www.phiadvisorypartners.comIQ-ScuritY Shell

Editing file /home/phiadvis/www/admin/actualite.php (0604)

<?
$rootpath="../";
include_once($rootpath."/conf/global.php");
include_once($rootpath."fckeditor/fckeditor.php");

if ($action=="supprimer"){
	$asupprimer=$DB_site->query_first("select * from actualite where id=$actualiteid");
	$destination1=$rootpath."/images/actualite/$asupprimer[image]";
	@unlink($destination1);
	$DB_site->query("delete from actualite where id=$actualiteid");
	header("Location:".$_SERVER['HTTP_REFERER']);
	exit();
}
if ($action=="doajouter" || $action=="domodifier"){
	if ($action=="doajouter"){
		$requete="insert into";
		$set="dateline ='".time()."',";
	}else{
		$requete="update";
		$where="where id='$actualiteid' ";
	}
	$requete="$requete actualite
		set descriptionFR='".addslashes($descriptionFR)."',
			descriptioncourteFR='".addslashes($descriptioncourteFR)."',
			$set
			descriptionEN='".addslashes($descriptionEN)."',
			descriptioncourteEN='".addslashes($descriptioncourteEN)."',
			dateFR='".addslashes($dateFR)."',
			dateEN='".addslashes($dateEN)."',
			
			titleFR='".addslashes($titleFR)."',
			metakeywordsFR='".addslashes($metakeywordsFR)."',
			metadescriptionFR='".addslashes($metadescriptionFR)."',
			titleEN='".addslashes($titleEN)."',
			metakeywordsEN='".addslashes($metakeywordsEN)."',
			metadescriptionEN='".addslashes($metadescriptionEN)."',
			
			catid='$catid'
			$where			
	";
	$DB_site->query($requete);
	if ($action=="doajouter") 
		$actualiteid=$DB_site->insert_id(); 
	if ($_FILES['image']['name']!="" && $_FILES['image']['error']!=1 && $_FILES['image']['size']<=3048576 && $_FILES['image']['error']!=3 && $_FILES['image']['error']!=2 && $_FILES['image']['error']!=4 && ($_FILES['image']['type']=="image/pjpeg" || $_FILES['image']['type']=="image/gif" || $_FILES['image']['type']=="image/png" || $_FILES['image']['type']=="image/jpeg" || $_FILES['image']['type']=="image/jpeg")){
		if ($_FILES['image']['type']=="image/pjpeg") $type_fichier="jpg"; if ($_FILES['image']['type']=="image/jpeg") $type_fichier="jpg"; if ($_FILES['image']['type']=="image/gif") $type_fichier="gif"; if ($_FILES['image']['type']=="image/png") $type_fichier="png";
		$DB_site->query("update actualite set image='$actualiteid.$type_fichier' where id='$actualiteid'");
		$destination1=$rootpath."/images/actualite/$actualiteid.$type_fichier";
	//	@unlink($destination1);
		copier_image($destination1,"image");
		redimentionner_image($destination1,$rootpath."/images/actualite/$actualiteid.$type_fichier","64","64");
	}
	header("Location:actualite.php");
	exit();
}

if ($action=="supprimerimage"){
	$actualite=$DB_site->query_first("select * from actualite where id='$actualiteid' ");
	$DB_site->query("update actualite set image='' where id=$actualiteid");
	@unlink($rootpath."/images/actualite/$actualite[image]");
	
	header("Location:".$_SERVER['HTTP_REFERER']);exit();
}

include_once($rootpath."includes/header_admin.php");

?>
<div class="blocadmin">
<div class="titre">Gestion des actualit&eacute;s</div>

<? if ($action=="ajouter" || $action=="modifier"){
	if ($action=="modifier"){
		$actualite=$DB_site->query_first("select * from actualite where id='$actualiteid'");
	}
	if ($actualite[image]!="") {
		$apercu="<a href=\"actualite.php?action=supprimerimage&actualiteid=$actualiteid\"><img src=\"/images/suppr.jpg\"></a> &nbsp; <a href=\"/images/actualite/$actualite[image]\" target=\"_blank\"><img src=\"/images/apercu.jpg\"></a> &nbsp;";
	}
	
?>
	<form method="post" enctype="multipart/form-data">
	<input type="hidden" name="actualiteid" value="<?=$actualite[id]?>">
	<input type="hidden" name="action" value="do<?=$action?>">
	<table class="tabadmin" >
		
		<tr><th>Description courte de l'actualit&eacute; FR (environ 150 caract&egrave;res, ne concerne que les actualit&eacute;s de la page d'accueil</th>
			<td width="650">
				<?
				$editor1 = new FCKeditor('descriptioncourteFR') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = stripslashes($actualite['descriptioncourteFR']) ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		
		<tr><th>Contenu de l'actualit&eacute; FR</th>
			<td width="650">
				<?
				$editor1 = new FCKeditor('descriptionFR') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = stripslashes($actualite['descriptionFR']) ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		
		<tr><th>Date de l'actualit&eacute; FR</th>
			<td><input type="text" style="width:650px;" name="dateFR" value="<?=htmlentities(stripslashes($actualite['dateFR']))?>"></td>
		</tr>
		
		<tr><th>Description courte de l'actualit&eacute; EN</th>
			<td width="650">
				<?
				$editor1 = new FCKeditor('descriptioncourteEN') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = stripslashes($actualite['descriptioncourteEN']) ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		
		
		<tr><th>Contenu de l'actualit&eacute; EN</th>
			<td width="650">
				<?
				$editor1 = new FCKeditor('descriptionEN') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = stripslashes($actualite['descriptionEN'] );
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		
		<tr><th>Date de l'actualit&eacute; EN</th>
			<td><input type="text" style="width:650px;" name="dateEN" value="<?=htmlentities(stripslashes($actualite['dateEN']))?>"></td>
		</tr>
		<?	
			$formedito=array(111);//par defaut la pages nos fonds sont de cette forme
		?>	
		<tr>
			<th>Image</th>
			<td>
				<?=$apercu?><input type="file" name="image" />
			</td>
		</tr>
		<tr>
			<th>Cat&eacute;gorie</th>
			<td>
				<select name="catid">
					<option value="0">Page d'accueil</option>
					<option value="1">Partenaire</option>
					<option value="2">Client</option>
					<option value="3">Salari&eacute;</option>
				</select>
			</td>
		</tr>
		<tr>
			<th colspan="2">OPTIMISATIONS AU REFERENCEMENT DE LA PAGE</th>
		</tr>
		<tr>
			<th>Titre de la page FR</th>
			<td><input type="text" style="width:650px;" name="titleFR" value="<?=htmlentities(stripslashes($actualite['titleFR']))?>"></td>
		</tr>
		<tr>
			<th>Meta keywords FR</th>
			<td><input type="text" style="width:650px;" name="metakeywordsFR" value="<?=htmlentities(stripslashes($actualite['metakeywordsFR']))?>"></td>
		</tr>
		<tr>
			<th>Meta description FR</th>
			<td><input type="text" style="width:650px;" name="metadescriptionFR" value="<?=htmlentities(stripslashes($actualite['metadescriptionFR']))?>"></td>
		</tr>
		<tr>
			<th colspan="2">VERSION ANGLAISE</th>
		</tr>
		<tr>
			<th>Titre de la page EN</th>
			<td><input type="text" style="width:650px;" name="titleEN" value="<?=htmlentities(stripslashes($actualite['titleEN']))?>"></td>
		</tr>
		
		<tr>
			<th>Meta keywords EN</th>
			<td><input type="text" style="width:650px;" name="metakeywordsEN" value="<?=htmlentities(stripslashes($actualite['metakeywordsEN']))?>"></td>
		</tr>
		
		<tr>
			<th>Meta description EN</th>
			<td><input type="text" style="width:650px;" name="metadescriptionEN" value="<?=htmlentities(stripslashes($actualite['metadescriptionEN']))?>"></td>
		</tr>		
		<tr>
			<td colspan="2" align="center"><input type="submit" value="<?=$action?> cette page"></td>
		</tr>
	</table>
	</form>
	<div class="clear"></div>
<?
}
?>

<?
if ($action==""){
		$catvide=TRUE;
		?>
		<table class="tabadmin" width="700" >
			<caption>Categorie: Actualit&eacute;s</caption>
			<tr>
				<th width="200">Actualit&eacute;</th>
				<th width="60">Actions</th>
			</tr>
			<?
			$actualites=$DB_site->query("select * from actualite order by dateline desc");
			while ($actualite=$DB_site->fetch_array($actualites)){
			
				$catvide=FALSE;
				$espace="";
				
				$voir="<a href=\"/actualite-".$actualite[id].".php\" target=\"_blank\">Voir</a> | ";				
				$supprimer="| <a href=\"?action=supprimer&actualiteid=$actualite[id]\" onClick='return confirm(\"Confirmer la suppression\");'>Supprimer</a>";
				$modifier="<a href=\"?action=modifier&actualiteid=$actualite[id]\">Modifier</a>";
				$ajouter="<a href=\"actualite.php?action=ajouter\">Ajouter une actualit&eacute;</a>";	
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				// A MODIFIER UNE FOIS QU ON LES CONNAIT ///////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				$napassupprimer=array();
				array_push($napassupprimer,1);
				if (in_array($instit[id],$napassupprimer)) $supprimer="";
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				// A MODIFIER UNE FOIS QU ON LES CONNAIT ///////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				
				$tr="<tr><td>".stripslashes($actualite[descriptioncourteFR])."</td>";
				$tr1="<td align=center>$voir $modifier $supprimer </td> </tr>";
				//eval("\$tr2= \"$tr\";" );
				//echo $tr2.$tr1;
				echo $tr.$tr1;
			}
			if ($catvide) $ajouter="<a href=\"actualite.php?action=ajouter\">Ajouter une actualit&eacute;</a>";
			?>
			<tr>
				<td colspan="2" align="center"><br><?=$ajouter?><br><br></td>
			</tr>
		</table><div class="clear"></div>
		
<?
	
}
?>
</div>
<div class="clear"></div>
<?
include_once($rootpath."/includes/footer_admin.php");
?>

IQ-ScuritY Shell