File Manager - BorneoXploit

Editing: per_minimi.php

<?php
###___###___###___###___###___###___###___###___###___###___###___###___###
###          SmaDIB: Smart Database Interface Builder 1.0.b1            ###
###          by Smartmedia 2000 http://www.smartmedia2000.it/           ###
###               info email: smadib@smartmedia2000.it                  ###
###___###___###___###___###___###___###___###___###___###___###___###___###

require_once ("../funct.php");
require_once ("sess.php");
require_once ("conn.php");
require_once ("class.php");
require_once ($dominio."/param_b.php");
$aa = $_GET['aa'] ? $_GET['aa'] : date ("Y");
$ajCal = "y";

$ptitolo = "Periodi di soggiorno minimi ".$tipoAr[$_REQUEST[tp]];
$table = "per_minimi";
require_once ("testacoda.php");
$urlParam = "?aa=".$aa."&tp=".$tp;
$ptitolo.= " per anno ".$aa;
$rigaA.= "<table border=\"1\" cellpadding=\"5\" cellspacing=\"0\" align=\"center\"><tr>
	<td><a href=\"".$_SERVER['PHP_SELF']."?tp=".$tp."&aa=".date ("Y")."\">".date ("Y")."</a></td>
	<td><a href=\"".$_SERVER['PHP_SELF']."?tp=".$tp."&aa=".(date ("Y")+1)."\">".(date ("Y")+1)."</a></td>
</tr></table>\n";
$noEmpty = array ('data_in', 'data_fi', 'notti');
$query = new doQuery();

if ($az=="canc") {
	$query->delete ();
	header("Location: ".$_SERVER['PHP_SELF']);
}

if ($op == "ds") {
	$query->insert ($_POST, $noEmpty);
} else if ($op == "up") {
	$query->update ($_POST, $noEmpty);
}

if ($az=="ed") {
	$row = $query->selectById (0);
	$id = $row->id;
	$valop = "up";
}

$elenco.= "<tr bgcolor=\"#FFFFFF\"><td valign=\"bottom\" align=\"center\" rowspan=\"3\">funzioni</td>
<td><b>Data inizio</b></td>
<td><b>Data fine</b></td>
<td><b>Notti min.</b></td>
</tr>
<tr bgcolor=\"#EEEEEE\">
<td><input name=\"data_in\" type=\"text\" id=\"data_in\" size=\"12\" maxlenght=\"12\" value=\"".date2data ($row->data_in)."\" /></td>
<td><input name=\"data_fi\" type=\"text\" id=\"data_fi\" size=\"12\" maxlenght=\"12\" value=\"".date2data ($row->data_fi)."\" /></td>
<td><input name=\"notti\" type=\"text\" size=\"3\" maxlenght=\"3\" value=\"".$row->notti."\" /></td>
</tr><tr bgcolor=\"#FFFFFF\">
<td colspan=\"5\" align=\"center\">
<input type=\"submit\" name=\"invio\" value=\"".$intesta."\" />
<input type=\"hidden\" name=\"tp\" value=\"".$tp."\" />
<input type=\"hidden\" name=\"tipo\" value=\"".$tp."\" />
<input type=\"hidden\" name=\"op\" value=\"".$valop."\" />
<input type=\"hidden\" name=\"id\" value=\"".$row->id."\" />
</td></tr>
<tr><td colspan=\"5\" bgcolor=\"#000000\" height=\"2\"></td></tr>\n";

$sql = "SELECT * FROM `".$table."` 
WHERE `id_utente` = ".ID_UTENTE." AND `tipo` = ".$tp." AND `data_in` LIKE '".$aa."-%'
ORDER BY 'data_in' DESC";
$rows = $query->freeQuery ($sql, 0);
foreach ($rows as $i=>$row) {
	$bgcolor = rowCol ($i);

$elenco.= "	<tr bgcolor=\"#$bgcolor\"><td nowrap rowspan=\"1\">\n";
	if ($az!="ed")
		$elenco.= "<a href=\"".$_SERVER['PHP_SELF']."?id=$row->id&az=ed&pg=$pg\" title=\"modifica riga\"><img src=\"images/edit.gif\" border=\"0\" hspace=\"3\" alt=\"modifica riga\" align=\"absmiddle\" /></a>
		<a href=\"#\" onClick=\"javascript:confDel($row->id)\" title=\"cancella riga\"><img src=\"images/delete.gif\" border=\"0\" alt=\"cancella riga\" align=\"absmiddle\" /></a>";
	$elenco.= "&nbsp;</td>";
	$elenco.= "<td>".date2data ($row->data_in)."</td>";
	$elenco.= "<td>".date2data ($row->data_fi)."</td>";
	$elenco.= "<td>".$row->notti."</td></tr>\n";

}
$elenco.= "	<tr><td colspan=\"5\" bgcolor=\"#000000\" height=\"1\"></td></tr>\n";

echo $testa;
?>
<script type="text/javascript" language="javascript">

</script>
<div align="center">
<form name="form1" method="post" action="<?php echo $_SERVER['PHP_SELF'].$urlParam; ?>">
<h2><?php echo $ptitolo; ?></h2>
<?php echo $rigaA; ?>
<table align=\"center\">
<?php echo $elenco; ?>
</table>
</form>
<?php echo $coda; ?>

Cancel