znak']['name'])); move_uploaded_file($_FILES['znak']['tmp_name'],"../../img/" . $name.$ext); copy("../../img/" . $name.$ext, "../../user_foto/company/logo/" . md5($name).$ext); } //$sql_znak = "znak='".$_FILES['znak']['name']."',"; $sql_znak = "znak='".$name.$ext."',"; $sql_logo = "client_logo='user_foto/company/logo/".md5($name).$ext."',"; } $urlFragmentNumber = null; $_url = $_POST['firma_url']; $numberI = 0; while (true) { $existFirma = sqlval(' SELECT COUNT(id) as total FROM firma WHERE firma_url = "' . $_url . '" '); if ($existFirma['total'] > 0) { $numberI = $numberI + 1; $_url = $_POST['firma_url'] . '-' . $numberI; } else { break; } } $_POST['firma_url'] = $_url; sql("insert into firma set name='{$_POST['name']}', name_ur='{$_POST['name_ur']}', firma_url = '{$_POST['firma_url']}', {$sql_znak} {$sql_logo} info='{$_POST['info']}', client_info='{$_POST['client_info']}', keyword = '{$_REQUEST['keyword']}', meta = '{$_REQUEST['meta']}', registr='{$_POST['registr']}', registr_price='{$_POST['registr_price']}', domen = '{$_POST['domen']}', path = '{$_POST['path']}', id_tarif='{$_POST['id_tarif']}', tarif_begin='{$_POST['tarif_begin']}', tarif_end='{$_POST['tarif_end']}', ya_export='{$_POST['export']}', street='{$_POST['adress']}', house='{$_POST['house']}', house_add='{$_POST['house_add']}', corps='{$_POST['corps']}', build='{$_POST['build']}', address_add='{$_POST['address_add']}', email='{$_POST['email']}', source='{$_POST['source']}', checked='{$_POST['checked']}', locality_id='{$_POST['locality_id']}', sub_adm_area_id='{$_POST['sub_adm_area_id']}', lat='{$_POST['lat']}', lng='{$_POST['lng']}', scale='{$_POST['scale']}', {$sql_actual_date} url='{$_POST['url']}', short_url='{$_POST['short_url']}', last_modified = NOW(), url_redirect='{$_POST['url_redirect']}', regim='{$_POST['regim']}', template_for_buy = '{$_POST['template_for_buy']}', shop_enabled = '{$_POST['shop_enabled']}', delivery_enabled = '{$_POST['delivery_enabled']}', delivery_category_id = '{$_POST['delivery_category_id']}', delivery_text = '{$_POST['delivery_text']}' "); $last_id = mysql_insert_id(); foreach ($_POST['id_rubrik'] as $rubrik) { $rubrik = (int) $rubrik; if ($rubrik > 0) { $r_ins_rubr=sql("insert into rubrik2 values (null, '{$last_id}', '{$rubrik}')"); if (!$r_ins_rubr) error(); } } if (is_uploaded_file($_FILES['delivery_image']['tmp_name'])) { list($width, $height, $type, $attr) = getimagesize($_FILES['delivery_image']['tmp_name']); if ( $type == IMAGETYPE_GIF \|\| $type == IMAGETYPE_JPEG \|\| $type == IMAGETYPE_PNG ) {//echo 88; die(); $pos = strpos($_FILES['delivery_image']['name'], '.'); $file = substr($_FILES['delivery_image']['name'], 0, $pos); $name = 'delivery-image' . translit($file) . time(); $ext = substr($_FILES['delivery_image']['name'],$pos,strlen($_FILES['delivery_image']['name'])); move_uploaded_file($_FILES['delivery_image']['tmp_name'],"../../img/" . $name.$ext); copy("../../img/" . $name.$ext, "../../user_foto/tovar/" . md5($name).$ext); copy("../../img/" . $name.$ext, "../../user_foto/tovar/" . md5($name).'_sm'.$ext); } sql(' UPDATE `firma` SET delivery_image = "user_foto/tovar/'. md5($name).$ext .'" WHERE id = '. $last_id .' '); } if ($_POST['url']!='') sql("insert into firma_site values (NULL, '{$last_id}', '{$_POST['url']}')"); foreach ($_POST['id_rubrik_old'] as $rubrik_old) { $rubrik_old = (int) $rubrik_old; $r_ins_rubr=sql("insert into rubrik values (null, '{$_POST['id']}', '{$rubrik_old}')"); if (!$r_ins_rubr) error(); } for ( $i = 0; $i < count($_POST['phone_number']); $i++) { $_POST['phone_type'][$i] = (int) $_POST['phone_type'][$i]; $_POST['phone_number'][$i] = mysql_real_escape_string($_POST['phone_number'][$i]); $_POST['phone_ext'][$i] = mysql_real_escape_string($_POST['phone_ext'][$i]); $_POST['phone_info'][$i] = mysql_real_escape_string($_POST['phone_info'][$i]); $activePhone = 0; if (isset($_POST['firma_active_phone_index']) && $i == $_POST['firma_active_phone_index']) { $activePhone = 1; } sql("insert into firma_phone values (NULL, '{$last_id}', '{$_POST['phone_number'][$i]}', '{$_POST['phone_ext'][$i]}', '{$_POST['phone_info'][$i]}', '{$_POST['phone_type'][$i]}', {$activePhone})"); } if($_POST['email'] and filter_var($_POST['email'], FILTER_VALIDATE_EMAIL)){ sql("insert into firma_email set id_firma={$last_id}, email='{$_POST['email']}'"); } firm_indexator($last_id, $l); if (isset($_POST['page'])) header('location: index.php?page='.$_POST['page']); else header('location: index.php'); } else { echo "Ukazhite otrasl dlya organizacii."; } } elseif ( $_GET['action'] == 'delete' ) { $_GET['id'] = (int) $_GET['id']; sql("delete from firma where id='{$_GET['id']}'"); sql("delete from firma_phone where id_firma='{$_GET['id']}'"); sql("delete from rubrik where id_firm='{$_GET['id']}'"); sql("delete from rubrik2 where id_firm='{$_GET['id']}'"); sql("delete from firma_email where id_firma='{$_GET['id']}'"); firm_indexator($_GET['id'], $l); if (isset($_GET['page'])) header('location: index.php?page='.$_GET['page']); else header('location: index.php'); } elseif ( $_GET['action'] == 'search' ) { //$_GET['term'] = iconv("UTF-8", "WINDOWS-1251", $_GET['term']); $_GET['term'] = preg_replace("/[ ]+/", " ", trim($_GET['term'])); $result = fetchAll( "select distinct street from firma where street like '%{$_GET['term']}%' limit 10" ); foreach ( $result as $row ) $json_result[] = $row['street']; echo json_encode($json_result); } elseif ( $_GET['action'] == 'load_locality' ) { $_GET['id'] = (int) $_GET['id']; $result = fetchAll( "select id, name from locality where sub_admn_area_id = '{$_GET['id']}' order by name" ); foreach ( $result as $row ) $json_result[] = array('id'=>$row['id'], 'name'=> $row['name']); echo json_encode($json_result); } elseif ( $_GET['action'] == 'autocomplete_rubrik' ) { //$_GET['term'] = iconv("UTF-8", "WINDOWS-1251", $_GET['term']); $_GET['term'] = preg_replace("/[ ]+/", " ", trim($_GET['term'])); $result = fetchAll( "SELECT * FROM `otrasl2` WHERE name_otrsl like '{$_GET['term']}%' and is_disabled='0' ORDER BY name_otrsl" ); foreach ( $result as $row ) $json_result[] = array('id'=>$row['id'], 'value'=> $row['name_otrsl'], 'label' => $row['name_otrsl']); echo json_encode($json_result); }elseif ( $_GET['action'] == 'search-user' ) { if ( trim($_GET['term']) != '' ) { //$_GET['term'] = iconv("UTF-8", "WINDOWS-1251", $_GET['term']); $_GET['term'] = preg_replace("/[ ]+/", " ", trim($_GET['term'])); $result = fetchAll( "select id, name from user where name like '%{$_GET['term']}%' order by LENGTH(name)" ); //$result = fetchAll( "select id, name from user where name = '{$_GET['term']}'" );^M //$sorter = new Sorter(); //$sorter->sort(&$result, $_GET['term']); if (count($result) > 10) array_splice($result, 10); foreach ( $result as $row ) $json_result[] = array('id'=>$row['id'], 'value'=> $row['name'], 'label' => $row['name'] ) ; echo json_encode($json_result); } } elseif ( $_GET['action'] == 'search-firma' ) { //$_GET['term'] = iconv("UTF-8", "WINDOWS-1251", $_GET['term']); $_GET['term'] = preg_replace("/[ ]+/", " ", trim($_GET['term'])); $result = fetchAll( " SELECT firma.id, firma.name, firma.street, firma.house, locality.name AS city_name FROM `firma` LEFT JOIN locality ON locality.id = firma.locality_id where firma.name like '%{$_GET['term']}%' order by firma.name limit 10 "); foreach ( $result as $row ) { $label = "{$row['name']}, {$row['city_name']}, {$row['street']}, {$row['house']}"; $json_result[] = array('id' => $row['id'], 'value' => $row['name'], 'label' => $label); } echo json_encode($json_result); } elseif ( $_POST['action'] == 'add_superuser' ) { $_POST['user_id'] = (int) $_POST['user_id']; $_POST['firma_id'] = (int) $_POST['firma_id']; if ($_POST['user_id'] > 0 && $_POST['firma_id'] > 0) sql("insert into firma_superuser value (NULL, '{$_POST['user_id']}', '{$_POST['firma_id']}')"); header('location: user.php'); } elseif ( $_GET['action'] == 'delete_superuser' ) { $_GET['id'] = (int) $_GET['id']; sql("delete from firma_superuser where id='{$_GET['id']}' limit 1"); header('location: user.php'); } elseif ( $_POST['action'] == 'add_tarif' ) { $_POST['koef'] = (int) $_POST['koef']; $_POST['photo_count'] = (int) $_POST['photo_count']; $_POST['video_count'] = (int) $_POST['video_count']; $_POST['keyword_count'] = (int) $_POST['keyword_count']; $_POST['product_count'] = (int) $_POST['product_count']; $_POST['name'] = mysql_real_escape_string($_POST['name']); sql("insert into firma_tarif values (NULL, '{$_POST['name']}', '{$_POST['koef']}', '{$_POST['photo_count']}', '{$_POST['video_count']}', '{$_POST['keyword_count']}', '{$_POST['product_count']}')"); header('location: tarif.php'); } elseif ( $_POST['action'] == 'edit_tarif' ) { $_POST['id'] = (int) $_POST['id']; $_POST['koef'] = (int) $_POST['koef']; $_POST['photo_count'] = (int) $_POST['photo_count']; $_POST['video_count'] = (int) $_POST['video_count']; $_POST['keyword_count'] = (int) $_POST['keyword_count']; $_POST['product_count'] = (int) $_POST['product_count']; $_POST['name'] = mysql_real_escape_string($_POST['name']); sql("update firma_tarif set name='{$_POST['name']}', koef='{$_POST['koef']}', photo_count='{$_POST['photo_count']}', video_count='{$_POST['video_count']}', keyword_count='{$_POST['keyword_count']}', product_count='{$_POST['product_count']}' where id='{$_POST['id']}' limit 1"); header('location: tarif.php'); } elseif ( $_GET['action'] == 'delete_tarif' ) { $_GET['id'] = (int)$_GET['id']; sql("delete from firma_tarif where id='{$_GET['id']}' limit 1"); header('location: tarif.php'); } elseif ( $_GET['action'] == 'delete_product' ) { $_GET['id'] = (int)$_GET['id']; $_GET['id_firm'] = (int)$_GET['id_firm']; sql("delete from firma_shop_products where id='{$_GET['id']}' limit 1"); header('location: products.php?id_firm=' . $_GET['id_firm']); } elseif ( $_GET['action'] == 'delete_category') { $_GET['id'] = (int) $_GET['id']; if ($_GET['id'] == 0) { echo 'РљР°С‚РµРіРѕСЂРёСЏ СЂР°РІРЅР° 0';exit; } sql(' UPDATE `firma` SET delivery_category_id = 0 WHERE delivery_category_id = '. $_GET['id'] .' '); sql("delete from firma_shop_categories where id='{$_GET['id']}' limit 1"); header('location: product_categories.php'); } elseif ( $_POST['action'] == 'save_product_category') { $_POST['id'] = (int)$_POST['id']; $_POST['position'] = (int)$_POST['position']; $_POST['name'] = mysql_real_escape_string($_POST['name']); $_POST['slug'] = trim(mysql_real_escape_string($_POST['slug'])); $_POST['name'] = iconv('windows-1251', 'UTF-8', $_POST['name']); if ($_POST['id'] > 0) { sql(" UPDATE `firma_shop_categories` SET `name` = '{$_POST['name']}', `slug` = '{$_POST['slug']}', `position` = '{$_POST['position']}' WHERE id = '{$_POST['id']}' "); } else { sql(" INSERT INTO `firma_shop_categories` (`name`, `slug`, `position`) VALUES('{$_POST['name']}', '{$_POST['slug']}', '{$_POST['position']}') "); } header('location: product_categories.php'); } elseif ( $_POST['action'] == 'save_product') { $_POST['id'] = (int) $_POST['id']; $_POST['position'] = (int) $_POST['position']; $_POST['id_firm'] = (int) $_POST['id_firm']; $_POST['url'] = mysql_real_escape_string($_POST['url']); $_POST['name'] = iconv('windows-1251', 'utf-8', $_POST['name']); $_POST['price'] = iconv('windows-1251', 'utf-8', $_POST['price']); $_POST['url'] = iconv('windows-1251', 'utf-8', $_POST['url']); if ($_POST['id'] > 0) { sql(" UPDATE `firma_shop_products` SET `name` = '{$_POST['name']}', `price` = '{$_POST['price']}', `url` = '{$_POST['url']}', `position` = '{$_POST['position']}', `id_firm` = '{$_POST['id_firm']}' WHERE id = '{$_POST['id']}' "); } else { sql(" INSERT INTO `firma_shop_products` (`name`, `price`, `url`, `id_firm`, `position`) VALUES('{$_POST['name']}', '{$_POST['price']}', '{$_POST['url']}', '{$_POST['id_firm']}', '{$_POST['position']}') "); $_POST['id'] = mysql_insert_id(); } // СЃРѕС…СЂР°РЅРёРј РєР°СЂС‚РёРЅРєСѓ С‚РѕРІР°СЂР° if (is_uploaded_file($_FILES['img_index']['tmp_name'])) { list($width, $height, $type, $attr) = getimagesize($_FILES['img_index']['tmp_name']); if ( $type == IMAGETYPE_GIF \|\| $type == IMAGETYPE_JPEG \|\| $type == IMAGETYPE_PNG ) {//echo 88; die(); $pos = strpos($_FILES['img_index']['name'], '.'); $file = substr($_FILES['img_index']['name'], 0, $pos); $name = 'product-' . translit($file) . time(); $ext = substr($_FILES['img_index']['name'],$pos,strlen($_FILES['img_index']['name'])); move_uploaded_file($_FILES['img_index']['tmp_name'],"../../img/" . $name.$ext); copy("../../img/" . $name.$ext, "../../user_foto/tovar/" . md5($name).$ext); copy("../../img/" . $name.$ext, "../../user_foto/tovar/" . md5($name).'_sm'.$ext); } sql(' UPDATE `firma_shop_products` SET img_index = "user_foto/tovar/'. md5($name).$ext .'" WHERE id = '. $_POST['id'] .' '); } header('location: products.php?id_firm=' . $_POST['id_firm']); } elseif ( $_POST['action'] == 'add_locality' ) { $_POST['sub_admn_area_id'] = (int) $_POST['sub_admn_area_id']; //$_POST['locality_name'] = iconv("utf-8", "windows-1251", mysql_real_escape_string($_POST['locality_name'])); sql("insert into locality values(null, '{$_POST['sub_admn_area_id']}', '{$_POST['locality_name']}')"); $last_id = mysql_insert_id(); echo json_encode(array('id'=>$last_id, 'name'=>$_POST['locality_name'])); }elseif ( $_POST['action'] == 'update_locality' ) { $_POST['locality_id'] = (int) $_POST['locality_id']; //$_POST['locality_name'] = iconv("utf-8", "windows-1251", mysql_real_escape_string($_POST['locality_name'])); $_POST['locality_name'] = mysql_real_escape_string($_POST['locality_name']); sql("update locality set name='{$_POST['locality_name']}' where id='{$_POST['locality_id']}' limit 1"); echo json_encode(array('id'=>$_POST['locality_id'], 'name'=>$_POST['locality_name'])); }elseif ( $_POST['action'] == 'delete_locality' ) { $_POST['locality_id'] = (int) $_POST['locality_id']; sql("delete from locality where id='{$_POST['locality_id']}' limit 1"); echo json_encode(array('id'=>$_POST['locality_id'])); }elseif ( $_POST['action'] == 'add_sub_admn_area' ) { $_POST['sub_admn_area_name'] = iconv("utf-8", "windows-1251", mysql_real_escape_string($_POST['sub_admn_area_name'])); sql("insert into sub_admn_area values(null, '1', '{$_POST['sub_admn_area_name']}')"); $last_id = mysql_insert_id(); echo json_encode(array('id'=>$last_id, 'name'=>$_POST['sub_admn_area_name'])); }elseif ( $_POST['action'] == 'update_sub_admn_area' ) { $_POST['sub_admn_area_id'] = (int) $_POST['sub_admn_area_id']; // $_POST['sub_admn_area_name'] = iconv("utf-8", "windows-1251", mysql_real_escape_string($_POST['sub_admn_area_name'])); $_POST['sub_admn_area_name'] = mysql_real_escape_string($_POST['sub_admn_area_name']); sql("update sub_admn_area set name='{$_POST['sub_admn_area_name']}' where id='{$_POST['sub_admn_area_id']}' limit 1"); echo json_encode(array('id'=>$_POST['sub_admn_area_id'], 'name'=>$_POST['sub_admn_area_name'])); }elseif ( $_POST['action'] == 'delete_sub_admn_area' ) { $_POST['sub_admn_area_id'] = (int) $_POST['sub_admn_area_id']; sql("delete from sub_admn_area where id='{$_POST['sub_admn_area_id']}' limit 1"); echo json_encode(array('id'=>$_POST['sub_admn_area_id'])); } elseif ( $_REQUEST['action'] == 'delete_comment' ) { foreach ( $_POST['items'] as $item ) { $item = (int) $item ; $rs_image = sqlval("select image from firma_otzyv where id='{$item}'"); if (!$rs_image) { error(); } if ( $rs_image['image'] != '' ) { if ( file_exists( $base_url."../".$rs_image['image'] ) ) { unlink($base_url."../".$rs_image['image']); } if ( file_exists( $base_url."../".str_replace('_sm.', '.', $rs_image['image'] ) ) ) { unlink($base_url."../".str_replace('_sm.', '.', $rs_image['image'] )); } } $result = sql("update firma_otzyv set status = 1 where id='{$item}'"); if (!$result) { error(); } } } ?>

/admin/firma/

Имя	Дата	Размер
..	2026-10-02
action.php	2020-05-29	38 кб.
autocomplete.php	2011-09-28	2 кб.
autocomplete2.php	2011-09-30	4 кб.
edit.php	2020-04-10	39 кб.
edit1.php	2011-10-31	21 кб.
edit_back.php	2021-01-14	35 кб.
edit_schedule.php	2018-01-12	3 кб.
firma_otzyv.php	2013-02-11	9 кб.
index.php	2013-09-15	7 кб.
isprav.php	2011-08-17	15 кб.
mapping.php	2011-08-22	595 байт
missing.php	2012-07-11	6 кб.
orel_mapping_2011-07-20.csv	2011-08-18	23 кб.
product_categories.php	2020-04-10	2 кб.
product_categories_edit.php	2020-04-09	6 кб.
product_edit.php	2020-04-10	5 кб.
products.php	2020-04-10	3 кб.
sprav.php	2011-09-30	594 байт
street.php	2011-08-17	450 байт
tarif.php	2011-12-13	4 кб.
test.php	2011-08-26	4 кб.
user.php	2013-06-05	4 кб.
validate.php	2011-10-31	3 кб.

/admin/firma