| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/(Del)discoverylearning.com.hk/webadmin/ |
Upload File : |
<?php require("configure.php");
$CoursesCatId = $_POST["CoursesCatId"];
$CoursesDetailId = $_POST["CoursesDetailId"];
$CoursesDetailNameen = htmlspecialchars($_POST["CoursesDetailNameen"],ENT_QUOTES);
$CoursesDetailAgeen = htmlspecialchars($_POST["CoursesDetailAgeen"],ENT_QUOTES);
$CoursesDetailFeeen = htmlspecialchars($_POST["CoursesDetailFeeen"],ENT_QUOTES);
$CoursesDetailTimeen = htmlspecialchars($_POST["CoursesDetailTimeen"],ENT_QUOTES);
$CoursesDetailDescen = preg_replace("/'/","\'",$_POST["CoursesDetailDescen"]);
$CoursesDetailNametc = htmlspecialchars($_POST["CoursesDetailNametc"],ENT_QUOTES);
$CoursesDetailAgetc = htmlspecialchars($_POST["CoursesDetailAgetc"],ENT_QUOTES);
$CoursesDetailFeetc = htmlspecialchars($_POST["CoursesDetailFeetc"],ENT_QUOTES);
$CoursesDetailTimetc = htmlspecialchars($_POST["CoursesDetailTimetc"],ENT_QUOTES);
$CoursesDetailDesctc = preg_replace("/'/","\'",$_POST["CoursesDetailDesctc"]);
$CoursesDetailNamesc = htmlspecialchars($_POST["CoursesDetailNamesc"],ENT_QUOTES);
$CoursesDetailAgesc = htmlspecialchars($_POST["CoursesDetailAgesc"],ENT_QUOTES);
$CoursesDetailFeesc = htmlspecialchars($_POST["CoursesDetailFeesc"],ENT_QUOTES);
$CoursesDetailTimesc = htmlspecialchars($_POST["CoursesDetailTimesc"],ENT_QUOTES);
$CoursesDetailDescsc = preg_replace("/'/","\'",$_POST["CoursesDetailDescsc"]);
//print_r($_POST);
// copy image
if ($_FILES['CoursesDetailScheduleen']['name'] <> '')
{
copy ($_FILES['CoursesDetailScheduleen']['tmp_name'], "coursesschedule/".$CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name'])
or die ("Could not copy");
$CoursesDetailScheduleen = $CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name'];
$CoursesDetailScheduleen = htmlspecialchars($CoursesDetailScheduleen,ENT_QUOTES);
}
else
{
$CoursesDetailScheduleen = "";
}
// End upload image code
// copy image
if ($_FILES['CoursesDetailScheduletc']['name'] <> '')
{
copy ($_FILES['CoursesDetailScheduletc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name'])
or die ("Could not copy");
$CoursesDetailScheduletc = $CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name'];
$CoursesDetailScheduletc = htmlspecialchars($CoursesDetailScheduletc,ENT_QUOTES);
}
else
{
$CoursesDetailScheduletc = "";
}
// End upload image code
// copy image
if ($_FILES['CoursesDetailSchedulesc']['name'] <> '')
{
copy ($_FILES['CoursesDetailSchedulesc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name'])
or die ("Could not copy");
$CoursesDetailSchedulesc = $CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name'];
$CoursesDetailSchedulesc = htmlspecialchars($CoursesDetailSchedulesc,ENT_QUOTES);
}
else
{
$CoursesDetailSchedulesc = "";
}
// End upload image code
// Modify
$sql = "update CoursesDetail set CoursesCatId='$CoursesCatId', CoursesDetailNameen='$CoursesDetailNameen', CoursesDetailAgeen='$CoursesDetailAgeen', CoursesDetailFeeen='$CoursesDetailFeeen', CoursesDetailTimeen='$CoursesDetailTimeen', CoursesDetailDescen='$CoursesDetailDescen', CoursesDetailNametc='$CoursesDetailNametc', CoursesDetailAgetc='$CoursesDetailAgetc', CoursesDetailFeetc='$CoursesDetailFeetc', CoursesDetailTimetc='$CoursesDetailTimetc', CoursesDetailDesctc='$CoursesDetailDesctc', CoursesDetailNamesc='$CoursesDetailNamesc', CoursesDetailAgesc='$CoursesDetailAgesc', CoursesDetailFeesc='$CoursesDetailFeesc', CoursesDetailTimesc='$CoursesDetailTimesc', CoursesDetailDescsc='$CoursesDetailDescsc' ";
if ($CoursesDetailScheduleen <> '')
$sql .= ", CoursesDetailScheduleen='$CoursesDetailScheduleen' ";
if ($CoursesDetailScheduletc <> '')
$sql .= ", CoursesDetailScheduletc='$CoursesDetailScheduletc' ";
if ($CoursesDetailSchedulesc <> '')
$sql .= ", CoursesDetailSchedulesc='$CoursesDetailSchedulesc' ";
$sql .= " where CoursesDetailId=". $CoursesDetailId ." ";
mysql_query($sql);
if( mysql_errno() > 0 ){
echo 'Courses Detail Modify Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
exit;
}
mysql_close($dbh);
header("Location: coursesdetail_index.php?CoursesCatId=".$CoursesCatId."&msg=Modify Successful");
?>