-
Notifications
You must be signed in to change notification settings - Fork 0
/
admin.php
128 lines (111 loc) · 3.9 KB
/
admin.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
<?php
require "loginheader.php";
require_once 'header.php';
$page_title = '管理頁面';
$op = isset($_REQUEST['op']) ? filter_var($_REQUEST['op']) : '';
$sn = isset($_REQUEST['sn']) ? (int) $_REQUEST['sn'] : 0;
switch ($op) {
case 'insert':
$sn = insert_article();
header("location: index.php?sn={$sn}");
break;
case 'delete_article':
delete_article($sn);
header("location: index.php");
exit;
case 'article_form':
break;
case 'modify_article':
show_article($sn);
break;
case 'update':
update_article($sn);
header("location: index.php?sn={$sn}");
break;
default:
break;
}
require_once 'footer.php';
/*************函數區**************/
//儲存文章
function insert_article()
{
global $db;
$title = $db->real_escape_string($_POST['title']);
$content = $db->real_escape_string($_POST['content']);
$username = $db->real_escape_string($_POST['username']);
$sql = "INSERT INTO `article` (`title`, `content`, `username`,`create_time`, `update_time`) VALUES ('{$title}', '{$content}','{$username}', NOW(), NOW())";
$db->query($sql) or die($db->error);
$sn = $db->insert_id;
if (isset($_FILES)) {
require_once 'class.upload.php';
$foo = new Upload($_FILES['pic']);
if ($foo->uploaded) {
// save uploaded image with a new name
$foo->file_new_name_body = 'cover_' . $sn;
$foo->image_resize = true;
$foo->image_convert = png;
$foo->image_x = 1200;
$foo->image_ratio_y = true;
$foo->Process('uploads/');
if ($foo->processed) {
$foo->file_new_name_body = 'thumb_' . $sn;
$foo->image_resize = true;
$foo->image_convert = png;
$foo->image_x = 400;
$foo->image_ratio_y = true;
$foo->Process('uploads/');
}
}
// $ext = pathinfo($_FILES['pic']['name'], PATHINFO_EXTENSION);
// if (!is_dir('uploads')) {
// mkdir('uploads');
// }
// move_uploaded_file($_FILES['pic']['tmp_name'], "uploads/{$sn}.{$ext}");
}
return $sn;
}
function delete_article($sn)
{
global $db;
$sql = "DELETE FROM `article` WHERE sn='{$sn}'";
$db->query($sql) or die($db->error);
}
//更新文章
function update_article($sn)
{
global $db;
$title = $db->real_escape_string($_POST['title']);
$content = $db->real_escape_string($_POST['content']);
$username = $db->real_escape_string($_POST['username']);
$sql = "UPDATE `article` SET `title` = '{$title}', `content` = '{$content}', `update_time` = NOW() WHERE `sn` = '{$sn}'";
$db->query($sql) or die($db->error);
$sn = $db->insert_id;
if (isset($_FILES)) {
require_once 'class.upload.php';
$foo = new Upload($_FILES['pic']);
if ($foo->uploaded) {
// save uploaded image with a new name
$foo->file_new_name_body = 'cover_' . $sn;
$foo->image_resize = true;
$foo->image_convert = png;
$foo->image_x = 1200;
$foo->image_ratio_y = true;
$foo->Process('uploads/');
if ($foo->processed) {
$foo->file_new_name_body = 'thumb_' . $sn;
$foo->image_resize = true;
$foo->image_convert = png;
$foo->image_x = 400;
$foo->image_ratio_y = true;
$foo->Process('uploads/');
}
}
// $ext = pathinfo($_FILES['pic']['name'], PATHINFO_EXTENSION);
// if (!is_dir('uploads')) {
// mkdir('uploads');
// }
// move_uploaded_file($_FILES['pic']['tmp_name'], "uploads/{$sn}.{$ext}");
}
return $sn;
}