404 Not Found

Sh3ll
Server : Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.4.20
System : Linux st2.domain.com 3.10.0-1127.10.1.el7.x86_64 #1 SMP Wed Jun 3 14:28:03 UTC 2020 x86_64
User : apache ( 48)
PHP Version : 7.4.20
Disable Function : NONE
Directory : /var/www/html/vidoe.top/admin_new/
Upload File :
Current File : /var/www/html/vidoe.top/admin_new/ajax.php
<?php
require ROOT_PATH."xajax2/xajax_core/xajax.inc.php";
$xajax = new xajax(); 
//require_once('ajax2.php');//ajax2 for CV
//require_once('ajax3.php');//ajax2 for banner
function getdisbycity($code){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();

$q2 = $DB->query("SELECT * FROM district WHERE ID_city = '".$code."'");

$html2 = '<select name="quan">';
while($r2 = $DB->fetch_row($q2)){
	$html2 .= '<option value="'.$r2['ID_district'].'">'.$r2['district_name'].'</option>';
}
$html2 .= '</select>';


$objResponse->assign('dis','innerHTML',$html2);
return $objResponse;
}

function slideshow($id,$name){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();

$q = $DB->query("SELECT * FROM NNCCMS_".$name." WHERE id = '$id'");
$r = $DB->fetch_row($q);
$img = '<a href="'.$r['code'].'" target="_blank"><img src='.$CORE->homeurl.'thumbnails/'.$r['img'].' title='.$r['title'].' width=\'363\' height=\'245\' /></a>';
$text = html_entity_decode($r['body']);
$objResponse->assign('panelFolioImg','innerHTML',$img);
$objResponse->assign('panelFolioText','innerHTML',$text);
return $objResponse;
}


function pagi($name,$limit,$id){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
$q_check = $DB->query("SELECT * FROM NNCCMS_news WHERE id<>'".$id."'");
$count = $DB->get_num_rows($q_check);

$limit1 = $limit-5;
$limit2 = $limit+5;
$q = $DB->query("SELECT * FROM NNCCMS_news WHERE id<>'".$id."' ORDER BY time DESC LIMIT $limit,5");

if($limit2==5){

	while($r = $DB->fetch_row($q)){
		$check_time = $CORE->time - $r['time'];
			if($check_time<12*60*60){
				if ($CORE->lang_type!='en'){
			
					$r['time'] = 'Cách đây '.$func->timestam2h($check_time);
				}else{
					$r['time'] = 'Ago '.$func->timestam2h($check_time);
				}
			}else{
				$r['time'] = date('d/m/Y',$r['time']);
			}
	
		$html .= '<li><a href="'.$CORE->homeurl.'chi-tiet-tin_'.$r['id'].'_'.$func->format_string($r['title']).'.html">'.$r['title'].'</a> ('.$r['time'].')</li>';
		
	}
	$html .= '<br>';
		if ($CORE->lang_type!='en'){
	
		$html .=  '<input type="button" value="Tin cũ hơn &raquo;" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit2.'\',\''.$id.'\')" />';
		}else{
		$html .=  '<input type="button" value="Older News &raquo;" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit2.'\',\''.$id.'\')" />';
		}
		

}elseif($count>$limit2 && $limit2>5){
	while($r = $DB->fetch_row($q)){
		$check_time = $CORE->time - $r['time'];
			if($check_time<12*60*60){
				if ($CORE->lang_type!='en'){
				$r['time'] = 'Cách đây '.$func->timestam2h($check_time);
				}else{
				$r['time'] = 'Ago '.$func->timestam2h($check_time);
				}
			}else{
				$r['time'] = date('d/m/Y',$r['time']);
			}
		$html .= '<li><a href="'.$CORE->homeurl.'chi-tiet-tin_'.$r['id'].'_'.$func->format_string($r['title']).'.html">'.$r['title'].'</a> ('.$r['time'].')</li>';
		
	}
	$html .= '<br>';
		if ($CORE->lang_type!='en'){
	
		$html .=  '<input type="button" value="&laquo; Tin mới hơn" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit1.'\',\''.$id.'\')" /> | ';
		$html .=  '<input type="button" value="Tin cũ hơn &raquo;" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit2.'\',\''.$id.'\')" />';
		}else{
		$html .=  '<input type="button" value="&laquo; Newer news" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit1.'\',\''.$id.'\')" /> | ';
		$html .=  '<input type="button" value="Older News &raquo;" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit2.'\',\''.$id.'\')" />';
		
		}
}elseif($count<=$limit2){
	
		while($r = $DB->fetch_row($q)){
		$check_time = $CORE->time - $r['time'];
			if($check_time<12*60*60){
				$r['time'] = 'Cách đây '.$func->timestam2h($check_time);
			}else{
				$r['time'] = date('d/m/Y',$r['time']);
			}
		$html .= '<li><a href="'.$CORE->homeurl.'chi-tiet-tin_'.$r['id'].'_'.$func->format_string($r['title']).'.html">'.$r['title'].'</a> ('.$r['time'].')</li>';
	
		
		}
		$html .= '<br>';
		if ($CORE->lang_type!='en'){
		$html .=  '<input type="button" value="&laquo; Tin mới hơn" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit1.'\',\''.$id.'\')" />';
		}else{
		$html .=  '<input type="button" value="&laquo; Newer news" style="cursor:pointer" onclick="xajax_pagi(\'news\',\''.$limit1.'\',\''.$id.'\')" />';
		}
}


$objResponse->assign('show_pa','innerHTML',$html);

return $objResponse;
}
function mailForm($form){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
	$email = $form['email'];
	if($func->checkEmail($email)=='' or $email=='') {
	if ($CORE->lang_type!='en'){
	$objResponse->alert('Email không đúng định dạng, xin thử lại!...');
	}else{
	$objResponse->alert('Email format is incorrect, please try again!...');
	}
	}else{
		$query=$DB->query("SELECT * FROM NNCCMS_maillist WHERE email LIKE '%".$email."%'");
		
			if($DB->get_num_rows($query)>0){
			if ($CORE->lang_type!='en'){
				$objResponse->alert('Email này đã được đăng ký trước đây! Cảm ơn bạn ...');
				}else{
				$objResponse->alert('This email has been registered before! Thank you ...');
				}
			}else{			
				$DB->query("INSERT INTO `NNCCMS_maillist`(`id`,`email`,`joined`,`ip_address`,`regcode`,`notes`)
				 VALUES('','".$email."','".$CORE->time."','".$CORE->ip."','','');");
				 if ($CORE->lang_type!='en'){
				 $objResponse->alert('Chúng tôi đã nhận được email của bạn, cảm ơn ...');	
				 }else{
				  $objResponse->alert('We have received your email, thanks ...');	
				 }			
			}
	}
//$objResponse->alert($form['email']);	
return $objResponse;
}

	
	
function polls($form){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
	
	
	$id = intval($form['id']);
	
	$polls_vote = intval($form['polls_vote']);
	if($polls_vote<1 || $polls_vote>5) return $objResponse->redirect($CORE->homeurl);	
	if($_SESSION['spam']==$CORE->ip) { 
	 if ($CORE->lang_type!='en'){
			$objResponse->alert( "Bạn đã bình chọn trước đây, cảm ơn! ..." );
			}else{
			$objResponse->alert( "You have voted before, thanks! ..." );
			}

	return $objResponse->call('xajax_showpolls', $form);
	}

	$time = $CORE->time;
	$uid = 0;
	$q = $DB->query("SELECT * FROM NNCCMS_polls WHERE id='".$id."'");
	$r =  $DB->fetch_row($q);
	$total = $r['totalvotes']+1;
	$vote = $r['vote_opt'.$polls_vote] +1;
	$DB->query("UPDATE NNCCMS_polls SET totalvotes = '$total', vote_opt".$polls_vote." = '$vote' WHERE id = '$id'");
	$DB->query("INSERT INTO `NNCCMS_pollsvote` ( `id` , `pollid` , `userid` , `votedate` , `voteopt` )
	VALUES ('', '$id', '$uid', '$time', '$polls_vote');");	
	$_SESSION['spam'] = $CORE->ip;
	if ($CORE->lang_type!='en'){
	$objResponse->alert('Đã bình chọn, cảm ơn bạn! ...');	
	}else{
	$objResponse->alert('Has voted, thank you! ...');	
	}
	return $objResponse->call('xajax_showpolls', $form);

return $objResponse;
}

function showpolls($form){
global $CORE,$DB;
$objResponse = new xajaxResponse();
	
	$id = intval($form['id']);
	
	$query = $DB->query ("SELECT * FROM NNCCMS_polls WHERE id='$id'");	
	$row = $DB->fetch_row($query);
	$pollbody = '<table width="100%" border="0" cellspacing="0" cellpadding="0">';
	
	for ($i=1;$i<=5;$i++){
		if ($row['opt'.$i]){
		if ($CORE->lang_type=='en' && $row["opt{$i}_e"]!='') $row["opt{$i}"] = $row["opt{$i}_e"];
			$row['opt'.$i]	=	html_entity_decode($row['opt'.$i]);	
			$opt = $row['opt'.$i];
			$votes = $row["vote_opt{$i}"];
			$percent = $row["vote_opt{$i}"] == 0 ? 0 : $row["vote_opt{$i}"] / $row["totalvotes"] * 100;
			$percent = sprintf( '%.2f' , $percent );
			$width   = $percent > 0 ? (int) $percent * 5 : 0;
			$pollbody .= '<tr><td height="20">';
			$pollbody .= $row['opt'.$i];
			$pollbody .= '&nbsp;(';
			$pollbody .= $votes;
			$pollbody .= ')&nbsp;{';
			$pollbody .= $percent.'&nbsp;%}';
			$pollbody .= '<br>';
			$pollbody .= '<img src="'.$CORE->homeurl.'images/7_3_28.png" border="0" width="';
			$pollbody .= $width;			
			$pollbody .= '" height="2" align="middle" />';			
			$pollbody .= '</td></tr>';
			
		}
		
	}
	
	$pollbody .= '</table>';
	$objResponse->assign('show_poll','innerHTML',$pollbody);
	
return $objResponse;
}
function rate($rating,$id,$show5,$showPerc,$showVotes){
global $CORE,$DB;
$objResponse = new xajaxResponse();
$expire = time() + 60*60*24*30;
$domain = ($_SERVER['HTTP_HOST'] != 'localhost') ? $_SERVER['HTTP_HOST'] : false; 
//$objResponse->alert($id);

if($DB->get_num_rows($DB->query("SELECT id FROM ratings WHERE IP = '".$_SERVER['REMOTE_ADDR']."' AND rating_id = '$id'")) || isset(		$_COOKIE['has_voted_'.$id])){
if ($CORE->lang_type!='en'){
	$objResponse->alert("bạn đã đánh giá, cảm ơn!");
	}else{
	$objResponse->alert("Thanks for your assessment!");
	}
 }else {
			setcookie('has_voted_'.$id,$id,$expire,'/',$domain,false);
			$DB->query("INSERT INTO ratings (rating_id,rating_num,IP) VALUES ('$id','$rating','".$_SERVER['REMOTE_ADDR']."')") ;
			$total = 0;
			$rows = 0;
			$sel = $DB->query("SELECT rating_num FROM ratings WHERE rating_id = '$id'");
			while($data = $DB->fetch_row($sel)){
				$total = $total + $data['rating_num'];
				$rows++;
			}
			$perc = ($total/$rows) * 20;
			$newPerc = round($perc,2);
			
			$perc2 = ($total/$rows);
			$perc2_new =  round($perc2,2);
			if ($CORE->lang_type!='en'){
			$votes = $rows.' Lần';
			}else{
			$votes = $rows.' Votes';
			}
			
			//$objResponse->alert(round($newPerc));
			$text .= '<div class="rated_text">';
			$text .= 'Đánh giá <span id="outOfFive_'.$id.'" class="out5Class">'.$perc2_new.'</span>/5';
			$text .= ' (<span id="percentage_'.$id.'" class="percentClass">'.$newPerc.'%</span>)';
			
			$text .= ' (<span id="showvotes_'.$id.'" class="votesClass">'.$votes.'</span>)';
			$text .= '</div>';
			$text .= '
			<ul class="star-rating2" id="rater_'.$id.'">
				<li class="current-rating" style="width:'.$newPerc.'%;" id="ul_'.$id.'"></li>
				<li><a onclick="return false;" href="#" title="1 star out of 5" class="one-star" >1</a></li>
				<li><a onclick="return false;" href="#" title="2 stars out of 5" class="two-stars">2</a></li>
				<li><a onclick="return false;" href="#" title="3 stars out of 5" class="three-stars">3</a></li>
				<li><a onclick="return false;" href="#" title="4 stars out of 5" class="four-stars">4</a></li>
				<li><a onclick="return false;" href="#" title="5 stars out of 5" class="five-stars">5</a></li>
			</ul>
			';
			
			//assign one ID
			$objResponse->assign('rating_star','innerHTML',$text);
			//assign multi ID
			$objResponse->assign('rating_star_'.$id,'innerHTML',$text);
		}
			//echo round($perc,2);
return $objResponse;
}
// Instantiate the xajax object.  No parameters defaults requestURI to this page, method to POST, and debug to off
function clickwhois($domain){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
	$html = '<p>THÔNG TIN TÊN MIỀN</p>';
	$html .= '<table>';
	$html .=  file_get_contents("http://whois.pavietnam.vn/whois.php?domain=$domain&cmd=getwhois");
	$html .= '</table>';
	
	$objResponse->assign('whois','innerHTML',$html);
return $objResponse;
}
function jumpMenu($url){
global $CORE,$DB,$func,$snoopy;
$objResponse = new xajaxResponse();

//load snoopy
			include_once(ROOT_PATH."lib/htmlsql.class.php");
			$wsql = new htmlsql();
			$wsql->connect('url', $url);
			
			$q_img  =  $wsql->query('SELECT * FROM img WHERE $class == "img-subject fl" OR $class = "img-topsubject fl"');
				$r_img = $wsql->fetch_array($q_img);
				//print_r($r_img);
			//exit();
			
			$q_img = $wsql->query('SELECT * FROM img WHERE $class == "img-topsubject fl" OR $class == "img-subject fl"');
			$row_img = $wsql->fetch_array($q_img);
			$q_title = $wsql->query('SELECT * FROM a WHERE $class == "link-topnews" OR $class == "link-title"');
			$row = $wsql->fetch_array($q_title);
			
			//$objResponse->alert( "formData: " . print_r( $row_img, true ) );
			
			//$row = array_merge($row,$r_img);
			//$row = array_unique($row);
			
			$html = '<form name="post" action="index.php?act=news&code=auto_post" method="post" enctype="multipart/form-data">
      		<table cellspacing="1" width="100%">
         		<tr><td class="row"><img src="skin/images/add.gif" /><strong>Lấy tin tự động từ link '.$url.'</strong></td></tr>';
			
			foreach($row as $key => $val){
				$html .= ' <tr><td  class="row">';
				$html .= '<a href="http://vnexpress.net'.$val['href'].'">'.$val['text'].'</a>
<input name="link[]" type="checkbox" value="http://vnexpress.net'.$val['href'].'"/>(STT: '.$key.')';
				//$html .= '<a href="http://vnexpress.net'.$val['src'].'">'.$val['src'].'</a>
//<input name="link[]" type="checkbox" value="http://vnexpress.net'.$val['href'].'"/>';
				$html .= '</td></tr>';
				//$title .= $func->clean_string($val['text']).'<br>';
			}
			$html .= '<tr><td  class="row"><div class="maintitle">Ảnh tương ứng</div></td></tr>';
			foreach($row_img as $key2 => $val2){
				$html .= ' <tr><td  class="row">';
				
				$html .= '<a href="http://vnexpress.net'.$val2['src'].'"><img src="http://vnexpress.net'.$val2['src'].'" boder="0"></a>
<input name="img[]" type="checkbox" value="http://vnexpress.net'.$val2['src'].'"/> (STT: '.$key2.')';
				$html .= '</td></tr>';
				//$title .= $func->clean_string($val['text']).'<br>';
			}
			$q_scat = $DB->query("SELECT * FROM NNCCMS_newscat WHERE scat = 0");
			$html .= ' <tr><td  class="row">Xin chọn một nhóm tin';
			$html .= '<select name="cat" style="width:350px;">';
			while($r_scat = $DB->fetch_row($q_scat)){
				
							$html .= '<optgroup label="'.$r_scat['cname'].'">';
					$q_cat = $DB->query("SELECT * FROM NNCCMS_newscat WHERE scat = '".$r_scat['cid']."'");
					while($r_cat = $DB->fetch_row($q_cat)){
						$html .= '<option value="'.$r_cat['cid'].'">+'.$r_cat['cname'].'</option>';
					}
					$html .= '</optgroup>';
				}
			$html .= '</select>';
			$html .= '</td></tr>';
			$html .= '<tr><td class="row"><input type="submit" name="oksubmit" value="Lưu" /></td></tr>
			</table>
			</form>';
			//$show = print_r($row);
    /*
    		// connect to a URL
   			 if (!$wsql->connect('url', 'http://vnexpress.net/GL/Vi-tinh/San-pham-moi/')){
       			 print 'Error while connecting: ' . $wsql->error;
       			 exit;
   			 }
    
 
    
   		 if (!$wsql->query('SELECT * FROM a WHERE $class == "link-title" OR $class == "link-topnews"')){
       			 print "Query error: " . $wsql->error; 
       			 exit;
   			 }

   		 $row = $wsql->fetch_array();
			$show = print_r($row);
	*/
$objResponse->assign('form_load','innerHTML',$html);

return $objResponse;
}
function getposfromgroup($g){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
switch($g){
	case 'home' : $pos = '<select name="pos">
			 
			     <option value="center">Center banner (640px × 290px)</option>       
			    <option value="left">Left banner (width: 240px)</option>  
			
				</select>';
				break;
				case 'product' : $pos = '<select name="pos">
					  <option value="center">Center banner (650px × 156px)</option>       
			   		 </select>';
				break;
				
				case 'product_cat' : $pos = '<select name="pos">
			  				 					<option value="left">Quảng cáo trái (width: 181px)</option>
											</select><br><br>';
					$query = $DB->query("SELECT * FROM NNCCMS_productcat WHERE scat=0 ORDER BY cpos ");
					$pos .= '<select name="cat_id">';
					while($row = $DB->fetch_row($query)){
						$pos .= '<option value='.$row['cid'].'>'.$row['cname'].'</option>';	
						
					}
					$pos .= '</select>(Chọn trang nhóm sản phẩm cho banner hiển thị!)';
				break;
				
				case 'product_cat_hot' : $pos = '<select name="pos">
					  <option value="bottom">Flash danh mục HOT</option>
			   		 </select>';
				break;
				

}


$objResponse->assign('pos_load','innerHTML',$pos);

return $objResponse;
}
function getDetailNews($cid){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
$q_news = $DB->query("SELECT * FROM NNCCMS_news WHERE cid = '$cid' ORDER BY title");
while($r_news = $DB->fetch_row($q_news)){
	$html .= '<div>'.$r_news['title'].'<input name="other_id[]" value="'.$r_news['id'].'" type="checkbox" /></div>';
}
//$objResponse->alert($cid);

$objResponse->assign('show_other_news','innerHTML',$html);

return $objResponse;
}
function getDetailProduct($cid){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
$q_news = $DB->query("SELECT * FROM NNCCMS_product WHERE cid = '$cid' ORDER BY title");
$html  = '<select name="splienquan[]" multiple="multiple" style="width:250px;">';
while($r_news = $DB->fetch_row($q_news)){
	$html .= '<option value="'.$r_news['id'].'">'.$r_news['title'].'</option></div>';
}
	$html .= '</select>';
//$objResponse->alert($cid);

$objResponse->assign('show_other_product','innerHTML',$html);

return $objResponse;
}

function activeStatus($id,$status,$module,$row){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
$DB->query("UPDATE NNCCMS_$module SET $row = '$status' WHERE id = $id");
$objResponse->redirect('index.php?act='.$module);

return $objResponse;	

}
function getImgNotes($cid){
global $CORE,$DB,$func;	
$objResponse = new xajaxResponse();

$row = $DB->fetch_row($DB->query("SELECT cpos FROM NNCCMS_newscat WHERE cid = '$cid'"));
switch($row['cpos']){
	case 1: $html = 'Ảnh có khích thước: dài 400px cao 250px';break;
	case 2: $html = ''; break;
	case 3: $html = '';break;

}
$objResponse->assign('show_notes_img','innerHTML',$html);
return $objResponse;
}
function showBgNewsCat($cpos,$cid){
global $CORE,$DB,$func;	
$objResponse = new xajaxResponse();
$cid = intval($cid);
if($cpos!=3){
	$html='';
}else{
	if($cid==0){
		$html = '<a href="../images/item1.gif" target="_blank">Ảnh nền(184x210)</a>: <input type="file" name="cimg" id="cimg" />';
	}else{
		$row = $DB->fetch_row($DB->query("SELECT cimg FROM NNCCMS_newscat WHERE cid = '$cid'"));
		if($row['cimg']!=''){
			$html = '<a href="../images/item1.gif" target="_blank">Ảnh nền(184x210)</a>: <input type="file" name="cimg" id="cimg" /><img src="../upload/news/'.$row['cimg'].'">';
		}else{
			$html = '<a href="../images/item1.gif" target="_blank">Ảnh nền(184x210)</a>: <input type="file" name="cimg" id="cimg" />Chưa có ảnh nền!';
		}
	}
}
$objResponse->assign('show_notes_bg','innerHTML',$html);
return $objResponse;
}

function delCommentWishlist($time){
global $CORE,$DB,$func;	
$objResponse = new xajaxResponse();
$DB->query("DELETE FROM NNCCMS_wishlist_comment WHERE time = '$time' LIMIT 1");

$objResponse->assign("hide_li".$time,"style.display","none");
$objResponse  -> alert("Đã xóa!");
return $objResponse;
}

function getProductFromCat($cid){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
$cid = intval($cid);
if($cid==0){
	$html = '';
	$objResponse->assign('show_product','innerHTML',$html);
	return $objResponse;
}
$row = $DB->fetch_row($DB->query("SELECT id_product FROM NNCCMS_productcat WHERE cid = '$cid'"));
$id_product = $row['id_product'];
$q_news = $DB->query("SELECT id,title,sprice FROM NNCCMS_product WHERE id IN ($id_product) ORDER BY title");

while($r_news = $DB->fetch_row($q_news)){
	$html .= '<input type="checkbox" name="id_product[]" value='.$r_news['id'].'>'.$r_news['title'].' | Số lượng: <input type="text" maxlength="3" name="soluong[]" style="width:50px;" value="1"> (Đơn giá: '.$r_news['sprice'].' vnđ)<br>';
}
//$objResponse->alert($cid);

$objResponse->assign('show_product','innerHTML',$html);

return $objResponse;
}



function getProductFromId($str_id){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
if($str_id==''){
$objResponse->alert('Xin nhập ID sản phẩm, nếu nhiều ID thì mỗi ID cách nhau bởi dấu ,ID phải là 1 số ');
return $objResponse;
}
$check = explode(',',$str_id);
$count = count($check);

foreach($check as $val){
	if(!is_numeric($val)){
		$objResponse->alert('Xin nhập ID sản phẩm, nếu nhiều ID thì mỗi ID cách nhau bởi dấu , ID phải là 1 số ');
		return $objResponse;	
	}
}
$str_id = str_replace(' ','',$str_id);
if($count == 1){
$q_news = $DB->query("SELECT id,title,sprice FROM NNCCMS_product WHERE id = '$str_id' ORDER BY title");
}else{
$q_news = $DB->query("SELECT id,title,sprice FROM NNCCMS_product WHERE id IN ($str_id) ORDER BY title");
}

$html = '';
if($DB->get_num_rows($q_news)==1){
	$r_news = $DB->fetch_row($q_news);
	$html = '<input type="checkbox" name="id_product[]" value='.$r_news['id'].' >'.$r_news['title'].' | Số lượng: <input type="text" maxlength="3" name="soluong[]" style="width:50px;" value="1"> (Đơn giá: '.$r_news['sprice'].' vnđ)<br>';
	
}else{
while($r_news = $DB->fetch_row($q_news)){
	$html .= '<input type="checkbox" name="id_product[]" value='.$r_news['id'].'>'.$r_news['title'].' | Số lượng: <input type="text" maxlength="3" name="soluong[]" style="width:50px;" value="1"> (Đơn giá: '.$r_news['sprice'].' vnđ)<br>';
}
}
//$objResponse->alert($cid);
$objResponse->assign('show_product','innerHTML',$html);

return $objResponse;
}

function processOrderPhone($id,$status){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();
$query  = $DB->query("UPDATE NNCCMS_order_phone SET status = '$status' WHERE id = '$id'");
$objResponse->redirect('index.php?act=order_phone');
return $objResponse;
}
function deleteProductOrderPhone($id,$pid){
global $CORE,$DB,$func;
$objResponse = new xajaxResponse();	
$row = $DB->fetch_row($DB-query("SELECT id_product FROM NNCCMS_order_phone WHERE id = '$id'"));

return $objResponse;
}
//$xajax->debugOn(); // Uncomment this line to turn debugging on

// Specify the PHP functions to wrap. The JavaScript wrappers will be named xajax_functionname
$xajax->registerFunction("slideshow");
$xajax->registerFunction("polls");
$xajax->registerFunction("showpolls");
$xajax->registerFunction("mailForm");
$xajax->registerFunction("pagi");
$xajax->registerFunction("rate");
$xajax->registerFunction("clickwhois");
$xajax->registerFunction("jumpMenu");
$xajax->registerFunction("getposfromgroup");
$xajax->registerFunction("getdisbycity");
$xajax->registerFunction("getDetailNews");
$xajax->registerFunction("getDetailProduct");
$xajax->registerFunction("activeStatus");
//new
$xajax->registerFunction("getImgNotes");
$xajax->registerFunction("showBgNewsCat");

$xajax->registerFunction("delCommentWishlist");

$xajax->registerFunction("getProductFromCat");

$xajax->registerFunction("processOrderPhone");
$xajax->registerFunction("getProductFromId");
$xajax->registerFunction("deleteProductOrderPhone");
// Process any requests.  Because our requestURI is the same as our html page,
// this must be called before any headers or HTML output have been sent
$xajax->processRequest();

/* xajax js scripts header*/
//echo $xajax->getJavascript('xajax2/');
$TBS->MergeField ('xajax_js',$xajax->getJavascript($CORE->homeurl.'xajax2/'));
//$xajax_files = array();
//$xajax_files[] = array("xajax2/xajax_js/xajax_core.js", "xajax");
// $xajax_files[] = array("xajax_js/xajax_debug.js", "xajax.debug");
//$xajax->getJavascript("xajax2/", $xajax_files);

// End ajax pagination =====================================================================================
?>
ZeroDay Forums Mini