PageRenderTime 35ms CodeModel.GetById 19ms RepoModel.GetById 1ms app.codeStats 0ms

/manager/actions_email.php

https://github.com/GansukhB/phtstr
PHP | 195 lines | 97 code | 39 blank | 59 comment | 16 complexity | dfd5ec6617c45276a4fa3f3ae6acd2ad MD5 | raw file
    

  1. <?php
    2. 

  2. 	session_start();
    3. 

  3. 	include( "check_login_status.php" );
    4. 

  4. 	
    5. 

  5. 	// COPY ACTIONS UPDATED 3.4.04
    6. 

  6. 	
    7. 

  7. 	include( "config_mgr.php" );
    8. 

  8. 	
    9. 

  9. 	if($_SESSION['access_type'] != "mgr"){ echo "Operation cannot be performed in demo mode"; exit; }
    10. 

  10. 	
    11. 

  11. 	$settings_result = mysql_query("SELECT * FROM settings where id = '1'", $db);
    12. 

  12. 	$setting = mysql_fetch_object($settings_result);
    13. 

  13. 	
    14. 

  14. 	$file_path = "../uploaded_files/";
    15. 

  15. 	$image_path = "../uploaded_images/";
    16. 

  16. 	
    17. 

  17. 	switch($_GET['pmode']){
    18. 

  18. 

  19. /*-----------------------------------------------------------------------------------------------------------------------*/
    20. 

  20. /*                                               EVENTS PLUGIN ACTIONS                                                    */
    21. 

  21. /*-----------------------------------------------------------------------------------------------------------------------*/
    22. 

  22. 	/* SAVE NEW ITEM */	
    23. 

  23. 		case "save_new":
    24. 

  24. 			//ADDED IN PS350 TO CLEANUP THE DATA ENTRY
    25. 

  25. 			$title = cleanup($title);
    26. 

  26. 			
    27. 

  27. 			// SAVE DATA
    28. 

  28. 			$sql = "INSERT INTO email_copy (title,subject,article,image_upload,image_area_name,image_w,image_h,file_upload,file_area_name) VALUES ('$title','$subject','$article','$set_image_upload','$set_image_area_name','$set_image_width','$set_image_height','$set_file_upload','$set_file_area_name')";
    29. 

  29. 			$result = mysql_query($sql);
    30. 

  30. 			
    31. 

  31. 			$last_result = mysql_query("SELECT id FROM email_copy order by id desc", $db);
    32. 

  32. 			$last = mysql_fetch_object($last_result);
    33. 

  33. 			
    34. 

  34. 			// UPLOAD FILE
    35. 

  35. 			if($_FILES['fileup']['name'] != ""){
    36. 

  36. 				
    37. 

  37. 				//echo $_FILES['fileup']['name']; exit;
    38. 

  38. 				
    39. 

  39. 				upload_file_new($_FILES['fileup'],$_FILES['fileup']['name'],"../uploaded_files/");
    40. 

  40. 				
    41. 

  41. 				$fname = $_FILES['fileup']['name'];
    42. 

  42. 				//echo $fname; exit;
    43. 

  43. 				
    44. 

  44. 				$sql = "INSERT INTO uploaded_files (reference,reference_id,filename,file_text) VALUES ('$_POST[reference]','$last->id','$fname','$_POST[file_text]')";
    45. 

  45. 				$result = mysql_query($sql);
    46. 

  46. 

  47. 			}
    48. 

  48. 					
    49. 

  49. 			
    50. 

  50. 			// UPLOAD IMAGE
    51. 

  51. 			if($_FILES['image']['name'] != ""){
    52. 

  52. 				upload_image(
    53. 

  53. 					$_FILES['image'],				  // name of form field to upload
    54. 

  54. 					$_FILES['image']['name'],		  // filename of the image
    55. 

  55. 					$_FILES['image']['type'],		  // type of image
    56. 

  56. 					$_POST['image_path'],          // directory to upload the image to
    57. 

  57. 					"",				  // new width for your image / if blank doesn't resize
    58. 

  58. 					"",				      // new height for your image (cropped) / if blank resizes with ratio
    59. 

  59. 					"125",				  // icon width / if left blank no icon is created
    60. 

  60. 					"100"				  // image quality
    61. 

  61. 				);						  // returns $image_details[1] - $image_details[8]
    62. 

  62. 										  // new image name(1),image type(2), image path(3), image bytes(4), image kb(5), width(6), heigth(7), time(8)
    63. 

  63. 										  // $image_results returns results of upload
    64. 

  64. 										  // $result_code returns 1,2,3 / results of upload... 1 Success, 2 Type Not Supported , 3 Empty
    65. 

  65. 				
    66. 

  66. 				//$iname = $_FILES['image']['name'];
    67. 

  67. 				//echo $result_code; exit;
    68. 

  68. 				
    69. 

  69. 				//echo $_POST['reference'] . "<br />" . $_POST['item_id'] . "<br />" . $image_details[1] . "<br />" . $_POST['image_caption']; 
    70. 

  70. 				if($result_code == 1){						
    71. 

  71. 					$sql = "INSERT INTO uploaded_images (reference,reference_id,filename,caption) VALUES ('$_POST[reference]','$last->id','$image_details[1]','$_POST[image_caption]')";
    72. 

  72. 					$result = mysql_query($sql);
    73. 

  73. 				}
    74. 

  74. 			}		
    75. 

  75. 			
    76. 

  76. 			header("location: " . $return);
    77. 

  77. 

  78. 		break;
    79. 

  79. 		
    80. 

  80. 	/* DELETE ITEM(S) */
    81. 

  81. 	case "delete":	
    82. 

  82. 		$result = mysql_query("SELECT id FROM email_copy", $db);
    83. 

  83. 		while($rs = mysql_fetch_object($result)) {		
    84. 

  84. 			if($_POST[$rs->id] == "1") {
    85. 

  85. 				// DELETE ANY FILES THAT ARE ATTACHED TO THIS ITEM
    86. 

  86. 				$result_file = mysql_query("SELECT id,filename FROM uploaded_files where reference = '$reference' and reference_id = '$rs->id'", $db);
    87. 

  87. 				while($rs_file = mysql_fetch_object($result_file)) {
    88. 

  88. 					unlink($file_path . $rs_file->filename);
    89. 

  89. 					
    90. 

  90. 					$sql="DELETE FROM uploaded_files WHERE id = '$rs_file->id'";
    91. 

  91. 					$result2 = mysql_query($sql);
    92. 

  92. 						
    93. 

  93. 					//unlink("../images_news/i_" . $rs->image);
    94. 

  94. 				}
    95. 

  95. 				// DELETE ANY IMAGES THAT ARE ATTACHED TO THIS ITEM
    96. 

  96. 				$result_image = mysql_query("SELECT id,filename FROM uploaded_images where reference = '$reference' and reference_id = '$rs->id'", $db);
    97. 

  97. 				while($rs_image = mysql_fetch_object($result_image)) {
    98. 

  98. 					unlink($image_path . $rs_image->filename);
    99. 

  99. 					unlink($image_path . "i_" . $rs_image->filename);
    100. 

  100. 					
    101. 

  101. 					$sql="DELETE FROM uploaded_images WHERE id = '$rs_image->id'";
    102. 

  102. 					$result2 = mysql_query($sql);
    103. 

  103. 				}
    104. 

  104. 				
    105. 

  105. 				$sql="DELETE FROM email_copy WHERE id = '$rs->id'";
    106. 

  106. 				$result2 = mysql_query($sql);
    107. 

  107. 			}
    108. 

  108. 		}
    109. 

  109. 		header("location: " . $_POST['return']);
    110. 

  110. 		exit;
    111. 

  111. 		
    112. 

  112. 	/* SAVE EDIT ITEM */
    113. 

  113. 		case "save_edit":
    114. 

  114. 			//ADDED IN PS350 TO CLEANUP THE DATA ENTRY
    115. 

  115. 			$title = cleanup($title);
    116. 

  116. 			//SAVE DATA TO THE DATABASE
    117. 

  117. 			$sql = "UPDATE email_copy SET title='$title',subject='$subject',article='$article',image_upload='$set_image_upload',image_area_name='$set_image_area_name',image_w='$set_image_width',image_h='$set_image_height',file_upload='$set_file_upload',file_area_name='$set_file_area_name' WHERE id = '$item_id'";
    118. 

  118. 			$result = mysql_query($sql);
    119. 

  119. 			
    120. 

  120. 			// UPLOAD FILE
    121. 

  121. 			if($_FILES['fileup']['name'] != ""){
    122. 

  122. 				
    123. 

  123. 				//echo $_FILES['fileup']['name']; exit;
    124. 

  124. 				
    125. 

  125. 				upload_file_new($_FILES['fileup'],$_FILES['fileup']['name'],"../uploaded_files/");
    126. 

  126. 				
    127. 

  127. 				$fname = $_FILES['fileup']['name'];
    128. 

  128. 				//echo $fname; exit;
    129. 

  129. 				
    130. 

  130. 				$sql = "INSERT INTO uploaded_files (reference,reference_id,filename,file_text) VALUES ('$_POST[reference]','$_POST[item_id]','$fname','$_POST[file_text]')";
    131. 

  131. 				$result = mysql_query($sql);
    132. 

  132. 

  133. 			}
    134. 

  134. 					
    135. 

  135. 			
    136. 

  136. 			// UPLOAD IMAGE
    137. 

  137. 			if($_FILES['image']['name'] != ""){
    138. 

  138. 				upload_image(
    139. 

  139. 					$_FILES['image'],				  // name of form field to upload
    140. 

  140. 					$_FILES['image']['name'],		  // filename of the image
    141. 

  141. 					$_FILES['image']['type'],		  // type of image
    142. 

  142. 					$_POST['image_path'],          // directory to upload the image to
    143. 

  143. 					"",				  // new width for your image / if blank doesn't resize
    144. 

  144. 					"",				      // new height for your image (cropped) / if blank resizes with ratio
    145. 

  145. 					"125",				  // icon width / if left blank no icon is created
    146. 

  146. 					"100"				  // image quality
    147. 

  147. 				);						  // returns $image_details[1] - $image_details[8]
    148. 

  148. 										  // new image name(1),image type(2), image path(3), image bytes(4), image kb(5), width(6), heigth(7), time(8)
    149. 

  149. 										  // $image_results returns results of upload
    150. 

  150. 										  // $result_code returns 1,2,3 / results of upload... 1 Success, 2 Type Not Supported , 3 Empty
    151. 

  151. 				
    152. 

  152. 				//$iname = $_FILES['image']['name'];
    153. 

  153. 				//echo $result_code; exit;
    154. 

  154. 				
    155. 

  155. 				//echo $_POST['reference'] . "<br />" . $_POST['item_id'] . "<br />" . $image_details[1] . "<br />" . $_POST['image_caption']; 
    156. 

  156. 				if($result_code == 1){						
    157. 

  157. 					$sql = "INSERT INTO uploaded_images (reference,reference_id,filename,caption) VALUES ('$_POST[reference]','$_POST[item_id]','$image_details[1]','$_POST[image_caption]')";
    158. 

  158. 					$result = mysql_query($sql);
    159. 

  159. 				}
    160. 

  160. 			}
    161. 

  161. 			
    162. 

  162. 			/*
    163. 

  163. 			// UPLOAD IMAGE
    164. 

  164. 			if($image != ""){
    165. 

  165. 				upload_image(
    166. 

  166. 					$image,				 // name of form field to upload
    167. 

  167. 					$image_name,		 // filename of the image
    168. 

  168. 					$image_type,		 // type of image
    169. 

  169. 					$image_path,         // directory to upload the image to
    170. 

  170. 					"300",				 // new width for your image / if blank doesn't resize
    171. 

  171. 					"",				     // new height for your image (cropped) / if blank resizes with ratio
    172. 

  172. 					"150",				 // icon width / if left blank no icon is created
    173. 

  173. 					"80"				 // image quality
    174. 

  174. 				);						 // returns $image_details[1] - $image_details[8]
    175. 

  175. 										 // new image name(1),image type(2), image path(3), image bytes(4), image kb(5), width(6), heigth(7), time(8)
    176. 

  176. 										 // $image_results returns results of upload
    177. 

  177. 										 // $result_code returns 1,2,3 / results of upload... 1 Success, 2 Type Not Supported , 3 Empty
    178. 

  178. 				if($result_code == 1){
    179. 

  179. 					$sql = "INSERT INTO uploaded_images (reference,reference_id,filename,caption) VALUES ('$reference','$item_id','$image_details[1]','$image_caption')";
    180. 

  180. 					$result = mysql_query($sql);
    181. 

  181. 				}
    182. 

  182. 			}
    183. 

  183. 			*/
    184. 

  184. 			header("location: " . $return);
    185. 

  185. 		break;
    186. 

  186. 

  187. /*-----------------------------------------------------------------------------------------------------------------------*/
    188. 

  188. /*                                                      DEFAULT                                                          */
    189. 

  189. /*-----------------------------------------------------------------------------------------------------------------------*/	
    190. 

  190. 		default:
    191. 

  191. 			header("location: login.php");
    192. 

  192. 			exit;
    193. 

  193. 		break;
    194. 

  194. 	}
    195. 

  195. ?>
    196.