<?php
define('BR_ROOT', './../');
include(BR_ROOT . 'common.php');
session_start();
$dpt = isset($_GET['dpt']) ? $_GET['dpt'] : '';
$admin_nav = $class = '';
if (!isset($_SESSION["log"]) || !isset($_SESSION["pass"])) //unauthorized
{
//show authorization form
if (!empty($dpt)) $dpt = '?dpt='.$dpt;
header('Location: access_admin.php'.$dpt);
die("<script>window.location='access_admin.php'".$dpt.";</script>");
}
if (isset($_SESSION["log"]) && isset($_SESSION["log_name"])) $login_name = $_SESSION["log_name"];
//logout?
if (isset($_GET["logout"])) //logout
{
//show authorization form
$_SESSION["log"] = "";
$_SESSION["pass"] = "";
$_SESSION["access"] = "";
unset($_SESSION["log"]);
unset($_SESSION["pass"]);
unset($_SESSION["access"]);
die("<script>window.location='./';</script>");
}
foreach($br_cfg['admin_nav'] as $key => $value)
{
$class = ($key == $dpt) ? 'class="selected"': '';
if (!empty($key)) $key = '?dpt='.$key;
$admin_nav .= '<li id="' . $key . '" ' . $class . '><a href="./index.php' . $key . '" class="top">' . $value . '</a></li>';
}
$template->assign_vars(array(
'ADMIN_NAV' => $admin_nav,
'LOGIN_NAME' => $login_name,
));
if (!empty($dpt) && $dpt != 'index')
{
require($dpt.'.php');
}
else
{
$form = false;
$show_select = true;
$mode = (@$_REQUEST['mode']) ? (string) $_REQUEST['mode'] : '';
$bannerID = (@$_REQUEST['bannerID']) ? (string) $_REQUEST['bannerID'] : '';
$ra_id = (@$_REQUEST['ra_id']) ? (string) $_REQUEST['ra_id'] : '';
$status = isset($_POST['status']) ? $_POST['status'] : '';
$best = isset($_POST['best']) ? $_POST['best'] : '';
$banner_url = isset($_POST['banner_url']) ? htmlspecialchars($_POST['banner_url'], ENT_QUOTES) : '';
$sort = isset($_POST['sort']) ? $_POST['sort'] : '';
$stavka = isset($_POST['stavka']) ? stripslashes(str_replace(',', '.', $_POST['stavka'])) : '';
$bank_id = isset($_POST['bank_id']) ? $_POST['bank_id'] : '';
$summa = isset($_POST['summa']) ? stripslashes(str_replace('\'', '\"', $_POST['summa'])) : '';
$sposob = isset($_POST['sposob']) ? stripslashes(str_replace('\'', '\"', $_POST['sposob'])) : '';
$srok = isset($_POST['srok']) ? stripslashes(str_replace('\'', '\"', $_POST['srok'])) : '';
$age = isset($_POST['age']) ? stripslashes(str_replace('\'', '\"', $_POST['age'])) : '';
$view_id = isset($_REQUEST['view_id']) ? $_REQUEST['view_id'] : '';
$template->assign_vars(array(
'BANNER_STATUS' => '',
'BANNER_BEST' => '',
));
switch( $mode )
{
case 'add':
$form = true;
if (isset($_POST['save_banners']))
{
$sql = DB()->sql_query("INSERT INTO ". BANNERS_TABLE ."
(status, best, hurl, stavka, sort, bank_id, summa, sposob, srok, age)
values ('$status', '$best', '$banner_url', '$stavka', '$sort', '$bank_id', '$summa', '$sposob', '$srok', '$age');") or die ("Ошибка выполнения запроса.");
header("Location: index.php");
}
$sql = "SELECT id, name
FROM ". BANK_TABLE ."
ORDER BY name ASC";
if ($result = DB()->fetch_rowset($sql))
{
foreach($result as $i => $row)
{
$template->assign_block_vars('bank', array(
'ID' => $row['id'],
'NAME' => $row['name'],
'SELECT' => ($row['id'] == $bank_id) ? true : false,
));
}
}
break;
case 'edit':
$form = true;
if ($bannerID)
{
if (isset($_POST['save_banners']))
{
$sql = "UPDATE ". BANNERS_TABLE ."
SET hurl = '$banner_url',
stavka = '$stavka',
sort = '$sort',
status = '$status',
best = '$best',
bank_id = '$bank_id',
summa = '$summa',
sposob = '$sposob',
srok = '$srok',
age = '$age'
WHERE bannerID = $bannerID";
$result = DB()->sql_query($sql);
header("Location: index.php");
}
$sql = "SELECT *
FROM ". BANNERS_TABLE ."
WHERE bannerID = $bannerID";
$result = DB()->sql_query($sql) or die ("Ошибка выполнения запроса. ".$sql);
$row = DB()->sql_fetchrow($result);
$bank_id = $row['bank_id'];
$ban_view = '';
foreach($br_cfg['but_kred'] as $key => $value)
{
if (!(DB()->fetch_row("SELECT id FROM ". BANNER_VIEW_TABLE ." WHERE viewID = '". $key ."' AND bannerID =". $bannerID))) $ban_view .= '<option value="' . $key . '">' . $value . '</option>';
}
$template->assign_vars(array(
'BANNER_ID' => $row['bannerID'],
'BANNER_STATUS' => $row['status'],
'BANNER_BEST' => $row['best'],
'BANNER_URL' => htmlspecialchars_decode($row['hurl'], ENT_QUOTES),
'BANNER_STAVKA' => $row['stavka'],
'BANNER_SORT' => $row['sort'],
'BANNER_SUMMA' => $row['summa'],
'BANNER_SPOSOB' => $row['sposob'],
'BANNER_SROK' => $row['srok'],
'BANNER_AGE' => $row['age'],
'BAN_VIEW' => $ban_view,
));
$sql = "SELECT id, name, images
FROM ". BANK_TABLE ."
ORDER BY name ASC";
if ($result = DB()->fetch_rowset($sql))
{
foreach($result as $i => $row)
{
$template->assign_block_vars('bank', array(
'ID' => $row['id'],
'NAME' => $row['name'],
'IMAGES' => $row['images'],
'SELECT' => ($row['id'] == $bank_id) ? true : false,
));
}
}
$sql = "SELECT *
FROM ". BANNER_VIEW_TABLE ."
WHERE bannerID = $bannerID";
$result = DB()->sql_query($sql) or die ("Ошибка выполнения запроса. ".$sql);
if ($result = DB()->fetch_rowset($sql))
{
foreach($result as $i => $row)
{
foreach($br_cfg['but_kred'] as $key => $value)
{
@$view_name = ($key == $row['viewID']) ? $value : $view_name;
}
$template->assign_block_vars('viewrow', array(
'ID' => $row['id'],
'NAME' => $view_name,
));
}
}
}
break;
case 'view_add':
if ($bannerID && $view_id)
{
$sql = "SELECT *
FROM ". BANNER_VIEW_TABLE ."
WHERE bannerID = $bannerID
AND viewID = '$view_id'";
$result = DB()->sql_query($sql) or die ("Ошибка выполнения запроса. ".$sql);
if (!DB()->sql_fetchrow($result))
{
$sql = DB()->sql_query("INSERT INTO ". BANNER_VIEW_TABLE ."
(bannerID, viewID)
values ('$bannerID', '$view_id');") or die ("Ошибка выполнения запроса. ".$sql);
}
header("Location: index.php?dpt=index&mode=edit&bannerID=".$bannerID."#view");
}
else die ("Ошибка. Были переданы неверные параметры добавление просмотра к баннеру.");
break;
case 'view_del':
if ($bannerID && $view_id)
{
DB()->sql_query("DELETE FROM ".BANNER_VIEW_TABLE." WHERE id='".$view_id."'");
header("Location: index.php?dpt=index&mode=edit&bannerID=".$bannerID."#view");
}
else die ("Ошибка. Были переданы неверные параметры (". $view_id .") удаления просмотра от баннера." .$bannerID);
break;
case 'field_update':
if ($_POST['p'])
{
foreach ($_POST['p'] as $key => $val)
{
update_field(BANNERS_TABLE, $val,"bannerID=".(int)$key);
}
header("Location: index.php");
}
break;
case 'delete':
if ($bannerID)
{
DB()->sql_query("DELETE FROM ".BANNERS_TABLE." WHERE bannerID='".$bannerID."'");
DB()->sql_query("DELETE FROM ".BANNER_VIEW_TABLE." WHERE bannerID='".$bannerID."'");
header("Location: index.php");
}
break;
default:
$sql = "SELECT b.*, bk.name, bk.images
FROM ". BANNERS_TABLE ." b, ". BANK_TABLE ." bk
WHERE b.bank_id = bk.id
ORDER BY sort ASC";
if ($result = DB()->fetch_rowset($sql))
{
foreach($result as $i => $row)
{
$status = 'отключен';
if ($row['status'] == 1) $status = 'включен';
$template->assign_block_vars('banner', array(
'ROW_CLASS' => !($i % 2) ? '#FFFFFF' : '#EEEEEE',
'BANNER_ID' => $row['bannerID'],
'STATUS' => $status,
'BEST' => ($row['best'] == 1 || $row['best'] == 2 || $row['best'] == 3) ? true : false,
'SORT' => $row['sort'],
'BANK_IMAGES' => $row['images'],
'BANK_NAME' => $row['name'],
'SUMMA' => $row['summa'],
'SROK' => $row['srok'],
'STAVKA' => $row['stavka'],
));
}
}
else
{
$template->assign_block_vars('banner_no', array(
'NO_BANNERS' => 'Еще нет <b>БАННЕРОВ</b>, нажимай на кнопку <b>добавить</b>'
));
}
}
$template->assign_vars(array(
'FORM' => $form,
'MODE' => $mode,
'SHOW_SELECT' => $show_select,
));
print_page('index.tpl', 'admin');
}
?>