Example #1
0
<div class="col-sm-9 col-sm-offset-3 col-md-10 col-md-offset-2 main">
<table class="imagelist" border="1">
	<tr>
		<td>Изображение</td>
		<td>Название</td>
		<td>Заголовок</td>
		<td>Название поста</td>
		<td>Удалить из базы</td>
		<td>Удалить полностью</td>
		<td>Статус</td>		
	</tr>
<?php 
$article_id = clear_string($_GET["article_id"]);
$query_img = mysql_query("SELECT * FROM uploads_images where item_id = '{$article_id}' order by image", $db);
if (mysql_num_rows($query_img) > 0) {
    $result_img = mysql_fetch_array($query_img);
    do {
        $item_id = $result_img['item_id'];
        if (strlen($result_img["image"]) > 0 && file_exists("../uploads_images/" . $result_img["image"])) {
            $img_path = '../uploads_images/' . $result_img["image"];
            $max_width = 100;
            $max_height = 100;
            list($width, $height) = getimagesize($img_path);
            $ratioh = $max_height / $height;
            $ratiow = $max_width / $width;
            $ratio = min($ratioh, $ratiow);
            //new demensions
            $width = intval($ratio * $width);
            $height = intval($ratio * $height);
        } else {
            $img_path = "./uploads_images/no-image-90.png";
Example #2
0
<?php

include 'include/connection.php';
include 'include/functions.php';
$id = clear_string($_GET["id"]);
$result = mysql_query("SELECT * FROM articles WHERE id='{$id}' AND visible='1'", $db);
if (mysql_num_rows($result) > 0) {
    $row = mysql_fetch_array($result);
    $title = $row["title"];
    $title1 = ftranslite($row["title"]);
    $keywords = $row['meta_key'];
    $description = $row['meta_desc'];
    $id = $row['id'];
    $img = $row['main_image'];
}
?>

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>WEIRD WORLD | <?php 
echo $title;
?>
</title>
	<?php 
include 'include/assets.php';
?>

	<meta property="og:type" content="article">
    <meta property="og:title" content="<?php 
Example #3
0
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    include "db_connect.php";
    include "../functions/functions.php";
    $email = clear_string($_POST["email"]);
    if ($email != "") {
        $result = mysql_query("SELECT email FROM reg_user WHERE email='{$email}'", $link);
        if (mysql_num_rows($result) > 0) {
            // Генерация пароля.
            $newpass = fungenpass();
            // Шифрование пароля.
            $pass = md5($newpass);
            $pass = strrev($pass);
            $pass = strtolower("9nm2rv8q" . $pass . "2yo6z");
            // Обновление пароля на новый.
            $update = mysql_query("UPDATE reg_user SET pass='******' WHERE email='{$email}'", $link);
            // Отправка нового пароля.
            send_mail('*****@*****.**', $email, 'Новый пароль для сайта MyShop.ru', 'Ваш пароль: ' . $newpass);
            echo 'yes';
        } else {
            echo 'Данный E-mail не найден!';
        }
    } else {
        echo 'Укажите свой E-mail';
    }
}
Example #4
0
<?php

include "include/db_connect.php";
include "functions/functions.php";
session_start();
include "include/auth_cookie.php";
$cat = clear_string($_GET["cat"]);
$type = clear_string($_GET["type"]);
$sorting = $_GET["sort"];
switch ($sorting) {
    case 'price-asc':
        $sorting = 'price ASC';
        $sort_name = 'От дешевых к дорогим';
        break;
    case 'price-desc':
        $sorting = 'price DESC';
        $sort_name = 'От дорогих к дешевым';
        break;
    case 'popular':
        $sorting = 'count DESC';
        $sort_name = 'Популярное';
        break;
    case 'news':
        $sorting = 'datetime DESC';
        $sort_name = 'Новинки';
        break;
    case 'brand':
        $sorting = 'brand';
        $sort_name = 'От дешевых к дорогим';
        break;
    default:
<?php

define('myeshop', true);
include "include/db_connect.php";
include "functions/functions.php";
session_start();
include "include/auth_cookie.php";
$go = clear_string($_GET["go"]);
switch ($go) {
    case "news":
        $query_aystopper = " WHERE visible = '1' AND new = '1'";
        $name_aystopper = "New goods";
        break;
    case "leaders":
        $query_aystopper = " WHERE visible = '1' AND leader = '1'";
        $name_aystopper = "Best sels";
        break;
    case "sale":
        $query_aystopper = " WHERE visible = '1' AND sale = '1'";
        $name_aystopper = "Sale of goods";
        break;
    default:
        $query_aystopper = "";
        break;
}
$sorting = $_GET["sort"];
switch ($sorting) {
    case 'price-asc':
        $sorting = 'price ASC';
        $sort_name = 'From cheap to expensive';
        break;
Example #6
0
if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myyshop', true);
    session_start();
    define('myeshop', true);
    include "../include/db_connect.php";
    include "../functions/functions.php";
    $error = array();
    $login = iconv("UTF-8", "cp1251", strtolower(clear_string($_POST['reg_login'])));
    $pass = iconv("UTF-8", "cp1251", strtolower(clear_string($_POST['reg_pass'])));
    $surname = iconv("UTF-8", "cp1251", clear_string($_POST['reg_surname']));
    $name = iconv("UTF-8", "cp1251", clear_string($_POST['reg_name']));
    $patronymic = iconv("UTF-8", "cp1251", clear_string($_POST['reg_patronymic']));
    $email = iconv("UTF-8", "cp1251", clear_string($_POST['reg_email']));
    $phone = iconv("UTF-8", "cp1251", clear_string($_POST['reg_phone']));
    $address = iconv("UTF-8", "cp1251", clear_string($_POST['reg_address']));
    if (strlen($login) < 5 or strlen($login) > 15) {
        $error[] = "Логин должен быть от 5 до 15 символов!";
    } else {
        $result = mysql_query("SELECT login FROM reg_user WHERE login = '******'", $link);
        if (mysql_num_rows($result) > 0) {
            $error[] = "Логин занят!";
        }
    }
    if (strlen($pass) < 7 or strlen($pass) > 15) {
        $error[] = "Укажите пароль от 7 до 15 символов!";
    }
    if (strlen($surname) < 3 or strlen($surname) > 20) {
        $error[] = "Укажите Фамилию от 3 до 20 символов!";
    }
    if (strlen($name) < 3 or strlen($name) > 15) {
Example #7
0
<?php

session_start();
define('myeshop', true);
include 'include/db_connect.php';
include 'include/functions.php';
if ($_POST["submit_enter"]) {
    $login = clear_string($_POST["input_login"]);
    $pass = clear_string($_POST["input_pass"]);
    if ($login && $pass) {
        /*
        	$pass = md5($pass);
        	$pass = strrev($pass);*/
        $pass = md5($pass);
        $pass = strrev($pass);
        $pass = strtolower("8md7udyd" . $pass . "2ui6z");
        $result = mysql_query("SELECT * FROM reg_admin WHERE login = '******' AND pass = '******'", $link);
        if (mysql_num_rows($result) > 0) {
            $row = mysql_fetch_array($result);
            $_SESSION['auth_admin'] = 'yes_auth';
            $_SESSION['auth_admin_login'] = $row["login"];
            // Должность
            $_SESSION['admin_role'] = $row["role"];
            // Привилегии
            // Заказы
            $_SESSION['accept_orders'] = $row["accept_orders"];
            $_SESSION['delete_orders'] = $row["delete_orders"];
            $_SESSION['view_orders'] = $row["view_orders"];
            // Товары
            $_SESSION['delete_tovar'] = $row["delete_tovar"];
            $_SESSION['add_tovar'] = $row["add_tovar"];
    }
    $array = clear_string(CATEGORIES_IMAGE_THUMBNAIL_ELLIPSE);
    if (CATEGORIES_IMAGE_THUMBNAIL_ELLIPSE !== '') {
        $a->ellipse($array[0]);
    }
    $array = clear_string(CATEGORIES_IMAGE_THUMBNAIL_ROUND_EDGES);
    if (CATEGORIES_IMAGE_THUMBNAIL_ROUND_EDGES != '') {
        $a->round_edges($array[0], $array[1], $array[2]);
    }
    $string = str_replace("'", '', CATEGORIES_IMAGE_THUMBNAIL_MERGE);
    $string = str_replace(')', '', $string);
    $string = str_replace('(', DIR_FS_CATALOG_IMAGES, $string);
    $array = explode(',', $string);
    //$array=clear_string();
    if (CATEGORIES_IMAGE_THUMBNAIL_MERGE != '') {
        $a->merge($array[0], $array[1], $array[2], $array[3], $array[4]);
    }
    $array = clear_string(CATEGORIES_IMAGE_THUMBNAIL_FRAME);
    if (CATEGORIES_IMAGE_THUMBNAIL_FRAME != '') {
        $a->frame($array[0], $array[1], $array[2], $array[3]);
    }
    $array = clear_string(CATEGORIES_IMAGE_THUMBNAIL_DROP_SHADOW);
    if (CATEGORIES_IMAGE_THUMBNAIL_DROP_SHADOW != '') {
        $a->drop_shadow($array[0], $array[1], $array[2]);
    }
    $array = clear_string(CATEGORIES_IMAGE_THUMBNAIL_MOTION_BLUR);
    if (CATEGORIES_IMAGE_THUMBNAIL_MOTION_BLUR != '') {
        $a->motion_blur($array[0], $array[1]);
    }
    $a->create();
}
    $a->greyscale($array[0], $array[1], $array[2]);
}
$array = clear_string(CATEGORY_IMAGE_ELLIPSE);
if (CATEGORY_IMAGE_ELLIPSE != '') {
    $a->ellipse($array[0]);
}
$array = clear_string(CATEGORY_IMAGE_ROUND_EDGES);
if (CATEGORY_IMAGE_ROUND_EDGES != '') {
    $a->round_edges($array[0], $array[1], $array[2]);
}
$string = str_replace("'", '', CATEGORY_IMAGE_MERGE);
$string = str_replace(')', '', $string);
$string = str_replace('(', DIR_FS_CATALOG_IMAGES, $string);
$array = explode(',', $string);
//$array=clear_string();
if (CATEGORY_IMAGE_MERGE != '') {
    $a->merge($array[0], $array[1], $array[2], $array[3], $array[4]);
}
$array = clear_string(CATEGORY_IMAGE_FRAME);
if (CATEGORY_IMAGE_FRAME != '') {
    $a->frame($array[0], $array[1], $array[2], $array[3]);
}
$array = clear_string(CATEGORY_IMAGE_DROP_SHADOW);
if (CATEGORY_IMAGE_DROP_SHADOW != '') {
    $a->drop_shadow($array[0], $array[1], $array[2]);
}
$array = clear_string(CATEGORY_IMAGE_MOTION_BLUR);
if (CATEGORY_IMAGE_MOTION_BLUR != '') {
    $a->motion_blur($array[0], $array[1]);
}
$a->create();
Example #10
0
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myeshop', true);
    include "db_connect.php";
    include "../functions/functions.php";
    $search = iconv("UTF-8", "cp1251", strtolower(clear_string($_POST['text'])));
    $result = mysql_query("SELECT * FROM table_products WHERE title LIKE '%{$search}%' AND visible = '1'", $link);
    if (mysql_num_rows($result) > 0) {
        $result = mysql_query("SELECT * FROM table_products WHERE title LIKE '%{$search}%'  AND visible = '1' LIMIT 10", $link);
        $row = mysql_fetch_array($result);
        do {
            echo '
<li><a href="search.php?q=' . $row["title"] . '">' . $row["title"] . '</a></li>
';
        } while ($row = mysql_fetch_array($result));
    }
}
Example #11
0
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myeshop', true);
    include "db_connect.php";
    include "../functions/functions.php";
    $search = strtolower(clear_string($_POST['text']));
    $result = mysql_query("SELECT * FROM table_products WHERE title LIKE '%{$search}%' AND visible = '1'", $link);
    if (mysql_num_rows($result) > 0) {
        $result = mysql_query("SELECT * FROM table_products WHERE title LIKE '%{$search}%'  AND visible = '1' LIMIT 10", $link);
        $row = mysql_fetch_array($result);
        do {
            echo '<li><a href="search.php?q=' . $row["title"] . '">' . $row["title"] . '</a></li>';
        } while ($row = mysql_fetch_array($result));
    }
}
Example #12
0
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myeshop', true);
    include 'db_connect.php';
    include '../functions/functions.php';
    $id = clear_string($_POST['id']);
    $name = clear_string($_POST['name']);
    $good = clear_string($_POST['good']);
    $bad = clear_string($_POST['bad']);
    $comment = clear_string($_POST['comment']);
    mysql_query("INSERT INTO table_reviews(products_id,name,good_reviews,bad_reviews,comment,date)\n\t\t\t\t\t\tVALUES(\n\t\t\t\t\t\t\t'" . $id . "',\n\t\t\t\t\t\t\t'" . $name . "',\n\t\t\t\t\t\t\t'" . $good . "',\n\t\t\t\t\t\t\t'" . $bad . "',\n\t\t\t\t\t\t\t'" . $comment . "',\n\t\t\t\t\t\t\t\tNOW()\n\t\t\t\t\t\t)", $link);
    echo 'yes';
}
    $a->greyscale($array[0], $array[1], $array[2]);
}
$array = clear_string(PRODUCT_IMAGE_THUMBNAIL_ELLIPSE);
if (PRODUCT_IMAGE_THUMBNAIL_ELLIPSE !== '') {
    $a->ellipse($array[0]);
}
$array = clear_string(PRODUCT_IMAGE_THUMBNAIL_ROUND_EDGES);
if (PRODUCT_IMAGE_THUMBNAIL_ROUND_EDGES != '') {
    $a->round_edges($array[0], $array[1], $array[2]);
}
$string = str_replace("'", '', PRODUCT_IMAGE_THUMBNAIL_MERGE);
$string = str_replace(')', '', $string);
$string = str_replace('(', DIR_FS_CATALOG_IMAGES, $string);
$array = explode(',', $string);
//$array=clear_string();
if (PRODUCT_IMAGE_THUMBNAIL_MERGE != '') {
    $a->merge($array[0], $array[1], $array[2], $array[3], $array[4]);
}
$array = clear_string(PRODUCT_IMAGE_THUMBNAIL_FRAME);
if (PRODUCT_IMAGE_THUMBNAIL_FRAME != '') {
    $a->frame($array[0], $array[1], $array[2], $array[3]);
}
$array = clear_string(PRODUCT_IMAGE_THUMBNAIL_DROP_SHADOW);
if (PRODUCT_IMAGE_THUMBNAIL_DROP_SHADOW != '') {
    $a->drop_shadow($array[0], $array[1], $array[2]);
}
$array = clear_string(PRODUCT_IMAGE_THUMBNAIL_MOTION_BLUR);
if (PRODUCT_IMAGE_THUMBNAIL_MOTION_BLUR != '') {
    $a->motion_blur($array[0], $array[1]);
}
$a->create();
             $cat = "WHERE type_tovara='mobile'";
             break;
         case 'notebook':
             $cat_name = 'Ноутбуки';
             $url = "cat=notebook&";
             $cat = "WHERE type_tovara='notebook'";
             break;
         case 'notepad':
             $cat_name = 'Планшеты';
             $url = "cat=notepad&";
             $cat = "WHERE type_tovara='notepad'";
             break;
         default:
             $cat_name = $cat;
             $url = "type=" . clear_string($type) . "&cat=" . clear_string($cat) . "&";
             $cat = "WHERE type_tovara='" . clear_string($type) . "' AND brand='" . clear_string($cat) . "'";
             break;
     }
 } else {
     $cat_name = 'Все товары';
     $url = "";
     $cat = "";
 }
 $action = $_GET["action"];
 if (isset($action)) {
     $id = (int) $_GET["id"];
     switch ($action) {
         case 'delete':
             if ($_SESSION['delete_tovar'] == '1') {
                 $delete = mysql_query("DELETE FROM table_products WHERE products_id = '{$id}'", $link);
             } else {
Example #15
0
<?php

include "db_connect.php";
include "escaping.php";
$book_id = (int) clear_string($_GET['id']);
$result = mysql_query("SELECT * FROM books WHERE id = {$book_id} LIMIT 1", $link);
if (mysql_num_rows($result) > 0) {
    $row = mysql_fetch_array($result);
} else {
    header("HTTP/1.1 404 Not Found");
    include "error.php";
    exit;
}
$genre = $row["genre"];
$genrem_result = mysql_query("SELECT name FROM genres WHERE id = '{$genre}'", $link);
$genrem_mark_row = mysql_fetch_array($genrem_result);
$genre_name = $genrem_mark_row["name"];
?>
<!DOCTYPE html>
<html>
<head>
  <meta charset="utf-8">
  <title>Скачать «<?php 
echo $row["title"];
?>
» бесплатно и без регистрации в pdf</title>
  
  <title>Дмитрий Глуховский: книга Метро 2035, скачать книгу в fb2, txt, epub, pdf или читать онлaйн, 978-5-17-090538-6</title><meta name="description" content="В электронной библиотеке ЛитРес можно скачать книгу «Метро 2035» в форматах fb2, txt, epub, pdf, а также скачать другие книги Дмитрия Глуховского! Отставляете и читайте отзывы о книге на ЛитРес!">

  <link rel="shortcut icon" href="img/favicon.png" type="image/png">
  <link rel="stylesheet" href="css/reset.css">
Example #16
0
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myeshop', true);
    include 'db_connect.php';
    include '../functions/functions.php';
    $login = clear_string($_POST["login"]);
    $pass = md5(clear_string($_POST["pass"]));
    $pass = strrev($pass);
    $pass = strtolower("9nm2rv8q" . $pass . "2yo6z");
    if ($_POST["rememberme"] == "yes") {
        setcookie('rememberme', $login . '+' . $pass, time() + 3600 * 24 * 31, "/");
    }
    $result = mysql_query("SELECT * FROM reg_user WHERE (login = '******' OR email = '{$login}') AND pass = '******'", $link);
    if (mysql_num_rows($result) > 0) {
        $row = mysql_fetch_array($result);
        session_start();
        $_SESSION['auth'] = 'yes_auth';
        $_SESSION['auth_pass'] = $row["pass"];
        $_SESSION['auth_login'] = $row["login"];
        $_SESSION['auth_surname'] = $row["surname"];
        $_SESSION['auth_name'] = $row["name"];
        $_SESSION['auth_patronymic'] = $row["patronymic"];
        $_SESSION['auth_address'] = $row["address"];
        $_SESSION['auth_phone'] = $row["phone"];
        $_SESSION['auth_email'] = $row["email"];
        echo 'yes_auth';
    } else {
        echo 'no_auth';
    }
}
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myeshop', true);
    include "../include/db_connect.php";
    include "../functions/functions.php";
    $login = clear_string($_POST['reg_login']);
    $result = mysql_query("SELECT login FROM reg_user WHERE login = '******'", $link);
    if (mysql_num_rows($result) > 0) {
        echo 'false';
    } else {
        echo 'true';
    }
}
     $string = str_replace(APOS, '', MERGE);
     $string = str_replace(RPAREN, '', $string);
     $string = str_replace('(', DIR_WS_CATALOG_IMAGES, $string);
     $array = explode(',', $string);
     if (MERGE) {
         $a->merge($array[0], $array[1], $array[2], $array[3], $array[4]);
     }
     $array = clear_string(FRAME);
     if (FRAME) {
         $a->frame($array[0], $array[1], $array[2], $array[3]);
     }
     $array = clear_string(DROP_SHADOW);
     if (DROP_SHADOW) {
         $a->drop_shadow($array[0], $array[1], $array[2]);
     }
     $array = clear_string(MOTION_BLUR);
     if (MOTION_BLUR) {
         $a->motion_blur($array[0], $array[1]);
     }
     $a->create();
 } else {
     $create_jpeg = $image_type == 2 || $image_type == 1 && $gif_as_jpeg;
     if (!$create_jpeg) {
         $create_gif = $image_type == 1 && function_exists('imagegif');
         if (!$create_gif) {
             $create_png = $image_type == 3 || $image_type == 1;
         }
     }
     // Create a new, empty image based on settings:
     if ($use_truecolor && ($image_type == 2 || $image_type == 3)) {
         $tmp_img = imagecreatetruecolor($image_target_width, $image_target_height);
Example #19
0
<?php

define('myyshop', true);
include "include/db_connect.php";
include "functions/functions.php";
session_start();
include "include/auth_cookie.php";
//unset($_SESSION['auth']);
$search = clear_string($_GET["q"]);
$sorting = $_GET["sort"];
switch ($sorting) {
    case 'price-asc':
        $sorting = 'price ASC';
        $sort_name = 'От дешевых к дорогим';
        break;
    case 'price-desc':
        $sorting = 'price DESC';
        $sort_name = 'От дорогих к дешевым';
        break;
    case 'popular':
        $sorting = 'count DESC';
        $sort_name = 'Популярное';
        break;
    case 'news':
        $sorting = 'datetime DESC';
        $sort_name = 'Новинки';
        break;
    case 'brand':
        $sorting = 'brand';
        $sort_name = 'От дешевых к дорогим';
        break;
Example #20
0
<?php

include "db_connect.php";
include "escaping.php";
$genre = (int) clear_string($_GET['genre']);
$name_result = mysql_query("SELECT id, name FROM genres WHERE id = '{$genre}'", $link);
if (mysql_num_rows($name_result) > 0) {
    $genre_name = mysql_fetch_array($name_result);
} else {
    header("HTTP/1.1 404 Not Found");
    include "error.php";
    exit;
}
?>
<!DOCTYPE html>
<html>
<head>
  <meta charset="utf-8">
  <title>Ёпрст — книги скачать бесплатно и без ригистрации</title>

  <link rel="shortcut icon" href="img/favicon.png" type="image/png">
  <link rel="stylesheet" href="css/reset.css">
  <link rel="stylesheet" href="css/main.css">
  <link rel="stylesheet" href="css/books.css">
</head>
<body>
<div class="wrapper">
<?include("header.php");?>
<main>
<div id="breadcrumbs">
<ul itemscope itemtype="http://schema.org/BreadcrumbList">
Example #21
0
 $_POST["info_patronymic"] = clear_string($_POST["info_patronymic"]);
 $_POST["info_address"] = clear_string($_POST["info_address"]);
 $_POST["info_phone"] = clear_string($_POST["info_phone"]);
 $_POST["info_email"] = clear_string($_POST["info_email"]);
 $error = array();
 $pass = md5($_POST["info_pass"]);
 $pass = strrev($pass);
 $pass = "******" . $pass . "2yo6z";
 if ($_SESSION['auth_pass'] != $pass) {
     $error[] = 'Неверный текущий пароль!';
 } else {
     if ($_POST["info_new_pass"] != "") {
         if (strlen($_POST["info_new_pass"]) < 7 || strlen($_POST["info_new_pass"]) > 15) {
             $error[] = 'Укажите новый пароль от 7 до 15 символов!';
         } else {
             $newpass = md5(clear_string($_POST["info_new_pass"]));
             $newpass = strrev($newpass);
             $newpass = "******" . $newpass . "2yo6z";
             $newpassquery = "pass='******',";
         }
     }
     if (strlen($_POST["info_surname"]) < 3 || strlen($_POST["info_surname"]) > 15) {
         $error[] = 'Укажите Фамилию от 3 до 15 символов!';
     }
     if (strlen($_POST["info_name"]) < 3 || strlen($_POST["info_name"]) > 15) {
         $error[] = 'Укажите Имя от 3 до 15 символов!';
     }
     if (strlen($_POST["info_patronymic"]) < 3 || strlen($_POST["info_patronymic"]) > 25) {
         $error[] = 'Укажите Отчество от 3 до 25 символов!';
     }
     if (!preg_match("/^(?:[a-z0-9]+(?:[-_.]?[a-z0-9]+)?@[a-z0-9_.-]+(?:\\.?[a-z0-9]+)?\\.[a-z]{2,5})\$/i", trim($_POST["info_email"]))) {
    $a->greyscale($array[0], $array[1], $array[2]);
}
$array = clear_string(PRODUCT_IMAGE_POPUP_ELLIPSE);
if (PRODUCT_IMAGE_POPUP_ELLIPSE != '') {
    $a->ellipse($array[0]);
}
$array = clear_string(PRODUCT_IMAGE_POPUP_ROUND_EDGES);
if (PRODUCT_IMAGE_POPUP_ROUND_EDGES != '') {
    $a->round_edges($array[0], $array[1], $array[2]);
}
$string = str_replace("'", '', PRODUCT_IMAGE_POPUP_MERGE);
$string = str_replace(')', '', $string);
$string = str_replace('(', DIR_FS_CATALOG_IMAGES, $string);
$array = explode(',', $string);
//$array=clear_string();
if (PRODUCT_IMAGE_POPUP_MERGE != '') {
    $a->merge($array[0], $array[1], $array[2], $array[3], $array[4]);
}
$array = clear_string(PRODUCT_IMAGE_POPUP_FRAME);
if (PRODUCT_IMAGE_POPUP_FRAME != '') {
    $a->frame($array[0], $array[1], $array[2], $array[3]);
}
$array = clear_string(PRODUCT_IMAGE_POPUP_DROP_SHADOW);
if (PRODUCT_IMAGE_POPUP_DROP_SHADOW != '') {
    $a->drop_shadow($array[0], $array[1], $array[2]);
}
$array = clear_string(PRODUCT_IMAGE_POPUP_MOTION_BLUR);
if (PRODUCT_IMAGE_POPUP_MOTION_BLUR != '') {
    $a->motion_blur($array[0], $array[1]);
}
$a->create();
Example #23
0
<?php

defined('myyshop') or die('Доступа нет!');
if ($_SESSION['auth'] != 'yes_auth' && $_COOKIE["rememberme"]) {
    $str = $_COOKIE["rememberme"];
    // Вся длина строки
    $all_len = strlen($str);
    // Длина логина
    $login_len = strpos($str, '+');
    // Обрезаем строку до Плюса и получаем Логин
    $login = clear_string(substr($str, 0, $login_len));
    // Получаем пароль
    $pass = clear_string(substr($str, $login_len + 1, $all_len));
    $result = mysql_query("SELECT * FROM reg_user WHERE (login = '******' or email = '{$login}') AND pass = '******'", $link);
    if (mysql_num_rows($result) > 0) {
        $row = mysql_fetch_array($result);
        session_start();
        $_SESSION['auth'] = 'yes_auth';
        $_SESSION['auth_pass'] = $row["pass"];
        $_SESSION['auth_login'] = $row["login"];
        $_SESSION['auth_surname'] = $row["surname"];
        $_SESSION['auth_name'] = $row["name"];
        $_SESSION['auth_patronymic'] = $row["patronymic"];
        $_SESSION['auth_address'] = $row["address"];
        $_SESSION['auth_phone'] = $row["phone"];
        $_SESSION['auth_email'] = $row["email"];
    }
}
Example #24
0
    include "include/db_connect.php";
    include "include/functions.php";
    if ($_POST["submit_cat"]) {
        if ($_SESSION['add_category'] == '1') {
            $error = array();
            if (!$_POST["cat_type"]) {
                $error[] = "Укажите тип товара!";
            }
            if (!$_POST["cat_brand"]) {
                $error[] = "Укажите название категории!";
            }
            if (count($error)) {
                $_SESSION['message'] = "<p id='form-error'>" . implode('<br />', $error) . "</p>";
            } else {
                $cat_type = clear_string($_POST["cat_type"]);
                $cat_brand = clear_string($_POST["cat_brand"]);
                mysql_query("INSERT INTO category(type,brand)\n\t\t\t\t\t\tVALUES(\t\t\t\t\t\t\n                            '" . $cat_type . "',\n                            '" . $cat_brand . "'                              \n\t\t\t\t\t\t)", $link);
                $_SESSION['message'] = "<p id='form-success'>Категория успешно добавлена!</p>";
            }
        } else {
            $msgerror = 'У вас нет прав на добавление категории';
        }
    }
    ?>
<!DOCTYPE HTML>
<html>
<head>
	<meta http-equiv="content-type" content="text/html" />
    <link href="css/reset.css" rel="stylesheet" type="text/css" />
    <link href="css/style.css" rel="stylesheet" type="text/css" /> 
    <script type="text/javascript" src="js/jquery-1.8.2.min.js"></script> 
            if (!$_POST["admin_fio"]) {
                $error[] = "Укажите ФИО!";
            }
            if (!$_POST["admin_role"]) {
                $error[] = "Укажите должность!";
            }
            if (!$_POST["admin_email"]) {
                $error[] = "Укажите E-mail!";
            }
            if (count($error)) {
                $_SESSION['message'] = "<p id='form-error'>" . implode('<br />', $error) . "</p>";
            } else {
                $pass = md5(clear_string($_POST["admin_pass"]));
                $pass = strrev($pass);
                $pass = strtolower("mb03foo51" . $pass . "qj2jjdp9");
                mysql_query("INSERT INTO reg_admin(login,pass,fio,role,email,phone,view_orders,accept_orders,delete_orders,add_tovar,edit_tovar,delete_tovar,accept_reviews,delete_reviews,view_clients,delete_clients,add_news,delete_news,add_category,delete_category,view_admin)\r\n\t\t\t\t\t\tVALUES(\t\t\t\t\t\t\r\n                            '" . clear_string($_POST["admin_login"]) . "',\r\n                            '" . $pass . "',\r\n                            '" . clear_string($_POST["admin_fio"]) . "',\r\n                            '" . clear_string($_POST["admin_role"]) . "',\r\n                            '" . clear_string($_POST["admin_email"]) . "',\r\n                            '" . clear_string($_POST["admin_phone"]) . "',\r\n                            '" . $_POST["view_orders"] . "',\r\n                            '" . $_POST["accept_orders"] . "',\r\n                            '" . $_POST["delete_orders"] . "',\t\t\t\t\t\t\t\r\n                            '" . $_POST["add_tovar"] . "',\r\n                            '" . $_POST["edit_tovar"] . "',                            \r\n\t\t\t\t\t\t\t'" . $_POST["delete_tovar"] . "',\r\n                            '" . $_POST["accept_reviews"] . "',\r\n                            '" . $_POST["delete_reviews"] . "',\r\n\t\t\t\t\t\t\t'" . $_POST["view_clients"] . "',\r\n                            '" . $_POST["delete_clients"] . "',\r\n\t\t\t\t\t\t\t'" . $_POST["add_news"] . "',\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t'" . $_POST["delete_news"] . "',\r\n\t\t\t\t\t\t\t'" . $_POST["add_category"] . "',\r\n\t\t\t\t\t\t\t'" . $_POST["delete_category"] . "',\r\n                            '" . $_POST["view_admin"] . "'\r\n                            \r\n                                                                                                                                                \r\n\t\t\t\t\t\t)", $link);
                $_SESSION['message'] = "<p id='form-success'>Пользователь успешно добавлен!</p>";
            }
        } else {
            $msgerror = 'У вас нет прав на добавление администраторов!';
        }
    }
    ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">

<head>
	<meta http-equiv="content-type" content="text/html; charset=iso-8859-1" />
    <link href="css/reset.css" rel="stylesheet" type="text/css" />
    <link href="css/style.css" rel="stylesheet" type="text/css" />
    <link href="jquery_confirm/jquery_confirm.css" rel="stylesheet" type="text/css" />
<body>
<div id="block-body">
<?php 
include "include/block-header.php";
?>
<div id="block-right">
<?php 
include "include/block-category.php";
include "include/block-parameter.php";
include "include/block-news.php";
?>
</div>
<div id="block-content">

<?php 
$action = clear_string($_GET["action"]);
switch ($action) {
    case 'oneclick':
        echo ' 
   <div id="block-step">  
   <div id="name-step">  
   <ul>
   <li><a class="active" >1. Корзина товаров</a></li>
   <li><span>&rarr;</span></li>
   <li><a>2. Контактная информация</a></li>
   <li><span>&rarr;</span></li>
   <li><a>3. Завершение</a></li> 
   </ul>  
   </div>  
   <p>шаг 1 из 3</p>
   <a href="cart.php?action=clear" >Очистить</a>
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myeshop', true);
    include "db_connect.php";
    include "../functions/functions.php";
    $id = clear_string($_POST["id"]);
    $result = mysql_query("SELECT * FROM cart WHERE cart_ip = '{$_SERVER['REMOTE_ADDR']}' AND cart_id_product = '{$id}'", $link);
    if (mysql_num_rows($result) > 0) {
        $row = mysql_fetch_array($result);
        $new_count = $row["cart_count"] + 1;
        $update = mysql_query("UPDATE cart SET cart_count='{$new_count}' WHERE cart_ip = '{$_SERVER['REMOTE_ADDR']}' AND cart_id_product ='{$id}'", $link);
    } else {
        $result = mysql_query("SELECT * FROM table_products WHERE products_id = '{$id}'", $link);
        $row = mysql_fetch_array($result);
        mysql_query("INSERT INTO cart(cart_id_product,cart_price,cart_datetime,cart_ip)\r\n\t\t\t\t\t\tVALUES(\t\r\n                            '" . $row['products_id'] . "',\r\n                            '" . $row['price'] . "',\t\t\t\t\t\r\n\t\t\t\t\t\t\tNOW(),\r\n                            '" . $_SERVER['REMOTE_ADDR'] . "'                                                                        \r\n\t\t\t\t\t\t    )", $link);
    }
}
Example #28
0
 if (isset($_GET["logout"])) {
     unset($_SESSION['auth_admin']);
     header("Location: login.php");
 }
 $_SESSION['urlpage'] = "<a href='index.php'>Главная</a> \\ <a href='edit_administrators.php'>Изменение администратора</a>";
 include 'include/db_connect.php';
 include 'include/functions.php';
 $id = clear_string($_GET["id"]);
 if ($_POST["submit_edit"]) {
     if ($_SESSION['auth_admin_login'] == 'pwnz22') {
         $error = array();
         if (!$_POST["admin_login"]) {
             $error[] = "Укажите логин!";
         }
         if ($_POST["admin_pass"]) {
             $pass = md5(clear_string($_POST["admin_pass"]));
             $pass = strrev($pass);
             $pass = "******";
         }
         if (!$_POST["admin_fio"]) {
             $error[] = "Укажите ФИО!";
         }
         if (!$_POST["admin_role"]) {
             $error[] = "Укажите должность!";
         }
         if (!$_POST["admin_email"]) {
             $error[] = "Укажите E-mail!";
         }
         if (count($error)) {
             $_SESSION['message'] = "<p id='form-error'>" . implode('<br />', $error) . "</p>";
         } else {
<?php

if ($_SERVER["REQUEST_METHOD"] == "POST") {
    define('myeshop', true);
    include "db_connect.php";
    include "../functions/functions.php";
    $id = clear_string($_POST['id']);
    $name = iconv("UTF-8", "cp1251", clear_string($_POST['name']));
    $good = iconv("UTF-8", "cp1251", clear_string($_POST['good']));
    $bad = iconv("UTF-8", "cp1251", clear_string($_POST['bad']));
    $comment = iconv("UTF-8", "cp1251", clear_string($_POST['comment']));
    mysql_query("INSERT INTO table_reviews(products_id,name,good_reviews,bad_reviews,comment,date)\r\n\t\t\t\t\t\tVALUES(\t\t\t\t\t\t\r\n                            '" . $id . "',\r\n                            '" . $name . "',\r\n                            '" . $good . "',\r\n                            '" . $bad . "',\r\n                            '" . $comment . "',\r\n                             NOW()\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t)", $link);
    echo 'yes';
}
    }
    $array = clear_string(PRODUCT_IMAGE_INFO_ELLIPSE);
    if (PRODUCT_IMAGE_INFO_ELLIPSE != '') {
        $a->ellipse($array[0]);
    }
    $array = clear_string(PRODUCT_IMAGE_INFO_ROUND_EDGES);
    if (PRODUCT_IMAGE_INFO_ROUND_EDGES != '') {
        $a->round_edges($array[0], $array[1], $array[2]);
    }
    $string = str_replace("'", '', PRODUCT_IMAGE_INFO_MERGE);
    $string = str_replace(')', '', $string);
    $string = str_replace('(', DIR_FS_CATALOG_IMAGES, $string);
    $array = explode(',', $string);
    //$array=clear_string();
    if (PRODUCT_IMAGE_INFO_MERGE != '') {
        $a->merge($array[0], $array[1], $array[2], $array[3], $array[4]);
    }
    $array = clear_string(PRODUCT_IMAGE_INFO_FRAME);
    if (PRODUCT_IMAGE_INFO_FRAME != '') {
        $a->frame($array[0], $array[1], $array[2], $array[3]);
    }
    $array = clear_string(PRODUCT_IMAGE_INFO_DROP_SHADOW);
    if (PRODUCT_IMAGE_INFO_DROP_SHADOW != '') {
        $a->drop_shadow($array[0], $array[1], $array[2]);
    }
    $array = clear_string(PRODUCT_IMAGE_INFO_MOTION_BLUR);
    if (PRODUCT_IMAGE_INFO_MOTION_BLUR != '') {
        $a->motion_blur($array[0], $array[1]);
    }
    $a->create();
}