Управление сайтом

Файловый менеджер

Имя файла	action.php
Содержимое	<?php $base_url = '../../'; require_once($base_url . 'config.inc.php'); ini_set('error_reporting', E_ALL); ini_set('display_errors', 'On'); require_once('JSON.php'); try { $db = new PDO($dsn, $mysql_user, $mysql_pass, $driver_options); } catch (PDOException $e) { echo 'Connection failed: ' . $e->getMessage(); } switch ( $_REQUEST['action'] ) { case 'add': case 'edit': $_POST['realty']['user_id'] = 16; $params = array( $_POST['realty']['user_id'], $_POST['realty']['title'], $_POST['realty']['person'], $_POST['realty']['phone'], $_POST['realty']['region'], $_POST['realty']['street'], $_POST['realty']['home'], $_POST['realty']['home_type_id'], $_POST['realty']['price'], $_POST['realty']['price_type'], $_POST['realty']['object_type'], $_POST['realty']['deal_type'], $_POST['realty']['business_type'], $_POST['realty']['com_type'], $_POST['realty']['room_count'], $_POST['realty']['floor'], $_POST['realty']['floor_all'], $_POST['realty']['square'], $_POST['realty']['square_all'], $_POST['realty']['description'], $_POST['realty']['status'], ); if ( !isset($_POST['realty']['id']) ) { $query = $db->prepare( 'INSERT INTO realty (data, user_id, title, person, phone, region_id, street, home, home_type_id, price, price_type, object_type_id, deal_type_id, business_type_id, com_type_id, room_count, floor, floor_all, square, square_all, description, status) VALUES (CURDATE(), ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)'); $query->execute($params); $_POST['realty']['id'] = $db->lastInsertId(); } else { $params[] = $_POST['realty']['id']; $query = $db->prepare( 'UPDATE realty set user_id = ?, title = ?, person = ?, phone = ?, region_id = ?, street = ?, home = ?, home_type_id = ?, price = ?, price_type = ?, object_type_id = ?, deal_type_id = ?, business_type_id = ?, com_type_id = ?, room_count = ?, floor = ?, floor_all = ?, square = ?, square_all = ?, description = ?, status = ? where id = ?'); $query->execute($params); } if ( isset($_POST['save']) ) { header('location: realty.php?action=edit&id=' . $_POST['realty']['id'] ); } elseif ( isset($_POST['save_add']) ) { header('location: realty.php?action=add' ); } else { header('location: realty.php?action=edit&id=' . $_POST['realty']['id'] ); } break; case 'delete': $_GET['id'] = (int) $_GET['id']; $query = $db->prepare("delete from realty where id = ? limit 1"); $query->execute(array($_GET['id'])); header('location: realty.php' ); break; case 'search': $_GET['term'] = iconv("UTF-8", "WINDOWS-1251", $_GET['term']); $_GET['term'] = preg_replace("/[ ]+/", " ", trim($_GET['term'])); $query = $db->prepare("select name_street id, name_street label, name_street value from map_street where name_street like ? limit 10"); $query->execute(array('%' . $_GET['term'] . '%')); $result = $query->fetchAll( PDO::FETCH_ASSOC ); echo json_encode_cyr($result); break; case 'load_link': $_GET['parent_id'] = (int) $_GET['parent_id']; $query = $db->prepare("select child_id from `directory_link` where parent_id = ?"); $query->execute( array( $_GET['parent_id'] ) ); $result = $query->fetchAll( PDO::FETCH_ASSOC ); echo json_encode_cyr($result); break; case 'save_link': $_POST['parent_id'] = (int) $_POST['parent_id']; $query = $db->query("delete from `directory_link` where parent_id = ?"); $query->execute( array( $_POST['parent_id'] ) ); foreach ( $_POST['child_ids'] as $child_id ) { $child_id = (int) $child_id; $query = $db->prepare("insert into `directory_link` values ( ?, ? )"); $query->execute( array( $_POST['parent_id'], $child_id ) ); } break; case 'search-user': $_GET['term'] = iconv("UTF-8", "WINDOWS-1251", $_GET['term']); $_GET['term'] = preg_replace("/[ ]+/", " ", trim($_GET['term'])); $query = $db->prepare("select id, name label, name value from user where name like ? order by IF(name LIKE ?,1,2) limit 10"); $query->execute(array('%' . $_GET['term'] . '%', $_GET['term'] . '%')); $result = $query->fetchAll( PDO::FETCH_ASSOC ); echo json_encode_cyr($result); break; case 'delete_superuser': $_GET['id'] = (int) $_GET['id']; $query = $db->prepare("select * from realty_superuser where id = ?"); $query->execute(array($_GET['id'])); $old_result = $query->fetchAll( PDO::FETCH_ASSOC ); if ($old_result[0]['logo']!='' && file_exists($base_url.$old_result[0]['logo'])) unlink($base_url.$old_result[0]['logo']); $query = $db->query("delete from realty_superuser where id = '{$_GET['id']}' limit 1"); $query->execute( ); header('location: user.php'); break; case 'add_superuser': $_POST['user_id'] = (int) $_POST['user_id']; if (is_uploaded_file($_FILES['logo']['tmp_name'])) { list($width, $height, $type, $attr) = getimagesize($_FILES['logo']['tmp_name']); if ( $type == IMAGETYPE_GIF \|\| $type == IMAGETYPE_JPEG \|\| $type == IMAGETYPE_PNG ) { $path_parts = pathinfo($_FILES['logo']['name']); $logo_name = uniqid().'.'.$path_parts['extension']; move_uploaded_file($_FILES['logo']['tmp_name'], $base_url.'user_foto/realty/logo/'.$logo_name); $logo_name = 'user_foto/realty/logo/'.$logo_name; } } $query = $db->prepare( 'INSERT INTO realty_superuser (user_id, logo, note) VALUES (?, ?, ?)'); $query->execute(array( $_POST['user_id'], $logo_name, $_POST['note'] )); header('location: user.php'); break; case 'edit_superuser': $_POST['user_id'] = (int) $_POST['user_id']; $_POST['id'] = (int) $_POST['id']; $query = $db->prepare("select * from realty_superuser where id = ?"); $query->execute(array($_POST['id'])); $old_result = $query->fetchAll( PDO::FETCH_ASSOC ); $logo_name = $old_result[0]['logo']; if (isset($_POST['del_foto']) && $_POST['del_foto'] == 1) { if ($old_result[0]['logo']!='' && file_exists($base_url.$old_result[0]['logo'])) { unlink($base_url.$old_result[0]['logo']); $logo_name = ''; } } if (is_uploaded_file($_FILES['logo']['tmp_name'])) { list($width, $height, $type, $attr) = getimagesize($_FILES['logo']['tmp_name']); if ( $type == IMAGETYPE_GIF \|\| $type == IMAGETYPE_JPEG \|\| $type == IMAGETYPE_PNG ) { if ($old_result[0]['logo']!='' && file_exists($base_url.$old_result[0]['logo'])) unlink($base_url.$old_result[0]['logo']); $path_parts = pathinfo($_FILES['logo']['name']); $logo_name = uniqid().'.'.$path_parts['extension']; move_uploaded_file($_FILES['logo']['tmp_name'], $base_url.'user_foto/realty/logo/'.$logo_name); $logo_name = 'user_foto/realty/logo/'.$logo_name; } } $query = $db->prepare( 'update realty_superuser set user_id = ?, logo = ?, note = ? where id= ? '); $query->execute(array( $_POST['user_id'], $logo_name, $_POST['note'], $_POST['id'] )); header('location: user.php'); break; } ?>

/admin/realty/

Имя	Дата	Размер
..	2026-10-02
temp	2013-08-19
action.php	2011-11-22	8 кб.
business.php	2011-03-22	8 кб.
city.php	2011-03-22	7 кб.
config.realty.inc.php	2011-03-29	215 байт
deal_type.php	2011-03-22	8 кб.
handlers.js	2011-05-11	7 кб.
import.php	2013-03-27	10 кб.
maps.php	2012-07-12	850 байт
menu.inc.php	2011-09-09	558 байт
object_type.php	2011-03-22	8 кб.
old_import.php	2013-01-14	9 кб.
realty.php	2013-12-23	20 кб.
realty_home_type.php	2011-03-29	8 кб.
realty_link.php	2011-06-21	2 кб.
realty_type.php	2011-03-22	8 кб.
save_link.php	2011-03-25	239 байт
upload.php	2011-05-10	11 байт
user.php	2011-11-18	4 кб.

/admin/realty