| 12
 3
 4
 5
 6
 7
 8
 9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
 100
 101
 102
 103
 104
 105
 106
 107
 108
 109
 110
 111
 112
 113
 114
 115
 116
 117
 118
 119
 120
 121
 122
 123
 124
 125
 126
 127
 128
 129
 130
 131
 132
 133
 134
 135
 136
 137
 138
 139
 140
 141
 142
 143
 144
 145
 146
 147
 148
 149
 150
 151
 152
 153
 154
 155
 156
 157
 158
 159
 
 | <?php
/* Fichier: Admin.php
* Description: Réalise les tâches de manipulation de données,
* comme la création, la modification ou la suppression
* de contenu
*/
session_start();
include_once("functions_main.inc");
 
foreach ($_POST as $name => $value) #9
$$name = $value;
foreach ($_GET as $name => $value) #11
$$name = $value;
 
if (!isset($action)) #14
header("Location: CompanyHome.php");
 
 
 
if (!isset($create_date)) #17 
$create_date = date("Y-m-d", time());
else
$create_date = time($create_date);
 
if (!isset($content_date))
$content_date = date("Y-m-d", time());
 
else
 
 
$content_date = date("d/m/Y",strtotime($content_date) );
 
$last_upd_date = date("Y-m-d", time());
 
 
if (!isset($created_by))
$created_by = $_SESSION["user_name"];
$last_upd_by = $_SESSION["user_name"];
$cxn = Connect_to_db("Vars.inc");
$titre = mysqli_real_escape_string($cxn,$titre);
$description = mysqli_real_escape_string($cxn,$description);
 
switch ($action) #35
{
case "delete": #37
$sql = "DELETE FROM Contenu
WHERE content_id=$content_id";
 
mysqli_query($cxn, $sql);
$sql = "DELETE FROM Content_Download
WHERE content_id=$content_id";
mysqli_query($cxn, $sql);
 
break;
 
 
case "Enregistrer les changements": #48
 
    $message_2 = "";
 
if ($content_date <= 0)
$message_2 = "<li>Date de contenu invalide";
 
if ($titre == "")
$message_2 .= "<li>Le titre ne peut être vierge";
 
if ($message_2)
$message_2 = "Merci de corriger ces erreurs : $message_2";
 
if ($message_2 != "")
{
include("CompanyHome.php");
exit();
}
if ($content_id) #65
{
$sql = "UPDATE Contenu
SET titre = '$titre',
description = '$description',
content_date = '$content_date',
last_upd_date = '$last_upd_date',
last_upd_by = '$last_upd_by'
WHERE content_id = $content_id";
} #75
else #75
{
     $sql = "INSERT INTO contenu SET content_date = STR_TO_DATE('$content_date', '%d/%m/%Y'),
dept_id = $dept_id ,sous_type_one = $sous_type_one, content_type =$sous_type_two,
titre = '$titre', description = '$description',
create_date = '$create_date', created_by ='$created_by',
last_upd_date ='$last_upd_date', last_upd_by ='$last_upd_by'";
 
 
 
 
     }
Connect_to_db("Vars.inc"); #87
 
mysqli_query($cxn, $sql);
 
 
if (!$content_id)
$content_id = mysqli_insert_id($cxn); #92
 
foreach ($_FILES as $file) #94
{
     $file_name = $file["name"];
if ($file["size"] <= 0)
continue;
 
$sql = "INSERT INTO Contenu_Download (content_id, file_name)
VALUES ($content_id, '$file_name')";
mysqli_query($cxn, $sql);
$file_id = mysqli_insert_id($cxn); #103
$dest_dir = "files".DIRECTORY_SEPARATOR.$file_id;
$dest_file = $dest_dir.DIRECTORY_SEPARATOR.$file_name;
 
if(!file_exists($dest_dir)) #107
{
if(!mkdir($dest_dir, 0700, TRUE))
die ("Archivage du document impossible dans $dest_dir");
}
 
if (!file_exists($dest_file)) #113
{
if (!move_uploaded_file($file["tmp_name"], $dest_file))
die ("Archivage du document impossible dans $dest_dir");
}
}
 
break;
case "DeleteDownload": #121
$sql = "SELECT distinct c.dept_id, c.content_type as sous_type_two,b.content_type as sous_type_one
FROM contenu c, Contenu_Download e, sous_type_two b
            WHERE e.download_id=$download_id
AND c.content_id = e.content_id
and c.sous_type_one = b.content_type";
 
$results = mysqli_query($cxn, $sql);
 
$row = mysqli_fetch_assoc($results);
$dept_id = $row["dept_id"];
    $sous_type_one = $row["sous_type_one"];
$sous_type_two = $row["sous_type_two"];
#132
$sql = "DELETE FROM Contenu_Download
WHERE download_id=$download_id";
mysqli_query($cxn, $sql);
 
break;
case "Annuler":
break;
}
 
$query_str = "browse_level=content2" #142
. "&dept_id=$dept_id&sous_type_one=$sous_type_one&sous_type_two=$sous_type_two";
header("Location: CompanyHome.php?$query_str");
 
?> | 
Partager