function postmail($to, $resetpasswordurl) { $mail = new PHPMailer(); $mail->IsSMTP(); $mail->SMTPAuth = true; $mail->Host = 'smtp.163.com'; $mail->Port = 25; $mail->Username = '******'; $mail->Password = '******'; $mail->SetFrom('*****@*****.**', 'Website OfCourse'); $mail->Subject = 'Retrieve Password to Website OfCourse'; $mail->MsgHTML('<p>This email is sent automatically from website OfCourse.</p> <p>To reset your password please <a href="' . $resetpasswordurl . '"><B>Click Here</B></a>.</p>'); $address = $to; $mail->AddAddress($address, ''); if (!$mail->Send()) { callerror('failed to send email', '../'); exit; } }
} $results = $s->fetchAll(); if (isset($_POST['delete'])) { try { $sql = 'DELETE FROM notice WHERE id = :id'; $s = $pdo->prepare($sql); $s->bindValue(':id', $_POST['noticeid']); $s->execute(); } catch (PDOException $e) { callerror('database error', '../'); exit; } header('Location:.'); } if (isset($_POST['add'])) { try { $sql = 'INSERT INTO notice SET courseid = :courseid, outdate = CURDATE(), content = :content'; $s = $pdo->prepare($sql); $s->bindValue(':courseid', $_SESSION['courseid']); $s->bindValue(':content', $_POST['addnotice']); $s->execute(); } catch (PDOException $e) { callerror('database error', '../'); exit; } header('Location:.'); } include './coursenoticeform.html.php';
exit; } } header('Location:.'); } if (isset($_POST['download'])) { try { $sql = 'SELECT * FROM resource WHERE id = :id'; $s = $pdo->prepare($sql); $s->bindValue(':id', $_POST['id']); $s->execute(); } catch (PDOException $e) { callerror('database error', '../'); exit; } $file = $s->fetch(); if (empty($file)) { callerror('file not found in database', '../'); exit; } else { $filename = $file['name']; $filedata = file_get_contents($file['addr']); $mimetype = $file['type']; $disposition = 'attachment'; header('Content-length: ' . strlen($filedata)); header("Content-type: {$mimetype}"); header("Content-disposition: {$disposition}; filename={$filename}"); echo $filedata; } } include './courseresourceform.html.php';
<?php require_once '../includes/helpers.inc.php'; callerror('you have no privilege for this page', '../'); exit;
} try { $sql = 'SELECT * FROM quiz WHERE id = :id'; $s = $pdo->prepare($sql); $s->bindValue(':id', $_GET['id']); $s->execute(); } catch (PDOException $e) { callerror('database error', '../'); exit; } $result = $s->fetch(); $oldqlist = json_decode($result['jsonq'], true); $oldalist = json_decode($result['jsona'], true); $tempalist = json_decode(base64_decode($_GET['tempa']), true); $correct = 0; $colorarray = array(); for ($i = 1; $i <= count($oldalist); $i++) { if ($oldalist[$i] == $tempalist[$i]) { $correct++; $colorarray[$i] = '#5CB85C'; } else { $colorarray[$i] = '#D9534F'; } } $correct = round($correct / count($oldalist) * 100) . '%'; $pagetitle = $result['title'] . ' : ' . $correct . ' Correct'; if (empty($oldqlist) or empty($oldalist) or empty($tempalist)) { callerror('incomplete information', '../'); exit; } include './quizshowanswerform.html.php';
$s->bindValue(':title', $_POST['title']); $s->bindValue(':startline', $_POST['startline']); $s->bindValue(':deadline', $_POST['deadline']); $s->bindValue(':content', $_POST['content']); $s->bindValue(':name', $tempname); $s->bindValue(':type', $temptype); $s->bindValue(':addr', $tempaddr); $s->bindValue(':id', $_GET['id']); $s->execute(); } catch (PDOException $e) { callerror('database error', './'); exit; } header('Location:.?id=' . $_GET['id']); } if (isset($_POST['repdownload'])) { if (!file_exists($_POST['repaddr'])) { callerror('file do not exist', './'); exit; } else { $filename = $_POST['repname']; $filedata = file_get_contents($_POST['repaddr']); $mimetype = $_POST['reptype']; $disposition = 'attachment'; header('Content-length: ' . strlen($filedata)); header("Content-type: {$mimetype}"); header("Content-disposition: {$disposition}; filename={$filename}"); echo $filedata; } } include './courseassignmentcheckform.html.php';
} else { $welcometag = 'Welcome, ' . $_SESSION['useridentity'] . ' ' . $_SESSION['usertag']; } } } } try { $sql = 'SELECT * FROM quiz WHERE id = :id'; $s = $pdo->prepare($sql); $s->bindValue(':id', $_GET['id']); $s->execute(); } catch (PDOException $e) { callerror('database error', '../'); exit; } $result = $s->fetch(); $pagetitle = $result['title']; $oldqlist = json_decode($result['jsonq'], true); if (empty($oldqlist)) { callerror('no question added', '../'); exit; } if (isset($_POST['save'])) { $ajson = array(); for ($i = 1; $i <= count($oldqlist); $i++) { $ajson[$i] = implode(';', $_POST['c' . $i]); } $jsona = json_encode($ajson); header('Location:../quizshowanswer?id=' . $_GET['id'] . '&tempa=' . base64_encode($jsona)); } include './quizanswerform.html.php';