? GR0V Shell

GR0V shell

Linux www.koreapackagetour.com 2.6.32-042stab145.3 #1 SMP Thu Jun 11 14:05:04 MSK 2020 x86_64

Path : /home/admin/public_html/modules/blog/
File Upload :
Current File : /home/admin/public_html/modules/blog/com_topic.php

<?
class topic extends backoff
{
function list_sub_usertype($parent){
							$rs=$this->Query("SELECT * FROM content_cat WHERE  CatParentID='$parent'");
							while($arr=mysql_fetch_array($rs)){
								$str.=$arr['CatID']."-";
								$str.=$this->list_sub_usertype($arr['CatID']);
								}
			return $str;
}
function get_sub_cat($parent,$selected,$option){
			global $user_login;
			$u=$user_login['ID'];
			$access=$user_login['Access'];
$rs=$this->Query("SELECT * FROM content_cat where  CatParentID='$parent'");

			if($parent!=''){
			$option.="&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
			}
//$rs=$this->Query("SELECT * FROM package_cat where parent='$parent' and user_id='$u'");
while($arr=mysql_fetch_array($rs)){
	$id=$arr['CatID'];
	$name=$arr['CatName'];
	if($arr['CatID']==$selected){$s="selected";}else{$s="";}
	if($parent!=''){
		$html.="<OPTION VALUE=\"$id\" $s>$option $name</OPTION>";
	}else{	$html.="<OPTION VALUE=\"$id\" $s>$name</OPTION>";	}

$html.=$this->get_sub_cat($arr['CatID'],$selected,$option);
}//end while
return $html;
}

function list_by_group(){
global $user_login;
$output.="
<table width=\"400\" border=0>
<tr><form method=\"GET\" action=\"$link\" name=\"form_group\">
<td width=\"100%\">
แสดงตามหมวดหมู่&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
$output.="<select name=list_group  onchange=\"document.form_group.submit()\">";
$output.="<option value=\"All\" selected> --เลือกทั้งหมด--</option>";

$result=$this->Query("SELECT * FROM content_cat   order by CatID DESC");

 $output.=$this->get_sub_cat($r,$_GET['list_group'],$option);
if($_GET){
			foreach ($_GET as $key => $value){
				if($key !="list_group"){
					$output.= "<input type='hidden' name='$key' value='$value'>\n";
				}
			}
		}
	$output.="</select>";
	$output.="</td></form></tr></table>";
return $output;
}//end function company
function Search(){
	$output.="<table width=\"350\" height=\"20\"><form method=\"GET\" action=\"$link\" name=\"search\"><tr><td width=\"100%\">
	<input type='hidden' name='option' value='search'>
		<input type='hidden' name='page' value='1'>
		<select size=\"1\" name=\"key\">";
	$keysearch=array('ContentName'=>"ชื่อเรื่อง");
	foreach($keysearch as $key=>$value){
		if($_GET['key']==$key){
			$output.="<option value=\"$key\" selected>$value</option>";
		}//end if $_GET['key']
		else{
$output.="<option value=\"$key\">$value</option>";
		}
	}

	if($_GET){
			foreach ($_GET as $key => $value){
				if($key != "key" && $key != "keyword" && $key !="search"&&$key!="page"){
					$output.= "<input type='hidden' name='$key' value='$value'>\n";
				}
			}
		}
	$output.="</select>";
	if($_GET['keyword']!=""){
	$output.="<input type='textbox' name='keyword' size=\"20\" value=".$_GET['keyword'].">";
	}else{
		$output.="<input type='textbox' name='keyword' size=\"25\">";
		}
	$output.="<input type='submit' value=\"search\" size=10>";
	$output.="</td></tr></form></table>";
return $output;
}

function listData($table,$condition,$orderby,$sort,$chksort,$header_txt,$header_td_width,$link){
global $user_login;
$this->_header_txt=$header_txt;

	foreach($header_txt as $table_colum => $header_txt_name){
		if($orderby==$header_txt_name){
		$orderby2="binary $table_colum";
		}
	}
if($chksort=='Yes'){
		if($sort=="Min2Max"){
			$sort="Max2Min";
			$sort2="ASC";
			$sort3=$sort;
		}else if($sort=="Max2Min"){
			$sort="Min2Max";
			$sort2="DESC";
			$sort3=$sort;
		}
}else{
		if($sort=="Min2Max"){
		$sort="Min2Max";
		$sort2="ASC";
		$sort3="Max2Min";
		}else if($sort=="Max2Min"){
		$sort="Max2Min";
		$sort2="DESC";
		$sort3="Min2Max";
		}
}
// จะต้องมีการแก้ไขให้ตรงกับฐานข้อมูล *** ตัวแปร $orderby2
if($orderby2==""){
$orderby2="CatID";
}

$this->_Start = ($this->_Page * $this->_Limit) - $this->_Limit;
if($_SESSION["user_login"]['Type'] == 3){
	$sql= "SELECT * FROM contents WHERE CatID = 135 AND ContentBlogID = '".$_SESSION["user_login"]['ID']."' ORDER BY $orderby2 $sort2,ContentID DESC ";
}else{
$sql= "SELECT * FROM contents WHERE $condition ORDER BY $orderby2 $sort2,ContentID DESC";
}
$this->setQuery($sql);
$result=$this->QueryReturn();
$this->_total=$this->NumRows();
$this->_Next_Page = ceil($this->_total/$this->_Limit);
//$sql.= " LIMIT " . $this->_Start . "," .  $this->_Limit;
$this->setQuery($sql);
//echo $sql;
$result2=$this->QueryReturn();
$this->PageNavigator();
$check="";

		$output.="
		<div class=\"wrapper\">
		<div class=\"content\">
    	<div class=\"title\"><img style=\"padding:10px 0 0 15px; float:left;\" src=\"images/icons/dark/docs.png\"><h5>รีวิวทั้งหมด</h5></div>
        <div class=\"table\">
            <div class=\"head\"></div>";

$output.="<form method=\"POST\" action=\"/backend/admin.php?mod=blog\" name=\"backend_form\" id=\"backend_form_check\">
            <table cellpadding=\"0\" cellspacing=\"0\" border=\"0\" class=\"display\" id=\"example\">
                <thead>
                    <tr><th width=\"5%\"></th>";
					foreach($header_txt as $table_colum => $header_txt_name){

					    $output.="<th>{$header_txt_name}</th>";

					$i++;
					}

		$output.="<th width=\"10%\">แก้ไขบทความ</th>
				  <th width=\"9%\">ลบบทความ</th>";
       	$output.="</tr></thead>";


$output.="<tbody>";
$data_colum=Array();
$count=0;
while($arr=mysql_fetch_array($result2))
{
$id = $arr['ContentID'];
$CatID = $arr['CatID'];
$j=0;
foreach($header_txt as $colum => $key){
			$data_colum[$j]=$arr[$colum];
			$j++;
}//end foreach
$link=$_SERVER['PHP_SELF']."?".$_SERVER['QUERY_STRING'];
$output.="<tr class=\"gradeA\">";
$output.="<td><input type=\"checkbox\" name=\"checkbox[$count]\" id=\"checkbox_$count\" value=\"$id\"></td>";

for($i=0;$i<count($data_colum);$i++){
if($i==2){
	if($data_colum[$i]==1)
	{
$output.="<td style=\"color:green;font-weight:bold;\">

<a href='".$_SERVER['PHP_SELF']."?mod=blog"."&&ac=edit_data_public&&public=0&&topic_id=".$id."' style=\"color:green;\">อนุญาต</a></td>";
}
else
{
$output.="<td style=\"color:red;font-weight:bold;\">
<a href='".$_SERVER['PHP_SELF']."?mod=blog"."&&ac=edit_data_public&&public=1&&topic_id=".$id."' style=\"color:red;\">ไม่อนุญาต</a></td>";
}
}
else
$output.="<td>$data_colum[$i] </td>";

}

$link_del=$_SERVER['PHP_SELF']."?mod=blog"."&ac=del_data&id=$id";
$comment="ยืนยันคำสั่งลบข้อมูล";
$alt="ลบข้อมูล";

		if($CatID != 57)
		{
			 $output.="<td class=\"center\"><a href=\"".$_SERVER['PHP_SELF']."?mod=blog"."&ac=edit_data&id={$id}\"  class=\"btn14 mr5\"><img src=\"images/icons/dark/pencil.png\" > แก้ไข</a></td>
           <td class=\"center\">".confirm_del($link_del,$comment,$alt)."</td>
		   </tr>";
		}
		else
		{
			 $output.="<td class=\"center\"><a href=\"".$_SERVER['PHP_SELF']."?mod=blog"."&ac=edit_data&id={$id}\"  class=\"btn14 mr5\"><img src=\"images/icons/dark/pencil.png\" > แก้ไข</a></td>
			   <td class=\"center\">-</td>
			   </tr>";
		}

 } //while
			    $output.="
             </tbody>
            </table>
		 </form>
      </div>

    </div>
    <div class=\"fix\"></div>
</div>";



return $output;
}//end listData

function listData_idx_list($table,$condition,$orderby,$sort,$chksort,$header_txt,$header_td_width,$link){
global $user_login;
$this->_header_txt=$header_txt;

	foreach($header_txt as $table_colum => $header_txt_name){
		if($orderby==$header_txt_name){
		$orderby2="binary $table_colum";
		}
	}
if($chksort=='Yes'){
		if($sort=="Min2Max"){
			$sort="Max2Min";
			$sort2="ASC";
			$sort3=$sort;
		}else if($sort=="Max2Min"){
			$sort="Min2Max";
			$sort2="DESC";
			$sort3=$sort;
		}
}else{
		if($sort=="Min2Max"){
		$sort="Min2Max";
		$sort2="ASC";
		$sort3="Max2Min";
		}else if($sort=="Max2Min"){
		$sort="Max2Min";
		$sort2="DESC";
		$sort3="Min2Max";
		}
}
// จะต้องมีการแก้ไขให้ตรงกับฐานข้อมูล *** ตัวแปร $orderby2
if($orderby2==""){
if ($_SESSION["la"] == 1){
$orderby2="contents.ContentID";
}else{
$orderby2="contents.ContentID";
}

}

$this->_Start = ($this->_Page * $this->_Limit) - $this->_Limit;
$sql= "SELECT * FROM $table ";

$this->setQuery($sql);
$result=$this->QueryReturn();
$this->_total=$this->NumRows();
$this->_Next_Page = ceil($this->_total/$this->_Limit);
$this->setQuery($sql);
$result2=$this->QueryReturn();
$this->PageNavigator();
		$output.="
		<div class=\"wrapper\">
		<div class=\"content\">
    	<div class=\"title\"><img style=\"padding:10px 0 0 15px; float:left;\" src=\"images/icons/dark/docs.png\"><h5>แสดงผล แฮปปี้โคเรียลาแนล หน้าหลัก 3 อันดับ</h5></div>
        <div class=\"table\">
            <div class=\"head\"></div><form method=\"POST\" action=\"$link2\" name=\"backend_form\" >
            <table cellpadding=\"0\" cellspacing=\"0\" border=\"0\" class=\"display\" id=\"example\">
                <thead>
                    <tr><th width=\"5%\"></th>";
					foreach($header_txt as $table_colum => $header_txt_name){
					$output.="<th>{$header_txt_name}</th>";
					$i++;
					}

		$output.="<th width=\"22%\">จัดตำแหน่งการแสดงผล</th>";
       	$output.="</tr></thead>";


		$output.="<tbody>";
		$data_colum=Array();
		$count=0;

		for($kkk=1;$kkk<=3;$kkk++)
				{

						$j=0;
						foreach($header_txt as $colum => $key){
									$data_colum[$j]=$arr[$colum];
									$j++;
						}//end foreach
						$link=$_SERVER['PHP_SELF']."?mod=blog";
						$output.="<tr class=\"gradeA\">";
						$output.="<td>&nbsp;</td>";
$this->setQuery("SELECT * FROM contents INNER JOIN contents_recommend ON (contents.ContentID = contents_recommend.ContentID) INNER JOIN contents_photo ON (contents.ContentID = contents_photo.ContentID) WHERE (contents_recommend.ContentRecommendRanking	 = $kkk)  order by contents_photo.id_p DESC ");

						$rsChktour_recommend= $this->QueryReturn();
						if($this->NumRows() > 0)
						{
								$arrChktour_recommend = mysql_fetch_array($rsChktour_recommend);
								for($i=0;$i<count($data_colum);$i++)
								{
									$output.="<td>";
									if($i==0)
									$output.="<img src=\"images/ContentPhoto/$arrChktour_recommend[picture]\"width=\"100\"></td>";
									else if($i==1)
									$output.="$arrChktour_recommend[ContentName]</td>";
								}
						}
						else
						{
								for($i=0;$i<count($data_colum);$i++)
								{
									$output.="<td>";
									if($i==0)
									$output.= "-</td>";
									else if($i==1)
									$output.="-</td>";
								}
						}

						$output.="<td class=\"center\"><a href=\"#\" onclick=\"Popup2('modules/content/list_index_page2.php?id=$kkk','list_index_page2',550,100)\" class=\"btn14 mr5\"><img src=\"images/icons/dark/pencil.png\"  > จัดตำแหน่ง ลำดับที่ $kkk</a></td></tr>";
						$arrChktour_recommend['id_g'] = "";
				} //for

			    $output.="
             </tbody>
            </table>
		 </form>
      </div>

    </div>
    <div class=\"fix\"></div>
</div>";



return $output;
}//end listData

}//end class BackEndData
?>

T1KUS90T
  root-grov@210.1.60.28:~$