Server IP : 103.233.192.212 / Your IP : 3.144.226.114 Web Server : Apache/2 System : Linux sv1.inde.co.th 3.10.0-1160.36.2.el7.x86_64 #1 SMP Wed Jul 21 11:57:15 UTC 2021 x86_64 User : sumpatuan ( 1058) PHP Version : 5.5.38 Disable Function : symlink,shell_exec,exec,proc_close,proc_open,popen,system,dl,putenv,passthru,escapeshellarg,escapeshellcmd,pcntl_exec,proc_get_status,proc_nice,proc_terminate,pclose,ini_alter,virtual,openlog,ini_restore MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/sumpatuan/public_html/admin/top/action/ |
Upload File : |
<?php require_once('session_backend_administrator.php'); header('Content-Type: text/html; charset=UTF-8'); date_default_timezone_set("Asia/Bangkok"); $datetime = date('d/m/Y H.i'); //// function Transparency BG function setTransparency($new_image,$image_source){ $transparencyIndex = imagecolortransparent($image_source); $transparencyColor = array('red' => 255, 'green' => 255, 'blue' => 255); if ($transparencyIndex >= 0) { $transparencyColor = imagecolorsforindex($image_source, $transparencyIndex); } $transparencyIndex = imagecolorallocate($new_image, $transparencyColor['red'], $transparencyColor['green'], $transparencyColor['blue']); imagefill($new_image, 0, 0, $transparencyIndex); imagecolortransparent($new_image, $transparencyIndex); } if($STT_login=="admin_login_true"){ if(!isset($_POST['txt_id']) or !isset($_POST['txt_name']) or !isset($_POST['txt_group']) or !isset($_POST['txt_position']) ){ echo "<SCRIPT type='text/javascript'> alert('กรุณากรอกข้อมูลให้ครบ'); window.location.replace(document.referrer); </SCRIPT>"; exit; }else{ $data_idgroup = $con_db_administrator->real_escape_string($_POST['txt_group']); $sql_ng = " SELECT `name_group` FROM `data_group` WHERE `id_group`='$data_idgroup' "; $qr_ng = mysqli_query($con_db_administrator, $sql_ng); $rs_ng = mysqli_fetch_assoc($qr_ng); $data_namegroup = $rs_ng["name_group"]; $data_position = $con_db_administrator->real_escape_string($_POST['txt_position']); $data_position_explode = explode('|',$data_position); $data_idposition = $data_position_explode[0]; $data_nameposition = $data_position_explode[1]; $data_id = trim($con_db_administrator->real_escape_string($_POST['txt_id'])); $data_name = trim($con_db_administrator->real_escape_string($_POST['txt_name'])); /////// เช็คข้อมูล id ซ้ำ $sql_check_id = " SELECT COUNT(*) FROM `data_profile` WHERE `id_profile`='$data_id' "; $qr_check_id = mysqli_query($con_db_administrator, $sql_check_id) or trigger_error("sql_check_id", E_USER_ERROR); $rs_check_id = mysqli_fetch_row($qr_check_id); $check_id = $rs_check_id[0]; if($check_id >= 1){ echo "<SCRIPT type='text/javascript'> alert('ลำดับบุคลากร [ $data_id ] ซ้ำ'); window.location.replace(document.referrer); </SCRIPT>"; exit; }else{ $dt_addfile = date('YmdHis'); $filedoc = $_FILES["uploadFile"]["tmp_name"]; $oldname_filedoc = trim($_FILES['uploadFile']['name']); $type_filedoc = pathinfo($_FILES['uploadFile']['name'],PATHINFO_EXTENSION); $newname_filedoc = $dt_addfile."_".$data_name.".".$type_filedoc; $keep_filedoc = "../../../doc/pf/img/"; $move_filedoc = $keep_filedoc.$newname_filedoc; $path_filedoc = "doc/pf/img/".$newname_filedoc; $width=300; if( exif_imagetype($filedoc) == IMAGETYPE_JPEG ) { $size=GetimageSize($filedoc); $height=round($width*$size[1]/$size[0]); $filedoc_orig = ImageCreateFromJPEG($filedoc); $photoX = ImagesX($filedoc_orig); $photoY = ImagesY($filedoc_orig); $filedoc_fin = ImageCreateTrueColor($width, $height); setTransparency($filedoc_fin,$filedoc_orig); ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY); ImageJPEG($filedoc_fin, $move_filedoc); ImageDestroy($filedoc_orig); ImageDestroy($filedoc_fin); }elseif( exif_imagetype($filedoc) == IMAGETYPE_PNG ){ $size=GetimageSize($filedoc); $height=round($width*$size[1]/$size[0]); $filedoc_orig = ImageCreateFromPNG($filedoc); $photoX = ImagesX($filedoc_orig); $photoY = ImagesY($filedoc_orig); $filedoc_fin = ImageCreateTrueColor($width, $height); setTransparency($filedoc_fin,$filedoc_orig); ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY); imagepng($filedoc_fin, $move_filedoc); ImageDestroy($filedoc_orig); ImageDestroy($filedoc_fin); }elseif( exif_imagetype($filedoc) == IMAGETYPE_GIF ){ $size=GetimageSize($filedoc); $height=round($width*$size[1]/$size[0]); $filedoc_orig = ImageCreateFromGIF($filedoc); $photoX = ImagesX($filedoc_orig); $photoY = ImagesY($filedoc_orig); $filedoc_fin = ImageCreateTrueColor($width, $height); setTransparency($filedoc_fin,$filedoc_orig); ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY); imagegif($filedoc_fin,$move_filedoc); ImageDestroy($filedoc_orig); ImageDestroy($filedoc_fin); }else{ move_uploaded_file($_FILES['uploadFile']['tmp_name'],$move_filedoc); } $insert_data = " INSERT INTO `data_profile`(`id_profile`, `name_profile`, `img_profile`, `id_position_profile`, `name_position_profile`, `id_group_profile`, `name_group_profile`) VALUES ( '$data_id','$data_name', '$path_filedoc', '$data_idposition', '$data_nameposition', '$data_idgroup', '$data_namegroup' )"; $action_data = $con_db_administrator->query($insert_data); if(!$action_data){ echo "<SCRIPT type='text/javascript'> alert('เพิ่มข้อมูลไม่สำเร็จ กรุณาลองใหม่อีกครั้ง'); window.location.replace('../ChartProfileMain'); </SCRIPT>"; exit; }else{ echo "<SCRIPT type='text/javascript'> alert('เพิ่มข้อมูลใหม่ สำเร็จ'); window.location.replace('../ChartProfileMain'); </SCRIPT>"; exit; } } } }else{ echo "<SCRIPT type='text/javascript'> alert('กรุณาเข้าสู่ระบบ'); window.location.replace('../../index'); </SCRIPT>"; exit; } mysqli_close($con_db_administrator); ?>