File Manager - BorneoXploit

Editing: clienti_ed.php

<?php
###___###___###___###___###___###___###___###___###___###___###___###___###
###          SmaDIB: Smart Database Interface Builder 1.0.b1            ###
###          by Smartmedia 2000 http://www.smartmedia2000.it/           ###
###               info email: smadib@smartmedia2000.it                  ###
###  released under GPLv2 license http://www.gnu.org/licenses/gpl.txt   ###
###___###___###___###___###___###___###___###___###___###___###___###___###

require_once ("funct.php"); # php functions file
require_once ("conn.php"); # connection file
$table = "clienti";
$ptitolo = "Clienti";
$html = ""; # htmlarea type
require_once ("testacoda.php"); # html snippets file
$perpg = 20; # amount of rows per page displayed
$pgb = 19; # upper ad lower limit for bottom page count
$noEmpty = array (); # insert here the field names you want to be compiled for query to go
$dateFlds = array (); # date fields to be converted in dd//mm/yyyy

$id = $_REQUEST['id'];
$denominazione = sanitize ($_REQUEST['denominazione']);
$indirizzo = sanitize ($_REQUEST['indirizzo']);
$codfisc = $_REQUEST['codfisc'];
$partiva = $_REQUEST['partiva'];

$valop = "ds";
if ($az == "ed") $intesta="Modifica"; else $intesta="Aggiungi";
$query = new doQuery ();

if ($az == "canc") {
	$query->delete ();
	header("Location: ".$_SERVER['PHP_SELF']."?pg=$pg");
}

$_POST['codfisc'] = strtoupper ($_POST['codfisc']);
if ($op == "ds") {
	$query->insert ($_POST, $noEmpty);
} else if ($op == "up") {
	$query->update ($_POST, $noEmpty);
}

if ($az == "ed") {
	$row = $query->selectById (0);
	$valop = "up";
}

$elenco.= "<tr bgcolor=\"#FFFFFF\"><td valign=\"bottom\" rowspan=\"3\"> funzioni</td>
<td><b>Denominazione</b> (@ per andare a capo)</td>
<td><b>Indirizzo</b> (- per andare a capo)</td>
<td><b>Codfisc</b></td>
<td><b>Partiva</b></td>
</tr>
<tr bgcolor=\"#EEEEEE\">
<td><input name=\"denominazione\" type=\"text\" size=\"30\" maxlenght=\"200\" value=\"$row->denominazione\" /></td>
<td><input name=\"indirizzo\" type=\"text\" size=\"30\" maxlenght=\"200\" value=\"$row->indirizzo\" /></td>
<td><input name=\"codfisc\" type=\"text\" size=\"12\" maxlenght=\"16\" value=\"$row->codfisc\" /></td>
<td><input name=\"partiva\" type=\"text\" size=\"8\" maxlenght=\"11\" value=\"$row->partiva\" /></td>

</tr><tr bgcolor=\"#FFFFFF\"><td colspan=\"5\" align=\"center\">
<input type=\"submit\" name=\"invio\" value=\"$intesta\" />
<input type=\"hidden\" name=\"op\" value=\"$valop\" />
<input type=\"hidden\" name=\"id\" value=\"$row->id\" />
<input type=\"hidden\" name=\"pg\" value=\"$pg\" />
</td></tr><tr><td colspan=\"5\" bgcolor=\"#000000\" height=\"4\"></td>";

$rows = $query->selectAll ($table, array('denominazione'=>'ASC'), 0);
#$sql = "SELECT * FROM `".$table."` WHERE 1 ORDER BY denominazione ASC";
#$rows = $query->freeQuery ($sql, 0);
foreach ($rows as $i=>$row) {;
	$bgcolor = rowCol ($i);

$elenco.= "	</tr>
	<tr bgcolor=\"#$bgcolor\" rowspan=\"1\"><td nowrap>
";
	if ($az!="ed")
		$elenco.= "<a href=\"".$_SERVER['PHP_SELF']."?id=$row->id&az=ed\"><img src=\"images/edit.gif\" border=\"0\" hspace=\"3\" alt=\"modifica riga\" align=\"absmiddle\" /></a>
		<a href=\"#\" onClick=\"javascript:confDel($row->id)\"><img src=\"images/delete.gif\" border=\"0\" alt=\"cancella riga\" align=\"absmiddle\" /></a></td>";
	else
		$elenco.= "&nbsp;";
	$elenco.= "<td>$row->denominazione</td>\n";
	$elenco.= "<td>$row->indirizzo</td>\n";
	$elenco.= "<td>$row->codfisc</td>\n";
	$elenco.= "<td>$row->partiva</td>\n";

}
$elenco.= "	</tr>
	<tr><td colspan=\"5\" bgcolor=\"#000000\" height=\"4\"></td></tr>
	<tr><td colspan=\"5\" align=\"center\">".
		pager ($pg)
	."</td></tr>";

echo "$testa
<script type=\"text/javascript\" language=\"JavaScript\">
function confDel(id) {
	if (confirm('Vuoi cancellare veramente questa riga? Premi OK per confermare.'))
		document.location='".$_SERVER['PHP_SELF']."?id='+ id +'&az=canc&pg=$pg';
}
</script>

<h2 align=\"center\">$ptitolo</h2>
<form name=\"form1\" method=\"post\" action=\"".$_SERVER['PHP_SELF']."\" >
<table align=\"center\">
$elenco
</table></form>
$coda";
?>

Cancel