Управление сайтом

Файловый менеджер

Имя файла	firma_otzyv.php
Содержимое	<?php $base_url="../"; require($base_url."inc/top.inc.php"); $_REQUEST['ofs']=(int)$_REQUEST['ofs']; $pap=20; ?> <div align="center" class="title">Отзывы о фирмах</div> <?php if ($_POST['name_user'] <> "" ) { if (ini_get('magic_quotes_gpc') == 0) { $_POST['name_user']=addslashes($_POST['name_user']); $_POST['note']=addslashes($_POST['note']); } if ($_POST['id'] <> "") { if ($_REQUEST['sub'] == "Сохранить") { // if ($_SESSION['level'] >= 600) { $r_upd=sql("update firma_otzyv set name_user='".$_POST['name_user']."', id_user='".$_POST['id_user']."' , data='".$_POST['data']."' , note='".$_POST['note']."' , id_firm='".$_POST['id_firm']."' , status='".$_POST['status']."' , karma='".$_POST['karma']."' where id = '".$_POST['id']."'"); if (!$r_upd) echo mysql_error(); else echo_message("Изменения успешно внесены"); // } else echo_message("У вас не хватает прав на измение информации"); } } else { // if ($_SESSION['level'] >= 600) { $r_ins=sql("insert into firma_otzyv set name_user='".$_POST['name_user']."', id_user='".$_POST['id_user']."' , data='".$_POST['data']."' , note='".$_POST['note']."' , id_firm='".$_POST['id_firm']."' , status='".$_POST['status']."' , karma='".$_POST['karma']."' "); if (!$r_ins) error(); else echo_message("Запись успешно добавлена"); // } else echo_message("У вас не хватает прав на добавление информации"); } } //if ($_SESSION['level'] >= 600) { if ($_GET['id'] <> "" && $_GET['delete'] == 1) { $r_del=sql("update firma_otzyv set status = 1 where id='".$_GET['id']."'"); if (!$r_del) error(); } //} else echo_message("У вас не хватает прав на измение информации"); //================================================ if ($_REQUEST['edit'] == 1) { // редактировать if ($_REQUEST['id'] > 0) { $operation="Сохранить"; $redit=sqlval("select firma_otzyv.* from firma_otzyv where id='".intval($_REQUEST['id'])."'"); } else { $operation="Добавить"; } ?> <script language="JavaScript"> <!-- required = new Array("name_user", "note"); required_show = new Array("имя пользователя", "отзыв"); function SendForm (form) { var i, j; for(j=0; j<required.length; j++) { for (i=0; i<form.length; i++) { if (form.elements[i].name == required[j] && form.elements[i].value == "" ) { alert('Пожалуйста, введите ' + required_show[j]); form.elements[i].focus(); return false; } } } return true; } //--> </script> <FORM name="save_doc" action="<?=$_SERVER['PHP_SELF']?>" method="post" ONSUBMIT="return SendForm(this)"> <INPUT TYPE="HIDDEN" name="id" value="<?=$_REQUEST['id']?>"> <table width="95%" border="0" cellspacing="0" cellpadding="0" align="center" class="table_border"> <tr> <td> <table width="100%" border="0" cellspacing="1" cellpadding="2"> <tr bgcolor="#ffffff"> <td><strong>Организация </strong></td> <td><input name="id_firm" type="text" tabindex="1" size="5" maxlength="10" value="<?=$redit['id_firm']?>" /> <?php $rfirm=sqlval("select name from firma where id='".$redit['id_firm']."'"); echo $rfirm['name']; ?> </td> </tr> <tr bgcolor="#ffffff"> <td><strong>ФИО </strong></td> <td><input name="name_user" type="text" id="name" tabindex="2" size="60" maxlength="250" value='<?=stripslashes($redit['name_user'])?>' /></td> </tr> <tr bgcolor="#ffffff"> <td><strong>ИД пользователя </strong></td> <td><input name="id_user" type="text" tabindex="10" size="20" maxlength="250" value="<?=$redit['id_user']?>" /></td> </tr> <tr bgcolor="#ffffff"> <td><strong>Дата </strong></td> <td><input name="data" type="text" tabindex="10" size="20" maxlength="250" value="<?=$redit['data']?>" /></td> </tr> <tr bgcolor="#ffffff"> <td><strong>Отзыв</strong></td> <td><textarea name="note" rows="9" cols="60"><?=$redit['note']?></textarea> </td> </tr> <tr bgcolor="#ffffff"> <td> <b>Тип отзыва</b> </td> <td> <select name="karma"> <option value="-1" <? if ($redit['karma'] == "-1") echo "selected";?>>Отрицательный</option> <option value="0" <? if ($redit['karma'] == "0") echo "selected";?> >Нейтральный</option> <option value="1" <? if ($redit['karma'] == "1") echo "selected";?> >Положительный</option> </select> </td> </tr> <tr bgcolor="#ffffff"> <td><strong>Статус</strong></td> <td><SELECT name="status"> <?php $rstatus=sql("select * from status"); while ($rsst=sqlget($rstatus)) { if ($redit['status'] == $rsst['id']) $sel1="selected"; else $sel1=""; if ($rsst['id'] == "") { if ($r['status'] == 3) $sel1="selected"; } echo "<OPTION value=\"".$rsst['id']."\" ".$sel1.">".$rsst['name']."</OPTION>"; } ?> </SELECT> </td> </tr> <tr bgcolor="#ffffff"> <td></td> <td><input name="sub" type="submit" tabindex="11" value="<?=$operation?>" /> <input name="sub" type="button" tabindex="12" value="Отмена" onclick="location.href='<?=$_SERVER['PHP_SELF']?>'"/></td></td> </tr> </table> </td> </tr> </table> </form> <?php } else { // общий список ========================================== ?> <script type="text/javascript"> <!-- $(document).ready(function(){ $('#datepicker').datepicker({ dateFormat: "yy-mm-dd" }); }); --> </script> <form method="get"> <table> <tr> <td>Дата</td> <td>Организация</td> <td>Пользователь</td> <td>Текст</td> <td></td> </tr> <tr> <td><input id="datepicker" type="text" name="date" value="<?php echo isset($_GET['date']) ? $_GET['date'] : ''; ?>"/></td> <td><input id="company" type="text" name="company" value="<?php echo isset($_GET['company']) ? $_GET['company'] : ''; ?>"/></td> <td><input id="user" type="text" name="user" value="<?php echo isset($_GET['user']) ? $_GET['user'] : ''; ?>"/></td> <td><input id="text" type="text" name="text" value="<?php echo isset($_GET['text']) ? $_GET['text'] : ''; ?>"/></td> <td><input type="submit" value="Найти" /></td> </tr> </table> </form> <div class="clear-block bord-mn bgsec"> <table cellpadding="0" cellspacing="0" class="toptable"> <tr> <td class="bord-left-grey tdright"> <input type="image" id="bDelete" src="<?php echo $base_url; ?>images/b_drop.gif" title="Удалить" class="icon-mar2" /></td> </tr> </table> </div> <script type="text/javascript"> <!-- jQuery(document).ready(function() { $.cms({cms_object: 'отзывы', delete_action: 'delete_comment'}); }); --> </script> <table width="95%" border="0" cellspacing="0" cellpadding="0" align="center" class="table_border"> <tr> <td> <table width="100%" border="0" cellspacing="1" cellpadding="2" id="tbmain" class="tbmain"> <tr bgcolor="#ffffff"> <td width="10"><input type="checkbox" id="bSelectToggle" /></td> <td><b>Организация</b></td> <td>ФИО</td> <td>Отзыв</td> <td></td> </tr> <tbody> <?php $pap=20; $_REQUEST['ofs']=intval($_REQUEST['ofs']); $query = "select SQL_CALC_FOUND_ROWS firma_otzyv., firma.name as name, firma.id as fid, status.name as sname from firma_otzyv, firma, status where id_firm=firma.id and firma_otzyv.status=status.id"; if ($_GET['date'] != '') { $_GET['date'] = mysql_real_escape_string($_GET['date']); $query .= " and firma_otzyv.data like '{$_GET['date']}%'"; } if ($_GET['company'] != '') { $_GET['company'] = mysql_real_escape_string($_GET['company']); $query .= " and firma.name like '%{$_GET['company']}%'"; } if ($_GET['user'] != '') { $_GET['user'] = mysql_real_escape_string($_GET['user']); $query .= " and name_user like '%{$_GET['user']}%'"; } if ($_GET['text'] != '') { $_GET['text'] = mysql_real_escape_string($_GET['text']); $query .= " and note like '%{$_GET['text']}%'"; } $query .= " order by firma_otzyv.data desc"; if ($pap > 0) { if ( !isset( $_REQUEST['page']) ) $_REQUEST['page'] = 1; $start = ( $_REQUEST['page'] - 1 ) $pap; $query .= " limit {$start}, {$pap}"; } $r=sql($query); $kol=sqlval("SELECT FOUND_ROWS()"); while ($res=sqlget($r)) { if ($res['status'] <> 3) { $color="#666666"; } else $color="#ffffff"; echo "<tr bgcolor=\"".$color."\" class=\"trUnselected\"><td valign=\"middle\"> <input type=\"checkbox\" id=\"{$res['id']}\" value=\"{$res['id']}\"></td><td><a href=\"/firma.php?id=".$res['fid']."\" target=\"_blank\"><b>".$res['name']."</b></a> </td> <td>".$res['name_user']." </td> <td>".stripslashes($res['note'])." <br><br> <i>".$res['sname']." ".$res['data']." ip=".$res['ip']."</i> </td> <td><a href=\"".$_SERVER['PHP_SELF']."?id=".$res['id']."&edit=1\">Редактировать</a></td></tr>"; } ?> </tbody> </table></td> </tr> </table> <?php if ( $kol[0] > $pap ) { PaginationHelper::display( $kol[0], $pap ); } ?> <?php } require($base_url."inc/bottom.inc.php"); ?>

/admin/firma/

Имя	Дата	Размер
..	2026-10-02
action.php	2020-05-29	38 кб.
autocomplete.php	2011-09-28	2 кб.
autocomplete2.php	2011-09-30	4 кб.
edit.php	2020-04-10	39 кб.
edit1.php	2011-10-31	21 кб.
edit_back.php	2021-01-14	35 кб.
edit_schedule.php	2018-01-12	3 кб.
firma_otzyv.php	2013-02-11	9 кб.
index.php	2013-09-15	7 кб.
isprav.php	2011-08-17	15 кб.
mapping.php	2011-08-22	595 байт
missing.php	2012-07-11	6 кб.
orel_mapping_2011-07-20.csv	2011-08-18	23 кб.
product_categories.php	2020-04-10	2 кб.
product_categories_edit.php	2020-04-09	6 кб.
product_edit.php	2020-04-10	5 кб.
products.php	2020-04-10	3 кб.
sprav.php	2011-09-30	594 байт
street.php	2011-08-17	450 байт
tarif.php	2011-12-13	4 кб.
test.php	2011-08-26	4 кб.
user.php	2013-06-05	4 кб.
validate.php	2011-10-31	3 кб.

/admin/firma