View file adm_panel/smiles.php

<?php
require( '../sys/inc/core.php' );
only_level( 3 );
if ( isset( $_GET['id'] ) ) {
    $id = db::fetch("SELECT * FROM `smile` WHERE `dir` = '" . intval( $_GET['id'] ) . "' LIMIT 1", ARRAY_A);
    if ( db::count("SELECT COUNT(*) FROM `smile_dir` WHERE `id` = '" . intval( $_GET['id'] ) . "'") == 0 )
        header( "Location: admin.php" );
    if ( isset( $_GET['del'] ) ) {
        $del = db::fetch("SELECT * FROM `smile` WHERE `id` = '" . intval( $_GET['del'] ) . "' LIMIT 1", ARRAY_A);
        @unlink( H . 'style/smiles/' . $del['id'] . '.gif' );
        db::query("DELETE FROM `smile` WHERE `id` = '" . intval( $_GET['del'] ) . "'");
        $_SESSION['message'] = 'Смайл успешно удален';
        header( 'Location: ?id=' . intval( $_GET['id'] ) . '&page=' . intval( $_GET['page'] ) );
        exit;
    }
    if ( isset( $_GET['act'] ) && $_GET['act'] == 'add_smile' && isset( $_GET['ok'] ) && isset( $_POST['forms'] ) ) {
        $forms = intval( $_POST['forms'] );
        for ( $i = 0; $i < $forms; $i++ ) {
            if ( isset( $_FILES["file_$i"] ) && preg_match( '#^\.|\.jpg|\.png$|\.gif$|\.jpeg$#i', $_FILES["file_$i"]['name'] ) && filesize( $_FILES["file_$i"]['tmp_name'] ) > 0 && isset( $_POST["smile_$i"] ) ) {
                $file  = text( $_FILES["file_$i"]['name'] );
                $smile = db::real_escape_string( $_POST["smile_$i"]);
                db::query("INSERT INTO `smile` (`smile`,`dir`) values('$smile','" . intval( $_GET['id'] ) . "')");
                $ID = db::insert_id();
                if ( @copy( $_FILES["file_$i"]['tmp_name'], H . 'style/smiles/' . $ID . '.gif' ) ) {
                    @chmod( H . 'style/smiles/' . $ID . '.gif', 0777 );
                    $_SESSION['message'] = 'Выгрузка прошла успешно';
                }
            } else {
                $err = 'Файл (' . $i . ') не выгружен';
            }
        }
    }
}
if ( isset( $_GET['delete'] ) ) {
    $q = db::query("SELECT * FROM `smile` WHERE `dir` = '" . intval( $_GET['delete'] ) . "'");
    while ( $post =  $q->fetch_array() ) {
        @unlink( H . 'style/smiles/' . $post['id'] . '.gif' );
        db::query("DELETE FROM `smile` WHERE `id` = '" . $post['id'] . "'");
    }
    db::query("DELETE FROM `smile_dir` WHERE `id` = '" . intval( $_GET['delete'] ) . "'");
    $_SESSION['message'] = 'Категория успешно удалена';
    header( "Location: ?" );
    exit;
}
$set['title'] = 'Управление смайлами';
get_header_admin(); 
if ( isset( $_GET['id'] ) ) {
    if ( isset( $_GET['act'] ) && $_GET['act'] == 'add_smile' ) {
        if ( isset( $_POST['forms'] ) )
            $forms = intval( $_POST['forms'] );
        elseif ( isset( $_SESSION['forms'] ) )
            $forms = intval( $_SESSION['forms'] );
        else
            $forms = 1;
        $_SESSION['forms'] = $forms;
?>
        <form enctype="multipart/form-data" action="?id=<?= intval( $_GET['id'] ) ?>&amp;act=add_smile&amp;ok"
              method="post">
            Количество файлов:<br/>
            <input type="text" name="forms" value="<?= $forms ?>"/><br/>
            <input class="submit" type="submit" value="Показать формы"/><br/>
            <?php
        for ( $i = 0; $i < $forms; $i++ ) {
            echo ( $i + 1 ) . ') Файл: <input name="file_' . $i . '" type="file" /><br />';
            echo ( $i + 1 ) . ') Смайл(например :-) или :-D .....)<br /><input type="text" name="smile_' . $i . '" maxlength="32" /><br />';
        }
?>
            <input type="submit" value="Добавить"/>
            <br/><a href="?id=<?= intval( $_GET['id'] ) ?>">Назад</a><br/>
        </form>
        <?php
    }
    $k_post = db::count("SELECT COUNT(*) FROM `smile` WHERE `dir`='" . intval( $_GET['id'] ) . "'");
    $k_page = k_page( $k_post, $set['p_str'] );
    $page   = page( $k_page );
    $start  = $set['p_str'] * $page - $set['p_str'];
?>
    <table class="post"><?php
    if ( $k_post == 0 ) {
?>
        <div class="mess">Список смайлов пуст</div><?php
    }
    $q = db::query("SELECT * FROM `smile` WHERE `dir`='" . intval( $_GET['id'] ) . "' ORDER BY id DESC LIMIT $start, $set[p_str]");
    while ( $post =  $q->fetch_array() ) {
        echo '<div class="' . ( $num % 2 ? "nav1" : "nav2" ) . '">';
        $num++;
?>
        <img src="/style/smiles/<?= $post['id'] ?>.gif" alt="smile"/> <?= text( $post['smile'] ) ?>

        <a href="?id=<?= intval( $_GET['id'] ) ?>&amp;edit=<?= $post['id'] ?>&amp;page=<?= $page ?>"><img
                    src="/style/icons/edit.gif" alt="*"></a>
        <a href="?id=<?= intval( $_GET['id'] ) ?>&amp;del=<?= $post['id'] ?>&amp;page=<?= $page ?>"><img
                    src="/style/icons/delete.gif" alt="*"></a>
        <?php
        if ( isset( $_GET['edit'] ) && $_GET['edit'] == $post['id'] ) {
            if ( isset( $_POST['sav'] ) ) {
                $smile = my_esc( $_POST['smile'] );
                if ( strlen2( $smile ) < 1 )
                    $err = 'Названее не менее 1 символа';
                if ( !isset( $err ) ) {
                    db::query("UPDATE `smile` SET `smile` = '$smile' WHERE `id` = '$post[id]'");
                    $_SESSION['message'] = 'Изменения приняты';
                    header( "Location: ?id=$post[dir]&page=$page" );
                    exit;
                }
            }
?>
            <form method="post" action="?id=<?= $post['dir'] ?>&amp;edit=<?= $post['id'] ?>&amp;page=<?= $page ?>">
                <?= ( isset( $err ) ? '<font color="red">' . $err . '</font><br />' : null ) ?>
                Смайл (например :-) ..)<br/>
                <input type="text" name="smile" maxlength="32" value="<?= text( $post['smile'] ) ?>"/><br/>
                <input type="submit" name="sav" value="Изменить"/>
            </form>
            <?php
        }
?></div><?php
    }
?></table><?php
    if ( $k_page > 1 )
        str( '?id=' . intval( $_GET['id'] ) . '&amp;', $k_page, $page );
?>
    <div class="foot">
        <img src="/style/icons/str.gif" alt="*"/> <a href="?id=<?= intval( $_GET['id'] ) ?>&amp;act=add_smile">Добавить
            смайл</a>
    </div>

    <div class="foot">
        <img src="/style/icons/str.gif" alt="*"/> <a href="smiles.php">Категории смайлов</a>
    </div>
    <?php
    include_once H . 'sys/inc/tfoot.php';
    exit;
}
if ( isset( $_GET['act'] ) && $_GET['act'] == 'add_kat' ) {
    if ( isset( $_POST['save'] ) ) {
        $name = db::real_escape_string( $_POST['name']);
        if ( strlen2( $name ) < 1 )
            $err = 'Слишком короткое название';
        if ( !isset( $err ) ) {
            db::query("INSERT INTO `smile_dir` (`name` ) VALUES ('$name')");
            $_SESSION['message'] = 'Категория успешно создана';
            header( "Location: ?act=add_kat" );
            exit;
        }
    }
    err();
?>
    <form method="post" action="?act=add_kat">
        Название<br/>
        <input type="text" name="name" maxlength="32"/><br/>

        <input type="submit" name="save" value="Добавить"/>
    </form>
    <?php
}
$k_post = db::count("SELECT COUNT(*) FROM `smile_dir`");
?>
    <table class="post"><?php
if ( $k_post == 0 ) {
?>
    <div class="mess">Нет категорий</div><?php
}
$q = db::query("SELECT * FROM `smile_dir`");
while ( $post =  $q->fetch_array() ) {
    echo '<div class="' . ( $num % 2 ? "nav1" : "nav2" ) . '">';
    $num++;
?>
    <img src="/style/themes/<?= $set['set_them'] ?>/loads/14/dir.png" alt="*">
    <a href="?id=<?= $post['id'] ?>"><?= text( $post['name'] ) ?></a> (<?= db::count("SELECT COUNT(*) FROM `smile` WHERE `dir` = '$post[id]'") ?>)

    <a href="?edit=<?= $post['id'] ?>"><img src="/style/icons/edit.gif" alt="*"></a>
    <a href="?delete=<?= $post['id'] ?>"><img src="/style/icons/delete.gif" alt="*"></a>

    </div>
    <?php
    if ( isset( $_GET['edit'] ) && $_GET['edit'] == $post['id'] ) {
        if ( isset( $_POST['sav'] ) ) {
            $name = my_esc( $_POST['name'] );
            if ( strlen2( $name ) < 1 )
                $err = 'Название не менее 1 символа';
            if ( !isset( $err ) ) {
                db::query("UPDATE `smile_dir` SET `name` = '" . $name . "' WHERE `id` = '" . intval( $_GET['edit'] ) . "'");
                $_SESSION['message'] = 'Категория успешно переименована';
                header( "Location: ?" );
                exit;
            }
        }
?>
        <form method="post" action="?edit=<?= $post['id'] ?>">
            <?= ( isset( $err ) ? '<font color="red">' . $err . '</font><br />' : null ) ?>
            Название:<br/>
            <input type="text" name="name" maxlength="32" value="<?= text( $post['name'] ) ?>"/><br/>
            <input type="submit" name="sav" value="Изменить"/>
        </form>
        <?php
    }
?></div><?php
}
?></table><?php
?>
    <div class="foot">
        <img src="/style/icons/str.gif" alt="*"> <a href="?act=add_kat">Добавить категорию</a><br/>
    </div>
<?php
get_footer_admin();