File: /home/nyiet8349bzl/Backup/sbc_back/homedir/public_html/old-myadmin/NewUpdate/processNew.php
<?php
require_once '../../library/config.php';
require_once '../library/functions.php';
checkUser();
$action = isset($_GET['action']) ? $_GET['action'] : '';
switch ($action) {
case 'add' :
addNews();
break;
case 'modifyNews':
modifyNews();
break;
case 'deleteNews' :
deleteNews();
break;
case 'putON':
putON();
break;
case 'putOFF':
putOFF();
break;
default :
header('Location: index.php');
}
function addNews()
{
$title = $_POST['Title'];
$link = $_POST['nwlink'];
$sql = "INSERT INTO newupdate (nw_title, nw_link, nw_add_date, IsActive )
VALUES ('$title', '$link', NOW(), 1)";
$result = dbQuery($sql);
header("Location: index.php");
}
/*
Modify a Deals
*/
function modifyNews()
{
if (isset($_GET['Id']) && (int)$_GET['Id'] > 0) {
$Id = (int)$_GET['Id'];
} else {
header('Location: index.php');
}
$title = $_POST['nw_title'];
$link = $_POST['nwlink'];
if($link == "")
{
$sql = "UPDATE newupdate SET nw_title = '$title', nw_edit_date = NOW()
WHERE nw_id = $Id";
}
else
{
$sql = "UPDATE newupdate SET nw_title = '$title', nw_link = '$link', nw_edit_date = NOW()
WHERE nw_id = $Id";
}
$result = dbQuery($sql);
header('Location: index.php');
}
/*
Remove a product
*/
function deleteNews()
{
if (isset($_GET['Id']) && (int)$_GET['Id'] > 0) {
$Id = (int)$_GET['Id'];
} else {
header('Location: index.php');
}
$sql = "DELETE FROM newupdate
WHERE nw_id = $Id";
dbQuery($sql);
header('Location: index.php');
}
function putON()
{
if (isset($_GET['Id']) && (int)$_GET['Id'] > 0) {
$Id = (int)$_GET['Id'];
} else {
header('Location: index.php');
}
$sql = "UPDATE newupdate SET IsActive=1
WHERE nw_id = $Id";
$result = dbQuery($sql);
if (isset($_GET['page']) && (int)$_GET['page'] > 0) {
$p = (int)$_GET['page'];
header("Location: index.php?page=$p");
} else {
header('Location: index.php');
}
}
function putOFF()
{
if (isset($_GET['Id']) && (int)$_GET['Id'] > 0) {
$Id = (int)$_GET['Id'];
} else {
header('Location: index.php');
}
$sql = "UPDATE newupdate SET IsActive=0
WHERE nw_id = $Id";
$result = dbQuery($sql);
if (isset($_GET['page']) && (int)$_GET['page'] > 0) {
$p = (int)$_GET['page'];
header("Location: index.php?page=$p");
} else {
header('Location: index.php');
}
}
/*
Remove a product image
*/
function deleteImage()
{
if (isset($_GET['bId']) && (int)$_GET['bId'] > 0) {
$bId = (int)$_GET['bId'];
} else {
header('Location: index.php');
}
if (isset($_GET['img']) && $_GET['img'] > 0) {
$img = $_GET['img'];
} else {
header('Location: index.php');
}
$deleted = _deleteImage($bId);
// update the image and thumbnail name in the database
$sql = "UPDATE chbanner
SET $img = '' WHERE PID = $bId";
dbQuery($sql);
header("Location: index.php?view=modify&BID=$bId");
}
function _deleteImage($bId, $img)
{
// we will return the status
// whether the image deleted successfully
$deleted = false;
$sql = "SELECT $img FROM chbanner
WHERE BID = $bId";
$result = dbQuery($sql) or die('Cannot delete product image. ' . mysql_error());
if (dbNumRows($result)) {
$row = dbFetchAssoc($result);
extract($row);
if ($img) {
// remove the image file
$deleted = @unlink(SRV_ROOT . "images/banner/$row[$img]");
//$deleted = @unlink(SRV_ROOT . "images/product/$pd_thumbnail");
}
}
return $deleted;
}
?>