| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/(Del)pathways.org.hk/admin/ |
Upload File : |
<?php require("configure.php"); ?>
<html>
<head>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>oneCMS - Content Management System</title>
</head>
<body>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tr>
<td class='pageheader' align="left" valign="middle" height="100"><b>Menu</b></td>
</tr>
</table>
<?
$pid = $_GET['pid'];
?>
<?
echo "<p class='content'><a href='categoriesindextc.php?pid=0'>Categories</a> / ". getLevel($pid) ."</p>";
?>
<table width="800">
<tr><td valign="top" width="350">
<?
echo "<p class='content'>". $_GET['msg'] ."</p>";
?>
<table border="0" cellpadding="1" cellspacing="1" bgcolor="#FFFFFF" width="300">
<tr><td class="contentsearch" bgcolor="#FFFFFF" width="10" align="center">Delete</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="10" align="center">Sortby</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="300" align="center">Categories</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="80" align="center">Action</td></tr>
<?php
$result = mysql_query("select * from categories where parentid = ". $pid ." order by sortby");
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
print "<tr>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='categoriesdeleteformtc.php?catid=".$row{'catid'}."&parentid=".$row{'parentid'}."' border='0'>";
print "<img src='images/btnRemove.gif' border='0' alt='Remove'></a></td>";
//print "<a href='productmodifyform.php?contentid=".$row{'contentid'}."&catid=". $row{'catid'} ."&templateid=". $row{'templateid'} ."'>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'sortby'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'><img src='images/icon_folder.gif'> ".$row{'catnametc'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='categoriesindextc.php?pid=".$row{'catid'}."'>";
print "<img src='images/button_properties.gif' border='0' alt='Modify'></a>";
print "</td></tr>";
}
//mysql_close($dbh);
?>
</table>
</td><td valign="top" align="right">
<form action="categoriesaddtc.php" method="post" enctype="multipart/form-data">
<input type="hidden" name="pid" value="<?=$pid?>">
<table border="0" cellpadding="0" cellspacing="0" width="450">
<tr><td class='content' bgcolor=#DDDDDD style='padding-left:5' colspan="3">New Category</td></tr>
<tr><td class='content' align="right" valign="top">Name</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="catnametc" size="30"></td></tr>
<!--<tr><td class='content' align="right" valign="top">link</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="hyperlink" size="50" maxlength="100"></td></tr>-->
<tr><td class='content' align="right" valign="top">Template</td><td class='content' valign="top">: </td>
<td class='content'><select name="templateid" class="content">
<?php
$sql = "SELECT * from template ";
//echo $sql;
$result3 = mysql_query($sql);
while ($row3 = mysql_fetch_array($result3,MYSQL_ASSOC))
{
?>
<option value="<?=$row3{'templateid'}?>"><?=$row3{'templatename'}?></option>
<?
}
?>
</select>
</td></tr>
<!--<tr><td class='content' align="right" valign="top">Link</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="link" size="50" maxlength="100"></td></tr>-->
<tr><td class='content' align="right" valign="top">Sort</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="sortby" size="2" maxlength="2"></td></tr>
<tr><td colspan="2"></td><td>
<input type="submit" value=" Add " class='content'>
<input type="reset" value="Reset" class='content'>
</td></tr>
</table>
</form>
<?
if ($pid <> 0)
{
$result = mysql_query("select * from categories where catid = ". $pid ." ");
$row = mysql_fetch_array($result,MYSQL_ASSOC);
?>
<form action="categoriesmodifytc.php" method="post" enctype="multipart/form-data">
<input type="hidden" name="catid" value="<?=$row{'catid'}?>">
<table border="0" cellpadding="0" cellspacing="0" width="450">
<tr><td class='content' bgcolor=#DDDDDD style='padding-left:5' colspan="3">Edit Category</td></tr>
<tr><td class='content' align="right" valign="top">Name</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="catnametc" size="30" value="<?=str_replace("\r", '', str_replace("\"", """, preg_replace( "/\n/", "<br>", $row{'catnametc'})))?>"></td></tr>
<!--<tr><td class='content' align="right" valign="top">link</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="hyperlink" size="50" maxlength="100" value="<?=$row{'hyperlink'}?>"></td></tr>-->
<tr><td class='content' align="right" valign="top">Template</td><td class='content' valign="top">: </td>
<td class='content'><select name="templateid" class="content">
<?php
$result4 = mysql_query("SELECT * from template");
while ($row4 = mysql_fetch_array($result4,MYSQL_ASSOC))
{
?>
<option value="<?=$row4{'templateid'}?>" <?=getSelect($row{templateid}, $row4{templateid})?>>
<?=$row4{'templatename'}?>
</option>
<?
}
?>
</select>
</td></tr>
<tr><td class='content' align="right" valign="top">Sort</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="sortby" value="<?=$row{'sortby'}?>" size="2" maxlength="2"></td></tr>
<tr><td colspan="2"></td><td>
<input type="submit" value=" Modify " class='content'>
<input type="reset" value="Reset" class='content'>
</td></tr>
</table>
</form>
<?
}
?>
</td></tr>
<?
if ($pid <> 0)
{
if ($row{'templateid'} == '2'){
?>
<tr><td>
<table border="0" cellpadding="0" cellspacing="0">
<tr><td align="center" width="100" class="content">
<a href="productaddformtc.php?catid=<?=$row{'catid'}?>&templateid=<?=$row{'templateid'}?>"><img src="images/iconNew.jpg" alt="Add" border="0"><br>
Add Web page content</a>
</td>
</tr>
</table>
</td><td class="content"></td></tr>
<tr><td colspan="2">
<?
productlist($pid)
?>
</td></tr>
<?
}
}
?>
</table>
</body>
</html>
<?
function getSelect($field1, $field2)
{
if ($field1 == $field2)
{
return "selected";
}
else
{
return "";
}
}
?>
<?
function getLevel($p)
{
$sql1 = "select * from categories where catid = ". $p;
$result1 = mysql_query($sql1);
while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
{
if ($row1{parentid} <> 0)
{
$n = $n . getLevel($row1{'parentid'}) ." / <a href='categoriesindextc.php?pid=". $row1{'catid'} ."'>". $row1{'catnametc'} ."</a>";
}
else
{
$n = "<a href='categoriesindextc.php?pid=". $row1{'catid'} ."'>". $row1{'catnametc'} ."</a>";
}
}
return $n;
}
?>
<?
function productlist($c)
{
?>
<table border="0" cellpadding="1" cellspacing="1" bgcolor="#FBFBFB" width="800">
<tr><td class="contentsearch" bgcolor="#FFFFFF" width="30" align="center">Delete</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="100" align="center">Category</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="330" align="center">Description</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Action</td></tr>
<?php require("configure.php"); ?>
<?php
//$sql = "SELECT * from content where catid = ". $c ." order by sortby";
$sql = "SELECT * from pagecontent left outer join categories ON pagecontent.catid = categories.catid where pagecontent.catid = ". $c ."";
$result = mysql_query($sql);
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
print "<tr>";
//print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'catname'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='productdeletetc.php?pagecontentid=".$row{'pagecontentid'}."&pid=$c' border='0'>";
print "<img src='images/btnRemove.gif' border='0' alt='Remove'></a></td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'catnametc'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>";
?>
<?=str_replace("\r", '', preg_replace( "/\n/", "<br>", $row{'pagecontentdesctc'}))?>
<?
print "</td>";
/*
if ($row{'status'} == "Y")
{
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>Yes</td>";
}
else
{
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>No</td>";
}
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>".$row{'xsortby'}."</td>";
*/
//print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>".$row{'sortby'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='productmodifyformtc.php?pagecontentid=".$row{'pagecontentid'}."&catid=". $row{'catid'} ."&templateid=". $row{'templateid'} ."'>";
print "<img src='images/button_properties.png' border='0' alt='Modify'></a>";
print "</td></tr>";
}
mysql_close($dbh);
?>
</table>
<?
}?>