| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/hkosl.com/b2b2c/webadmin/ |
Upload File : |
<?php
$page_settings = array(
'formid' => 'Site_info', // for permission
'section' => 'System Setting', // parent/page title
'subsection' => 'Site info', // page title
'domain' => 'site_info', // table/model name
'access' => 'GNu', // for permission
);
require_once "check_login.php";
$message = "";
foreach ($arraylangcode as $langcode => $langname) {
if (empty($_POST["companyname_" . $langcode])) {
$message .= _lang("Please enter Company Name") . " [" . $langname . "]\\n\\n";
}
}
$post_name = array();
/*$post_name = array("ebpcode" => "Platform Customs Registration Code", "ebpname" => "Platform Customs Registration Name", "copcode" => "报文传输的企业代码(需要与接入客户端的企业身份一致)", "copname" => "报文传输的企业名称", "dxpid" => "向中国电子口岸数据中心申请数据交换平台的用户编号", "paycode" => "Payment Agent Customs Registration Code", "payname" => "Payment Agent Customs Registration Name", "signature_signaturevalue" => "Signature Value", "signature_keyname" => "Signature Key Name");
foreach ($post_name as $name => $text) {
if (empty($_POST[$name])) {
$message .= _lang("Please enter $text.") . "\\n\\n";
}
}*/
if (empty($_POST["enquiryemail"])) {
$message .= _lang("Please enter Enquiry Email.") . "\\n\\n";
} else {
if (!filter_var($_POST["enquiryemail"], FILTER_VALIDATE_EMAIL)) {
$message .= "Invalid email format.";
}
}
foreach ($arraylangcode as $langcode => $langname) {
if (empty($_POST["copyright_" . $langcode])) {
$message .= _lang("Please enter Copyright") . " [" . $langname . "]\\n\\n";
}
/*
if (empty($_POST["tnc_" . $langcode])) {
$message .= _lang("Please enter Terms & Condition") . " [" . $langname . "]\\n\\n";
}*/
}
if (!empty($message)) {
echo "<script>alert('" . $message . "'); history.back();</script>";
exit;
}
$sql = "update site_info set enquiryemail=?, facebook=?, youtube=?, lastupby=?, lastupdate=?,";
$parameters = array($_POST['enquiryemail'], $_POST["facebook"], $_POST["youtube"], $_SESSION['cmsloginid'], $nowdate);
foreach ($arraylangcode as $langcode => $langname) {
$sql .= "companyname_" . $langcode . "=?,companydesc_" . $langcode . "=?,metakeyword_" . $langcode . "=?,metadescription_" . $langcode . "=?,copyright_" . $langcode . "=?,index_desc_" . $langcode . "=?,";
$parameters[] = $_POST["companyname_" . $langcode];
$parameters[] = $_POST["companydesc_" . $langcode];
$parameters[] = $_POST["metakeyword_" . $langcode];
$parameters[] = $_POST["metadescription_" . $langcode];
$parameters[] = $_POST["copyright_" . $langcode];
$parameters[] = $_POST["index_desc_" . $langcode];
}
foreach ($post_name as $name => $text) {
$sql .= "$name=?,";
$parameters[] = $_POST[$name];
}
$sql = substr_replace($sql, " ", -1);
$sql .= "where siteinfoid = ?";
$parameters[] = (int)$_POST["siteinfoid"];
bind_pdo($sql, $parameters);
header("Location: site_info_modifyform.php?msg=2");