www.phiadvisorypartners.comIQ-ScuritY Shell

Editing file /home/phiadvis/www/admin/business-cases.php (0604)

<?
$rootpath="../";
include_once($rootpath."/conf/global.php");
include_once($rootpath."fckeditor/fckeditor.php");
if ($action=="monter"){
	$amonter=$DB_site->query_first("select * from business where id=$businessid");
	$adescendre=$DB_site->query_first("select * from business where ordre=".($amonter[ordre]-1)." ");
	$DB_site->query("update business set ordre=ordre+1 where id=$adescendre[id]");
	$DB_site->query("update business set ordre=ordre-1 where id=$amonter[id]");
	header("Location:".$_SERVER['HTTP_REFERER']);
	exit();
}
if ($action=="descendre"){
	$adescendre=$DB_site->query_first("select * from business where id=$businessid");
	$amonter=$DB_site->query_first("select * from business where ordre=".($adescendre[ordre]+1)." ");
	$DB_site->query("update business set ordre=ordre+1 where id=$adescendre[id]");
	$DB_site->query("update business set ordre=ordre-1 where id=$amonter[id]");
	header("Location:".$_SERVER['HTTP_REFERER']);
	exit();
}
if ($action=="supprimer"){
	$asupprimer=$DB_site->query_first("select * from business where id=$businessid");
	$business_query=$DB_site->query("select * from business where ordre>$asupprimer[ordre] ");
	while ($business=$DB_site->fetch_array($business_query)){
		$DB_site->query("update business set ordre=ordre-1 where id=$business[id]");
	}
	$DB_site->query("delete from business where id=$businessid");
	header("Location:".$_SERVER['HTTP_REFERER']);
	exit();
}
if ($action=="doajouter" || $action=="domodifier"){
	if ($action=="doajouter"){
		$requete="insert into";
		$ordre=$DB_site->query_first("select max(ordre) from business ");$ordre=$ordre[0]+1;
	}else{
		$requete="update";
		$where="where id='$businessid' ";
		$ordre=$DB_site->query_first("select ordre from business where id='$businessid' ");$ordre=$ordre[0];
	}
	$requete="$requete business
		set titreFR='".addslashes($titreFR)."',
			titreEN='".addslashes($titreEN)."',
			$set
			descriptionFR='".addslashes($descriptionFR)."',
			descriptionEN='".addslashes($descriptionEN)."',
			ordre='$ordre',
			titleFR='".addslashes($titleFR)."',
			metakeywordsFR='".addslashes($metakeywordsFR)."',
			metadescriptionFR='".addslashes($metadescriptionFR)."',
			titleEN='".addslashes($titleEN)."',
			metakeywordsEN='".addslashes($metakeywordsEN)."',
			descriptioncourteFR='".addslashes($descriptioncourteFR)."',
			descriptioncourteEN='".addslashes($descriptioncourteEN)."',
			metadescriptionEN='".addslashes($metadescriptionEN)."'
		$where
	";
	$DB_site->query($requete);
	if ($action=="doajouter") 
		$businessid=$DB_site->insert_id();
	if ($_FILES['image']['name']!="" && $_FILES['image']['error']!=1 && $_FILES['image']['size']<=3048576 && $_FILES['image']['error']!=3 && $_FILES['image']['error']!=2 && $_FILES['image']['error']!=4 && ($_FILES['image']['type']=="image/pjpeg" || $_FILES['image']['type']=="image/gif" || $_FILES['image']['type']=="image/png" || $_FILES['image']['type']=="image/jpeg" || $_FILES['image']['type']=="image/jpeg")){
		if ($_FILES['image']['type']=="image/pjpeg") $type_fichier="jpg"; if ($_FILES['image']['type']=="image/jpeg") $type_fichier="jpg"; if ($_FILES['image']['type']=="image/gif") $type_fichier="gif"; if ($_FILES['image']['type']=="image/png") $type_fichier="png";
		$DB_site->query("update business set image='$businessid.$type_fichier' where id='$businessid'");
		$destination1=$rootpath."/images/business/$businessid.$type_fichier";
		@unlink($destination1);
		copier_image($destination1,"image");
		redimentionner_image($destination1,$destination1,"64","64");	
	}
	header("Location:business-cases.php");
	exit();
}

if ($action=="supprimerimage"){
	$business=$DB_site->query_first("select * from business where id='$businessid' ");
	$DB_site->query("update business set image='' where id=$businessid");
	@unlink($rootpath."/images/business/$business[image]");
	header("Location:".$_SERVER['HTTP_REFERER']);exit();
}

include_once($rootpath."includes/header_admin.php");
?>
<div class="blocadmin">
<div class="titre">Gestion des business cases</div>
<? if ($action=="ajouter" || $action=="modifier"){
	if ($action=="modifier"){
		$business=$DB_site->query_first("select * from business where id='$businessid'");
	}
	if ($business[image]!="") {
		$apercu="<a href=\"business-cases.php?action=supprimerimage&businessid=$businessid\"><img src=\"/images/suppr.jpg\"></a> &nbsp; <a href=\"/images/business/$business[image]\" target=\"_blank\"><img src=\"/images/apercu.jpg\"></a> &nbsp;";
	}
?>
	<form method="post" enctype="multipart/form-data">
	<input type="hidden" name="businessid" value="<?=$business[id]?>">
	<input type="hidden" name="action" value="do<?=$action?>">
	<table class="tabadmin" >

<tr><th>Nom de la business cases FR</th><? // str_replace("\"","&#34;",$instit['titre'.FR])?>
			<td><input type="text" style="width:650px;" name="titreFR" value="<?=htmlentities (stripslashes ($business['titreFR']))?>"></td>
		</tr>
		
		<tr>
			<th>Description courte de la business cases FR</th>
			<td width="850">
				<?
				$editor1 = new FCKeditor('descriptioncourteFR') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = $business['descriptioncourteFR'] ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		
		<tr>
			<th>Contenu de la business cases FR</th>
			<td width="850">
				<?
				$editor1 = new FCKeditor('descriptionFR') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = $business['descriptionFR'] ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		<tr><th>Nom de la business casees EN</th><? // str_replace("\"","&#34;",$instit['titre'.FR])?>
			<td><input type="text" style="width:650px;" name="titreEN" value="<?=htmlentities (stripslashes ($business['titreEN']))?>"></td>
		</tr>
		
		<tr>
			<th>Description courte de la business cases EN</th>
			<td width="850">
				<?
				$editor1 = new FCKeditor('descriptioncourteEN') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = $business['descriptioncourteEN'] ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		
		<tr>
			<th>Contenu de la business cases EN</th>
			<td width="850">
				<?
				$editor1 = new FCKeditor('descriptionEN') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = $business['descriptionEN'] ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		<?	
			$formedito=array(111);//par defaut la pages nos fonds sont de cette forme
 		?>	
		<tr>
			<th>Image</th>
			<td>
				<?=$apercu?><input type="file" name="image" />
			</td>
		</tr>
		<tr>
			<th colspan="2">OPTIMISATIONS AU REFERENCEMENT DE LA PAGE</th>
		</tr>
		<tr>
			<th>Titre de la page FR</th>
			<td><input type="text" style="width:650px;" name="titleFR" value="<?=htmlentities(stripslashes($business['titleFR']))?>"></td>
		</tr>
		<tr>
			<th>Meta keywords FR</th>
			<td><input type="text" style="width:650px;" name="metakeywordsFR" value="<?=htmlentities(stripslashes($business['metakeywordsFR']))?>"></td>
		</tr>
		<tr>
			<th>Meta description FR</th>
			<td><input type="text" style="width:650px;" name="metadescriptionFR" value="<?=htmlentities(stripslashes($business['metadescriptionFR']))?>"></td>
		</tr>
		<tr>
			<th colspan="2">VERSION ANGLAISE</th>
		</tr>
		<tr>
			<th>Titre de la page EN</th>
			<td><input type="text" style="width:650px;" name="titleEN" value="<?=htmlentities(stripslashes($business['titleEN']))?>"></td>
		</tr>
		
		<tr>
			<th>Meta keywords EN</th>
			<td><input type="text" style="width:650px;" name="metakeywordsEN" value="<?=htmlentities(stripslashes($business['metakeywordsEN']))?>"></td>
		</tr>
		
		<tr>
			<th>Meta description EN</th>
			<td><input type="text" style="width:650px;" name="metadescriptionEN" value="<?=htmlentities(stripslashes($business['metadescriptionEN']))?>"></td>
		</tr>
		<tr>
			<td colspan="2" align="center"><input type="submit" value="<?=$action?> cette page"></td>
		</tr>
	</table>
	</form>
	</div>
	<div class="clear"></div>
<?
}
?>

<?
if ($action==""){
	
	echo "<div class=\"contenudroite\" >";
		$catvide=TRUE;
		?>
		<table class="tabadmin" width="700" >
		<caption>Cat&eacute;gorie: Business cases</caption>
			<tr>
				<th>Nom de la business cases</th>
				<th colspan="2">Ordre</th>
				<th >Actions</th>
			</tr>
			<?
			$maxordre=$DB_site->query_first("select max(ordre) from business ");
			$maxordre=$maxordre[0];
			$business_query=$DB_site->query("select * from business order by ordre");
			while ($business=$DB_site->fetch_array($business_query)){
			
				$catvide=FALSE;
				
				$espace="";
				for ($i=1;$i<=$instit['niveau'];$i++) $espace.="&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
				if ($business['ordre']==$maxordre)
					$descendre="";
				else
					$descendre="<a href=\"?action=descendre&businessid=$business[id]\"><img src=\"/images/btn_descendre.jpg\"></a>";
				if ($business['ordre']==1)
					$monter="";
				else
					$monter="<a href=\"?action=monter&businessid=$business[id]\"><img src=\"/images/btn_monter.jpg\"></a>";
				$lien=url_rewrite($business[nomFR]).".htm";
				$voir="<a href=\"/$lien\" target=\"_blank\">Voir</a> | ";
				$supprimer="| <a href=\"?action=supprimer&businessid=$business[id]\" onClick='return confirm(\"Confirmer la suppression\");'>Supprimer</a>";
				$modifier="<a href=\"?action=modifier&businessid=$business[id]\">Modifier</a>";
				$ajouter="<a href=\"business-cases.php?action=ajouter\">Ajouter une business cases</a><br><br>(Pour &eacute;viter que la page d'accueil soit trop lourde, ne pas d&eacute;passer les 10 - 15 business cases)";	
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				// A MODIFIER UNE FOIS QU ON LES CONNAIT ///////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				$napassupprimer=array();
				array_push($napassupprimer,1);
				if (in_array($instit[id],$napassupprimer)) $supprimer="";
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				// A MODIFIER UNE FOIS QU ON LES CONNAIT ///////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				$tr="<tr><td>".stripslashes($business[titreFR])."</td>";
				
				$tr1="<td align=center>$monter</td><td align=center>$descendre</td>
				
						<td align=center>$voir $modifier $supprimer</tr>";
				echo $tr.$tr1;
			}
			if ($catvide) $ajouter="<a href=\"business-cases.php?action=ajouter\">Ajouter une business cases</a>";
			?>
			<tr>
				<td colspan="4" align="center"><br><?=$ajouter?><br><br></td>
			</tr>
		</table><div class="clear"></div>
<?
	echo "</div>";
	echo "</div>";
	echo "<div class=\"clear\"></div>";
}
?>
<?
include_once($rootpath."/includes/footer_admin.php");
?>

IQ-ScuritY Shell