Управление сайтом

Файловый менеджер

Имя файла	fix.php
Содержимое	<?php $base_url = "../"; if ($ofs == "") $ofs = 0; $pap = 20; require($base_url . "inc/top.inc.php"); $action = empty($_GET['action']) ? 'read' : trim($_GET['action']); if ($action === 'save' && $_SERVER['REQUEST_METHOD'] === 'POST') { $model = $_POST; $model['date_from'] = trim(mysql_real_escape_string($model['date_from'])); $model['date_to'] = trim(mysql_real_escape_string($model['date_to'])); if (empty($model['id'])) { sql(' INSERT INTO `news_fix` (`news_id`, `date_from`, `date_to`, `position`) VALUES('. (int) $model['news_id'] .', "'. $model['date_from'].'", "'. $model['date_to'].'", "'. (int) $model['position'].'") '); } else { sql(' UPDATE `news_fix` SET `news_id` = '. (int) $model['news_id'] .', `date_from` = "'. $model['date_from'].'", `date_to` = "'. $model['date_to'].'", `position` = "'. (int) $model['position'].'" WHERE id = '. (int) $model['id'] .' '); } echo '<script>location.href="fix.php";</script>'; } if ($action === 'delete' && $_SERVER['REQUEST_METHOD'] === 'POST') { sql(' DELETE FROM `news_fix` WHERE id = ' . (int) $_POST['id'] . ' '); echo '<script>location.href="fix.php";</script>'; } ?> <div align="center" class="title">Зафиксированные новости</div> <?php if ($action == 'read') { ?> <?php $news = fetchAll(' SELECT news_fix.id, news.news_header, news_fix.date_from, news_fix.date_to, news_fix.position FROM `news_fix` LEFT JOIN news ON news.id = news_fix.news_id ORDER BY news_fix.date_from DESC; '); ?> <table width="95%" border="0" cellspacing="0" cellpadding="0" align="center" class="table_border"> <tr> <td> <table width="100%" border="0" cellspacing="1" cellpadding="2"> <thead> <tr bgcolor="#ffffff"> <td colspan="6" align="right"> <form action="fix.php" method="get"> <input type="hidden" name="action" value="edit"> <button type="submit">Добавить</button> </form> </td> </tr> <tr bgcolor="#ffffff"> <th> Новость </th> <th> Позиция </th> <th> С </th> <th> По </th> <th> Редактировать </th> <th> Удалить </th> </tr> </thead> <tbody> <?php foreach ($news as $newsItem) { ?> <tr bgcolor="#ffffff"> <td><?= $newsItem['news_header']; ?></td> <td><?= $newsItem['position']; ?></td> <td><?= date('d.m.Y в H:i', strtotime($newsItem['date_from'])); ?></td> <td><?= date('d.m.Y в H:i', strtotime($newsItem['date_to'])); ?></td> <td> <form action="fix.php" method="GET"> <input type="hidden" name="id" value="<?= $newsItem['id']; ?>"> <input type="hidden" name="action" value="edit"> <button type="submit">Редактировать</button> </form> </td> <td> <form action="fix.php?action=delete" method="POST"> <input type="hidden" name="id" value="<?= $newsItem['id']; ?>"> <button type="submit">Удалить</button> </form> </td> </tr> <?php } ?> </tbody> <tfoot> <tr bgcolor="#ffffff"> <td colspan="6" align="right"> <form action="fix.php" method="get"> <input type="hidden" name="action" value="edit"> <button type="submit">Добавить</button> </form> </td> </tr> </tfoot> </table> </td> </tr> </table> <?php } ?> <?php if ($action == 'edit') { ?> <?php $model = null; if (empty($_GET['id']) == false) { $model = sqlval(' SELECT * FROM `news_fix` WHERE id = ' . (int) $_GET['id'] . ' '); } ?> <form action="fix.php?action=save" method="POST"> <?php if (isset($_GET['id'])) { ?> <input type="hidden" name="id" value="<?=$_GET['id'];?>"> <?php } ?> <table width="95%" border="0" cellspacing="0" cellpadding="0" align="center" class="table_border"> <tr> <td> <table width="100%" border="0" cellspacing="1" cellpadding="2"> <tbody> <tr bgcolor="#ffffff"> <td>Идентификатор новости</td> <td> <input type="number" min="100" name="news_id" value="<?= empty($model['news_id']) ? '' : $model['news_id'] ;?>" class="input-100" required> </td> </tr> <tr bgcolor="#ffffff"> <td> Начало размещения </td> <td> <input type="datetime-local" name="date_from" value="<?= empty($model['date_from']) ? date('Y-m-d\TH:i:s') : date('Y-m-d\TH:i:s', strtotime($model['date_from'])); ?>" required> </td> </tr> <tr bgcolor="#ffffff"> <td> Окончание размещения </td> <td> <input type="datetime-local" name="date_to" value="<?= empty($model['date_to']) ? date('Y-m-d\TH:i:s', strtotime('+1 day')) : date('Y-m-d\TH:i:s', strtotime($model['date_to'])); ?>" required> </td> </tr> <tr bgcolor="#ffffff"> <td> Позиция </td> <td> <input type="number" name="position" min="0" value="<?= empty($model['position']) ? '2' : $model['position']; ?>" required> </td> </tr> <tr bgcolor="#ffffff"> <td colspan="2" align="right"> <button type="submit">Сохранить</button> </td> </tr> </tbody> </table> </td> </tr> </table> </form> <?php } ?> <?php require($base_url . "inc/bottom.inc.php"); ?>

/admin/news///////////

Имя	Дата	Размер
fb	2013-04-27
twitteroauth_old	2013-04-27
action.php	2015-05-22	2 кб.
delete_slider.php	2017-02-22	302 байт
edit_slider.php	2017-02-22	6 кб.
fix.php	2021-03-29	8 кб.
get_tags.php	2017-02-21	507 байт
news.rss	2006-01-02	24 кб.
news_func.php	2026-10-02	16 кб.
news_modif.php.back	2025-01-09	45 кб.
news_modif.php.back~	2026-07-24	45 кб.
news_modif.php.bak.charset_20261002	2026-01-12	46 кб.
news_new.php	2019-04-25	202 байт
news_sql_new.php	2021-03-29	12 кб.
od2.php	2013-08-13	522 байт
razdel.php	2017-06-21	6 кб.
sitemap.xml	2019-04-25	0 байт
swfobject.js	2008-06-02	7 кб.
test_fb.php	2016-01-15	3 кб.
testvk.php	2014-07-29	6 кб.
upload_thumb.php	2026-01-12	13 кб.
{response}-	2016-11-07	0 байт
{upload_url}~	2026-07-24	0 байт

/admin/news///////////