Tryag File Manager

/home/nayongnua/domains/nayongnua.go.th/public_html/news/edit_detail.php

<?php
if (isset( $_FILES ))  {
$HTTP_POST_FILES = $_FILES; 
}
session_start();
if($_SESSION[user]==""){
session_destroy();
$message = "กรุณา Login ก่อน.";
$url = "../admin/index.php";
include("../admin/alert.php");
exit;
 }
require_once('../admin/Connections/conndb.php');

if(isset($_GET[id])){
	$id=$_GET[id];
}
else{
	$id=$_POST[id];
}
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_POST["MM_update"])) && ($_POST["MM_update"] == "updatenews")) {
	 foreach($_POST as $key => $value){
			$$key=$value;
	}
$dPath = "doc_download/";	
$cPath = "photo/";	
$d_date=$years."-".$month."-".$dated;

if(trim($_FILES["ufile"]["tmp_name"]) != "")
	{
		
	/****************เริ่มภาพใหญ่*********************/
			if($HTTP_POST_FILES["ufile"]["type"]=="image/gif"){ $ftype="gif"; }
			if($HTTP_POST_FILES["ufile"]["type"]=="image/pjpeg" || $HTTP_POST_FILES["ufile"]["type"]=="image/jpeg" ){ $ftype="jpg"; }		
			
			$images = $_FILES["ufile"]["tmp_name"];

$sur = strrchr($_FILES['ufile']['name'], "."); //ตัดนามสกุลไฟล์เก็บไว
			$pic = "std".(Date("dmy_His").$sur);

$width=700; //*** Fix Width & Heigh (Autu caculate) ***//
            $size=GetimageSize($images);
            $height=round($width*$size[1]/$size[0]);

if($ftype=="jpg"){
				$images_orig = ImageCreateFromJPEG($images);
			}elseif($ftype=="gif"){
				$images_orig = ImageCreateFromGIF($images);}

$photoX = ImagesX($images_orig);
            $photoY = ImagesY($images_orig);
           $images_fin = ImageCreateTrueColor($width, $height);

ImageCopyResampled($images_fin, $images_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY);
			if($ftype=="jpg"){
				ImageJPEG($images_fin,$cPath.$pic);}
			elseif($ftype=="gif"){
				ImageGIF($images_fin,$cPath.$pic);}
            ImageDestroy($images_orig);
            ImageDestroy($images_fin);
			/*
 			if(move_uploaded_file($_FILES["file_d"]["tmp_name"], "photo/".$pic)){
			}
			*/
	} // if u_file
	else{
		$pic=$_POST['pic2'];
	}
		if($_FILES['file_d']['name']<>"")
			{
		$sur1 = strrchr($_FILES['file_d']['name'], "."); //ตัดนามสกุลไฟล์เก็บไว
		$filename = "a_".$i.(Date("dmy_His").$sur1);
		$path = $dPath.$filename;
		if(is_uploaded_file($_FILES['file_d']['tmp_name']))
		{
			if(move_uploaded_file($_FILES["file_d"]["tmp_name"], $path))
			{
				chmod(($path), 0777);

//$updateSQL = "UPDATE news_detail SET cat_id='$cat_id',name='$name',detail='$storytext',filename='$filename', d_date='$d_date'  WHERE id='$id'";
			
				//$Result1 = mysql_query($updateSQL, $conndb) or die(mysql_error());
				if($file_2<>""){
				$QFile=$file_2;
				$fileQFile="doc_download/$QFile";
			
				if(file_exists("$fileQFile")) unlink("$fileQFile");
				}  // if $file_2		
			} // if copy
		} // if is_uploaded_file
	} // if have file
    else{
		$filename=$_POST[file2];
	}
		$updateSQL = "UPDATE news_detail SET cat_id='$cat_id',name='$name',detail='$storytext',pic='$pic',filename='$filename', d_date='$d_date' WHERE id='$id' ";
		$Result1 = mysql_query($updateSQL, $conndb) or die(mysql_error());
		//echo '<br> update = '.$updateSQL;
		/*** start more file ***/
		 if($id!=""){
		   $del=$_POST[del];
		 	for($k=0;$k<=count($del);$k++){
				if($del[$k]!=""){
							$sqlp="select  path from news_detail_file where id_file=".$del[$k];
							$resp=mysql_query($sqlp,$conndb) or die(mysql_error());
							$datp=mysql_fetch_array($resp);
							if(file_exists("doc_download/".$datp[path])){
								unlink("doc_download/".$datp[path]);
							}
							$delete="delete from news_detail_file  where id_file=".$del[$k];
							//echo '<br> del = '.$delete;
							mysql_query($delete,$conndb) or die(mysql_error());
				}
			}
				for($i=0;$i<count($_FILES["files"]["name"]);$i++)
					{
						if($_FILES["files"]["name"][$i] != "")
						{
							$name=date("YmdHis")."_".$_FILES["files"]["name"][$i];
							if(move_uploaded_file($_FILES["files"]["tmp_name"][$i],"doc_download/".$name))
							{
									chmod(("doc_download/".$name), 0777);
								    echo "Copy/Upload Complete<br>";
								   $sql_file="INSERT INTO news_detail_file (id,path,created) VALUES ('".$id."','".$name."','".time()."')";
								   //echo '<br> sql_file = '.$sql_file;
								   mysql_query($sql_file,$conndb) or die(mysql_error());
							}
						}
						else{
							//echo '<br> Not upload new file ';
						}
					}
		}
	if($Result1<>"")
		{		
	?>
			<SCRIPT LANGUAGE="JavaScript">
				alert("แก้ไขข้อมูลเรียบร้อยแล้ว !!.");
				//	 history.back(); 
			</script>
	<?							
				echo "<meta http-equiv='refresh' content='0;URL=admin.php?cat_id=".$cat_id."'>";
		}

}

$colname_rsShownews = "-1";
if (isset($_GET['id'])) {
  $colname_rsShownews = (get_magic_quotes_gpc()) ? $_GET['id'] : addslashes($_GET['id']);
}
mysql_select_db($database_conndb, $conndb);
$query_rsShownews = sprintf("SELECT * FROM news_detail WHERE id = %s", $colname_rsShownews);
$rsShownews = mysql_query($query_rsShownews, $conndb) or die(mysql_error());
$row_rsShownews = mysql_fetch_assoc($rsShownews);
$totalRows_rsShownews = mysql_num_rows($rsShownews);

$query_rsNews = "SELECT * FROM news_category ORDER BY cat_id";
$rsNews = mysql_query($query_rsNews, $conndb) or die(mysql_error());
$row_rsNews = mysql_fetch_assoc($rsNews);		
$cat_id=$row_rsShownews["cat_id"];
?>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html>                             
<head>

<title>องค์การบริหารส่วนตำบลนาโยงเหนือ หมู่ที่ 4 ถนนนาโยง - ย่านตาขาว ตำบลนาโยงเหนือ อำเภอนาโยง จังหวัดตรัง 92170 : www.nayongnue.go.th</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
<link href="../styles.css" rel="stylesheet" type="text/css">

<script language="JavaScript" type="text/JavaScript">
<!--

<table width="99%" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td class="title2"><div align="center" class="head">
      <? 
					if ($cat_id!=""){
							$query_CatS = "SELECT * FROM news_category where cat_id =$cat_id";
							$CatS = mysql_query($query_CatS, $conndb) or die(mysql_error());
							$row_CatS = mysql_fetch_assoc($CatS);
							echo $row_CatS['cat_name']; 
					}else{
							echo "ข้อมูลข่าวสาร";
					}
				?>
    </div></td>
    </tr>
  <tr>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td class="styles1"><div align="right">
      <div align="right"><a href="../admin/main.php" class="styles2">หน้า Admin </a>| <a href="admin.php?cat_id=<? echo $cat_id; ?>" class="styles2">
        <? 		echo $row_CatS['cat_name']; ?>
      </a> | <a href="add_category.php" class="styles2">เพิ่มหมวดหมู่ </a> | <a href="add_detail.php?cat_id=<? echo $cat_id; ?>" class="styles2">เพิ่มข้อมูล</a> <a href="add_detail.php" class="styles2"></a> | แก้ไขข้อมูล | <a href="../admin/signout.php" class="styles2">ออกจากระบบ </a></div>
    </div></td>
    </tr>
  <tr>
    <td colspan="3" align="center" valign="top">&nbsp;</td>
  </tr>
  <tr>
    <td colspan="3" align="center" valign="top">
    <script type="text/javascript" src="../admin/fckeditor.js"></script>
	<script type="text/javascript">

window.onload = function()
{
	// Automatically calculates the editor base path based on the _samples directory.
	// This is usefull only for these samples. A real application should use something like this:
	// oFCKeditor.BasePath = '/fckeditor/' ;	// '/fckeditor/' is the default value.
	var sBasePath = document.location.href.substring(0,document.location.href.lastIndexOf('../admin/')) ;

</div></td>
              </tr>
            </table>
          </div></td>
    </tr>
        <tr>
      <td height="200" valign="top"><table width="980" border="0" cellspacing="0" cellpadding="0">
              
              <tr>
                <td height="100" valign="top" background="../images/foot.jpg"><div align="center" class="footer">
                  <p><img src="../images/foot1.png" width="980" height="675" border="0" usemap="#Map6">
                    <map name="Map3">
                      <area shape="rect" coords="561,157,826,175" href="http://main.pasworld.co.th/" target="_blank">
                    </map>
                  </p>
                  <p>&nbsp;</p>
                </div></td>
              </tr>                
  
          </table></td>
    </tr>
  </table>
      </div>