| Server IP : 208.122.213.31 / Your IP : 216.73.216.45 Web Server : Apache System : Linux msd6191.mjhst.com 4.18.0-553.137.1.el8_10.x86_64 #1 SMP Wed Jun 24 11:40:24 UTC 2026 x86_64 User : WHMCS_MIA_382 ( 1001) PHP Version : 7.4.33 Disable Function : NONE MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/httpd/html/store.tiacyrusxxx.com/public_html/dev/TSCP2/ |
Upload File : |
<?php
include ('config.php');
dbConn();
?>
<link rel="stylesheet" href="../TinyEditor/style.css" />
<script type="text/javascript" src="../TinyEditor/tinyeditor.js"></script>
<?php
if (isset($_SESSION['member_id']) && is_numeric($_SESSION['member_id'])) {
$member_id = $_SESSION['member_id'];
$member_sql = mysql_query("SELECT * FROM `cms_members` WHERE `member_id` = '" . $member_id . "'") or die(mysql_error());
if (mysql_num_rows($member_sql) == 1) {
$member = mysql_fetch_object($member_sql);
}
}
if (!isset($member->member_id) || !isset($member->email)) {
header("Location: ../login.php");
}
if (isset($_POST['edit'])) {
$title = addslashes($_POST['title']);
$body = $_POST['body'];
$blog_id = $_POST['blog_id'];
$date = $_POST['year']."-".$_POST['month']."-".$_POST['day'];
if ($body == "" || $title == "") {
echo "Missing Fields. User your browsers back button, to Go Back";
exit;
}
$body = addslashes($body);
$body = str_replace(chr(10), "<br />", $body);
$body = str_replace(chr(13), "", $body);
// $body = str_replace(chr(10), "<br />", $body);
$sql = "UPDATE cms_blogs SET date='$date', body='$body', title='$title' WHERE blog_id = '$blog_id'";
if (@mysql_query($sql)) {
printf("<meta http-equiv=\"Refresh\" content=\"0;url=./blogs.php\">");
} else {
echo 'Error:' . mysql_error();
}
} elseif (isset($_POST['post'])) {
$title = addslashes($_POST['title']);
$body = $_POST['body'];
if ($body == "" || $title == "") {
echo "<font face=Verdana size=2>Missing Fields. User your browsers back button to Go Back";
exit;
}
$body = addslashes($body);
$body = str_replace(chr(10), "<br />", $body);
$body = str_replace(chr(13), "", $body);
// $body = str_replace(chr(10), "<br />", $body);
//$date = date("Y-m-d");
$date = $_POST['year']."-".$_POST['month']."-".$_POST['day'];
$sql = "INSERT INTO cms_blogs SET date='" . $date . "', body='" . $body . "', title='" . $title . "', member_id='" . $member->member_id . "'";
if (@mysql_query($sql)) {
$blog_id = @mysql_insert_id();
// support@xfanclubs.com
sendMail('sensorghost@gmail.com', 'Admin', 'A new blog has been posted', 'The blog was posted on ' . $date . ' with the title: ' . $title, $member->email);
printf("<meta http-equiv=\"Refresh\" content=\"0;url=image_upload.php?type=preview§ion=blog&save=".$blog_id."_preview.jpg&tn=".$blog_id."_icon.jpg&id=".$blog_id."\">");
//printf("<meta http-equiv=\"Refresh\" content=\"0;url=./blogs.php\">");
} else {
echo 'Error:' . mysql_error();
}
} elseif (isset($_POST['del'])) {
$blog_id = $_POST['blog_id'];
$query = "DELETE from cms_blogs where blog_id = '" . $blog_id . "' limit 1";
$result = mysql_query($query);
printf("<meta http-equiv=\"Refresh\" content=\"0;url=./blogs.php\">");
} elseif (isset($_GET["add"])) {
?>
<br><br>
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr>
<td bgcolor="#CCCCCC"><span class="fourbold">ADD BLOG ENTRY</span> - <a href=blogs.php>Back to List</a>
</td>
</tr>
<tr>
<td>
<form action="blogs.php" method="POST">
<table width="700" border="0" align="center" cellpadding="5" cellspacing="0" align="center">
<tr>
<td><div align="right">Date:</div></td>
<td><select name="month" id="month" class="grey">
<option value="01">January</option>
<option value="02">February</option>
<option value="03">March</option>
<option value="04">April</option>
<option value="05">May</option>
<option value="06">June</option>
<option value="07">July</option>
<option value="08">August</option>
<option value="09">September</option>
<option value="10">October</option>
<option value="11">November</option>
<option value="12">December</option>
</select>
<select name="day" id="day" class="grey">
<option>01</option>
<option>02</option>
<option>03</option>
<option>04</option>
<option>05</option>
<option>06</option>
<option>07</option>
<option>08</option>
<option>09</option>
<option>10</option>
<option>11</option>
<option>12</option>
<option>13</option>
<option>14</option>
<option>15</option>
<option>16</option>
<option>17</option>
<option>18</option>
<option>19</option>
<option>20</option>
<option>21</option>
<option>22</option>
<option>23</option>
<option>24</option>
<option>25</option>
<option>26</option>
<option>27</option>
<option>28</option>
<option>29</option>
<option>30</option>
<option>31</option>
</select>
<select name="year" id="year" class="grey">
<option><?=date("Y")-3?></option><option><?=date("Y")-2?></option><option><?=date("Y")-1?></option><option selected="selected"><?=date("Y")?></option><option><?=date("Y")+1?></option><option><?=date("Y")+2?></option><option><?=date("Y")+3?></option>
</select></td>
</tr>
<tr><td><div align="right">title:</div></td><td><input name="title" type="text" size="50" maxlength="255" class="grey"></td></tr>
<tr>
<td colspan="2">
<textarea name="body" id="input" cols="125" rows="20" class="grey"></textarea>
</td>
</tr>
<tr>
<td colspan="2"><div align="center">
<input name="post" type="submit" value="Add Entry" class="grey" onclick="editor.post();">
</div></td>
</tr>
</table>
</form>
</td></tr></table>
<?php
} elseif (isset($_GET["delete"])) {
$blog_id = $_GET["blog_id"];
$query = "SELECT * from cms_blogs where blog_id = '$blog_id'";
$result = @mysql_query($query);
if (!$result) {
die('Error');
} while ($row = mysql_fetch_array($result)) {
?>
<br><br>
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr>
<td bgcolor="#CCCCCC"><span class="fourbold">DELETE BLOG ENTRY</span> - <a href=blogs.php>Back to List</a>
</td>
</tr>
<tr>
<td>
<?php
echo "Are you sure you want to delete:<br>";
echo $row['date'] . "<br>";
echo $row['body'] . "<br>";
echo "<form action=\"blogs.php\" method=\"POST\"><input type=\"hidden\" name=\"blog_id\" value=\"" . $blog_id . "\"><input name=\"del\" type=\"submit\" value=\"Delete\" class=\"grey\"></form></td></tr></table>";
}
} elseif (isset($_GET["edit"])) {
if ($_GET["blog_id"] == "") {
die('Error');
} else {
$blog_id = $_GET["blog_id"];
}
$query = "SELECT * from cms_blogs where blog_id = '$blog_id'";
$result = @mysql_query($query);
if (!$result) {
// die('Error');
} while ($row = mysql_fetch_array($result)) {
$body = str_replace("<br />", chr(13).chr(10), $row['body']);
$body = stripslashes($body);
$datesplit = explode("-", $row['date']);
$txtmonth = date("F", mktime(0, 0, 0, $datesplit[1], 1, $datesplit[0]));
?>
<br><br>
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr>
<td bgcolor="#CCCCCC"><span class="fourbold">EDIT BLOG ENTRY</span> - <a href=blogs.php>Back to List</a>
</td>
</tr>
<tr>
<td>
<form action="blogs.php" method="POST">
<table width="700" border="0" align="center" cellpadding="5" cellspacing="0">
<tr>
<td><div align="right">Date:</div></td>
<td><select name="month" id="month" class="grey">
<option value="<?=$datesplit[1]?>"><?=$txtmonth?></option>
<option value="01">January</option>
<option value="02">February</option>
<option value="03">March</option>
<option value="04">April</option>
<option value="05">May</option>
<option value="06">June</option>
<option value="07">July</option>
<option value="08">August</option>
<option value="09">September</option>
<option value="10">October</option>
<option value="11">November</option>
<option value="12">December</option>
</select>
<select name="day" id="day" class="grey">
<option><?=$datesplit[2]?></option>
<option>1</option>
<option>2</option>
<option>3</option>
<option>4</option>
<option>5</option>
<option>6</option>
<option>7</option>
<option>8</option>
<option>9</option>
<option>10</option>
<option>11</option>
<option>12</option>
<option>13</option>
<option>14</option>
<option>15</option>
<option>16</option>
<option>17</option>
<option>18</option>
<option>19</option>
<option>20</option>
<option>21</option>
<option>22</option>
<option>23</option>
<option>24</option>
<option>25</option>
<option>26</option>
<option>27</option>
<option>28</option>
<option>29</option>
<option>30</option>
<option>31</option>
</select>
<select name="year" id="year" class="grey">
<option><?=$datesplit[0]?></option>
<option><?=date("Y")-3?></option><option><?=date("Y")-2?></option><option><?=date("Y")-1?></option><option selected="selected"><?=date("Y")?></option><option><?=date("Y")+1?></option><option><?=date("Y")+2?></option><option><?=date("Y")+3?></option>
</select></td>
</tr>
<tr><td><div align="right">title:</div></td><td> <input name="title" type="text" value="<?=stripslashes($row['title'])?>" size="50" maxlength="255" class="grey"></td></tr>
<tr>
<td colspan="2">
<textarea name="body" id="input" cols="125" rows="20" class="grey"><?php echo $body; ?></textarea>
</td>
</tr>
<tr>
<td colspan="2"><div align="center">
<input type="hidden" name="blog_id" value="<?=$blog_id?>">
<input name="edit" type="submit" value="Save" class="grey" onclick="instance.post();">
</div></td>
</tr>
</table>
</form>
</td></tr></table>
<?php
}
} else {
$result = @mysql_query("SELECT * FROM `cms_blogs` ORDER BY `cms_blogs`.`date` DESC");
?>
<br><br>
<table width="800" border="0" align="center" cellpadding="5" cellspacing="0">
<tr>
<td bgcolor="#CCCCCC"><span class="fourbold">Blog</span> - <a href=blogs.php?add=yes>Add Entry</a>
</td>
</tr>
<tr>
<td>
<?php
echo "<table align=\"center\" width=\"600\" border=\"0\" cellpadding=\"5\" cellspacing=\"5\">\n";
while ($row = mysql_fetch_array($result)) {
echo "<tr>";
//echo "<td width=\"75\" bgcolor=\"#CCCCCC\" valign=\"top\"><div align=\"center\"><a href=\"blogs_images.php?blogid=" . $row['blog_id'] . "\">PHOTOS</a></div></td>";
echo "<td width=40 bgcolor=#CCCCCC><div align=center><a href=\"image_upload.php?type=preview§ion=blog&save=".$row['blog_id']."_preview.jpg&tn=".$row['blog_id']."_icon.jpg&id=".$row['blog_id']."\">IMAGE</a> ";
echo "<a href=\"blogs.php?edit=yes&blog_id=" . $row['blog_id'] . "\">EDIT</a> ";
echo "<a href=\"blogs.php?delete=yes&blog_id=" . $row['blog_id'] . "\">DELETE</a></div></td>";
echo "<td bgcolor=\"#E6E6E6\"><img src=\"../../images/blogs/".$row['blog_id']."_icon.jpg\" border=\"0\"><br>" . $row['date'] . "<br>" . stripslashes($row['title']) . "</td></tr>";
}
echo "</table></td></tr></table>";
}
?>
<script type="text/javascript">
<!--
new TINY.editor.edit('editor',{
id:'input',
width:584,
height:175,
cssclass:'te',
controlclass:'tecontrol',
rowclass:'teheader',
dividerclass:'tedivider',
controls:['bold','italic','underline','strikethrough','|','subscript','superscript','|',
'orderedlist','unorderedlist','|','outdent','indent','|','leftalign',
'centeralign','rightalign','blockjustify','|','unformat','|','undo','redo','n',
'font','size','style','|','image','hr','link','unlink','|','cut','copy','paste','print'],
footer:true,
fonts:['Verdana','Arial','Georgia','Trebuchet MS'],
xhtml:true,
cssfile:'style.css',
bodyid:'editor',
footerclass:'tefooter',
toggle:{text:'source',activetext:'wysiwyg',cssclass:'toggle'},
resize:{cssclass:'resize'}
});
// -->
</script>