| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/(Del)discoverylearning.com.hk/webadmin/ |
Upload File : |
<?php
/*error_reporting(E_ALL);
ini_set('display_errors', '1');*/
require("configure.php");
$CoursesCatId = $_POST["CoursesCatId"];
$CoursesDetailSort = $_POST["CoursesDetailSort"];
$CoursesDetailNameen = htmlspecialchars($_POST["CoursesDetailNameen"],ENT_QUOTES);
$CoursesDetailAgeen = htmlspecialchars($_POST["CoursesDetailAgeen"],ENT_QUOTES);
$CoursesDetailFeeen = htmlspecialchars($_POST["CoursesDetailFeeen"],ENT_QUOTES);
$CoursesDetailTimeen = htmlspecialchars($_POST["CoursesDetailTimeen"],ENT_QUOTES);
$CoursesDetailDescen = preg_replace("/'/","\'",$_POST["CoursesDetailDescen"]);
$CoursesDetailNametc = htmlspecialchars($_POST["CoursesDetailNametc"],ENT_QUOTES);
$CoursesDetailAgetc = htmlspecialchars($_POST["CoursesDetailAgetc"],ENT_QUOTES);
$CoursesDetailFeetc = htmlspecialchars($_POST["CoursesDetailFeetc"],ENT_QUOTES);
$CoursesDetailTimetc = htmlspecialchars($_POST["CoursesDetailTimetc"],ENT_QUOTES);
$CoursesDetailDesctc = preg_replace("/'/","\'",$_POST["CoursesDetailDesctc"]);
$CoursesDetailNamesc = htmlspecialchars($_POST["CoursesDetailNamesc"],ENT_QUOTES);
$CoursesDetailAgesc = htmlspecialchars($_POST["CoursesDetailAgesc"],ENT_QUOTES);
$CoursesDetailFeesc = htmlspecialchars($_POST["CoursesDetailFeesc"],ENT_QUOTES);
$CoursesDetailTimesc = htmlspecialchars($_POST["CoursesDetailTimesc"],ENT_QUOTES);
$CoursesDetailDescsc = preg_replace("/'/","\'",$_POST["CoursesDetailDescsc"]);
//print_r($_POST);
$sql = "select max(CoursesDetailId) as maxid ";
$sql .= "from CoursesDetail ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$CoursesDetailId = $row{maxid}+1;
// copy image
if ($_FILES['CoursesDetailScheduleen']['name'] <> '')
{
copy ($_FILES['CoursesDetailScheduleen']['tmp_name'], "coursesschedule/".$CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name'])
or die ("Could not copy");
$CoursesDetailScheduleen = $CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name'];
$CoursesDetailScheduleen = htmlspecialchars($CoursesDetailScheduleen,ENT_QUOTES);
}
else
{
$CoursesDetailScheduleen = "";
}
// End upload image code
// copy image
if ($_FILES['CoursesDetailScheduletc']['name'] <> '')
{
copy ($_FILES['CoursesDetailScheduletc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name'])
or die ("Could not copy");
$CoursesDetailScheduletc = $CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name'];
$CoursesDetailScheduletc = htmlspecialchars($CoursesDetailScheduletc,ENT_QUOTES);
}
else
{
$CoursesDetailScheduletc = "";
}
// End upload image code
// copy image
if ($_FILES['CoursesDetailSchedulesc']['name'] <> '')
{
copy ($_FILES['CoursesDetailSchedulesc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name'])
or die ("Could not copy");
$CoursesDetailSchedulesc = $CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name'];
$CoursesDetailSchedulesc = htmlspecialchars($CoursesDetailSchedulesc,ENT_QUOTES);
}
else
{
$CoursesDetailSchedulesc = "";
}
// End upload image code
if ($CoursesDetailSort == '' || $CoursesDetailSort == '0') {
$sql = "select max(CoursesDetailSort) as maxid ";
$sql .= "from CoursesDetail ";
$sql .= "WHERE CoursesCatId = $CoursesCatId ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$CoursesDetailSort = $row{maxid}+1;
}
if( mysql_num_rows(mysql_query("SELECT CoursesDetailId FROM CoursesDetail WHERE CoursesDetailSort=$CoursesDetailSort AND CoursesCatId=$CoursesCatId ")) > 0){
mysql_query("UPDATE CoursesDetail SET CoursesDetailSort= CoursesDetailSort+1 WHERE CoursesDetailSort >=$CoursesDetailSort AND CoursesCatId=$CoursesCatId ");
}
$sql = "insert into CoursesDetail (CoursesDetailId, CoursesCatId, CoursesDetailNameen, CoursesDetailAgeen, CoursesDetailFeeen, CoursesDetailTimeen, CoursesDetailDescen, CoursesDetailScheduleen, CoursesDetailNametc, CoursesDetailAgetc, CoursesDetailFeetc, CoursesDetailTimetc, CoursesDetailDesctc, CoursesDetailScheduletc, CoursesDetailNamesc, CoursesDetailAgesc, CoursesDetailFeesc, CoursesDetailTimesc, CoursesDetailDescsc, CoursesDetailSchedulesc, CoursesDetailSort) values ('$CoursesDetailId', '$CoursesCatId', '$CoursesDetailNameen', '$CoursesDetailAgeen', '$CoursesDetailFeeen', '$CoursesDetailTimeen', '$CoursesDetailDescen', '$CoursesDetailScheduleen', '$CoursesDetailNametc', '$CoursesDetailAgetc', '$CoursesDetailFeetc', '$CoursesDetailTimetc', '$CoursesDetailDesctc', '$CoursesDetailScheduletc', '$CoursesDetailNamesc', '$CoursesDetailAgesc', '$CoursesDetailFeesc', '$CoursesDetailTimesc', '$CoursesDetailDescsc', '$CoursesDetailSchedulesc', '$CoursesDetailSort')";
mysql_query($sql);
if( mysql_errno() > 0 ){
echo 'Courses Detail Add Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
exit;
}
mysql_close($dbh);
header("Location: coursesdetail_index.php?CoursesCatId=".$CoursesCatId."&msg=Add Successful");
?>