File Manager - BorneoXploit

Editing: condizioni_ed.php

<?php
#______________________________________________________________________#
###     made with SmaDIB: Smart Database Interface Builder 0.4.0     ###
###         by Smartmedia 2000 http://www.smartmedia2000.it/         ###
###               info email: smadib@smartmedia2000.it               ###
###___###___###___###___###____###____###____###___###___###___###___###

require_once ("../funct.php");
require_once ("sess.php");
require_once ("conn.php");
$ptitolo = "Condizioni di prenotazione";
$table = "condizioni";
$html = "y";
require_once ("../lan_it.php");
require_once ("testacoda.php");
$query = new doQuery();

$_SESSION['tipo'] = 1;
$tipo = $_SESSION['tipo'];
$novuoto = array ();
$lan = $_REQUEST['lan'] ? $_REQUEST['lan'] : "it";
$arTipo = $TIPO_LIST_B;
$id_tipo = $_REQUEST['id_tipo'] ? $_REQUEST['id_tipo'] : 1; # tipo di listini
$tiposel = array();
$tiposel[$id_tipo] = "selected";

foreach ($CONDIZ_B AS $n=>$co)
	$condList.= "<option value=\"$n\">$co</option>\n";

if ($az=="canc") {
	$query->update (array('arrivo_$lan` AS `', 'partenza_$lan` AS `', 'sogg_minimo_$lan` AS `', 'comprende_$lan` AS `', 'non_comprende_$lan` AS `', 'pagamento_$lan` AS `', 'cancellazione_$lan` AS `', 'cauzione_$lan` AS `', 'carte_$lan` AS `', 'note_$lan` AS `'), array());
	header("Location: ".$_SERVER['PHP_SELF']);
}

if ($az == "up") {
	foreach ($_POST['condiz'] as $num)
		$condiz.= $num.",";
	$_POST['condiz'] = trim ($condiz, ',');
	$query->update ($_POST, $novuoto);
}

$sql = "SELECT `condiz`, `condiz1_".$lan."` AS `condiz1`, `condiz2_".$lan."` AS `condiz2`, `condiz3_".$lan."` AS `condiz3`, `condiz4_".$lan."` AS `condiz4`, `condiz5_".$lan."` AS `condiz5`, `condiz6_".$lan."` AS `condiz6`, `condiz7_".$lan."` AS `condiz7`, `condiz8_".$lan."` AS `condiz8`, `condiz9_".$lan."` AS `condiz9`, `condiz10_".$lan."` AS `condiz10`, `condiz11_".$lan."` AS `condiz11`, `condiz12_".$lan."` AS `condiz12`, `condiz13_".$lan."` AS `condiz13`, `condiz14_".$lan."` AS `condiz14`, `condiz15_".$lan."` AS `condiz15`, `condiz16_".$lan."` AS `condiz16`, `condiz17_".$lan."` AS `condiz17`, `condiz18_".$lan."` AS `condiz18`, `condiz19_".$lan."` AS `condiz19`, `condiz20_".$lan."` AS `condiz20`, `id`
FROM `$table` WHERE `id_utente` = ".ID_UTENTE." AND `id_tipo` = $id_tipo LIMIT 1"; 
$row = $query->freeQuery ($sql, 1);
$arCond = explode (',', $row[0][0]);
for ($i=1; $i<=count($arCond); $i++) {
	$colriga = rowCol ($i);
	$testo.= "<tr bgcolor=\"$colriga\"><td><select name=\"condiz[$i]\"><option value=\"".$arCond[$i-1]."\">".$CONDIZ_B[$arCond[$i-1]]."</option>
	<option value=\"\"></option>$condList	
	</td></tr><tr bgcolor=\"$colriga\"><td><textarea name=\"condiz".$i."_".$lan."\" cols=\"90\" rows=\"4\">".$row[0][$i]."</textarea></td></tr>\n";
}

$testo.= "<tr bgcolor=\"#FFFFFF\"><td><select name=\"condiz[$i]\"><option value=\"\"></option>
$condList	
</td></tr><tr bgcolor=\"#FFFFFF\"><td><textarea name=\"condiz".$i."_".$lan."\" cols=\"90\" rows=\"4\"></textarea></td></tr>\n";

echo "$testa
<script LANGUAGE=\"JavaScript\">
function changeTipo() {
	document.forms['formtipo'].submit();
}
</script>
<h2 align=\"center\">$ptitolo ".$nomiLng[$lan]."</h2>
<form name=\"formtipo\" method=\"post\" action=\"".$_SERVER['PHP_SELF']."\">
<select name=\"id_tipo\" onchange=\"javascript:changeTipo();\">\n";
foreach ($arTipo AS $t=>$tipo)
	echo "<option value=\"$t\" $tiposel[$t]>$tipo</option>\n";
echo "</select>
<input type=\"hidden\" name=\"id\" value=\"".$row[0]['id']."\" />
<input type=\"hidden\" name=\"lan\" value=\"".$lan."\" />
<input type=\"hidden\" name=\"az\" value=\"ed\" />
</form>
<form name=\"form1\" method=\"post\" action=\"".$_SERVER['PHP_SELF']."\">
<table align=\"center\" width=\"770\">
$linea2
$testo
$linea2
	<tr><td colspan=\"2\" bgcolor=\"white\" align=\"center\"><input type=\"submit\" name=\"invio\" value=\"Salva\" /></td></tr>
</table>
<input type=\"hidden\" name=\"id\" value=\"".$row[0]['id']."\" />
<input type=\"hidden\" name=\"id_tipo\" value=\"".$id_tipo."\" />
<input type=\"hidden\" name=\"lan\" value=\"".$lan."\" />
<input type=\"hidden\" name=\"az\" value=\"up\" />
</form><br />
$coda";
?>

Cancel