Server IP : 103.233.192.212 / Your IP : 3.144.226.114 Web Server : Apache/2 System : Linux sv1.inde.co.th 3.10.0-1160.36.2.el7.x86_64 #1 SMP Wed Jul 21 11:57:15 UTC 2021 x86_64 User : sumpatuan ( 1058) PHP Version : 5.5.38 Disable Function : symlink,shell_exec,exec,proc_close,proc_open,popen,system,dl,putenv,passthru,escapeshellarg,escapeshellcmd,pcntl_exec,proc_get_status,proc_nice,proc_terminate,pclose,ini_alter,virtual,openlog,ini_restore MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/sumpatuan/public_html/admin/top/action/ |
Upload File : |
<?php require_once('session_backend_administrator.php'); header('Content-Type: text/html; charset=UTF-8'); date_default_timezone_set("Asia/Bangkok"); $datetime = date('d/m/Y H.i'); //// function Transparency BG function setTransparency($new_image,$image_source){ $transparencyIndex = imagecolortransparent($image_source); $transparencyColor = array('red' => 255, 'green' => 255, 'blue' => 255); if ($transparencyIndex >= 0) { $transparencyColor = imagecolorsforindex($image_source, $transparencyIndex); } $transparencyIndex = imagecolorallocate($new_image, $transparencyColor['red'], $transparencyColor['green'], $transparencyColor['blue']); imagefill($new_image, 0, 0, $transparencyIndex); imagecolortransparent($new_image, $transparencyIndex); } if($STT_login=="admin_login_true"){ if(!isset($_POST['txt_name']) or !isset($_POST['txt_number']) or !isset($_POST['txt_date']) or !isset($_POST['txt_exp']) or !isset($_POST['txt_date']) or !isset($_POST['txt_namemb']) ){ echo "<SCRIPT type='text/javascript'> alert('กรุณากรอกข้อมูลให้ครบ'); window.location.replace(document.referrer); </SCRIPT>"; exit; }else{ $data_namenewsbook = trim($con_db_administrator->real_escape_string($_POST['txt_name'])); $data_numbernewsbook = trim($con_db_administrator->real_escape_string($_POST['txt_number'])); $data_datenewsbook = date("d/m/Y",strtotime($_POST['txt_date'])); $data_expnewsbook = date("d/m/Y",strtotime($_POST['txt_exp'])); $data_checkexpnewsbook = date("Ymd",strtotime($_POST['txt_exp'])); //// txt_namemb $data_namembnewsbook = implode(", ", $_POST['txt_namemb']); // $data_namembnewsbook_array = explode(", ", $data_namembnewsbook ); // echo $data_namembnewsbook; // echo "<br>"; // print_r($data_namembnewsbook_array); // exit; $total_filedoc = count($_FILES['uploadFile']['name']); $data_sttnewsbook = $con_db_administrator->real_escape_string($_POST['statusshow']); //check date $now = date("Ymd"); $date1 = date("Ymd",strtotime($_POST['txt_date'])); $date2 = date("Ymd",strtotime($_POST['txt_exp'])); if($date1 >= $date2){ echo "<SCRIPT type='text/javascript'> alert('แก้ไข วันที่ลง หรือ วันที่หมดอายุ ให้ถูกต้อง'); window.location.replace(document.referrer); </SCRIPT>"; exit; } if($date2 <= $now){ echo "<SCRIPT type='text/javascript'> alert('กรอก วันที่หมดอายุ ให้ถูกต้อง'); window.location.replace(document.referrer); </SCRIPT>"; exit; } $sql_check_number = " SELECT COUNT(`number_newsbook`) FROM `data_newsbook` WHERE `number_newsbook`='$data_numbernewsbook' "; $qr_check_number = mysqli_query($con_db_administrator, $sql_check_number) or trigger_error("sql_check_number", E_USER_ERROR); $r_check_number = mysqli_fetch_row($qr_check_number); $rs_check_number = $r_check_number[0]; if($rs_check_number >= 1){ echo "<SCRIPT type='text/javascript'> alert('หมายเลขระบบ Back Office $data_numbernewsbook ซ้ำ'); window.location.replace(document.referrer); </SCRIPT>"; exit; }else{ $insert_newsbook = " INSERT INTO `data_newsbook`( `name_newsbook`, `number_newsbook`, `date_newsbook`, `exp_newsbook`, `checkexp_newsbook`, `namemb_newsbook`, `stt_newsbook`) VALUES ( '$data_namenewsbook', '$data_numbernewsbook', '$data_datenewsbook', '$data_expnewsbook', '$data_checkexpnewsbook', '$data_namembnewsbook', '$data_sttnewsbook' ) "; $action_newsbook = $con_db_administrator->query($insert_newsbook); if(!$action_newsbook){ echo "<SCRIPT type='text/javascript'> alert('เพิ่มข้อมูลไม่สำเร็จ กรุณาลองใหม่อีกครั้ง'); window.location.replace('../NewsbookMain'); </SCRIPT>"; exit; }else{ if( empty($_FILES['uploadFile']['name'][0]) ){ echo "<SCRIPT type='text/javascript'> alert('เพิ่มข้อมูลใหม่ สำเร็จ [non-file]'); window.location.replace('../NewsbookMain'); </SCRIPT>"; exit; }else{ $sql_data = " SELECT `id_newsbook` FROM `data_newsbook` WHERE `name_newsbook`='$data_namenewsbook' AND `number_newsbook`='$data_numbernewsbook' ORDER BY `id_newsbook` DESC LIMIT 1 "; $qr_data = mysqli_query($con_db_administrator, $sql_data); $rs_data = mysqli_fetch_assoc($qr_data); $id_tbdata_filedoc = $rs_data['id_newsbook']; if($id_tbdata_filedoc !="" or isset($id_tbdata_filedoc) ){ $dt_addfile = date('YmdHis'); for($i=0;$i<$total_filedoc;$i++){ $filedoc = $_FILES["uploadFile"]["tmp_name"][$i]; $oldname_filedoc = trim($_FILES['uploadFile']['name'][$i]); $type_filedoc = pathinfo($_FILES['uploadFile']['name'][$i],PATHINFO_EXTENSION); $newname_filedoc = "FILENB".$id_tbdata_filedoc."_".$dt_addfile."_".$i.".".$type_filedoc; $keep_filedoc = "../../../doc/nb/"; $move_filedoc = $keep_filedoc.$newname_filedoc; $path_filedoc = "doc/nb/".$newname_filedoc; $width=1200; if( exif_imagetype($filedoc) == IMAGETYPE_JPEG ) { $size=GetimageSize($filedoc); if($size[0]>=$width){ $height=round($width*$size[1]/$size[0]); $filedoc_orig = ImageCreateFromJPEG($filedoc); $photoX = ImagesX($filedoc_orig); $photoY = ImagesY($filedoc_orig); $filedoc_fin = ImageCreateTrueColor($width, $height); setTransparency($filedoc_fin,$filedoc_orig); ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY); ImageJPEG($filedoc_fin, $move_filedoc); ImageDestroy($filedoc_orig); ImageDestroy($filedoc_fin); }else{ move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); } }elseif( exif_imagetype($filedoc) == IMAGETYPE_PNG ){ $size=GetimageSize($filedoc); if($size[0]>=$width){ $height=round($width*$size[1]/$size[0]); $filedoc_orig = ImageCreateFromPNG($filedoc); $photoX = ImagesX($filedoc_orig); $photoY = ImagesY($filedoc_orig); $filedoc_fin = ImageCreateTrueColor($width, $height); setTransparency($filedoc_fin,$filedoc_orig); ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY); imagepng($filedoc_fin, $move_filedoc); ImageDestroy($filedoc_orig); ImageDestroy($filedoc_fin); }else{ move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); } }elseif( exif_imagetype($filedoc) == IMAGETYPE_GIF ){ $size=GetimageSize($filedoc); if($size[0]>=$width){ $height=round($width*$size[1]/$size[0]); $filedoc_orig = ImageCreateFromGIF($filedoc); $photoX = ImagesX($filedoc_orig); $photoY = ImagesY($filedoc_orig); $filedoc_fin = ImageCreateTrueColor($width, $height); setTransparency($filedoc_fin,$filedoc_orig); ImageCopyResampled($filedoc_fin, $filedoc_orig, 0, 0, 0, 0, $width+1, $height+1, $photoX, $photoY); imagegif($filedoc_fin,$move_filedoc); ImageDestroy($filedoc_orig); ImageDestroy($filedoc_fin); }else{ move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); } }else{ move_uploaded_file($_FILES['uploadFile']['tmp_name'][$i],$move_filedoc); } $insert_filedoc = " INSERT INTO `data_filedoc_newsbook`(`name_filedoc_newsbook`, `type_filedoc_newsbook`, `path_filedoc_newsbook`, `id_tbdata_filedoc_newsbook` ) VALUES ('$oldname_filedoc', '$type_filedoc', '$path_filedoc', '$id_tbdata_filedoc' ) "; $action_filedoc = $con_db_administrator->query($insert_filedoc); if(!$action_filedoc){ echo "<SCRIPT type='text/javascript'> alert('เพิ่มข้อมูลไม่สำเร็จ กรุณาลองใหม่อีกครั้ง [insert_filedoc]'); window.location.replace('../NewsbookMain'); </SCRIPT>"; exit; } } echo "<SCRIPT type='text/javascript'> alert('เพิ่มข้อมูลใหม่ สำเร็จ'); window.location.replace('../NewsbookMain'); </SCRIPT>"; exit; }else{ echo "<SCRIPT type='text/javascript'> alert('เพิ่มข้อมูลไม่สำเร็จ กรุณาลองใหม่อีกครั้ง [2]'); window.location.replace('../NewsbookMain'); </SCRIPT>"; exit; } } } } } }else{ echo "<SCRIPT type='text/javascript'> alert('กรุณาเข้าสู่ระบบ'); window.location.replace('../../index'); </SCRIPT>"; exit; } mysqli_close($con_db_administrator); ?>