View file ä󿪫¬/modules/services/admin.php

<?
foreach (array('start', 'compress', 'sess', 'settings', 'db_connect', 'ipua', 'fnc', 'user') as $inc) {
    require_once "../../sys/inc/$inc.php";
}

$set['title'] = 'Управление';
include_once '../../sys/inc/thead.php';


aut(); 
err();


#Навигация
echo "<div class='card-header'>";
echo "<a href='/' data-toggle='tooltip' data-placement='right' title='" . lang('На главную') . "'><i class='fa fa-home fa-lg'></i></a> <i class='fa fa-angle-right fa-fw'></i> ";
echo "<a href='/modules/services/'>" . lang('Развлечения и сервисы') . "</a> <i class='fa fa-angle-right fa-fw'></i> Управление";
echo "</div>";


echo "<div style='padding: 4px; background-color: white;'>";

 
echo "<table style='width: 100%; text-align: center;'><tr>
<td class='fn-lefti'><a style='display: block;padding: 10px;' href='/modules/services/user.php?id=$user[id]'><font color=#587C94><b>МОИ</b></font></a></td>
<td class='fn-righti-o'><a style='display: block;padding: 10px;' href='/modules/services/index.php'><font color=#587C94><b>ВСЕ</b></font></a></td>
</tr></table></div>";

echo "<div class='list-group-item'><b>Вы находитесь в режиме управления</b></div>";

if (access('adm_mysql'))
{
    
    if (isset($_GET['act']) && ($_GET['act'] == 'edit' || $_GET['act'] == 'delete')) {
	$ID = (isset($_GET['id_service']) ? (int) $_GET['id_service'] : 0);
	$apps = $pdo->query(("SELECT * FROM `services` WHERE `id` = '$ID' LIMIT 1"))->fetch(PDO::FETCH_ASSOC);
}

if (isset($_GET['act']) && $_GET['act'] == 'delete' && isset($_SESSION['sid']) && isset($_GET['sid']) && $_SESSION['sid'] == $_GET['sid'] && isset($apps['id'])) {
	$pdo->query("DELETE FROM `user_services` WHERE `id_service` = '$ID'");
	$pdo->query("DELETE FROM `services` WHERE `id` = '$ID' LIMIT 1");
	$_SESSION['message'] = __('Приложение успешно удалено');
	header('Location: admin.php');
	exit;
}

if (isset($_POST['name']) && isset($_POST['url']) && isset($_GET['act'])){
	$name = htmlspecialchars($_POST['name']);
	$opis = htmlspecialchars($_POST['opis']);
	$url = htmlspecialchars($_POST['url']);
	$ic_small = htmlspecialchars($_POST['icon_small']);
	$ic_big = htmlspecialchars($_POST['icon_big']);
	
	if (utf8_strlen($name) > 128) { $err[] = __('Название слишком длинное'); }
	elseif (utf8_strlen($name) < 2) { $err[] = __('Короткое название'); }
	
	if (utf8_strlen($opis) > 512) { $err[] = __('Описание слишком длинное'); }
	elseif (utf8_strlen($opis) < 2) { $err[] = __('Короткое описание'); }
	
	if (utf8_strlen($url) > 128) { $err[] = __('Ссылка слишком длинная'); }
	elseif (utf8_strlen($url) < 2) { $err[] = __('Короткая ссылка'); }
	
	if (!isset($err)){
		if ($_GET['act'] == 'add'){
			$pdo->query("INSERT INTO `services` (`name`, `opis`, `url`, `time`, `icon_small`, `icon_big`) values('$name', '$opis', '$url', '$time', '$ic_small', '$ic_big')");
			$_SESSION['message'] = __('Новое приложение успешно добавлено');			
		} elseif (isset($apps['id']) && $_GET['act'] == 'edit') {
			$pdo->query("UPDATE `services` SET `name` = '$name', `opis` = '$opis', `url` = '$url', `icon_small` = '$ic_small', `icon_big` = '$ic_big' WHERE `id` = '$ID' LIMIT 1");
			$_SESSION['message'] = __('Изменения успешно приняты');			
		}
		header('Location: admin.php');
		exit;
	}
}



if (isset($_GET['act'])) {
	
	if ($_GET['act'] == 'edit') {
		?>
<div class="list-group-item">

	
		<b><?= text($apps['name'])?></b><br />
		<?= ($apps['icon_big'] ? '<img src="' . text($apps['icon_big']) . '" style="max-width: 200px;" /><br />' : '')?>
		<?= output_text($apps['opis'])?>

		
		<form name="message" action="admin.php?act=edit&amp;sid=<?= $_SESSION['sid']?>&amp;id_service=<?= $ID?>" method="post">
		<br><?= __('Название')?><br />
		<input class="form-control" name="name" type="text" value="<?= text($apps['name'])?>" /><br />

		<?= __('URL')?><br />
		<input class="form-control" name="url" type="text" value="<?= text($apps['url'])?>" /><br />
		
		<?= __('Описание')?><br />	
		<textarea class="form-control" name="opis" placeholder="<?= __('Опишите основной смысл..')?>"><?= text($apps['opis'])?></textarea><br />
		
		<?= __('URL маленькой иконки')?><br />
		<input class="form-control" name="icon_small" type="text" value="<?= text($apps['icon_small'])?>"/><br />
		
		<?= __('URL большой иконки')?><br />
		<input class="form-control" name="icon_big" type="text" value="<?= text($apps['icon_big'])?>" /><br />
		
		<input class="knopka" type="submit" value="<?= __('Сохранить')?>" /> 
		</form>
		
</div>		
		<?
	} elseif ($_GET['act'] == 'add') {
		
		?>
<div class="list-group-item">		
		
		<form name="message" action="admin.php?act=add&amp;sid=<?= $_SESSION['sid']?>" method="post">
		<br><?= __('Название')?><br />
		<input class="form-control" name="name" type="text" value="" /><br />

		<?= __('URL')?><br />
		<input class="form-control" name="url" type="text" value="" /><br />
		
		<?= __('Описание')?><br />	
		<textarea class="form-control" name="opis" placeholder="<?= __('Опишите основной смысл..')?>"></textarea><br />
		
		<?= __('URL маленькой иконки')?><br />
		<input class="form-control" name="icon_small" type="text" value=""/><br />
		
		<?= __('URL большой иконки')?><br />
		<input class="form-control" name="icon_big" type="text" value="" /><br />
		
		<input class="knopka" class="submit" type="submit" value="<?= __('Добавить')?>" />
		</form>
		
		</div>
		<?
	}
	

} else {

if ($user['level'] >= 3)
{
	?>
	<div class="list-group-item"><a class='btn btn-primary btn-sm' href="admin.php?act=add"><i class='fa fa-plus fa-fw'></i> Добавить</a></div>
	<?	
}




	$k_post = $pdo->query(("SELECT COUNT(id) FROM `services`"), 0)->fetchColumn();
	$k_page = k_page($k_post,$set['p_str']);
	$page = page($k_page);
	$start = ($set['p_str'] * $page) - $set['p_str'];


	if ($k_post == 0)
	{
    $doc->NoResult();
	}

	$q = $pdo->query("SELECT * FROM `services` ORDER BY `count` DESC LIMIT $start, $set[p_str]");

	while ($service = $q->fetch(PDO::FETCH_ASSOC)) {
		
		?>
		<div class="list-group-item">
		<a href="admin.php?id_service=<?= $service['id']?>&amp;act=edit"><?= ($service['icon_small'] ? '<img src="' . text($service['icon_small']) . '" />' : '')?> <?= text($service['name'])?></a> <span style="float: right;"><a href="admin.php?id_service=<?= $service['id']?>&amp;sid=<?= $_SESSION['sid']?>&amp;act=delete"><font color=#FD786E><i class="fa fa-trash fa-lg"></i></font></a></span>
		</div>
		<?
	}

	if ($k_page > 1) {
		str('?', $k_page, $page);
	}
}

}
include_once '../../sys/inc/tfoot.php';
?>

<?