PK
<center>
<?php
if($_GET[action] == "delimg"){
$query = "select * from articles where article_id = '$_GET[article_id]'";
$query = mysql_query($query) or die(mysql_error());
if($rr=mysql_fetch_array($query)){
//echo $rr[img];
@unlink("../site_data/images/$rr[img]");
$query="update articles set img='' where article_id = '$rr[article_id]'";
mysql_query($query) or die(mysql_error());
echo "<script>window.location.href='main.php?paction=$_GET[paction]&article_id=$rr[article_id]'</script>";
}
}
if($_POST[submt_btn] == 1){
/////////////////////////////////// add record starts //////////////////////
if($_POST[doAction] == "add"){
$query="insert into articles set
titl='".mysql_escape_string($_POST[titl])."',
typ='".mysql_escape_string($_POST[typ])."',
descp='".mysql_escape_string($_POST[descp])."',
`date`='".mysql_escape_string($_POST[dt])."',
postby='".mysql_escape_string($_POST[postby])."'
";
mysql_query($query) or die(mysql_error());
$article_id=mysql_insert_id();
$msg="Record Added Successfully";
}
/////////////////////////////////// add record ends //////////////////////
/////////////////////////////////// update record starts //////////////////////
//print_r($_POST);
if($_POST[doAction] == "edit") {
$query="update articles set
titl='".mysql_escape_string($_POST[titl])."',
typ='".mysql_escape_string($_POST[typ])."',
descp='".mysql_escape_string($_POST[descp])."',
`date`='".mysql_escape_string($_POST[dt])."',
postby='".mysql_escape_string($_POST[postby])."'
where article_id = '$_GET[article_id]'
";
mysql_query($query) or die(mysql_error());
$article_id=$_GET[article_id];
$msg="Record Updated Successfully";
}
/////////////////////////////////// update record ends //////////////////////
$uploads_dir = '../site_data/images/';
if($_FILES["img"]["error"] == UPLOAD_ERR_OK) {
$tmp_name = $_FILES["img"]["tmp_name"];
$ext=substr($_FILES["img"]["name"],-3);
$fname = $article_id."_articles.".$ext;
$obj_img = new thumbnail_images();
$obj_img->PathImgOld = $_FILES['img']['tmp_name'];
$obj_img->PathImgNew = $uploads_dir.$fname;
$obj_img->NewWidth = 360;
$obj_img->NewHeight = 240;
$obj_img->create_thumbnail_images();
//move_uploaded_file($tmp_name, "$uploads_dir/$fname");
//createthumb($_FILES['img']['tmp_name'],$fname,$uploads_dir,900,250);
//createthumb($_FILES['img']['tmp_name'],"th_".$fname,$uploads_dir,120,120);
$query="update articles set img='$fname' where article_id = '$article_id'";
mysql_query($query) or die(mysql_error());
}
}
////////////////////// fetch data for edit starts ////////////////////////
if($_GET[article_id]){
$query = "select * from articles where article_id = '$_GET[article_id]'";
$query = mysql_query($query) or die(mysql_error());
if($editrow=mysql_fetch_array($query)){}
}
////////////////////// fetch data for edit ends ////////////////////////
$typ=$_GET[article_id]!=""?$editrow[typ]:$_REQUEST[typ];
if($typ=="mkt"){
$ptitle="Market Research";
}elseif($typ=="wft"){
$ptitle="Weekly Financial Tips";
}elseif($typ=="wst"){
$ptitle="Wall Street Letter";
}
?>
</center>
<!-- BEGIN PAGE LEVEL STYLES -->
<link rel="stylesheet" type="text/css" href="assets/global/plugins/bootstrap-wysihtml5/bootstrap-wysihtml5.css"/>
<link rel="stylesheet" type="text/css" href="assets/global/plugins/bootstrap-markdown/css/bootstrap-markdown.min.css">
<link rel="stylesheet" type="text/css" href="assets/global/plugins/bootstrap-summernote/summernote.css">
<!-- END PAGE LEVEL STYLES -->
<div class="page-content-wrapper">
<div class="page-content">
<!-- BEGIN PAGE HEADER-->
<h3 class="page-title"><?php echo($_GET[article_id]?"Edit":"Add")?> <!--<?php echo $ptitle?> --> News<small></small></h3>
<div class="page-bar">
<ul class="page-breadcrumb">
<li>
<i class="fa fa-home"></i>
<a href="index.html">Home</a>
<i class="fa fa-angle-right"></i>
</li>
</ul>
</div>
<!-- END PAGE HEADER-->
<!-- BEGIN PAGE CONTENT-->
<div class="row">
<div class="col-md-12">
<!-- BEGIN EXTRAS PORTLET-->
<?php if($msg){?><div class="alert alert-success display-show"><button class="close" data-close="alert"></button><?=$msg?></div><?php }?>
<div class="portlet box blue-hoki">
<div class="portlet-title">
<div class="caption">
<i class="fa fa-gift"></i><?php echo($_GET[article_id]?"Edit":"Add")?> <!-- <?php echo $ptitle?>-->News
</div>
</div>
<div class="portlet-body form">
<form class="form-horizontal form-bordered" enctype="multipart/form-data" method="post" >
<input type="hidden" name="doAction" value="<?php echo ($_GET[article_id]!=""?"edit":"add")?>">
<input type="hidden" name="typ" value="<?php echo ($_GET[article_id]!=""?$editrow[typ]:$_REQUEST[typ])?>">
<div class="form-body">
<div class="form-group">
<label class="control-label col-md-2">Title</label>
<div class="col-md-10">
<input type="text" class="form-control" required name="titl" id="titl" value="<?php echo $editrow[titl];?>" />
</div>
</div>
<div class="form-group">
<label class="control-label col-md-2">Description</label>
<div class="col-md-10">
<textarea name="descp" id="summernote_1"><?php echo $editrow[descp];?></textarea>
</div>
</div>
<div class="form-group">
<label class="control-label col-md-2">Image <br /> <small>Size: 360px x 240px</small></label>
<div class="col-md-10">
<input type="file" style="height:auto;" class="form-control" name="img" id="img" />
<?php if($editrow[img]){?><img src="../site_data/images/<?php echo $editrow[img];?>" width="150" style="border:1px solid #ccc; padding:1px;" /> <a href="main.php?paction=<?php echo $_GET[paction]?>&article_id=<?php echo $editrow[article_id]?>&action=delimg">Delete Image</a> <?php }?>
</div>
</div>
<div class="form-group">
<label class="control-label col-md-2">Date</label>
<div class="input-group date date-picker col-md-3" data-date-format="yyyy-mm-dd">
<input type="text" class="form-control" required name="dt" id="dt" value="<?php echo $editrow[date];?>" />
<span class="input-group-btn">
<button class="btn default" type="button"><i class="fa fa-calendar"></i></button>
</span>
</div>
</div>
<!-- <div class="form-group">
<label class="control-label col-md-2">Post by</label>
<div class="col-md-10">
<input type="text" class="form-control" name="postby" id="postby" value="<?php echo $editrow[postby];?>" />
</div>
</div> -->
<div class="form-actions">
<div class="row">
<div class="col-md-offset-2 col-md-10">
<button type="submit" name="submt_btn" value="1" class="btn green"><i class="fa fa-check"></i> <?php echo ($_GET[article_id]!=""?"Update":"Submit")?></button>
<button type="button" class="btn default">Cancel</button>
</div>
</div>
</div>
</div>
</form>
</div>
</div>
</div>
</div>
<!-- END PAGE CONTENT-->
</div>
</div>
<!-- END CONTENT -->
PK 99