/add_noticias.php

<?php
	require('includes/config.php');

	ob_start("sanitize_output");

	//Se n達o estiver logado redirecionar para pagina de Login
	if(!$user->is_logged_in()){ header('Location: /'); }

	$title = 'CMS - Adicionar Noticias';

	require('layout/header.php');

	if(isset($_POST['submit'])){

		try {

			$stmt = $db->prepare('INSERT INTO noticias (titulo,area_texto) VALUES (:titulo, :area_texto)');
			$stmt->execute(array(
				':titulo' => $_POST['titulo'],
				':area_texto' => $_POST['area_texto']
			));

		} catch(PDOException $e) {
			$error[] = $e->getMessage();
		}
	}
?>
	<script src="js/jquery-1.10.2.js"></script>
	<script src="js/bootstrap.min.js"></script>
	<script src="js/jquery.metisMenu.js"></script>
	<script src="js/sb-admin.js"></script>
	<link href="css/summernote.css" rel="stylesheet">
	<script src="js/summernote.min.js"></script>
	<script src="js/summernote-pt-BR.js"></script>

	<div id="wrapper">
		<nav class="navbar navbar-default navbar-fixed-top" role="navigation" style="margin-bottom: 0">
			<div id="logo" class="col-xs-4 col-sm-2">
				<a href="/" id="sd-logo">S&D Enterprise - CMS</a>
			</div>

			<ul class="nav navbar-top-links navbar-right">
				<li><a href="logout.php" id="logout-btn"><i class="fa fa-sign-out fa-fw"></i> Sair</a></li>
			</ul>

			<div class="navbar-default navbar-static-side" role="navigation">
				<div id="sidebar-left">
					<div class="sidebar-collapse">
						<ul class="nav main-menu" id="side-menu">
							<li>
								<a href="noticias.php" class="active"><i class="fa fa-list" id="icons-color"></i><span
										id="icons-color"> Noticias</span></a>
							</li>
							<li>
								<a href="vagas.php" class="not-active"><i class="fa fa-briefcase" id="icons-color"></i><span
										id="icons-color"> Vagas</span></a>
							</li>
							<li>
								<a href="parceiros.php" class="not-active"><i class="fa fa-phone fa-fw" id="icons-color"></i><span id="icons-color">Parceiros</span></a>
							</li>
						</ul>
					</div>
				</div>
			</div>
		</nav>

	<div id="page-wrapper">
		<div class="row">
			<div class="col-lg-12">
				<h3 class="page-header">Adicionar Noticia</h3>
			</div>
		</div>
		<div class="row">
			<div class="col-lg-12">
				<?php

					if(count($_FILES) > 0) {
						if(is_uploaded_file($_FILES['userfile']['tmp_name']) && getimagesize($_FILES['userfile']['tmp_name']) != false)
						{
							$size = getimagesize($_FILES['userfile']['tmp_name']);
							$type = $size['mime'];
							$imgfp = fopen($_FILES['userfile']['tmp_name'], 'rb');
							$size = $size[3];
							$name = $_FILES['userfile']['name'];
							$maxsize = 1048576;

							if($_FILES['userfile']['size'] < $maxsize )
							{
								$dbh = new PDO("mysql:host=HOST/IP;dbname=NOMEDOBANCO;charset=utf8", 'USUARIO', 'SENHA');

								$dbh->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);

								$stmt = $dbh->prepare("INSERT INTO images (image_type ,image_data, image_size, image_name) VALUES (? ,?, ?, ?)");
								$stmt->bindParam(1, $type);
								$stmt->bindParam(2, $imgfp, PDO::PARAM_LOB);
								$stmt->bindParam(3, $size);
								$stmt->bindParam(4, $name);
								$stmt->execute();

							}
							else
							{
								throw new Exception("Tamanho Maximo <= 1MB!");
							}
						}
						else
						{
							throw new Exception("Formato de imagem n達o suportado!");
						}
						$_SESSION['success'] = "<div class='alert alert-success'><span style='font-weight: bold'>SUCESSO!</span> Noticia Adicionada.</div>";
						header('Location: /');
						exit();
					}
				?>
					<form data-role="form" id="form-noticias" method="post" action="" enctype="multipart/form-data">
						<input type="hidden" name="MAX_FILE_SIZE" value="1048576" />
						<div class="form-group">
							<label for="titulo">Titulo</label>
							<input type="text" class="form-control" id="titulo" name="titulo" maxlength="100" required>
						</div>
						<div class="form-group">
						<label for="area_texto">Conteudo</label>
							<textarea name="area_texto" id="area_texto" maxlength="2000" class="form-control"></textarea>
						</div>
						<div class="form-group">
							<label for="images">Imagem</label>
							<input type="file" id="images" name="userfile" class="file" required>
							<span class="help-block">(.gif|.png|.jpeg|.jpg)(Tamanho Max. <= 1MB)</span>
						</div>
						<button type="submit" id="submitAdd" name="submit" class="btn btn-primary"><span
								class="glyphicon glyphicon-ok"></span> Postar</button>
					</form>
			</div>
		</div>
	</div>
</div>
	<script>
		$(document).ready(function(){
			$('#area_texto').summernote({
				height: 300,
				focus: true,
				lang: 'pt-BR'
			});
		});
	</script>

	<?php
		require('layout/footer.php');
	?>