Gecko [ midwest-tb.com ]

Name	Size	Permission
assets	[ DIR ]	drwxr-xr-x
functions	[ DIR ]	drwxr-xr-x
img	[ DIR ]	drwxr-xr-x
includes	[ DIR ]	drwxr-xr-x
.htaccess	4.65 KB	-rw-r--r--
01admin.zip	112.24 KB	-rw-r--r--
add_user.php	11.21 KB	-rw-r--r--
banner.php	1.41 KB	-rw-r--r--
db.php	30 B	-rw-r--r--
delete.php	357 B	-rw-r--r--
delete_banner.php	736 B	-rw-r--r--
delete_post.php	960 B	-rw-r--r--
delete_user.php	991 B	-rw-r--r--
edit_banner.php	3.38 KB	-rw-r--r--
edit_post.php	11.55 KB	-rw-r--r--
edit_post2.php	5.62 KB	-rw-r--r--
edit_user.php	13.09 KB	-rw-r--r--
editsettings.php	2.61 KB	-rw-r--r--
error_log	54.03 KB	-rw-r--r--
function_users.php	6.8 KB	-rw-r--r--
functions.php	10.92 KB	-rw-r--r--
home.php	6.62 KB	-rw-r--r--
index.php	56 B	-rw-r--r--
insert_banners.php	3.07 KB	-rw-r--r--
insert_post.php	9.63 KB	-rw-r--r--
login.php	1.57 KB	-rw-r--r--
login_admin.php	3.11 KB	-rw-r--r--
logout.php	164 B	-rw-r--r--
member.php	17.64 KB	-rw-r--r--
payment_setting.php	2.97 KB	-rw-r--r--
picupload.php	2.12 KB	-rw-r--r--
post.php	2.02 KB	-rw-r--r--
posts.php	2.94 KB	-rw-r--r--
print_shipment.php	1.91 KB	-rw-r--r--
register_admin.php	8.45 KB	-rw-r--r--
remove_amount.php	1.01 KB	-rw-r--r--
searchmembers.php	2.94 KB	-rw-r--r--
send_email.php	5.02 KB	-rw-r--r--
testimony.php	3.15 KB	-rw-r--r--
upload_files.php	2.59 KB	-rw-r--r--
user_error.php	188 B	-rw-r--r--
user_withdrawal.php	4.99 KB	-rw-r--r--
view_admin.php	2.84 KB	-rw-r--r--
view_banners.php	2.4 KB	-rw-r--r--
view_posts.php	2.85 KB	-rw-r--r--
view_referrals_bonus.php	2.83 KB	-rw-r--r--
view_users.php	4.78 KB	-rw-r--r--
viewconversation.php	5.37 KB	-rw-r--r--
viewmessage.php	2.4 KB	-rw-r--r--
viewmessages.php	4.24 KB	-rw-r--r--
website_setting.php	3.09 KB	-rw-r--r--

Code Editor : edit_post2.php

<?php include("includes/header.php");
include("includes/navbar.php");
?>

<section id="content">
  <div class="container">
    <div class="row">
<?php

$id = $_GET['id'];

$sql = "SELECT * FROM posts WHERE id ='$id' ";
$retrival = mysqli_query($con, $sql);
$numrows=mysqli_num_rows($retrival);

if($numrows==0){
  ?>
<script type="text/javascript">
        window.location.href = "pagenotfound.php"
        </script>
  <?php
}
else{
	
	while($row=mysqli_fetch_array($retrival)){
		
	$id = $row['id'];
	$post_id = $row['id'];
	$title = $row['title'];
	$label = $row['label'];
	$time = $row['time'];
	$tag = $row['tag'];
	$type= $row['type'];
	$photo = $row['photo'];
  	$file = $row['file'];
	$category = $row['category'];
	$content = $row['content'];
	$owner = $row['owner'];
}

$title =htmlentities($title);
$content=htmlentities($content);

<br/>
<div class="col-md-6">
 <div class="box box-info">
            <div class="box-header with-border">
              <h3 class="box-title">Edit News</h3>
            </div>
            
            <div class="box-body">
              <form role="form" method="post" action="" enctype="multipart/form-data">
                
                <div class="form-group">
                  <label>Title</label>
                  <input type="text"  name="title" class="form-control" value="<?php echo $title?>">
                </div>

<div class="form-group">
                  <label>Body</label>
                  <textarea class="form-control" name="content" rows="9"><?php echo $content?></textarea>
                </div>

<div class="form-group">
                  <label>image</label>

<?php if($photo!=""){

?> <img src="<?php echo $link?>images/<?php echo $photo; ?>"	height="60" width="60"><br/>   <?php } ?>
                 <br/> <input type="file" class="form-control"  name="image" />
	  			</div>

<div class="form-group">
                  <label>Category</label>
          <select class="form-control" name ="category">
    <option value="<?php echo $category?>"><?php echo $category?></option>
  <?php InsertCategory() ?>
	  </select>
	  			</div>

<div class="form-group">
         <button class="btn btn-blue" type="submit"  name="submit"><i class="icon-doc"></i>Edit Topic</button> 
        </div>

</form>
            </div>
            
          </div>
          
        </div>
        
      </div>
      
    </section>
    
  </div>

<?php

$sizebig=280;
$sizesmall=0;
$folder = "images";
include("picupload.php");

if(isset($_POST['submit'])){

$title = mysql_escape_string($_POST['title']);
        $time = date('y-m-d, h:ia');
        $category = $_POST['category'];
        $label = mysql_escape_string($_POST['label']);
        $tag2 = $_POST['tag2'];
        $tag = $_POST['tag'];
        $content = mysql_escape_string($_POST['content']);
        $image = mysql_escape_string($_FILES['image']['name']);

$errors= array();
    $image = $rand."".$photo_name ;

$errors= array();
    $file_name = mysql_escape_string($_FILES['file']['name']);
if($file_name!=""){ 
   $rand= rand(1, 99999);

$file_name = $_FILES['file']['name'];

$file_size =$_FILES['file']['size'];
    $file_tmp =$_FILES['file']['tmp_name'];
    $file_type=$_FILES['file']['type'];   
    $file_ext=explode('.',$_FILES['file']['name']);

$file_ext=strtolower(end($file_ext));
    
    $expensions= array("jpeg","jpg","png", "zip","txt" ,"apk","pdf","doc","mp3" ,"mp4");    
    
    if($file_size > 10971520){
    echo'File size must not exceed 10 MB';
    }
          
    if(empty($errors)==true){
      move_uploaded_file($file_tmp,"".$link."files/".$file_name);
echo "The file was succesfully attached to your post";
}
}

if($title=="" || $category=="" || $tag=="" ){
  echo " The fields are empty!<br/>";
  echo "<script> alert ('Some fields are empty')  </script>";

}

/*
elseif (preg_match('/[\'^£$%&*().}{@#~?><>,|=+¬-]/', $title)){
  echo '<div class="alert alert-danger alert-dismissible">
                <button type="button" class="close" data-dismiss="alert" aria-hidden="true">&times;</button>
                <h4><i class="icon fa fa-pencil"></i> Alert!</h4>
              Your post title should not contain special characters!
              </div>';
}
*/

else{

//move_uploaded_file($image_tmp, "../images/$image");

$post_type = "posts";

if($image==""){
  $sql2="UPDATE posts SET title ='$title', label='$label', tag='$tag', content='$content', label='$label' WHERE id='$id' ";
}

else{

unlink($link."images/".$photo);
$sql2="UPDATE posts SET title ='$title', label='$label', tag='$tag', content='$content', label='$label', photo='$image' WHERE id='$id' ";
}

$login_activity_add = $login_activity+3;

$sql4="UPDATE last_login SET  login_activity='$login_activity_add' WHERE owner='$user'	";
$run2 =mysqli_query($con, $sql4);

$result =mysqli_query($con, $sql2);

if($result){
		
					?>
<script type="text/javascript">
          window.location.href = "post/<?php echo $id; ?>-<?php echo $clean_url; ?><?php echo $title; ?>"
        </script>
	<?php

}
	else{
		echo"we couldnt publish post</br>";
//echo "<script> alert ('we couldnt publish post')	</script>";
}
}

}

}
?>
</div></div></div>
<?php
include("includes/footer.php");
?>

${this.title}

Code Editor : edit_post2.php