| Server IP : 27.254.96.235 / Your IP : 216.73.216.44 Web Server : Apache/2 System : Linux cs95 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64 User : piboonsa ( 1055) PHP Version : 8.0.30 Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/piboonsa/domains/piboonsawasdee.ac.th/public_html/backend/ |
Upload File : |
<?php
include("passlog.inc.php");
include("lib/config.php");
$id = $_POST['id'];
$status = $_POST['status'];
$topic = htmlspecialchars($_POST['topic'], ENT_QUOTES);
$detail = htmlspecialchars($_POST['detail'], ENT_QUOTES);
$doc = $_FILES['doc']['name'];
$pic = $_FILES['pic']['name'];
if(empty($topic) || empty($status)){
$msg = ERR_REQ_INFO;
echo '<META HTTP-EQUIV="Refresh" CONTENT="0; URL=add_journal.php?id='.$id.'&Page='.$_POST['Page'].'&msg='.$msg.'">';
exit;
}
if($id){
// Document
if($doc){
$query = $db->query("SELECT document FROM journal WHERE id = '$id'");
$rs = $db->getresult($query);
if($rs['document']){
unlink(IMG_JN_DOC.$rs['document']);
}
$newdoc = date("dmYHis").$doc;
copy($_FILES['doc']['tmp_name'], IMG_JN_DOC.$newdoc);
}
$sql = "UPDATE journal SET topic = '$topic', detail = '$detail', ";
if($doc){
$sql .= "document = '$newdoc', ";
}
$sql .= "status = '$status', updated_date = now(), updated_by = '".$_SESSION['acc_username']."' WHERE id = '$id'";
$db->query($sql);
$last_id = $id;
}else{
// Document
if($doc){
$newdoc = date("dmYHis").$doc;
copy($_FILES['doc']['tmp_name'], IMG_JN_DOC.$newdoc);
}
$sql = "INSERT INTO journal SET topic = '$topic', detail = '$detail', ";
if($doc){
$sql .= "document = '$newdoc', ";
}
$sql .= "status = '$status', entered_date = now(), updated_by = '".$_SESSION['acc_username']."'";
$db->query($sql);
$last_id = $db->getlastid();
}
// add images
if($pic){
for($i=0;$i<count($pic);$i++){
if($pic[$i]){
if($id){
$no = $i+1;
$query = $db->query("SELECT * FROM journal_img WHERE j_id = '$id' AND no = '$no'");
if($db->getcountrow($query) != 0){
$rs = $db->getresult($query);
unlink(IMG_JN.$rs['img']);
$db->query("DELETE FROM journal_img WHERE j_id = '$id' AND no = '$no'");
}
}
$N_pic = date("dmYHis").$pic[$i];
copy($_FILES['pic']['tmp_name'][$i], IMG_JN.$N_pic);
$num = $i+1;
if($i == 0){
$intro = $N_pic;
}
$db->query("INSERT INTO journal_img SET j_id = '$last_id', img = '$N_pic', no = '$num'");
}
}
}
if($intro){
$db->query("UPDATE journal SET img = '$intro' WHERE id = '$last_id'");
}
echo '<META HTTP-EQUIV="Refresh" CONTENT="0; URL=journal.php?Page='.$_POST['Page'].'">';
?>