File Manager - BorneoXploit

Editing: offerte_ed.php

<?php
#______________________________________________________________________#
###     made with SmaDIB: Smart Database Interface Builder 0.4.0     ###
###         by Smartmedia 2000 http://www.smartmedia2000.it/         ###
###               info email: smadib@smartmedia2000.it               ###
###___###___###___###___###____###____###____###___###___###___###___###

require_once ("../funct.php");
require_once ("sess.php");
require_once ("conn.php");
$ptitolo = "Offerte last minute";
$table = "offerte";
$html = "y";
$ajCal = "y";
require_once ("testacoda.php");
if ($az == "ed") $intesta="Salva e Continua";
$dateFlds = array ('data_in_pro', 'data_fi_pro');
$query = new doQuery();

$data_in_pro = data2date ($_REQUEST['data_in_pro']);
$data_fi_pro = data2date ($_REQUEST['data_fi_pro']);
$_SESSION['tipo'] = 2;
$tipo = $_SESSION['tipo'];
$novuoto = array('titolo_it', 'testo_it');

if ($az=="canc") {
	$query->delete ();
	header("Location: ".$_SERVER['PHP_SELF']);
}

if ($op == "ds")
	$query->insert ($_POST, $novuoto);
else if ($op == "up")
	$query->update ($_POST, $novuoto);

if ($az=="ed") {
	$row = $query->selectById (1);
	$id = $row['id'];
	$valop = "up";

} else $valop = "ds";

$elenco.= "<tr><td>
<b>Data inizio promozione</b> <input type=\"text\" size=\"10\" id=\"data_in_pro\" name=\"data_in_pro\" value=\"".date2data ($row['data_in_pro'])."\" /> - 
<b>Data fine promozione</b> <input type=\"text\" size=\"10\" id=\"data_fi_pro\" name=\"data_fi_pro\" value=\"".date2data ($row['data_fi_pro'])."\" /></td></tr>\n";
for ($i=0; $i<count($lingue); $i++) {
	$k = array_search ($lingue[$i], $sigLng);
	$elenco.= "<tr><td><b>Titolo ".$nomiLng[$lingue[$i]]."</b></td></tr>
	<tr><td><input name=\"titolo_".$lingue[$i]."\" type=\"text\" size=\"60\" maxlenght=\"255\" value=\"".$row[($k*2)+6]."\"></td></tr>
<tr><td><b>Testo ".$nomiLng[$lingue[$i]]."</b></td></tr>
	<tr><td><textarea name=\"testo_".$lingue[$i]."\" class=\"fullhtml\" rows=\"16\" cols=\"70\">".$row[($k*2)+7]."</textarea></td></tr>\n";
}
$elenco.= "<tr><td colspan=\"2\"><div align=\"center\">
<input type=\"hidden\" name=\"op\" value=\"$valop\">
<input type=\"hidden\" name=\"az\" value=\"$az\">
<input type=\"hidden\" name=\"id\" value=\"".$row['id']."\">
<input type=\"submit\" name=\"invio\" value=\"$intesta\">\n";
if ($az == "ed") $elenco.= "<input type=\"button\" value=\"Salva\" onclick=\"javascript:saveCont()\" />
$noMod\n";
$elenco.= "</div></td></tr></table> 
<table align=\"center\">\n";

$cc = 0;
$rows = $query->selectAll ($table, array('data_fi_pro'=>'DESC', 'id'=>'DESC'), 1);
foreach ($rows AS $i=>$row) {
	$cc++;
	$colriga = colriga ($cc);
	$red = $row['data_fi_pro'] >= date ('Y-m-d') ? $colriga : "FF0000";

$elenco.= "<tr bgcolor=\"#$colriga\"><td rowspan=\"2\" nowrap>\n";
//	if ($az != "ed")
		$elenco.= "<a href=\"".$_SERVER['PHP_SELF']."?id=".$row['id']."&az=ed\"><img src=\"images/edit.gif\" border=\"0\" hspace=\"5\" title=\"modifica riga\"></a><a href=\"#\" onClick=\"javascript:confDel(".$row['id'].")\"><img src=\"images/delete.gif\" border=\"0\" title=\"cancella riga\"></a>\n";
	$elenco.= "&nbsp;</td><td bgcolor=\"#$red\">da ".date2data ($row['data_in_pro'])." a ".date2data ($row['data_fi_pro'])." ".$row['titolo_it']."</td></tr>
	<tr bgcolor=\"#$colriga\"><td>".$row['testo_it']."</td></tr>\n";
}

echo $testa;
?>
<script type="text/javascript">
<!--
$(function() {
	$('#data_fi_pro').datepicker({
		changeMonth: true,
		changeYear: true
	});
});
$(function() {
	$('#data_in_pro').datepicker({
		changeMonth: true,
		changeYear: true
	});
});

function saveCont () {
	document.form1.az.value = "";
	document.form1.submit();
}
//-->
</script>
<h2><div align="center"><?php echo $ptitolo; ?></div></h2>
<form name="form1" method="post" action="<?php echo $_SERVER['PHP_SELF']; ?>">
<table align="center">
<?php echo $elenco; ?>
</table>
</form>
<?php echo $coda; ?>

Cancel