ÿØÿàJFIFÿÛ„ ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/thietkewebvumi.com/admin_new/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/thietkewebvumi.com/admin_new/mod/home.php
<?php
class home {
    var $path_image	= "upload/home/";
    var $pos_fix_block = array();//need config
    function home(){
        global $smarty, $homeurl, $CORE,$lang ;
        $_SESSION['link_redirect'] = $homeurl.'index.php';
        $smarty->assign('title', 'Quản lý block' );
        switch($CORE->input['code']){
            default: $this->goList(); break;
            case 'post_block': $this->goPostBlock(); break;
            case 'search_page': $this->searchPage(); break;
            case 'update_block_detail' : $this->updateBlockDetail(); break;
            case 'add_block': $this->addBlock(); break;
            case 'delete_block': $this->goDelete(); break;
            case 'list2' : $this->goList2(); break;
            case 'edit' : $this->goEdit(); break;
        }
    }
    function goEdit(){
        global $smarty,$DB,$CORE,$func,$print;
        $smarty->assign('module_name','Quản lý block trang chủ');
        $smarty->assign('title','Quản lý block trang chủ');
        $smarty->assign('section','edit_block');
        $id = intval($CORE->input['id']);
        $row_block = $DB->fetch_row($DB->query("SELECT * FROM NNCCMS_block WHERE id = '$id'"));
        if($row_block['type']=='html_block'){
           /*$row_block['block_detail'] = $func->editor_new('block_detail',$row_block['block_detail'],15);
            $row_block['eblock_detail'] = $func->editor_new('eblock_detail',$row_block['eblock_detail'],15);*/

            $row_block['block_detail'] = html_entity_decode($row_block['block_detail']);
            $row_block['eblock_detail'] =  html_entity_decode($row_block['eblock_detail']);
        }
        if($row_block['type']=='id_block'){
            $arr_pages_id = explode('@',$row_block['block_detail']);
            $str_id = implode(',',$arr_pages_id);
            $q_pages = $DB->query("SELECT id,title FROM NNCCMS_pages WHERE id IN ($str_id) AND status = '1';");
            while($r_pages = $DB->fetch_row($q_pages)){
                $row_block['list_pages'][] = $r_pages;
            }

        }
        $smarty->assign('data',$row_block);
        $aCats = array();
        $query_menu = $DB->query("SELECT * FROM NNCCMS_menu WHERE `type`='menu'");
        while($rows_menu = $DB->fetch_row($query_menu))
        {
            $aCats[] = $rows_menu;
        }
        $menu = $this->dequy_selected(0,0,$aCats,'<option value="0">Tất cả</option>','','');
        $smarty->assign('menu',$menu);
        if($CORE->input['bsubmit_edit']){
            $type = $CORE->input['edit_type'];

            switch($type){
                case 'html_block':
                    $x = $CORE->input['x'];
                    $y = $CORE->input['y'];
                    $title = $CORE->input['title'];
                    $etitle = $CORE->input['etitle'];
                    $block_template = $CORE->input['block_template'];
                    $url = $CORE->input['url'];
                    $block_detail = $CORE->input['block_detail'];
                    $eblock_detail = $CORE->input['eblock_detail'];


                    $image1 = '';
                    if($_FILES['image']){
                        $image_file1 	= $_FILES['image']['tmp_name'];
                        $image_type1 	= $_FILES['image']['type'];
                        $image_name1	= substr($func->format_string($title),0,50).'_'.time();
                        $thumb_name1		= "thumb_".$image_name1;
                        $thumb_size1 = 240;
                        $createthumb1 = $func->create_image($image_file1, $image_type1, $thumb_name1,$thumb_size1, ROOT_PATH.$this->path_image);
                        $imageExt1 = $func->getImageExt($createthumb1);
                        if($createthumb1 && move_uploaded_file($_FILES['image']['tmp_name'], ROOT_PATH.$this->path_image.$image_name1.$imageExt1)){
                            $image1 = $image_name1.$imageExt1;
                        }
                    }
                    if($image1 !='' ){
                        $row_check = $DB->fetch_row($DB->query("SELECT img FROM NNCCMS_block WHERE id='$id'"));
                        if(!empty($row_check['img'])){
                            if($row_check['img'] !='') @unlink(ROOT_PATH.$this->path_image.$row_check['img']);
                            if($row_check['img'] !='') @unlink(ROOT_PATH.$this->path_image.'thumb_'.$row_check['img']);
                        }
                        $DB->query("UPDATE NNCCMS_block SET img='$image1' WHERE id='$id'");
                    }

                    $DB->query("UPDATE NNCCMS_block SET `x`='$x',`y`='$y',`title`='$title',`etitle`='$etitle',`block_template`='$block_template',`url`='$url',`block_detail`='$block_detail',`eblock_detail`='$eblock_detail' WHERE `id`='$id'");
                break;
                default:
                    $x = $CORE->input['x'];
                    $y = $CORE->input['y'];
                    $title = $CORE->input['title'];
                    $etitle = $CORE->input['etitle'];
                    $block_template = $CORE->input['block_template'];
                    $url = $CORE->input['url'];
                    $block_detail = $CORE->input['block_detail'];
                    $eblock_detail = $CORE->input['eblock_detail'];
                    $list_id = $CORE->input['list_id'];
                    $check = substr($list_id,-1);
                    if($check=='@'){
                        $list_id = $func->remove_lastchar($list_id,1);
                    }
                    $image1 = '';
                    if($_FILES['image']){
                        $image_file1 	= $_FILES['image']['tmp_name'];
                        $image_type1 	= $_FILES['image']['type'];
                        $image_name1	= substr($func->format_string($title),0,50).'_'.time();
                        $thumb_name1		= "thumb_".$image_name1;
                        $thumb_size1 = 240;
                        $createthumb1 = $func->create_image($image_file1, $image_type1, $thumb_name1,$thumb_size1, ROOT_PATH.$this->path_image);
                        $imageExt1 = $func->getImageExt($createthumb1);
                        if($createthumb1 && move_uploaded_file($_FILES['image']['tmp_name'], ROOT_PATH.$this->path_image.$image_name1.$imageExt1)){
                            $image1 = $image_name1.$imageExt1;
                        }
                    }
                    if($image1 !='' ){
                        $row_check = $DB->fetch_row($DB->query("SELECT img FROM NNCCMS_block WHERE id='$id'"));
                        if(!empty($row_check['img'])){
                            if($row_check['img'] !='') @unlink(ROOT_PATH.$this->path_image.$row_check['img']);
                            if($row_check['img'] !='') @unlink(ROOT_PATH.$this->path_image.'thumb_'.$row_check['img']);
                        }
                        $DB->query("UPDATE NNCCMS_block SET img='$image1' WHERE id='$id'");
                    }
                    $DB->query("UPDATE NNCCMS_block SET `x`='$x',`y`='$y',`title`='$title',`etitle`='$etitle',`block_template`='$block_template',`url`='$url',`block_detail`='$list_id' WHERE `id`='$id'");
                break;
            }
            $print->refresh('index.php?act=home&code=edit&id='.$id);
        }

    }
    function goList2(){
        global $smarty,$DB;
        $smarty->assign('module_name','Quản lý block trang chủ');
        $smarty->assign('title','Quản lý block trang chủ');
        $smarty->assign('section','list_block');
        $block_home = $DB->query("SELECT * FROM NNCCMS_block WHERE module='home' ORDER BY y , x");
        while($row_block = $DB->fetch_row($block_home)){
            if(!in_array($row_block['pos'],$this->pos_fix_block)){
                $row_block['pos'] = 'add_block_type';
            }

            if($row_block['type']=='id_block' and !empty($row_block['block_detail'])){
                $arr_pages_id = explode('@',$row_block['block_detail']);
                $str_id = implode(',',$arr_pages_id);
                $q_pages = $DB->query("SELECT id,title FROM NNCCMS_pages WHERE id IN ($str_id) AND status = '1';");
                while($r_pages = $DB->fetch_row($q_pages)){
                    $row_block['list_pages'][] = $r_pages;
                }
                $row_block['block_detail'] = '';
            }



            $list_block[] = $row_block;
        }
        $smarty->assign('list_block',$list_block);
        $show_block = '';
        $y = 0;

        foreach($list_block as $key=>$val){
            $check=1;
            $y = $list_block[$key]['y'];
            if($list_block[$key+1]['y']==$y){
                if($check==1){
                    $show_block .= '<div class="column">';
                    $show_block .= '
                <div class="portlet" id="'.$y.'">
            <div class="portlet-header">'.$val['title'].'</div>
            <div class="portlet-content">qwdqwd</div>
        </div>';
                }else{
                    $show_block .= '
                <div class="portlet" id="'.$y.'">
            <div class="portlet-header">'.$val['title'].'</div>
            <div class="portlet-content">qwdqwd</div>
        </div>';
                }
                $check++;
            }else{
                $show_block .= '<div class="column">';
                $show_block .= '
                <div class="portlet"  id="'.$y.'">
                <div class="portlet-header">'.$val['title'].'</div>
                <div class="portlet-content">qwdqwd</div>
            </div>';
            }
            if($list_block[$key+1]['y']!=$y){
                $show_block .= '</div>';
            }else{
                $show_block .= '';
            }

        }
        $smarty->assign('show_block',$show_block);
        $aCats = array();
        $query_menu = $DB->query("SELECT * FROM NNCCMS_menu WHERE `type`='menu'");
        while($rows_menu = $DB->fetch_row($query_menu))
        {
            $aCats[] = $rows_menu;
        }
        $menu = $this->dequy_selected(0,0,$aCats,'<option value="0">Tất cả</option>','','');
        $smarty->assign('menu',$menu);
    }
    function goDelete(){
        global $DB,$CORE;
        $block_id = $CORE->input['block_id'];
        $row_check = $DB->fetch_row($DB->query("SELECT * FROM NNCCMS_block WHERE id='$block_id'"));
        if($row_check['img'] !=''){
            unlink(ROOT_PATH.$this->path_image.'thumb_'.$row_check['img']);
            unlink(ROOT_PATH.$this->path_image.$row_check['img']);
        }
        $DB->query("DELETE FROM NNCCMS_block WHERE id='$block_id'");
        echo $block_id;
        exit();
    }
    function addBlock(){
        global $smarty,$DB, $CORE, $func, $print;
        $smarty->assign('module_name','Thêm mới block');
        $smarty->assign('title','block');
        $smarty->assign('status',$CORE->input['status']);
        $smarty->assign('section','add_block');
        if(!$CORE->input['bsubmit']){
            $arr_fix  = "'".implode("','",$this->pos_fix_block)."'";
            $row_total = $DB->fetch_row($DB->query("SELECT count(*) as total FROM NNCCMS_block WHERE module='home' "));
            $dong_thu = $row_total['total'];
            $smarty->assign('dong',$dong_thu);
            /*$post['block_detail'] = $func->editor_new('block_detail','',15,'tinymce');
            $post['eblock_detail'] = $func->editor_new('eblock_detail','',15,'tinymce');
            $smarty->assign('post',$post);*/

            $aCats = array();
            $query_menu = $DB->query("SELECT * FROM NNCCMS_menu WHERE `type`='menu'");
            while($rows_menu = $DB->fetch_row($query_menu))
            {
                $aCats[] = $rows_menu;
            }
            $menu = $this->dequy_selected(0,0,$aCats,'<option value="0">Tất cả</option>','','');
            $smarty->assign('menu',$menu);
        }else{
            $tab_type = $CORE->input['tab_type'];
            $x = $CORE->input['pos'];
            $y = $CORE->input['y'];
            $title = $CORE->input['title'];
            $etitle = $CORE->input['etitle'];
            $block_template = $CORE->input['block_template'];
            $url = $CORE->input['url'];
            $block_detail = $CORE->input['block_detail'];
            $eblock_detail = $CORE->input['eblock_detail'];
            $list_id = $CORE->input['list_id'];
            $check = substr($list_id,-1);
            if($check=='@'){
                $list_id = $func->remove_lastchar($list_id,1);
            }
            $pos = 'home_'.$y.'_'.$x;

            $image1 = '';
            if($_FILES['image']){
                $image_file1 	= $_FILES['image']['tmp_name'];
                $image_type1 	= $_FILES['image']['type'];
                $image_name1	= substr($func->format_string($title),0,50).'_'.time();
                $thumb_name1		= "thumb_".$image_name1;
                $thumb_size1 = 240;
                $createthumb1 = $func->create_image($image_file1, $image_type1, $thumb_name1,$thumb_size1, ROOT_PATH.$this->path_image);
                $imageExt1 = $func->getImageExt($createthumb1);
                if($createthumb1 && move_uploaded_file($_FILES['image']['tmp_name'], ROOT_PATH.$this->path_image.$image_name1.$imageExt1)){
                    $image1 = $image_name1.$imageExt1;
                }
            }

            $row_check2 = $DB->fetch_row($DB->query("SELECT * FROM NNCCMS_block WHERE title='$title'"));
            if(!$row_check2){
                if($tab_type=='html_block'){
                    $DB->query("INSERT INTO `NNCCMS_block` (`pos`,`x`,`y`, `title`, `etitle`, `img`, `url`, `type`, `block_template`, `block_detail`, `eblock_detail`, `module`) VALUES ( '$pos','$x','$y', '$title', '$etitle', '$image1', '$url', 'html_block', '$block_template', '$block_detail', '$eblock_detail', 'home');");
                }elseif($tab_type=='id_block'){
                    $DB->query("INSERT INTO `NNCCMS_block` (`pos`,`x`,`y`, `title`, `etitle`, `img`, `url`, `type`, `block_template`, `block_detail`, `eblock_detail`, `module`) VALUES ( '$pos','$x','$y', '$title', '$etitle', '$image1', '$url', 'id_block', '$block_template', '$list_id', '', 'home');");
                }
            }else{
                $print->page_error('Tên block bị trùng, xin đặt tên khác!','index.php?act=home&code=add_block');
            }
            $print->refresh('index.php?act=home');
        }
    }
    function goList(){
        global $smarty, $DB;
        $smarty->assign('module_name','Quản lý block trang chủ');
        $smarty->assign('title','Quản lý block trang chủ');
        $smarty->assign('section','list_block');
        $block_home = $DB->query("SELECT * FROM NNCCMS_block WHERE module='home' ORDER BY y , x");
        while($row_block = $DB->fetch_row($block_home)){
            if(!in_array($row_block['pos'],$this->pos_fix_block)){
                $row_block['pos'] = 'add_block_type';
            }

            if($row_block['type']=='id_block' and !empty($row_block['block_detail'])){
                $arr_pages_id = explode('@',$row_block['block_detail']);
                $str_id = implode(',',$arr_pages_id);
                $q_pages = $DB->query("SELECT id,title FROM NNCCMS_pages WHERE id IN ($str_id) AND status = '1';");
                while($r_pages = $DB->fetch_row($q_pages)){
                    $row_block['list_pages'][] = $r_pages;
                }
                $row_block['block_detail'] = '';
            }
            $list_block[] = $row_block;
        }
        $smarty->assign('list_block',$list_block);
        $aCats = array();
        $query_menu = $DB->query("SELECT * FROM NNCCMS_menu WHERE `type`='menu'");
        while($rows_menu = $DB->fetch_row($query_menu))
        {
            $aCats[] = $rows_menu;
        }
        $menu = $this->dequy_selected(0,0,$aCats,'<option value="0">Tất cả</option>','','');
        $smarty->assign('menu',$menu);
    }
    function goPostBlock(){
        global $CORE, $DB,$func;
        $id = intval($CORE->input['id']);
        $title = trim($CORE->input['title']);
        $etitle = trim($CORE->input['etitle']);
        $url = trim($CORE->input['url']);
        $block_detail = trim($CORE->input['block_detail']);
        $eblock_detail = trim($CORE->input['eblock_detail']);
        $type = trim($CORE->input['type']);
        $image1 = '';
        if($_FILES['image']){
            $image_file1 	= $_FILES['image']['tmp_name'];
            $image_type1 	= $_FILES['image']['type'];
            $image_name1	= substr($func->format_string($title),0,50).'_'.time();
            $thumb_name1		= "thumb_".$image_name1;
            $thumb_size1 = 240;
            $createthumb1 = $func->create_image($image_file1, $image_type1, $thumb_name1,$thumb_size1, ROOT_PATH.$this->path_image);
            $imageExt1 = $func->getImageExt($createthumb1);
            if($createthumb1 && move_uploaded_file($_FILES['image']['tmp_name'], ROOT_PATH.$this->path_image.$image_name1.$imageExt1)){
                $image1 = $image_name1.$imageExt1;
            }
        }
        if(!empty($title)){
            if($image1 !='' ){
                $row_check = $DB->fetch_row($DB->query("SELECT img FROM NNCCMS_block WHERE id='$id'"));
                if(!empty($row_check['img'])){
                    if($row_check['img'] !='') @unlink(ROOT_PATH.$this->path_image.$row_check['img']);
                    if($row_check['img'] !='') @unlink(ROOT_PATH.$this->path_image.'thumb_'.$row_check['img']);
                }
                $DB->query("UPDATE NNCCMS_block SET img='$image1' WHERE id='$id'");
            }
            if($type != 'id_block'){
                $DB->query("UPDATE NNCCMS_block SET title='$title',etitle='$etitle',url = '$url', block_detail='$block_detail', eblock_detail='$eblock_detail' WHERE id='$id'");
            }else{
                $DB->query("UPDATE NNCCMS_block SET title='$title',etitle='$etitle' WHERE id='$id'");
            }
            echo 1;
            exit();
        }else{
            echo 0;
            exit();
        }
    }
    function dequy_selected($id,$parentid,$aCats,$res,$sep){
        foreach($aCats as $val){
            if($val['parent_id']==$parentid){
                if($id==$val['id'] and $parentid!=0){
                    $re = '<option value="'.$val['id'].'" selected>+'.$sep.''.$val['title'].'</option>';
                }else{
                    $re = '<option value="'.$val['id'].'">+'.$sep.''.$val['title'].'</option>';
                }
                $res .= $this->dequy_selected($id,$val['id'],$aCats,$re,$sep.'+');
            }
        }
        return $res;
    }
    function searchPage(){
        global $DB,$CORE,$func;
        $id_menu = intval($CORE->input['id_menu']);
        $kw = trim($CORE->input['kw']);
        $kw2 = $func->bodau_normal($kw);
        $where = " WHERE status = '1' ";
        if($id_menu > 0){
            $where .= " AND id IN (SELECT pages_id FROM NNCCMS_menu_pages WHERE menu_id='".$id_menu."') ";
        }
        if($kw != ''){
            $where .=  " AND (title LIKE '%".$kw."%' OR title LIKE '%".$kw2."%') ";
        }
        $q = $DB->query("SELECT * FROM NNCCMS_pages ".$where." ORDER BY time DESC LIMIT 10 ");
        $list = '';
        while($r = $DB->fetch_row($q)){
            $list .= '<li class="ui-state-default" id="'.$r['id'].'">'.$r['title'].'</li>';
        }
        if(!empty($list)){
            echo $list;
        }else{
            echo 'not found';
        }
        exit();
    }
    function updateBlockDetail(){
        global $DB,$CORE;
        $id = intval($CORE->input['id']);
        $total = intval($CORE->input['total']);
        $list_id = $CORE->input['list_id'];
        $arr_id = explode('@',$list_id,-1);
        $arr_id = array_unique($arr_id);
        $str_id = implode('@',$arr_id);
        if($id>0 and !empty($str_id)){
            $DB->query("UPDATE NNCCMS_block SET block_detail='$str_id' WHERE id='$id'");
        }
        echo 1;
        exit();
    }
}
$run = new home();

ZeroDay Forums Mini