Hacked By AnonymousFox

Current Path : /home/missmand/public_html/learning/forum/
Upload File :
Current File : /home/missmand/public_html/learning/forum/modifMandarine.php

<?php

	include '../lib/init.php';
	Utilisateur::verif_connect();

	/* Déclaration des variables */
	$mandarineId = Tool::getId($_GET['mandarine'],'mandarine.php');
	Auth::editMandarine($bdd, $reponseId); /* Verifier l'accès à la modification de ce message */
	$erreur = array();

	/* Réception du formulaire */
	if(isset($_POST['edit'])){

        $contenu = $_POST['contenu'];

		if(empty($contenu)) array_push($erreur, mandarineFormErreurContenu);

        /* Récupération du fichier */
        if ($_FILES['fichier']['error'] === UPLOAD_ERR_OK){
            $fichier = Upload::postFichier($_FILES['fichier'],mandarineFormNomFichier,5000000,array('jpg','png','jpeg','pdf','xls','xlsx','doc','docx','ppt','pptx'));
        }

        if(empty($erreur)){

			$sql = $bdd->query("SELECT mandarineFichier FROM forum_mandarine
			                    WHERE mandarineId = $mandarineId ");
			$data = $sql->fetch();

			$fichierOld = $data['mandarineFichier'];

			/*  Si pas de changement  */
			if(!isset($fichier)){
			  $fichier = $fichierOld;
			}
			/*  Si il y'a un changement  */
			else{
				  if(!empty($fichierOld)){
				      unlink("../file/mandarine/$fichierOld");
				  }
				  move_uploaded_file($_FILES['fichier']['tmp_name'],'../file/mandarine/'.$fichier);
			}

			/* Mise à jour */
			$sql = $bdd->prepare("UPDATE forum_mandarine SET 
								  mandarineContenu = :contenu,
								  mandarineFichier = :fichier
								  WHERE mandarineId = :mandarineId ");
			$sql->execute(array(
					"contenu" => $_POST['contenu'],
					"fichier" => $fichier,
					"mandarineId" => $mandarineId
				)
			);

            setFlash(mandarineModifSucces);
            header('location:'.BASEFRONT.'forum/mandarine.php');

        }

	}

	/* Récupération des informations */
	$sql = $bdd->query("SELECT * FROM forum_mandarine
						WHERE mandarineId = $mandarineId ");
	$data = $sql->fetchobject();

    $contenu = $data->mandarineContenu;

?>
<!doctype html>
<html lang="fr">

<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=320">
	<meta name="viewport" content="width=device-width; initial-scale=0.8; maximum-scale=0.8;">
	<title><?php echo mandarineModifTitle ?></title>
	<link rel="icon" type="image/png" href="<?php echo BASEFRONT ?>img/favicon.png" />
	<link href="<?php echo BASEFRONT ?>css/reset.css" rel="stylesheet" type="text/css" />
	<link href="<?php echo BASEFRONT ?>css/template.css" rel="stylesheet" type="text/css" />
	<link href="<?php echo BASEFRONT ?>css/formMandarine.css" rel="stylesheet" type="text/css" />
	<link href="<?php echo BASEFRONT ?>css/mobile.css" rel="stylesheet" type="text/css" />
	<link href='http://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,400,300,600,700,800' rel='stylesheet' type='text/css'>
	<!--[if lt IE 9]>
		<script src="<?php echo BASEFRONT ?>js/html5.js"></script>
	<![endif]-->
</head>

<body>

	<div id="main">

		<?php
			/* Menu principal */
			include '../include/menu.php';
		?>

		<div id="conteneur">
			
			<header id="header">
				<div id="btnMenu"></div>
				<ul id="retour">
					<li><a href="<?php echo BASEFRONT ?>forum/mandarine.php"><?php echo mandarineModifRetourMiss ?></a></li>
					<li class="separation"> | </li>
					<li><?php echo mandarineModifRetourModif ?></li>
				</ul>
				<?php
					include '../include/portrait.php';
				?>
			</header>

            <?php
                if(!empty($erreur)){
                    echo'<div id="erreur" class="big">';
                        echo Tool::afficheErreur($erreur);
                    echo'</div>';
                }
            ?>

			<div id="contenu">

				<h2><?php echo mandarineModifTitre ?></h2>

				<div id="formulaire">
						
					<form action="#" method="post" enctype="multipart/form-data">

	                    <label><?php echo mandarineFormLabelFichier ?></label>
	                    <input type="file" name="fichier"/>
	                    <div class="legende"><?php echo mandarineFormLegendeFichier ?></div>	

	                    <label><?php echo mandarineFormLabelContenu ?></label>
	                    <textarea name="contenu" class="big"><?php echo $contenu ?></textarea>
	                    <div class="legende"><?php echo mandarineFormLegendeContenu ?></div>

						<input type="submit" value="<?php echo mandarineFormSubmit ?>" name="edit" id="btnSubmit"/>

					</form>

				</div>
				
				<div class="clear"></div>

			</div>

		</div>
		
	</div>

	<script type="text/javascript" src="<?php echo BASEFRONT ?>js/jquery.js"></script>
	<script type="text/javascript" src="<?php echo BASEFRONT ?>js/jquery-ui.js"></script>
	<script type="text/javascript" src="<?php echo BASEFRONT ?>js/template.js"></script>	
	<script type="text/javascript" src="<?php echo BASEFRONT ?>js/matchheight.js"></script>
	<script type="text/javascript" src="<?php echo BASEFRONT ?>js/script.js"></script>	

</body>
</html>


Hacked By AnonymousFox1.0, Coded By AnonymousFox