Esempio n. 1
0
 function nv_block_data_config_html_submit($module, $lang_block)
 {
     $xhtml = filter_text_textarea('htmlcontent', '', NV_ALLOWED_HTML_TAGS);
     $return = array();
     $return['error'] = array();
     $return['config'] = array();
     $return['config']['htmlcontent'] = defined('NV_EDITOR') ? nv_editor_nl2br($xhtml) : nv_nl2br($xhtml, '<br />');
     return $return;
 }
Esempio n. 2
0
$error = "";
$fpart = isset($array_op[0]) ? $array_op[0] : 0;
$fpart = $nv_Request->get_int('fpart', 'post,get', $fpart);
$ftitle = filter_text_input('ftitle', 'post,get', '', 1, 250);
if (!empty($array_rows)) {
    $checkss = filter_text_input('checkss', 'post', '');
    if ($checkss == md5($client_info['session_id'] . $global_config['sitekey'])) {
        if (defined('NV_IS_USER')) {
            $fname = !empty($user_info['full_name']) ? $user_info['full_name'] : $user_info['username'];
            $femail = $user_info['email'];
        } else {
            $fname = filter_text_input('fname', 'post', '', 1, 100);
            $femail = filter_text_input('femail', 'post', '', 1, 100);
        }
        $fphone = filter_text_input('fphone', 'post', '', 1, 100);
        $fcon = filter_text_textarea('fcon', '', NV_ALLOWED_HTML_TAGS);
        $fcode = filter_text_input('fcode', 'post', '');
        $check_valid_email = nv_check_valid_email($femail);
        if (empty($fname)) {
            $error = $lang_module['error_fullname'];
        } elseif (!empty($check_valid_email)) {
            $error = $check_valid_email;
        } elseif (empty($ftitle)) {
            $error = $lang_module['error_title'];
        } elseif (empty($fcon)) {
            $error = $lang_module['error_content'];
        } elseif (!isset($array_rows[$fpart])) {
            $error = $lang_module['error_part'];
        } elseif (!nv_capcha_txt($fcode)) {
            $error = $lang_module['error_captcha'];
        } else {
Esempio n. 3
0
    die('Stop!!!');
}
$page_title = $lang_module['categories'];
$error = $admins = "";
$savecat = 0;
list($catid, $parentid, $title, $alias, $description, $keywords) = array(0, 0, "", "", "", "");
$savecat = $nv_Request->get_int('savecat', 'post', 0);
if (!empty($savecat)) {
    $catid = $nv_Request->get_int('catid', 'post', 0);
    list($parentid_old) = $db->sql_fetchrow($db->sql_query("SELECT `parentid` FROM `" . NV_PREFIXLANG . "_" . $module_data . "_cat` WHERE `catid` = '" . $catid . "'"));
    $parentid = $nv_Request->get_int('parentid', 'post', 0);
    $title = filter_text_input('title', 'post', "", 1, 100);
    $catimage = filter_text_input('catimage', 'post');
    $keywords = filter_text_input('keywords', 'post');
    $alias = filter_text_input('alias', 'post');
    $description = filter_text_textarea('description', '', NV_ALLOWED_HTML_TAGS);
    $alias = $alias == "" ? change_alias($title) : change_alias($alias);
    if ($catid == 0 and !empty($title)) {
        $description = nv_nl2br($description, '<br />');
        //
        list($weight) = $db->sql_fetchrow($db->sql_query("SELECT max(`weight`) FROM `" . NV_PREFIXLANG . "_" . $module_data . "_cat` WHERE `parentid`=" . $db->dbescape($parentid) . ""));
        $weight = intval($weight) + 1;
        $query = "INSERT INTO `" . NV_PREFIXLANG . "_" . $module_data . "_cat` (`catid`, `parentid`, `title`, `catimage`, `alias`, `description`, `weight`, `inhome`, `numlinks`, `keywords`, `add_time`, `edit_time`) VALUES (NULL, " . $db->dbescape($parentid) . ", " . $db->dbescape($title) . ", " . $db->dbescape($catimage) . " , " . $db->dbescape($alias) . ", " . $db->dbescape($description) . ", " . $db->dbescape($weight) . ", '1', '3', " . $db->dbescape($keywords) . ", UNIX_TIMESTAMP(), UNIX_TIMESTAMP())";
        if ($db->sql_query_insert_id($query)) {
            nv_insert_logs(NV_LANG_DATA, $module_name, 'log_add_cat', " ", $admin_info['userid']);
            $db->sql_freeresult();
            nv_del_moduleCache($module_name);
            Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "&" . NV_OP_VARIABLE . "=" . $op . "");
            die;
        } else {
            $error = $lang_module['errorsave'];
if (empty($group_id)) {
    Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name);
    die;
}
$query = "SELECT * FROM `" . NV_GROUPS_GLOBALTABLE . "` WHERE `group_id`=" . $group_id;
$result = $db->sql_query($query);
$numrows = $db->sql_numrows($result);
if (empty($numrows)) {
    Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "&" . NV_OP_VARIABLE . "=groups");
    die;
}
$row = $db->sql_fetchrow($result);
$error = "";
if ($nv_Request->get_int('save', 'post') == 1) {
    $title = filter_text_input('title', 'post', '', 1);
    $content = filter_text_textarea('content', '', NV_ALLOWED_HTML_TAGS);
    $public = $nv_Request->get_int('public', 'post');
    $min = $nv_Request->get_int('min', 'post');
    $hour = $nv_Request->get_int('hour', 'post');
    $day = $nv_Request->get_int('day', 'post');
    $month = $nv_Request->get_int('month', 'post');
    $year = $nv_Request->get_int('year', 'post');
    if (empty($title)) {
        $error = $lang_module['title_empty'];
    } elseif ($db->sql_numrows($db->sql_query("SELECT `id` FROM `" . NV_GROUPS_GLOBALTABLE . "` WHERE `group_id`!=" . $group_id . " AND `title`=" . $db->dbescape($title))) > 0) {
        $error = sprintf($lang_module['error_title_exists'], $title);
    } else {
        $content = nv_editor_nl2br($content);
        $exp_time = (!$day or !$month or !$year) ? 0 : mktime($hour, $min, 0, $month, $day, $year);
        $sql = "UPDATE `" . NV_GROUPS_GLOBALTABLE . "` \r\n            SET `title`=" . $db->dbescape($title) . ", `content`=" . $db->dbescape($content) . ", `exp_time`=" . $exp_time . ", `public`=" . $public . " \r\n            WHERE `group_id`=" . $group_id;
        $db->sql_query($sql);
Esempio n. 5
0
 $_user['username'] = filter_text_input('username', 'post', '', 1, NV_UNICKMAX);
 $_user['email'] = filter_text_input('email', 'post', '', 1, 100);
 $_user['password1'] = filter_text_input('password1', 'post', '', 0, NV_UPASSMAX);
 $_user['password2'] = filter_text_input('password2', 'post', '', 0, NV_UPASSMAX);
 $_user['question'] = filter_text_input('question', 'post', '', 1, 255);
 $_user['answer'] = filter_text_input('answer', 'post', '', 1, 255);
 $_user['full_name'] = filter_text_input('full_name', 'post', '', 1, 255);
 $_user['gender'] = filter_text_input('gender', 'post', '', 1, 1);
 $_user['website'] = filter_text_input('website', 'post', '');
 $_user['location'] = filter_text_input('location', 'post', '', 1);
 $_user['yim'] = filter_text_input('yim', 'post', '', 1, 100);
 $_user['telephone'] = filter_text_input('telephone', 'post', '', 1, 100);
 $_user['fax'] = filter_text_input('fax', 'post', '', 1, 100);
 $_user['mobile'] = filter_text_input('mobile', 'post', '', 1, 100);
 $_user['view_mail'] = $nv_Request->get_int('view_mail', 'post', 0);
 $_user['sig'] = filter_text_textarea('sig', '', NV_ALLOWED_HTML_TAGS);
 $_user['birthday'] = filter_text_input('birthday', 'post', '', 1, 10);
 $_user['in_groups'] = $nv_Request->get_typed_array('group', 'post', 'int');
 if (!empty($_user['website'])) {
     if (!preg_match("#^(http|https|ftp|gopher)\\:\\/\\/#", $_user['website'])) {
         $_user['website'] = "http://" . $_user['website'];
     }
     if (!nv_is_url($_user['website'])) {
         $_user['website'] = "";
     }
 }
 if (($error_username = nv_check_valid_login($_user['username'], NV_UNICKMAX, NV_UNICKMIN)) != "") {
     $error = $error_username;
 } elseif ($_user['username'] != $db->fixdb($_user['username'])) {
     $error = sprintf($lang_module['account_deny_name'], '<strong>' . $_user['username'] . '</strong>');
 } elseif (($error_xemail = nv_check_valid_email($_user['email'])) != "") {
Esempio n. 6
0
 } else {
     define('IS_ADD', true);
     $page_title = $lang_module['faq_addfaq'];
 }
 $groups_list = nv_groups_list();
 $array_who = array($lang_global['who_view0'], $lang_global['who_view1'], $lang_global['who_view2']);
 if (!empty($groups_list)) {
     $array_who[] = $lang_global['who_view3'];
 }
 $array = array();
 $is_error = false;
 $error = "";
 if ($nv_Request->isset_request('submit', 'post')) {
     $array['catid'] = $nv_Request->get_int('catid', 'post', 0);
     $array['title'] = filter_text_input('title', 'post', '', 1);
     $array['question'] = filter_text_textarea('question', '', NV_ALLOWED_HTML_TAGS);
     $array['answer'] = nv_editor_filter_textarea('answer', '', NV_ALLOWED_HTML_TAGS);
     $alias = change_alias($array['title']);
     if (defined('IS_ADD')) {
         $sql = "SELECT COUNT(*) FROM `" . NV_PREFIXLANG . "_" . $module_data . "` WHERE `alias`=" . $db->dbescape($alias);
         $result = $db->sql_query($sql);
         list($is_exists) = $db->sql_fetchrow($result);
     } else {
         $sql = "SELECT COUNT(*) FROM `" . NV_PREFIXLANG . "_" . $module_data . "` WHERE `id`!=" . $id . " AND `alias`=" . $db->dbescape($alias);
         $result = $db->sql_query($sql);
         list($is_exists) = $db->sql_fetchrow($result);
     }
     if (empty($array['title'])) {
         $is_error = true;
         $error = $lang_module['faq_error_title'];
     } elseif ($is_exists) {
Esempio n. 7
0
     exit;
 }
 $query = "SELECT * FROM `" . NV_PREFIXLANG . "_" . $module_data . "_comments` WHERE `id`=" . $id;
 $result = $db->sql_query($query);
 $numrows = $db->sql_numrows($result);
 if ($numrows != 1) {
     Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name . "&" . NV_OP_VARIABLE . "=comment&status=1");
     exit;
 }
 $row = $db->sql_fetchrow($result);
 $array = array();
 $is_error = false;
 $error = "";
 if ($nv_Request->isset_request('submit', 'post')) {
     $array['subject'] = filter_text_input('subject', 'post', '', 1);
     $array['comment'] = filter_text_textarea('comment', '', NV_ALLOWED_HTML_TAGS);
     $array['admin_reply'] = filter_text_input('admin_reply', 'post', '', 1);
     $array['admin_id'] = (int) $row['admin_id'];
     if (empty($array['subject'])) {
         $is_error = true;
         $error = $lang_module['comment_edit_error1'];
     } elseif (empty($array['comment'])) {
         $is_error = true;
         $error = $lang_module['comment_edit_error2'];
     } else {
         $array['comment'] = nv_nl2br($array['comment'], "<br />");
         if (!empty($array['admin_reply']) and $array['admin_reply'] != $row['admin_reply']) {
             $array['admin_id'] = $admin_info['admin_id'];
         }
         $sql = "UPDATE `" . NV_PREFIXLANG . "_" . $module_data . "_comments` SET \n            `subject`=" . $db->dbescape($array['subject']) . ", \n            `comment`=" . $db->dbescape($array['comment']) . ", \n            `admin_reply`=" . $db->dbescape($array['admin_reply']) . ", \n            `admin_id`=" . $array['admin_id'] . " \n            WHERE `id`=" . $id;
         $result = $db->sql_query($sql);
Esempio n. 8
0
}
$submit = $nv_Request->get_string('submit', 'post');
$images = nv_scandir(NV_ROOTDIR . '/images', "/^([a-zA-Z0-9\\_\\-\\.]+)\\.(gif|jpg|jpeg|png)\$/");
$errormess = "";
if ($submit) {
    $array_config = array();
    $array_config['site_theme'] = filter_text_input('site_theme', 'post', '', 1, 255);
    $array_config['site_name'] = filter_text_input('site_name', 'post', '', 1, 255);
    $array_config['site_logo'] = filter_text_input('site_logo', 'post', '', 1, 255);
    if (!in_array($array_config['site_logo'], $images)) {
        $array_config['site_logo'] = "logo.png";
    }
    $array_config['site_home_module'] = filter_text_input('site_home_module', 'post', '', 1, 255);
    $array_config['site_description'] = filter_text_input('site_description', 'post', '', 1, 255);
    $array_config['disable_site'] = $nv_Request->get_int('disable_site', 'post');
    $array_config['disable_site_content'] = filter_text_textarea('disable_site_content', '', NV_ALLOWED_HTML_TAGS);
    if (empty($array_config['disable_site_content'])) {
        $array_config['disable_site_content'] = $lang_global['disable_site_content'];
    }
    $array_config['disable_site_content'] = nv_nl2br($array_config['disable_site_content'], '<br />');
    // dung de save vao csdl
    foreach ($array_config as $config_name => $config_value) {
        $db->sql_query("UPDATE `" . NV_CONFIG_GLOBALTABLE . "` \r\n        SET `config_value`=" . $db->dbescape($config_value) . " \r\n        WHERE `config_name` = " . $db->dbescape($config_name) . " \r\n        AND `lang` = '" . NV_LANG_DATA . "' AND `module`='global' \r\n        LIMIT 1");
    }
    if ($array_config['site_theme'] != $global_config['site_theme']) {
        $global_config['site_theme'] = $array_config['site_theme'];
        nv_set_layout_site();
    }
    nv_save_file_config_global();
    if (empty($errormess)) {
        Header('Location: ' . NV_BASE_ADMINURL . 'index.php?' . NV_NAME_VARIABLE . '=' . $module_name . '&rand=' . nv_genpass());
Esempio n. 9
0
        $nv_Request->set_Cookie($module_name . '_song' . $i, $tmp);
    }
    $numprev = $num - 1;
    $nv_Request->set_Cookie($module_name . '_numlist', $numprev);
    die($contents);
}
// Luu playlist
if ($nv_Request->isset_request('savealbum', 'post')) {
    if (!defined('NV_IS_AJAX')) {
        die('Wrong URL');
    }
    $difftimeout = 180;
    $name = filter_text_input('name', 'post', '');
    $keyname = change_alias($name);
    $singer = filter_text_input('singer', 'post', '');
    $message = nv_br2nl(filter_text_textarea('message', '', NV_ALLOWED_HTML_TAGS));
    if (defined('NV_IS_USER')) {
        $username = $user_info['username'];
        $userid = $user_info['userid'];
    } else {
        $username = "";
        $userid = 0;
    }
    $num = $nv_Request->get_int($module_name . '_numlist', 'cookie', 0);
    $songdata = array();
    for ($i = 1; $i <= $num; $i++) {
        $tmp = $nv_Request->get_int($module_name . '_song' . $i, 'cookie', 0);
        $songdata[] = $tmp;
    }
    $timeout = $nv_Request->get_int($module_name . '_' . $userid, 'cookie', 0);
    if ($timeout == 0 or NV_CURRENTTIME - $timeout > $difftimeout) {
Esempio n. 10
0
     Header("Location: " . NV_BASE_ADMINURL . "index.php?" . NV_NAME_VARIABLE . "=" . $module_name);
     exit;
 }
 $groups_list = nv_groups_list();
 $array_who = array($lang_global['who_view0'], $lang_global['who_view1'], $lang_global['who_view2']);
 if (!empty($groups_list)) {
     $array_who[] = $lang_global['who_view3'];
 }
 $array = array();
 $is_error = false;
 $error = "";
 if ($nv_Request->isset_request('submit', 'post')) {
     $array['catid'] = $nv_Request->get_int('catid', 'post', 0);
     $array['title'] = filter_text_input('title', 'post', '', 1);
     $array['description'] = nv_editor_filter_textarea('description', '', NV_ALLOWED_HTML_TAGS);
     $array['introtext'] = filter_text_textarea('introtext', '', NV_ALLOWED_HTML_TAGS);
     $array['author_name'] = filter_text_input('author_name', 'post', '', 1);
     $array['author_email'] = filter_text_input('author_email', 'post', '');
     $array['author_url'] = filter_text_input('author_url', 'post', '');
     $array['fileupload'] = $nv_Request->get_typed_array('fileupload', 'post', 'string');
     $array['linkdirect'] = $nv_Request->get_typed_array('linkdirect', 'post', 'string');
     $array['version'] = filter_text_input('version', 'post', '', 1);
     $array['fileimage'] = filter_text_input('fileimage', 'post', '');
     $array['copyright'] = filter_text_input('copyright', 'post', '', 1);
     $array['comment_allow'] = $nv_Request->get_int('comment_allow', 'post', 0);
     $array['who_comment'] = $nv_Request->get_int('who_comment', 'post', 0);
     $array['groups_comment'] = $nv_Request->get_typed_array('groups_comment', 'post', 'int');
     $array['is_del_report'] = $nv_Request->get_int('is_del_report', 'post', 0);
     $array['who_view'] = $nv_Request->get_int('who_view', 'post', 0);
     $array['groups_view'] = $nv_Request->get_typed_array('groups_view', 'post', 'int');
     $array['who_download'] = $nv_Request->get_int('who_download', 'post', 0);
Esempio n. 11
0
if ($nv_Request->isset_request('addfile', 'post')) {
    @(require_once NV_ROOTDIR . "/includes/class/upload.class.php");
    $addfile = $nv_Request->get_string('addfile', 'post', '');
    if (empty($addfile) or $addfile != md5($client_info['session_id'])) {
        Header("Location: " . nv_url_rewrite(NV_BASE_SITEURL . "index.php?" . NV_LANG_VARIABLE . "=" . NV_LANG_DATA . "&" . NV_NAME_VARIABLE . "=" . $module_name, true));
        exit;
    }
    $array = array();
    $array['catid'] = $nv_Request->get_int('upload_catid', 'post', 0);
    $array['title'] = filter_text_input('upload_title', 'post', '', 1, 255);
    $array['description'] = filter_text_textarea('upload_description', '', NV_ALLOWED_HTML_TAGS);
    $array['introtext'] = filter_text_textarea('upload_introtext', '', NV_ALLOWED_HTML_TAGS);
    $array['author_name'] = filter_text_input('upload_author_name', 'post', '', 1, 100);
    $array['author_email'] = filter_text_input('upload_author_email', 'post', '', 60);
    $array['author_url'] = filter_text_input('upload_author_url', 'post', '', 0, 255);
    $array['linkdirect'] = filter_text_textarea('upload_linkdirect', '');
    $array['version'] = filter_text_input('upload_version', 'post', '', 1, 20);
    $array['filesize'] = $nv_Request->get_int('upload_filesize', 'post', 0);
    $array['copyright'] = filter_text_input('upload_copyright', 'post', '', 1, 255);
    $array['user_name'] = filter_text_input('upload_user_name', 'post', '', 1, 100);
    $array['user_id'] = 0;
    $seccode = filter_text_input('upload_seccode', 'post', '');
    if (defined('NV_IS_USER')) {
        $array['user_name'] = $user_info['username'];
        $array['user_id'] = $user_info['userid'];
    }
    if (!empty($array['author_url'])) {
        if (!preg_match("#^(http|https|ftp|gopher)\\:\\/\\/#", $array['author_url'])) {
            $array['author_url'] = "http://" . $array['author_url'];
        }
    }
Esempio n. 12
0
$array_config = array();
if ($nv_Request->isset_request('submit', 'post')) {
    $array_config['is_addfile'] = $nv_Request->get_int('is_addfile', 'post', 0);
    $array_config['who_addfile'] = $nv_Request->get_int('who_addfile', 'post', 0);
    $array_config['groups_addfile'] = $nv_Request->get_typed_array('groups_addfile', 'post', 'int');
    $array_config['is_upload'] = $nv_Request->get_int('is_upload', 'post', 0);
    $array_config['who_upload'] = $nv_Request->get_int('who_upload', 'post', 0);
    $array_config['groups_upload'] = $nv_Request->get_typed_array('groups_upload', 'post', 'int');
    $array_config['who_autocomment'] = $nv_Request->get_int('who_autocomment', 'post', 0);
    $array_config['groups_autocomment'] = $nv_Request->get_typed_array('groups_autocomment', 'post', 'int');
    $array_config['maxfilesize'] = $nv_Request->get_int('maxfilesize', 'post', 0);
    $array_config['upload_filetype'] = $nv_Request->get_typed_array('upload_filetype', 'post', 'string');
    $array_config['upload_dir'] = filter_text_input('upload_dir', 'post', '');
    $array_config['temp_dir'] = filter_text_input('temp_dir', 'post', '');
    $array_config['is_zip'] = $nv_Request->get_int('is_zip', 'post', 0);
    $array_config['readme'] = filter_text_textarea('readme', '');
    $array_config['readme'] = strip_tags($array_config['readme']);
    $array_config['is_resume'] = $nv_Request->get_int('is_resume', 'post', 0);
    $array_config['max_speed'] = $nv_Request->get_int('max_speed', 'post', 0);
    if (!in_array($array_config['who_addfile'], array_keys($array_who_upload))) {
        $array_config['who_addfile'] = 0;
    }
    $array_config['groups_addfile'] = !empty($array_config['groups_addfile']) ? implode(',', $array_config['groups_addfile']) : '';
    if (!in_array($array_config['who_upload'], array_keys($array_who_upload))) {
        $array_config['who_upload'] = 0;
    }
    $array_config['groups_upload'] = !empty($array_config['groups_upload']) ? implode(',', $array_config['groups_upload']) : '';
    if (!in_array($array_config['who_autocomment'], array_keys($array_who_upload))) {
        $array_config['who_autocomment'] = 0;
    }
    $array_config['groups_autocomment'] = !empty($array_config['groups_autocomment']) ? implode(',', $array_config['groups_autocomment']) : '';
Esempio n. 13
0
 */
if (!defined('NV_IS_FILE_ADMIN')) {
    die('Stop!!!');
}
$page_title = $lang_module['comment_edit_title'];
$cid = $nv_Request->get_int('cid', 'get');
if ($nv_Request->isset_request('submit', 'post')) {
    nv_insert_logs(NV_LANG_DATA, $module_name, 'log_edit_comment', "id " . $cid, $admin_info['userid']);
    $sql = "SELECT a.id, a.title, a.listcatid, a.alias FROM `" . NV_PREFIXLANG . "_" . $module_data . "_rows` a INNER JOIN `" . NV_PREFIXLANG . "_" . $module_data . "_comments` b ON a.id=b.id WHERE b.cid='" . $cid . "'";
    list($id, $title, $listcatid, $alias) = $db->sql_fetchrow($db->sql_query($sql));
    if ($id > 0) {
        $delete = $nv_Request->get_int('delete', 'post', 0);
        if ($delete) {
            $db->sql_query('DELETE FROM ' . NV_PREFIXLANG . '_' . $module_data . '_comments WHERE cid=' . $cid . '');
        } else {
            $content = nv_nl2br(filter_text_textarea('content', '', NV_ALLOWED_HTML_TAGS));
            $active = $nv_Request->get_int('active', 'post', 0);
            $status = $status == 1 ? 1 : 0;
            $db->sql_query('UPDATE ' . NV_PREFIXLANG . '_' . $module_data . '_comments SET content=' . $db->dbescape($content) . ', status=' . $active . ' WHERE cid=' . $cid . '');
        }
        // Cap nhat lai so luong comment duoc kich hoat
        $array_catid = explode(",", $listcatid);
        list($numf) = $db->sql_fetchrow($db->sql_query("SELECT COUNT(*) FROM `" . NV_PREFIXLANG . "_" . $module_data . "_comments` where `id`= '" . $id . "' AND `status`=1"));
        $query = "UPDATE `" . NV_PREFIXLANG . "_" . $module_data . "_rows` SET `hitscm`=" . $numf . " WHERE `id`=" . $id;
        $db->sql_query($query);
        foreach ($array_catid as $catid_i) {
            $query = "UPDATE `" . NV_PREFIXLANG . "_" . $module_data . "_" . $catid_i . "` SET `hitscm`=" . $numf . " WHERE `id`=" . $id;
            $db->sql_query($query);
        }
        // Het Cap nhat lai so luong comment duoc kich hoat
    }
Esempio n. 14
0
     $error[] = $lang_module['error_invalid_url'];
 }
 $link = nv_htmlspecialchars($link);
 $template = filter_text_input('template', 'post', "", 1);
 $typeblock = filter_text_input('typeblock', 'post', "", 1);
 $xmodule = filter_text_input('module', 'post', "", 1);
 $xfile = filter_text_input('file', 'post', "", 1);
 $xbanner = $nv_Request->get_int('banner', 'post');
 $xrss = filter_text_input('xrss', 'post', "", 0);
 $rss_setting_number = $nv_Request->get_int('rss_setting_number', 'post', 0);
 $rss_setting_description = $nv_Request->get_int('rss_setting_description', 'post', 0);
 $rss_setting_html = $nv_Request->get_int('rss_setting_html', 'post', 0);
 $rss_setting_pubdate = $nv_Request->get_int('rss_setting_pubdate', 'post', 0);
 $rss_setting_target = $nv_Request->get_int('rss_setting_target', 'post', 0);
 $leavegroup = $nv_Request->get_int('leavegroup', 'post');
 $xhtml = filter_text_textarea('htmlcontent', '', NV_ALLOWED_HTML_TAGS);
 $xhtml = defined('NV_EDITOR') ? nv_editor_nl2br($xhtml) : nv_nl2br($xhtml, '<br />');
 if ($typeblock == "banner") {
     $file_path = $xbanner;
 } elseif ($typeblock == "html") {
     $file_path = $xhtml;
 } elseif ($typeblock == "rss") {
     $file_path = $xrss . "#@#" . $rss_setting_number . "#@#" . $rss_setting_description . "#@#" . $rss_setting_html . "#@#" . $rss_setting_pubdate . "#@#" . $rss_setting_target;
     $template = filter_text_input('templaterss', 'post', "", 0);
 } else {
     $file_path = $xfile;
 }
 if (empty($xfile) && empty($typeblock)) {
     $error[] = $lang_module['error_empty_content'];
 } elseif ($typeblock == "rss" and !nv_is_url($xrss)) {
     $error[] = $lang_module['block_rss_url_error'];