>
>
>
>
>
>
firma_file.php
<?php require_once (__DIR__ . '/../autoloader.php'); /** * Просмотр списка отзывов организации. */ $title = 'Файлы компании'; use app\organizations\Organizations; use app\organizations\OrganizationFiles; // Проверяем, принадлежит ли нам организация if (App::$request->get('id_firm') == null || Organizations::isMyOrganization(App::$request->get('id_firm')) == false) { header('Location: /'); exit; } // обработка добавления файла if (App::$request->isPost() == true) { if (isset($_FILES['file']['tmp_name'])) { $path_parts = pathinfo($_FILES['file']['name']); $filename = md5(microtime()).'.'.$path_parts['extension']; move_uploaded_file($_FILES['file']['tmp_name'], $_SERVER['DOCUMENT_ROOT'] . "/user_foto/company/files/{$filename}"); $file = "user_foto/company/files/{$filename}"; App::$command ->createCommand(' INSERT INTO `firma_file` (firma_id, file, name) VALUES(:firma_id, :file, :name) ') ->bindValue(':firma_id', App::$request->get('id_firm')) ->bindValue(':file', $file) ->bindValue(':name', App::$request->post('name')) ->query(); header('Location: /firma/firma_file.php?id_firm=' . App::$request->get('id_firm')); exit; } } if (App::$request->get('action') == 'delete') { $fileId = App::$request->get('file_id'); $fileFirmaId = App::$command ->createCommand(' SELECT * FROM firma_file WHERE id = :id ') ->bindValue(':id', $fileId) ->queryOne('firma_id', null); if ($fileFirmaId != App::$request->get('id_firm')) { exit; } App::$command ->createCommand(' DELETE FROM firma_file WHERE id = :file_id ') ->bindValue(':file_id', $fileId) ->query(); header('Location: /firma/firma_file.php?id_firm=' . App::$request->get('id_firm')); exit; } require_once (__DIR__ . '/../inc/top_new.inc'); $organization = Organizations::getMyOrganizations(null, App::$request->get('id_firm'))[0]; $files = OrganizationFiles::getFiles(App::$request->get('id_firm')); if (App::$request->get('action') == null) { App::$view ->render('user/organizations/files/index', [ 'organization' => $organization, 'files' => $files ]); } if (App::$request->get('action') == 'add') { App::$view ->render('user/organizations/files/add', [ 'organization' => $organization ]); } require_once (__DIR__ . '/../inc/bottom_new.inc'); /* $base_url="../"; $menu_page="people"; require_once $base_url."config_lang.php"; require_once($base_url.'func.php'); $l=db_connect(); require($base_url."inc/top.inc"); ?> <?php $_GET['id_firm'] = (int) $_GET['id_firm']; $firma = sqlval("select t1.firma_id, t1.user_id, t2.* from firma_superuser t1, firma t2 where t1.user_id={$id_user_sess} and t1.firma_id = t2.id and t1.firma_id='{$_GET['id_firm']}'"); $stat=sqlval("select count(*) from stat_brows where id_firm='{$firma['firma_id']}'"); ?> <?php require_once($base_url."template/user_my_firm_top.php"); ?> <?php if ( $firma['firma_id'] != '' ) : ?> <?php require_once('firma_profile.inc.php'); ?> <h3>Файлы</h3><br /> <?php if ( $_GET['action'] == '' ) : ?> <script type="text/javascript"> <!-- $(document).ready(function(){ $('.b-delete').click(function(){ if (!confirm('Удалить файл?')) return false; return true; }); $('.b-add').click(function() { location.href="?action=add&id_firm="+$('#firma_id').val(); }); }); --> </script> <?php if ( $firma['id_tarif'] == 8 || $firma['id_tarif'] == 9) : ?> <input type="button" class="b-add" value="Добавить" /> <input type="hidden" id="firma_id" value="<?php echo $firma['id']; ?>" /> <?php else : ?> На вашем тарифе не предусмотрено файлов <?php endif; ?> <?php $result = fetchAll("select * from firma_file where firma_id='{$firma['id']}' order by id desc"); ?> <?php if (count($result) > 0 ) : ?> <table width="100%" cellspacing="1" cellpadding="5" border="0" bgcolor="#cdcbc9" align="center" id="tbmain"> <tr bgcolor="#ffffff"> <td>Файл</td> <td><b>Название</b></td> <td></td> <td></td> </tr> <?php foreach ( $result as $row ) : ?> <tr bgcolor="#ffffff"> <td><a href="/<?php echo $row['file']; ?>" target="_blank">Скачать</a></td> <td><b><?php echo $row['name']; ?></b></td> <td><a href="?action=edit&id_firm=<?php echo $firma['id']; ?>&id_file=<?php echo $row['id']; ?>">Редактировать</a></td> <td><a class="b-delete" href="action.php?action=delete_file&id_firm=<?php echo $firma['id']; ?>&id_file=<?php echo $row['id']; ?>">Удалить</a></td> </tr> <?php endforeach; ?> </table> <?php endif; ?> <?php elseif ( $_GET['action'] == 'add' ) : ?> <form method="POST" action="action.php" enctype="multipart/form-data"> <input type="hidden" name="action" value="add_file" /> <input type="hidden" name="id_firm" value="<?php echo $_GET['id_firm']; ?>" /> <table width="100%" cellspacing="1" cellpadding="5" border="0" bgcolor="#cdcbc9" align="center" id="tbmain"> <tr> <td bgcolor="#FFFFFF"> <b>Название</b> </td> <td bgcolor="#FFFFFF"> <input type="text" name="name" value="" /> </td> </tr> <tr> <td bgcolor="#FFFFFF"> <b>Файл</b> </td> <td bgcolor="#FFFFFF"> <input type="file" name="file" /> </td> </tr> <tr bgcolor="#ffffff"> <td colspan="2" align="center"> <input type="submit" value="Добавить" /> </td> </tr> </table> </form> <?php elseif ( $_GET['action'] == 'edit' ) : ?> <?php $_GET['id_file'] = (int) $_GET['id_file']; $row = sqlval("select * from firma_file where id='{$_GET['id_file']}' and firma_id='{$_GET['id_firm']}'"); ?> <form method="POST" action="action.php" enctype="multipart/form-data"> <input type="hidden" name="action" value="edit_file" /> <input type="hidden" name="id_firm" value="<?php echo $_GET['id_firm']; ?>" /> <input type="hidden" name="id_file" value="<?php echo $_GET['id_file']; ?>" /> <table width="100%" cellspacing="1" cellpadding="5" border="0" bgcolor="#cdcbc9" align="center" id="tbmain"> <tr> <td bgcolor="#FFFFFF"> <b>Название</b> </td> <td bgcolor="#FFFFFF"> <input type="text" name="name" value="<?php echo $row['name']; ?>" /> </td> </tr> <tr> <td bgcolor="#FFFFFF"> <b>Файл</b> </td> <td bgcolor="#FFFFFF"> <input type="file" name="file" /><br /> <a href="/<?php echo $row['file']; ?>" target="_blank">Скачать</a> </td> </tr> <tr bgcolor="#ffffff"> <td colspan="2" align="center"> <input type="submit" value="Изменить" /> </td> </tr> </table> </form> <?php endif; ?> <?php else : ?> У вас нет прав на изменение информации <?php endif; ?> <?php require_once "bottom_firma.inc.php"; ?>
/firma/
..
2026-10-02
ckeditor
2015-11-03
images
2015-04-04
inc
2020-04-06
js
2015-12-02
swf
2014-10-30
JSON.php
2010-05-13
1 .
action.php
2016-01-19
35 .
action_restoran.php
2013-02-05
1 .
application.js
2012-07-06
2 .
bottom_firma.inc
2011-10-28
446
bottom_firma.inc.php
2011-10-28
456
comments_act.php
2013-12-17
1 .
comments_action.php
2013-12-17
449
delete_news.php
2023-12-21
650
delete_news.php~
2017-03-20
579
firma_comment.php
2017-09-04
4 .
firma_comment_rss.php
2017-06-22
2 .
firma_contact.php
2017-03-09
21 .
firma_delete_product.php
2020-04-06
438
firma_edit_delivery.php
2020-04-06
480
firma_edit_news.php
2023-12-21
2 .
firma_edit_news.php~
2019-01-22
2 .
firma_edit_product.php
2020-04-06
1 .
firma_file.php
2017-04-04
7 .
firma_info.php
2017-03-24
1 .
firma_my.php
2017-03-06
497
firma_news.php
2020-04-17
945
firma_photo.php
2019-08-12
3 .
firma_product.php
2020-04-06
15 .
firma_profile.inc.php
2011-12-26
1 .
firma_slider.php
2019-08-13
3 .
firma_stat.inc.php
2013-08-30
518
firma_stat.php
2013-08-30
6 .
firma_statistic.php
2019-04-01
7 .
firma_statistic_back.php
2019-03-28
5 .
firma_video.php
2012-09-25
6 .
index.php
2021-01-14
22 .
restoran_comment.php
2015-09-29
9 .
restoran_my.php
2014-11-26
1 .
restoran_stat.php
2014-11-26
3 .
sprav.php
2017-03-09
627
style.css
2011-11-07
8 .
upload.php
2015-11-03
609
/firma
1
2
3
..
