| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/(Del)standraise.com/admin/ |
Upload File : |
<?php require("configure.php"); ?>
<html>
<head>
<link rel="stylesheet" href="main.css" type="text/css">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>oneCMS - Content Management System</title>
</head>
<body>
<table border="0" cellpadding="1" cellspacing="1" width="100%">
<tr>
<td class='pageheader' align="left" valign="middle" height="100"><b>Product Menu (English)</b></td>
</tr>
</table>
<?
$pid = $_GET['pid'];
?>
<?
echo "<p class='content'><a href='productcatindex.php?pid=0'>Categories</a> / ". getLevel($pid) ."</p>";
?>
<table width="800">
<tr><td valign="top" width="450">
<?
echo "<p class='content'>". $_GET['msg'] ."</p>";
?>
<table border="0" cellpadding="1" cellspacing="1" bgcolor="#FFFFFF" width="430">
<tr><td class="contentsearch" bgcolor="#FFFFFF" width="10" align="center">Delete</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="10" align="center">Sortby</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="420" align="center">Categories</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="10" align="center">Action</td></tr>
<?php
$result = mysql_query("select * from productcat where parentid = ". $pid ." order by sortby");
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
print "<tr>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='productcatdeleteform.php?pid=".$row{'parentid'}."&productcatid=".$row{'productcatid'}."' border='0'>";
print "<img src='images/btnRemove.gif' border='0' alt='Remove'></a></td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'sortby'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'><img src='images/icon_folder.gif'> ".$row{'productcatname'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='productcatindex.php?pid=".$row{'productcatid'}."'>";
print "<img src='images/button_properties.gif' border='0' alt='Modify'></a>";
print "</td></tr>";
}
//mysql_close($dbh);
?>
</table>
</td><td valign="top" align="right">
<form action="productcatadd.php" method="post" enctype="multipart/form-data">
<input type="hidden" name="pid" value="<?=$pid?>">
<table border="0" cellpadding="0" cellspacing="0" width="350">
<tr><td height="20" colspan="3" bgcolor=#DDDDDD class='content' style='padding-left:5'><strong>New Category</strong></td>
</tr>
<tr><td class='content' align="right" valign="top">Category Name</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="productcatname" size="30" maxlength="50"></td></tr>
<tr><td class='content' align="right" valign="top">Sort</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="sortby" size="2" maxlength="2"></td></tr>
<tr><td colspan="2"></td><td>
<input type="submit" value=" Add " class='content'>
<input type="reset" value="Reset" class='content'>
</td></tr>
</table>
</form>
<?
if ($pid <> 0)
{
$result = mysql_query("select * from productcat where productcatid = ". $pid ." ");
$row = mysql_fetch_array($result,MYSQL_ASSOC);
?>
<form action="productcatmodify.php" method="post" enctype="multipart/form-data">
<input type="hidden" name="productcatid" value="<?=$row{'productcatid'}?>">
<table border="0" cellpadding="0" cellspacing="0" width="350">
<tr><td height="20" colspan="3" bgcolor=#DDDDDD class='content' style='padding-left:5'><strong>Edit Category</strong></td>
</tr>
<tr><td class='content' align="right" valign="top">Category Name</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="productcatname" size="30" maxlength="50" value="<?=$row{'productcatname'}?>"></td></tr>
<tr><td class='content' align="right" valign="top">Sort</td><td class='content' valign="top">: </td>
<td class='content'><input type="text" class="content" name="sortby" value="<?=$row{'sortby'}?>" size="2" maxlength="2"></td></tr>
<tr><td colspan="2"></td><td>
<input type="submit" value=" Modify " class='content'>
<input type="reset" value="Reset" class='content'>
</td></tr>
</table>
</form>
<?
}
?>
</td></tr>
<?
if ($pid <> 0)
{
?>
<tr><td>
<tr><td height="50"></td></tr>
<table border="0" cellpadding="0" cellspacing="0">
<tr><td align="center" width="100" class="content">
<a href="productimageaddform.php?productcatid=<?=$row{'productcatid'}?>"><img src="images/iconNew.jpg" alt="Add" border="0"><br>
Add New Product</a>
</td>
</tr>
</table>
</td><td class="content"></td></tr>
<tr><td colspan="2">
<?
productlist($pid)
?>
</td></tr>
<?
}
?>
</table>
</body>
</html>
<?
function getSelect($field1, $field2)
{
if ($field1 == $field2)
{
return "selected";
}
else
{
return "";
}
}
?>
<?
function getLevel($p)
{
$sql1 = "select * from productcat where productcatid = ". $p;
$result1 = mysql_query($sql1);
while ($row1 = mysql_fetch_array($result1,MYSQL_ASSOC))
{
if ($row1{parentid} <> 0)
{
$n = $n . getLevel($row1{'parentid'}) ." / <a href='productcatindex.php?pid=". $row1{'productcatid'} ."'>". $row1{'productcatname'} ."</a>";
}
else
{
$n = "<a href='productcatindex.php?pid=". $row1{'productcatid'} ."'>". $row1{'productcatname'} ."</a>";
}
}
return $n;
}
?>
<?
function productlist($c)
{
?>
<table border="0" cellpadding="1" cellspacing="1" bgcolor="#FFFFFF">
<tr><td height="30"></td></tr>
<tr><td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Delete</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="10" align="center">Sort</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="100" align="center">Model No.</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="200" align="center">Product Name</td>
<td class="contentsearch" bgcolor="#FFFFFF" width="50" align="center">Action</td></tr>
<?php require("configure.php"); ?>
<?php
$sql = "SELECT * from productimage inner join productcat on productimage.productcatid = productcat.productcatid where productimage.productcatid = ". $c ." order by sortbyimage ASC ";
$result = mysql_query($sql);
while ($row = mysql_fetch_array($result,MYSQL_ASSOC))
{
print "<tr>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='productimagedelete.php?productcatid=".$row{'productcatid'}."&productimageid=".$row{'productimageid'}."' border='0'>";
print "<img src='images/btnRemove.gif' border='0' alt='Remove'></a></td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'sortbyimage'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'productmodel'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' style='padding-left:5'>".$row{'productname'}."</td>";
print "<td class='content' bgcolor=#DDDDDD valign='top' align='center'>";
print "<a href='productimagemodifyform.php?productimageid=". $row{'productimageid'} ."&productcatid=". $row{'productcatid'} ."'>";
print "<img src='images/button_properties.png' border='0' alt='Modify'></a>";
print "</td></tr>";
}
mysql_close($dbh);
?>
</table>
<?
}?>