File manager

File manager - Edit - /home/autoph/public_html/portal/includes/menu/masterfile/hrd_active_newsletter.php

Back
<?php //================================= //UPLOAD TRAINING CONTENT if(isset($_GET['tid'])){ $tid = $_GET['tid']; $mID = $_GET['m']; $trainingTitle=mysql_result(mysql_query("SELECT `title` FROM `pod_training_list` WHERE `id`='$tid'"),0); $modTitle=mysql_result(mysql_query("SELECT `title` FROM `pod_training_modulle` WHERE `id`='$mID'"),0); echo "<div style='left:220px;top:60px;position:absolute;width:800px;height:460px;border:1px solid orange;background:white;z-index:5;border-radius:3px;z-index:10'>"; echo "<h3 class='titleBlue' style='width:99.3%;font-family:Calibri Light;font-size:16px;font-weight:normal;padding-left:5px;padding-top:2px;'>UPLOAD NEWS LETTER</h3>"; echo "<div class='lightGradient' style='top:2px;left:97%;position:absolute;z-index:3'> <a href='main_new.php?view=104&sid=POD&sview=101&tab=3&m=".$_GET['m']."' style='display:block;width:17px;height:17px;border:1px solid lightgray;border-radius:2px;font-size:14px;color:red'> <center>X</center> </a> </div>"; //FILE UPLOAD REQUEST FOR THE TRAINING CONTENT OR MATERIALS //SAVING TRAINING MATERIALS if(isset($_FILES['file'])){ $ext = explode('.', $_FILES['file']['name']); $allow_ext = array('pdf','PDF','pptx','pps','dps','dpt','DPS','DPT','PPS','pdfx','PDFX','PPSX','ppsx','PPTX','ppt','PPT' ,'doc','DOC','docx','DOCX', 'xls','XLS','xlsx','XLSX','jpg','JPG','png','PNG','gif','GIF','mp4','MP4','vid' ,'VID','avi', 'AVI','mov', 'MOV','mpeg','MPEG','vob','VOB','vlc','VLC'); $target_path = basename( $_FILES['file']['name']); $target_path = mysql_real_escape_string($target_path); $filename = $_FILES['file']['name']; $fext = pathinfo($filename, PATHINFO_EXTENSION); $mID = $_GET['m']; $tID = $_GET['tid']; $fType = 'Local'; if(!in_array($fext,$allow_ext)){ $SysMessage='Invalid file extension. Please select image format only...'; $ror=true; }else { if(move_uploaded_file($_FILES['file']['tmp_name'], 'pod_files/'.$mID.'_'.$tID.'---'.$target_path)) { $myFile = $mID.'_'.$tID."---" . $filename; $fullFile=mysql_real_escape_string($myFile); //duplicate image is not allowed mysql_query("DELETE FROM `pod_training_contents` WHERE `module_id`='$mID' AND `training_id`='$tID' AND 'file_path'='$fullFile'"); $sql="INSERT INTO `pod_training_contents` (`id`,`module_id`,`training_id`,`content_desc`,`file_type`,`file_path`,`date`,`time`,`created_by`) VALUES('','$mID','$tID','$fullFile','$fType','$fullFile','$toDate','$currentTime','$user')"; if(!mysql_query($sql)) { die('Error: ' . mysql_error()); }else{ $SysMessage= "Image upload complete... " . $fullFile; } $SysMessage= "Image upload complete... " . $fullFile; }else{ $SysMessage= "There was an error uploading the file, please try again!" . $_FILES['file']['error']; } } } //======================================================================================== if(isset($_POST['SaveEmbedRecord'])){ $mID = $_GET['m']; $tID = $_GET['tid']; $fType = 'Online'; $description = $_POST['description']; $description=mysql_real_escape_string($description); //duplicate image is not allowed mysql_query("DELETE FROM `pod_training_contents` WHERE `module_id`='$mID' AND `training_id`='$tID' AND 'file_path'='$fullFile'"); $sql="INSERT INTO `pod_training_contents` (`id`,`module_id`,`training_id`,`content_desc`,`file_type`,`file_path`,`date`,`time`,`created_by`) VALUES('','$mID','$tID','$description','$fType','$description','$toDate','$currentTime','$user')"; if(!mysql_query($sql)) { die('Error: ' . mysql_error()); }else{ $eSysMessage= "New file uploaded... " ; } $eSysMessage= "New file uploaded.. " ; } //======================================================================================== ?> <table style='width:100%;border:1px solid white'> <tr style='background:white;border:1px solid white'> <td valign='top' style='background:white;border:1px solid white;border-right:1px solid white;width:90%'> <form action = "" method="POST"> <div align='left' class="form-group" style='padding:10px;border:1px solid lightgray'> <p style='text-align:bottom;line-height:80%;font-family:Calibri;font-size:14px;padding-left:0px;color:black;font-weight:normal'> Embed File:<br> <br><textarea name='description' style='width:100%;border:1px solid blue' rows='3' placeholder='Embed Online Training Materials'></textarea> <br><input type='submit' name='SaveEmbedRecord' value='Embed File' style='width:100px;margin:2px;height:25px;border:1px solid gray'> <a href='main_new.php?view=104&sid=POD&sview=101&tab=3&m=<?php echo $_GET['m'];?>&tid=<?php echo $_GET['tid'];?>&content=true&getnew=<?php echo $_GET['getnew']+1;?>'><input type='button' name='New' value='Add New' style='width:80px;margin:2px;border:1px solid lightgray'></a> (Recommended Width: 100%; Height:500px;) <?php echo $eSysMessage;?> </p> </p> </div> </form> <br> <form action = "" method="POST" enctype="multipart/form-data"> <div align='left' class="form-group" style='padding:10px;border:1px solid lightgray'> <p style='text-align:bottom;line-height:80%;font-family:Calibri;font-size:12px;padding-left:0px;color:black;font-weight:normal'> Audio / Video Upload:<br> <br> <input type="file" name="file" id="file" style="background-color:#fff;width:100%"> <br><input type='submit' name='SaveLocalRecord' value='Upload File' style='width:100px;margin:2px;height:25px;border:1px solid lightgray'> <a href='main_new.php?view=104&sid=POD&sview=101&tab=3&m=<?php echo $_GET['m'];?>&tid=<?php echo $_GET['tid'];?>&content=true&getnew=<?php echo $_GET['getnew']+1;?>'><input type='button' name='New' value='Add New' style='width:80px;margin:2px;border:1px solid lightgray'></a> <?php echo $SysMessage;?> </p> </div> </form> </td> </tr> <tr style='background:white;border:1px solid white'> <td valign='top' colspan='2' style='padding:5px;background:white;border:1px solid lightgray;width:100%'> <?php $tid = $_GET['tid']; $mID = $_GET['m']; echo "<div STYLE='height: 125px;max-height:940px;border:0px solid red;width: 100%; font-size: 12px; overflow: auto;'>"; $qq=mysql_query("SELECT * FROM `pod_training_contents` WHERE `training_id`='$tid' ORDER BY id ASC"); echo "<table style='width:100%;border-collapse:collapse'>"; echo "<tr>"; echo "<th STYLE='width:3%;height:20px;'>NO.</th>"; echo "<th STYLE='width:45%;height:20px;'>FILE CONTENT</th>"; echo "<th STYLE='width:3%;height:20px;'></th>"; echo "</tr>"; while($row=mysql_fetch_array($qq)){ $countM = $countM + 1; echo "<tr>"; echo "<td align='center' style='font-family:Calibri Light;font-size:11px;'>".$countM."</td>"; echo "<td style='font-family:Calibri Light;font-size:11px;'> <a href='pod_files/".$row['file_path']."' target='NEW' style='font-size:11px;font-weight:normal'>".$row['file_type']."</a> </td>"; echo "<td align='center' style='font-family:Calibri Light;font-size:11px;'><a href='main_new.php?view=104&sid=POD&sview=101&tab=3&m=".$_GET['m']."&tid=".$_GET['tid']."&content=true&delID=".$row['id']."' style='font-size:12px;font-weight:bold;color:red'>X</a></td>"; echo "</tr>"; } echo "</table>"; echo "</div>"; ?> </td> </tr> </table> <?php echo "</div>"; } echo "<h3 class='titleBlue' style='width:99.6%;font-family:Calibri Light;font-size:16px;font-weight:normal;padding-left:5px;padding-top:2px;'>TRAINING MODULES</h3>"; echo "<div style='top:85px;left:97.8%;position:absolute;z-index:3'> <a href='main_new.php?menu&view=104&sid=ENW&sview=102&tab=4&#id-0' style='display:block;width:17px;height:17px;border:1px solid gray;background:lightgray;border-radius:2px'> <center>X</center> </a> </div>"; echo "<div style='width:99.8%;border:0px solid red;background:#f4f4f4'>"; ?> <div class='lightBlue' style='width:98.5%;height:40px;border:1px solid lightgray;padding-left:20px;padding-top:3px'> <a href='main_new.php?menu&view=104&sview=102&sid=ENW&action=new&tab=4#id-0'><ABBR title='Add New Record'><img src='./images/new.png' onmouseover="this.src='images/new_.png';" onmouseout="this.src='images/new.png';" /></ABBR></a> <a href='main_new.php?view=104&sview=721&sid=ADV&action=edit&tab=0#id-0'><ABBR title='Advance Search Module'><img src='./images/filter_a.png' onmouseover="this.src='images/filter_b.png';" onmouseout="this.src='images/filter_a.png';" /></ABBR></a> <div class='lightGradientA' style='margin-top:5px;position:relative;height:30px;width:500px;border:1px solid #f2f2f;top:-40px;left:100px;padding-top:4px;border-left:1px solid lightgray;padding-left:30px'> <form action='' method='GET'> <input type='hidden' name='view' value='104'> <input type='hidden' name='sview' value='102'> <input type='hidden' name='tab' value='4'> <input type='hidden' name='sid' value='ENW'> Search : <input type='text' name='searchBox' value='' style='padding-left:10px;width:300px;border:1px solid gray;background:white;height:30px;border-radius:5px 0px 0px 5px'> <input type='submit' name='goSearch' value='Search' style='width:70px;border:1px solid gray;height:30px;border-radius:0px 5px 5px 0px'> </form> </div> <!--<div align='left' style='top:137px;left:53%;height:30px;width:200px;float:left;position:absolute;border:0px solid red'> <ABBR title='Edit Record'><img src='./images/advancesearch_a.png' onmouseover="this.src='images/advancesearch_b.png';" onmouseout="this.src='images/advancesearch_a.png';" /></ABBR></a> </div>--> </div> <div class='contentTable' style='height:820px;'> <?php if(isset($_GET['searchBox'])){ $searchString=$_GET['searchBox']; $qq=mysql_query("SELECT * FROM `pod_training_modulle` WHERE `title` LIKE '%$searchString%' \|\| `title` LIKE '%$searchString%' ORDER by `title` ASC "); }else{ $qq=mysql_query("SELECT * FROM `pod_training_modulle` WHERE `status`='1' ORDER by `title` ASC "); } echo "<div STYLE='height:100%;width: 100%; font-size: 12px; overflow: auto;background:white;border:0px solid red'>"; while($row = mysql_fetch_array($qq)){ echo "<ABBR title='".$row['title']."'> <div style='margin:25px;float:left;width:25%;max-width:200px;border:1px solid lightgray;border-radius:10px;padding:5px;box-shadow:5px 5px 8px lightgray;background:white'>"; echo "<table style='width:100%;'>"; echo "<tr>"; if(empty($row['image_path'])){ echo "<td style='height:200px;background:white;border:1px solid lightgray' align='center' valign='middle'>"; ?> <form action = "" method="POST" enctype="multipart/form-data"> <input type='hidden' name='mID' value='<?php echo $row['id'];?>'> <table style='width:100%;border:1px solid white'> <tr style='background:white;border:1px solid white'> <td valign='top' style='background:white;border:1px solid white;border-right:1px solid white;width:100%'> <div align='left' class="form-group" style='padding:10px;border:1px solid lightgray'> <p style='text-align:bottom;line-height:80%;font-family:Calibri;font-size:14px;padding-left:0px;color:black;font-weight:normal'> <input type="file" name="file" id="file" style="background-color:#fff;width:100%" required> <br> </p> </div> <div align='center' class="form-group" style='padding:2px'> <br><input type='submit' name='UploadCoverPic' value='Upload File' style='border-radius:5px;width:50%;margin:2px;height:20px;width:70px;border:1px solid gray;' class='titleBlue'><br> <?php echo $SysMessage;?> </div> </td> </tr> </table> </form> <?php echo "</td>"; }else{ echo "<td align='right' valign='top' style='height:200;background-image:url(\"moduleCover/".$row['image_path']."\");background-size:50%;background-repeat:no-repeat;background-position:auto;background-size:100%;border:1px solid white'> <form action='' method='POST'> <input type='hidden' name='xID' value='".$row['id']."'> <input type='submit' name='rep' value='X' style='height:20px;width:18px;padding:2px;padding-left:4px;border:1px solid lightgray;border-radius:5px;font-size:11px;font-weight:normal' class='lightGradient'> </form></td>"; } echo "</tr>"; echo "<tr>"; echo "<td valign='top' align='center' style='padding:5px;height:50px;font-family:Calibri Light;font-size:12px;color:blue;border:1px solid white;background:white;font-weight:normal' ><a href='main_new.php?view=104&sid=POD&sview=101&tab=3&m=".$row['id']."' style='font-size:12px;'>".$row['title']."</a></td>"; echo "</tr>"; echo "</table>"; echo "</div> </ABBR>"; } echo "</div>"; ?> </div> <?php echo "</div>"; ?>

| ver. 1.4 | . | PHP 7.3.33 | Generation time: 0 | proxy | phpinfo | Settings