Управление сайтом

Файловый менеджер

Имя файла	news_sql_new.php
Содержимое	<?php ini_set("error_reporting","7"); $base_url="../"; set_time_limit(120); require($base_url."../func.php"); $conn = db_connect(); //коннектимся к базе require_once("news_func.php"); function saveTags($connection, $newsId) { sql('DELETE FROM news_and_tags WHERE news_id = '.$newsId); if (isset($_POST['tags']) == false) { return true; } foreach ($_POST['tags'] as $tag) { $item = sqlval('SELECT * FROM news_tags WHERE name = "' . mysql_real_escape_string($tag) . '"'); $tagId = null; if (isset($item['id'])) { $tagId = $item['id']; } else { sqlval(' INSERT INTO news_tags (name) VALUES("'.mysql_real_escape_string($tag).'") '); $tagId = mysql_insert_id($connection); } sql(' INSERT INTO `news_and_tags` (news_id, tag_id) VALUES('.$newsId.', '.$tagId.');'); } } function updateNewsAssetsCounter($newsId) { $newsData = sqlval(' SELECT id, news_full FROM news WHERE id = '.($newsId).' '); if (isset($newsData['id']) == false) { return false; } // работаем над изображениями // <!--slider:[0-9]+--> $totalPhotos = 0; $totalVideos = 0; preg_match_all("/<!--slider:(.)-->/U", $newsData['news_full'], $matches); if (isset($matches[1]) == true) { foreach ($matches[1] as $sliderId) { $totalPhotos += sqlval(' SELECT COUNT() as total FROM news_sliders_photos WHERE news_slider_id = ' . $sliderId . ' ')['total']; } } // считаем количество вхождений подстроки $totalPhotos += substr_count($newsData['news_full'], 'img'); // считаем количество входений видеофайлов $totalVideos += substr_count($newsData['news_full'], 'video'); $totalVideos += substr_count($newsData['news_full'], 'youtu.be'); $totalVideos += substr_count($newsData['news_full'], 'youtube.com'); sql(' UPDATE news SET photo_count = '.$totalPhotos.', video_count = '.$totalVideos.' WHERE id = '.$newsId.' '); } /////////////////////////////////////////////////////// $_POST['news_full']=$_POST['text_document']; $send_to_vk = $_POST['news_header']." ".$_POST['news_short']; if (ini_get('magic_quotes_gpc') == 0) { $_POST['news_short']=addslashes($_POST['news_short']); $_POST['news_full']=addslashes($_POST['news_full']); $_POST['name']=addslashes($_POST['name']); $_POST['src']=addslashes($_POST['src']); $_POST['social_description'] = addslashes($_POST['social_description']); $_POST['social_video'] = addslashes($_POST['social_video']); } if ($_POST['pokaz_img'] == "") $_POST['pokaz_img']=0; //==================== if ($_POST['news_full'] <> "") { $pos1 = strpos($_POST['news_full'], "<BODY>"); $pos2 = strpos($_POST['news_full'], "</BODY>"); if ($pos1 == 0) { $pos1 = strpos($_POST['news_full'], "<body>"); $pos2 = strpos($_POST['news_full'], "</body>"); } if ($pos1 <> 0 && $pos2 <> 0) $_POST['news_full']=substr($_POST['news_full'], $pos1+6, $pos2-$pos1-6); $_POST['news_full']=str_replace("../../",$abs_url, $_POST['news_full']); } //\=========================== //echo "dsfg".$_POST['img_foto']; /if ($_FILES['img_foto']['tmp_name'] <> "") { if (is_uploaded_file($_FILES['img_foto']['tmp_name'])) { //$img_index_temp=upload_foto_tovar($_FILES['img_foto']['tmp_name'],72,320,1,1,$base_url."../user_foto/news"); $img_index_temp=upload_foto_tovar($_FILES['img_foto']['tmp_name'],430,900,1,1,$base_url."../user_foto/news"); if ($_POST['vazhno'] == 1) { $img_index= $img_index_temp; } else { $img_index=$name_foto_sm; //$img_index=upload_foto_tovar($_FILES['img_foto']['tmp_name'],320,72,1,1,$base_url."../user_foto/news"); } //echo "foto=".$img_index; $img_index="user_foto/news/".$img_index; } }/ if (isset($_POST['thumb_image_sm']) && strlen($_POST['thumb_image_sm']) != '') { $img_index = $_POST['thumb_image_sm']; } if ($_POST['id'] == "" && $_GET['delete'] <> "1") { // $news_full=nl2br($news_full); if ($_POST['archiv'] <> "1") $_POST['archiv']=0; while (true) { $existNews = sqlval(' SELECT COUNT(id) as total FROM news WHERE url = "' . $_POST['url'] . '" '); if ($existNews['total'] > 0) { $_POST['url'] = $_POST['url'] . '-' . rand(100, 200); } else { break; } } $sql_news="insert into news set data='".$_POST['data']."', url = '{$_POST['url']}', news_header='".$_POST['news_header']."', news_short='".$_POST['news_short']."', news_full='".$_POST['news_full']."', img_foto_author='".$_POST['img_foto_author']."', archiv='".intval($_POST['archiv'])."', status='".$_POST['status']."', src='".$_POST['src']."', srok='".$_POST['srok']."', razdel='".$_POST['razdel']."', id_rubrik='".$_POST['id_rubrik']."', img_index='".$img_index."', pokaz_img='".$_POST['pokaz_img']."', vazhno='".intval($_POST['vazhno'])."', user_id='".intval($_POST['id_author'])."', exclusiv='".intval($_POST['exclusiv'])."', social_description = '".$_POST['social_description']."', social_video = '".$_POST['social_video']."' "; $rn=sql($sql_news); if (!$rn) { echo mysql_error(); exit(); } $id_news=mysql_insert_id($conn); saveTags($conn, $id_news); updateNewsAssetsCounter($id_news); if ($_POST['status'] == "3" ) { if ($_POST['add_fb'] \|\| $_POST['add_ok'] \|\| $_POST['add_twit'] \|\| $_POST['add_vk']) { $is_intable = sql("select * from news_vk where news_id=".$id_news); if (mysql_num_rows($is_intable)==0) { sql("insert into news_vk set news_id=".$id_news.", vk_group='-".$_POST['add_vk']."', twitter='-".$_POST['add_twit']."', ok='-".$_POST['add_ok']."',fb='-".$_POST['add_fb']."'"); } } } xml(); } //================================================================================================================= if ($_POST['id'] <> "" && $_GET['delete'] <> "1") { // $news_full=nl2br($news_full); if ($img_index <> "") { if (file_exists($base_url."../".$img_index)) { $r_img_old=sqlval("select img_index from news where id='".$_POST['id']."'"); if (file_exists($base_url."../".$r_img_old['img_index'])) { $bu=unlink($base_url."../".$r_img_old['img_index']); } $sql_img=" , img_index='".$img_index."'"; } else $sql_img=""; } if(!isset($img_index) and $img_index == ''){ $r_img_old=sqlval("select img_index from news where id='".$_POST['id']."'"); $img_index = $r_img_old['img_index']; } while (true) { $existNews = sqlval(' SELECT COUNT(id) as total FROM news WHERE url = "' . $_POST['url'] . '" AND id != '.$_POST['id'].'" '); if ($existNews['total'] > 0) { $_POST['url'] = $_POST['url'] . '-' . rand(100, 200); } else { break; } } if (empty($archiv)) $archiv='0'; $sql="update news set data='".$_POST['data']."', url = '{$_POST['url']}', news_header='".$_POST['news_header']."', news_short='".$_POST['news_short']."', news_full='".$_POST['news_full']."', status='".$_POST['status']."', img_foto_author='".$_POST['img_foto_author']."', archiv='".intval($_POST['archiv'])."', src = '".$_POST['src']."', srok= '".$_POST['srok']."' , razdel= '".$_POST['razdel']."', id_rubrik='".$_POST['id_rubrik']."', pokaz_img='".$_POST['pokaz_img']."', vazhno='".intval($_POST['vazhno'])."', user_id='".intval($_POST['id_author'])."', social_description = '".$_POST['social_description']."', social_video = '".$_POST['social_video']."', exclusiv='".intval($_POST['exclusiv'])."' ".$sql_img." where id='".$_POST['id']."'"; //echo $sql; $rn=sql($sql); if (!$rn) { echo mysql_error(); exit(); } $id_news=$_POST['id']; // обновляем количество сохранений новости. sql(' UPDATE news SET save_iterator = save_iterator + 1 WHERE id = '.(int) $id_news.' '); saveTags($conn, $id_news); updateNewsAssetsCounter($id_news); if ($_POST['status'] == "3" && $_POST['data'] <= date('Y-m-d H:i:s')) { //indexator if ($_POST['add_fb']) { //add in facebook $send_to_fb = (iconv( 'windows-1251', 'utf-8' , $send_to_vk)); postfb($send_to_fb, $id_news); } news_rss(); xml(); news_indexator($id_news, $conn); } if($_POST['status'] == "3") { // отложенная публикация if ($_POST['add_fb'] == 1 \|\| $_POST['add_ok'] == 1 \|\| $_POST['add_twit'] == 1 \|\| $_POST['add_vk'] == 1) { $is_intable = sql("select * from news_vk where news_id=".$id_news); if (mysql_num_rows($is_intable)==0) { $r_ins_group=sql("insert into news_vk set news_id=".$id_news.", vk_group='-".$_POST['add_vk']."', twitter='-".$_POST['add_twit']."', ok='-".$_POST['add_ok']."',fb='-".$_POST['add_fb']."'"); } } } if (isset( $_POST['page'] )) $uri = '&page='.$_POST['page']; } //================================================================================================================= if ($_GET['delete'] == "1") { $r_img_old=sqlval("select img_index, razdel from news where id='".$_REQUEST['id']."'"); if (file_exists($base_url."../".$r_img_old['img_index'])) { $bu=unlink($base_url."../".$r_img_old['img_index']); } $sql="delete from news where id='".$_REQUEST['id']."'"; $r=sql($sql); if (!$r) { echo mysql_error(); exit(); } // $r_del_foto=sql("select *from news_foto where id_news='".$_REQUEST['id']."'"); if (!$r_del_foto) error(); while ($rs_del_foto=sqlget($r_del_foto)){ unlink($base_url."../".$rs_del_foto['foto']); unlink($base_url."../".$rs_del_foto['foto_small']); } $sql_delete="delete from news_foto where id_news='".$_REQUEST['id']."'"; $r=sql($sql_delete); if (!$r) error(); $sql_delete="delete from news_vk where id_news='".$_REQUEST['id']."'"; $r=sql($sql_delete); if (!$r) error(); if ($r_img_old['razdel'] == 3 \|\| $r_img_old['razdel'] == 4) news_rss(); xml(); news_indexator($_REQUEST['id'], $conn); } Header("Location: news.php?id_razdel=".$_REQUEST['razdel'].$uri); Exit; ?>

/admin/news///

Имя	Дата	Размер
fb	2013-04-27
twitteroauth_old	2013-04-27
action.php	2015-05-22	2 кб.
delete_slider.php	2017-02-22	302 байт
edit_slider.php	2017-02-22	6 кб.
fix.php	2021-03-29	8 кб.
get_tags.php	2017-02-21	507 байт
news.rss	2006-01-02	24 кб.
news_func.php	2026-10-02	16 кб.
news_modif.php.back	2025-01-09	45 кб.
news_modif.php.back~	2026-07-24	45 кб.
news_modif.php.bak.charset_20261002	2026-01-12	46 кб.
news_new.php	2019-04-25	202 байт
news_sql_new.php	2021-03-29	12 кб.
od2.php	2013-08-13	522 байт
razdel.php	2017-06-21	6 кб.
sitemap.xml	2019-04-25	0 байт
swfobject.js	2008-06-02	7 кб.
test_fb.php	2016-01-15	3 кб.
testvk.php	2014-07-29	6 кб.
upload_thumb.php	2026-01-12	13 кб.
{response}-	2016-11-07	0 байт
{upload_url}~	2026-07-24	0 байт

/admin/news///