403Webshell
Server IP : 89.46.109.6  /  Your IP : 216.73.216.84
Web Server : Apache
System : Linux hlpi1ws-c284v20.ad.aruba.it 6.8.0-139-generic #139-Ubuntu SMP PREEMPT_DYNAMIC Sat Aug 1 03:52:05 UTC 2026 x86_64
User : ID19067310 ( 19067310)
PHP Version : 5.3.29
Disable Function : system,popen,dl,passthru,proc_open,shell_exec
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /web/htdocs/www.edizacco.it/home/pannello/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /web/htdocs/www.edizacco.it/home/pannello/gestione_volantini.php
<?php 
ob_start();
@session_start();
require_once('../include/connect_db.php');
require_once('include/templates.php');
include('include/sessione.inc.php');
require_once 'include/class.ycpager.php';
$meta_title = TITLE;
$_SESSION['page'] = "volantini";
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title><?php echo"$meta_title | Area Riservata"; ?></title>
<link href="css/master.css" rel="stylesheet" type="text/css" />
<link href="css/paginazione.css" rel="stylesheet" type="text/css" />

<link href="js/ordering/ordering.css" rel="stylesheet" type="text/css" />
<link type="text/css" rel="stylesheet" href="js/ordering/jquery-ui.css" media="screen" />
<script src="js/ordering/jquery.min.js" type="text/javascript"></script>
<script src="js/ordering/jquery-ui.min.js" type="text/javascript"></script>
<script type="text/javascript">
$(function() {
  $("#banner").sortable({
    placeholder: 'ui-state-highlight',
    update: function(e, ui) {
      var order = $('#banner').sortable('serialize');
      $.post('gestione_volantini_azione.php?action=reorder', order);
    }
  });
});
</script>
</head>

<body>
<!-- WRAPPER INIZIO -->
<div id="wrapper">

	<!-- WRAPPER HEADER INIZIO-->
	<div id="wrapper_header">
		<div id="header"><?php select_header(); ?></div>
	</div>
	<!-- WRAPPER HEADER FINE-->

	<!-- WRAPPER CONTAINER INIZIO-->
	<div id="wrapper_container">
	
		<!-- MENU INIZIO-->
		<div id="menu"><?php select_menu(); ?></div>
		<!-- MENU FINE-->
		
		<!-- CONTENUTI INIZIO-->
		<div id="contenuto">
<?php
// GESTIONE PAGINA
if ( isset($_REQUEST['action']) ) {	$action = $_REQUEST['action']; } else {	$action = "elenco"; }
				
switch ($action) {
	case 'elenco': elenco(); break;
	case 'modulo': modulo(); break;
	default: elenco(); break;
}
///////////////////////////////////////////////////////////////////////////////////////////
/// ELENCO BANNER /////////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////////////////////////
function elenco(){
	$prefix = PREFIX;
	$directory = VOLANTINIDIRECTORY;
	echo'<h1>ELENCO VOLANTINI:</h1>';
	$total = mysql_query( "SELECT id_volantino FROM ".$prefix."_volantini");
	$numero_notizie = mysql_num_rows( $total );
	
	echo'
		<div id="submenu">
			<ul id="navsub">
				<li class="num">Totale Volantini: <b>'.$numero_notizie.'</b></li>
			</ul>
		</div>
	';	

	$colore[]="#DFE9EE";
	$colore[]="#F8FBFC";
	$indice_colore=0;
	echo'<ul id="banner">';
				
	$carica = mysql_query( "SELECT * FROM ".$prefix."_volantini ORDER BY ordering ASC, id_volantino ASC");
	if ( mysql_num_rows($carica) <= 0 ) {
		echo '<p>Al momento non esistono volantini pubblicati!</p>';
	}
	while( $row_carica = mysql_fetch_assoc($carica)) {
			$id_volantino = $row_carica['id_volantino'];
			$titolo = substr(strip_tags(stripslashes($row_carica['titolo'])), 0, 120);
			$pdf = $row_carica['pdf'];
			$stato = stripslashes($row_carica['stato']);
				if( $pdf != "" ){ $tag_pdf = '<a href="../'.$directory.'/'.$pdf.'" target="_blank"><img src="images/ic_pdf.png" alt="" class="images" /></a>'; }else{ $tag_pdf = ''; }
				if( $stato == '1' ){
					$tag_stato = '<a href="gestione_volantini_azione.php?action=stato&amp;stato=0&amp;id_volantino='.$id_volantino.'" onclick="return confirm(\'ATTENZIONE. NASCONDERE QUESTO VOLANTINO?\')"><img src="images/btn_stato_vedi.png" alt="NASCONDI VOLANTINO" class="btn"></a>';
				}elseif( $stato == '0' ){
					$tag_stato = '<a href="gestione_volantini_azione.php?action=stato&amp;stato=1&amp;id_volantino='.$id_volantino.'" onclick="return confirm(\'ATTENZIONE. ATTIVARE QUESTO VOLANTINO?\')"><img src="images/btn_stato_nascondi.png" alt="ATTIVARE VOLANTINO" class="btn"></a>';
				}
			echo'
				<li id="banner_'.$id_volantino.'" style="background-color:'.$colore[$indice_colore].';">
					<div class="azione">
						<a href="gestione_volantini.php?action=modulo&amp;act=edit&amp;id_volantino='.$id_volantino.'"><img src="images/btn_edit.png" alt="MODIFICA VOLANTINO" class="btn"></a>
						<a href="gestione_volantini_azione.php?action=delete&amp;id_volantino='.$id_volantino.'" onclick="return confirm(\'ATTENZIONE. ELIMINARE QUESTO VOLANTINO?\')"><img src="images/btn_delete.png" alt="ELIMINA VOLANTINO" class="btn"></a>
					</div>
					<div class="images">'.$tag_pdf.'</div>
					<div class="h1">'.$titolo.'</div>
					<div class="stato">'.$tag_stato.'</div>
				</li>
			';
			$indice_colore=1-$indice_colore;
		}
				
		echo'
			</ul>
			<p class="add_style"><a href="gestione_volantini.php?action=modulo&amp;act=add&amp;tipo='.$tipo.'" class="add_button">Aggiungi Volantino</a></p>	
		';

}
///////////////////////////////////////////////////////////////////////////////////////////
/// MODULO ////////////////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////////////////////////
function modulo(){
	$prefix = PREFIX;
	$directory = VOLANTINIDIRECTORY;
	$act = $_REQUEST['act'];

	if( $act == "add" ){
		$tag_h1 = 'NUOVO';
		$value_titolo = '';
		$value_url = '';
		$value_finestra = '_self';
		$value_immagine = '';
		$value_stato = '1';
		$tag_submit = 'AGGIUNGI';
		$tag_hidden_id = '';
	}elseif ( $act == "edit" ){
		$id_volantino = isset($_GET['id_volantino']) ? (int)$_GET['id_volantino'] : 0;
		$carica_volantino = mysql_fetch_assoc(mysql_query("SELECT * FROM ".$prefix."_volantini WHERE id_volantino = '$id_volantino'"));
		$tag_h1 = 'MODIFICA';
		$tag_h1 = 'NUOVO';
		$value_titolo = 'value="'.htmlspecialchars(stripslashes($carica_volantino['titolo'])).'"';
			if( $carica_volantino['pdf'] != "" ){
				$value_pdf = '
					<div class="edit_allegato" style="width:170px;"> <a href="../'.$directory.'/'.$carica_volantino['pdf'].'" target="_blank"><img src="images/pdf.png" alt="" class="images" /></a> [ <input name="del_pdf" type="checkbox" class="checkbox" value="1" /> ELIMINA ]</p>
					</div>
				';
			}else{ $value_pdf = ''; }
		$value_stato = $carica_volantino['stato'];
		$tag_submit = 'MODIFICA';
		$tag_hidden_id = '<input name="id_volantino" type="hidden" value="'.$id_volantino.'" />';
	}

	echo'
		<h1>ELENCO VOLANTINI > <b>'.$tag_h1.' VOLANTINO</b></h1>
		<form action="gestione_volantini_azione.php?action=save" method="post" enctype="multipart/form-data" name="modulo" id="modulo" onsubmit="return OkBanner(this)">
			<p><label class="label">Titolo:</label><input name="titolo" type="text" class="input" style="width:535px;" '.$value_titolo.'/></p>
			<p>
				<label class="label" style="height:27px; line-height:27px;">Carica PDF:</label>
				'.$value_pdf.'
				<div class="edit_allegato"  style="width:351px; padding:1px;"><p><input name="pdf" type="file" class="file" size="30" /></p></div>
			</p>
			<p>
				<label class="label">Stato:</label>
				<input type="radio" name="stato" value="1" class="radio"';if($value_stato=='1'){echo' checked="checked"';}else{echo'';} echo'/><span class="text_radio">ATTIVO</span>
				<input type="radio" name="stato" value="0" class="radio"';if($value_stato=='0'){echo' checked="checked"';}else{echo'';} echo'/><span class="text_radio">NASCOSTO</span>
			</p>
			<p>&nbsp;<input name="act" type="hidden" value="'.$act.'" />'.$tag_hidden_id.'</p>
			<p><label class="label"></label><input type="submit" name="submit" id="submit" value="'.$tag_submit.'" /></p>
		</form>
		<p class="back_style"><a href="gestione_volantini.php" class="back_button">Torna Indietro</a></p>	
	';
}
?>
		</div>
		<!-- CONTENUTI FINE-->
	</div>
	<!-- WRAPPER CONTAINER FINE-->

	<div class="push"></div>
</div>
<!-- WRAPPER FINE -->


<!-- WRAPPER FOOTER INIZIO-->
<div id="wrapper_footer"><?php select_footer(); ?></div>
<!-- WRAPPER FOOTER FINE-->

</body>
</html>

Youez - 2016 - github.com/yon3zu
LinuXploit