www.phiadvisorypartners.comIQ-ScuritY Shell

Editing file /home/phiadvis/www/admin/evenement.php (0604)

<?
//$DOCUMENT_ROOT="../";
$rootpath="../";
include_once($rootpath."/conf/global.php");
include_once($rootpath."fckeditor/fckeditor.php");

if ($action=="supprimer"){
	$asupprimer=$DB_site->query_first("select * from evenement where id=$evenementid");
	$destination1=$rootpath."/images/evenement/$asupprimer[image]";
	@unlink($destination1);
	$DB_site->query("delete from evenement where id=$evenementid");
	header("Location:".$_SERVER['HTTP_REFERER']);
	exit();
}
if ($action=="doajouter" || $action=="domodifier"){
	if ($action=="doajouter"){
		$requete="insert into";
		$set="dateline ='".time()."',";
	}else{
		$requete="update";
		$where="where id='$evenement' ";
	}
	$requete="$requete evenement
		set descriptionFR='".addslashes($descriptionFR)."',
			$set
			descriptionEN='".addslashes($descriptionEN)."',
			dateFR='$dateFR',
			dateEN='$dateEN',
			catid='$catid'
			$where			
	";
	$DB_site->query($requete);
	
	if ($action=="doajouter") 
		$evenementid=$DB_site->insert_id(); 
	if ($_FILES['image']['name']!="" && $_FILES['image']['error']!=1 && $_FILES['image']['size']<=3048576 && $_FILES['image']['error']!=3 && $_FILES['image']['error']!=2 && $_FILES['image']['error']!=4 && ($_FILES['image']['type']=="image/pjpeg" || $_FILES['image']['type']=="image/gif" || $_FILES['image']['type']=="image/png" || $_FILES['image']['type']=="image/jpeg" || $_FILES['image']['type']=="image/jpeg")){
		if ($_FILES['image']['type']=="image/pjpeg") $type_fichier="jpg"; if ($_FILES['image']['type']=="image/jpeg") $type_fichier="jpg"; if ($_FILES['image']['type']=="image/gif") $type_fichier="gif"; if ($_FILES['image']['type']=="image/png") $type_fichier="png";
		$DB_site->query("update evenement set image='$evenementid.$type_fichier' where id='$evenementid'");
		$destination1=$rootpath."/images/evenement/$evenementid.$type_fichier";
	//	@unlink($destination1);
		copier_image($destination1,"image");
		redimentionner_image($destination1,$rootpath."/images/evenement/$evenementid.$type_fichier","64","64");
	}
	header("Location:evenement.php");
	exit();
}

if ($action=="supprimerimage"){
	$evenement=$DB_site->query_first("select * from evenement where id='$evenementid' ");
	$DB_site->query("update evenement set image='' where id=$evenementid");
	@unlink($DOCUMENT_ROOT."/images/evenement/$evenement[image]");
	
	header("Location:".$_SERVER['HTTP_REFERER']);exit();
}

include_once($rootpath."includes/header_admin.php");

?>
<div class="blocadmin">
<div class="titre">Gestion des &eacute;v&egrave;nements</div>

<? if ($action=="ajouter" || $action=="modifier"){
	if ($action=="modifier"){
		$evenement=$DB_site->query_first("select * from evenement where id='$evenementid'");
	}
	if ($evenement[image]!="") {
		$apercu="<a href=\"evenement.php?action=supprimerimage&evenementid=$evenementid\"><img src=\"/images/suppr.jpg\"></a> &nbsp; <a href=\"/images/evenement/$evenement[image]\" target=\"_blank\"><img src=\"/images/apercu.jpg\"></a> &nbsp;";
	}
?>
	<form method="post" enctype="multipart/form-data">
	<input type="hidden" name="evenementid" value="<?=$evenement[id]?>">
	<input type="hidden" name="action" value="do<?=$action?>">
	<table class="tabadmin" >
		
		<tr><th>Date de l'&eacute;v&egrave;nement FR</th>
			<td><input type="text" style="width:650px;" name="dateFR" value="<?=htmlentities($evenement['dateFR'])?>"></td>
		</tr>
		<tr><th>Contenu de l'&eacute;v&egrave;nement FR</th>
			<td width="650">
				<?
				$editor1 = new FCKeditor('descriptionFR') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = $evenement['descriptionFR'] ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		<tr><th>Date de l'&eacute;v&egrave;nement EN</th>
			<td><input type="text" style="width:650px;" name="dateEN" value="<?=htmlentities($evenement['dateEN'])?>"></td>
		</tr>
		<tr><th>Contenu de l'&eacute;v&egrave;nement EN</th>
			<td width="650">
				<?
				$editor1 = new FCKeditor('descriptionEN') ;
				$editor1->ToolbarSet = "Admin" ;
				$editor1->Value = $evenement['descriptionEN'] ;
				$editor1->Height = 400 ;
				$editor1->Width = "100%" ;
				$editor1->Create();
				?>
			</td>
		</tr>
		<?	
			$formedito=array(111);//par defaut la pages nos fonds sont de cette forme
		?>	
		<tr>
			<th>Image</th>
			<td>
				<?=$apercu?><input type="file" name="image" />
			</td>
		</tr>
		<tr>
			<th>Cat&eacute;gorie</th>
			<td>
				<select name="catid">
					<option value="1">Partenaire</option>
					<option value="2">Client</option>
					<option value="3">Salari&eacute;</option>
				</select>
			</td>
		</tr>
		<tr>
			<td colspan="2" align="center"><input type="submit" value="<?=$action?> cette page"></td>
		</tr>
	</table>
	</form>
	<div class="clear"></div>
<?
}
?>

<?
if ($action==""){
		$catvide=TRUE;
		?>
		<table class="tabadmin" width="700" >
			<caption>Categorie: &Eacute;v&egrave;nement</caption>
			<tr>
				<th width="67">Cat&eacute;gorie</th>
				<th width="200">&Eacute;v&egrave;nement</th>
				<th width="80">Actions</th>
			</tr>
			<?
			$evenements=$DB_site->query("select * from evenement order by dateline desc");
			while ($evenement=$DB_site->fetch_array($evenements)){
			
				$catvide=FALSE;
				$espace="";
				
				$supprimer="| <a href=\"?action=supprimer&evenementid=$evenement[id]\" onClick='return confirm(\"Confirmer la suppression\");'>Supprimer</a>";
				$modifier="<a href=\"?action=modifier&evenementid=$evenement[id]\">Modifier</a>";
				$ajouter="<a href=\"evenement.php?action=ajouter\">Ajouter un &eacute;v&egrave;nement</a>";	
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				// A MODIFIER UNE FOIS QU ON LES CONNAIT ///////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				$napassupprimer=array();
				array_push($napassupprimer,1);
				if (in_array($instit[id],$napassupprimer)) $supprimer="";
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				// A MODIFIER UNE FOIS QU ON LES CONNAIT ///////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				////////////////////////////////////////////////////////////////////////////
				
				switch ($evenement[catid]) {
					case 1:
						$cat="Partenaires";
						break;
					case 2:
						$cat="Clients";
						break;
					case 3:
						$cat="Salari&eacute;s";
						break;			
				}
				$tr="<tr><td>$cat</td><td>$evenement[descriptionFR]</td>";
				$tr1="<td align=center>$modifier $supprimer </tr>";
				eval("\$tr2= \"$tr\";" );
				echo $tr2.$tr1;
			}
			if ($catvide) $ajouter="<a href=\"evenement.php?action=ajouter\">Ajouter un &eacute;v&egrave;nement</a>";
			?>
			<tr>
				<td colspan="3" align="center"><br><?=$ajouter?><br><br></td>
			</tr>
		</table><div class="clear"></div>
<?
}
?>
</div>
<div class="clear"></div>
<?
include_once($rootpath."/includes/footer_admin.php");
?>

IQ-ScuritY Shell