Sounds good.
<?php # second stage of editing offers
require_once('../dbconn/connect/hidden/cnxfile.php');
$page_title = "Footer Logos";
include ('../include_files_files/aheaderfile.html');
if (($_SESSION['usercat']!='a')) {
echo 'Sorry, you are not logged in';
exit;
}
if (isset($_POST['submitted'])) {
$id = $_POST['current'];
if (($_SESSION['user_id'] == 0) || ($_SESSION['user_id'] == 2)) {
if($_REQUEST['current'])
$checkValue="Y";
else $checkValue="N";
$query = "UPDATE footer_logos SET visible = '".$checkValue."', approved = '".$checkValue."' WHERE id = '$id'";
echo $query;
if ($result = mysql_query($query)) { // Everything Worked.
echo '<hr />';
echo '<h2>"Footer Logos" area updated !</h2>';
echo '<p>The Footer Logos have been updated on the site.</p>';
include ('../include_files/thefooterfile.html');
exit;
}
}
if ($result = mysql_query($query)) { // Everything Worked.
echo $query;
echo '<h2>Footer Logos updated !</h2>';
echo '<p>The Footer Logos have been updated on the database.</p>';
echo '<ul><li><a href="index.php">Go back to Admin</a></li>';
echo '<li><a href="javascript:history.go(-1)">Go back to the previous page</a></li></ul>';
include ('../include_files/thefooterfile.html');
exit;
}
else {
echo 'Error!';
// echo '<br />Sorry, you have to be one of the main Administrators to make changes here.<br />';
// trigger_error("Query: $query\n<br />MySQL Error: " . mysql_error());
}
}
if (isset($_POST['submitted2'])) {
$link = strip_tags(stripslashes($_POST['link']));
$alt_text = strip_tags(stripslashes($_POST['alt_text']));
$user_id = $_SESSION[user_id];
if (is_uploaded_file ($_FILES['thumb']['tmp_name'])) {
if (move_uploaded_file($_FILES['thumb']['tmp_name'], "../images/{$_FILES['thumb']['name']}")) { // Moves the files over, for security.
$MIMEtype = $_FILES['thumb']['type'];
echo '';
} else { // If the file couldn't be moved over.
echo '';
$t = FALSE;
}
$t = $_FILES['thumb']['name'];
} else {
$t = FALSE;
}
if (!$_SESSION['usercat']) {
echo '<p>Sorry, you are not logged in</p>';
echo '<div class="alert">';
echo '<b>Options :</b>';
echo '<br /><a href="javascript:history.go(-1)">Go back to previous page</a><br />';
echo '<br /><a href="login.php">Login</a><br />';
echo '<br /><a href="forgot_password.php" title="">Forgotten Password ?</a><br />';
echo '</div>';
exit();
}
$query = "INSERT INTO footer_logos(link,alt,src,visible) VALUES('$link','$alt_text','$t','N')";
// $result = mysql_query($query);
echo $n;
echo $query;
if ($result = mysql_query($query)) { // Everything Worked.
echo '<hr />';
echo '<p><b>New Logo Added !</b></p><br />';
echo '<p>The Logo has been added to the system.<br /></p>';
include ('../include_files/thefooterfile.html');
exit;
}
}
$query1 = "SELECT * FROM footer_logos";
$result1 = @mysql_query($query1); // Run the Query.
echo '<p><b>Edit "Footer Logos"</b></p>';
echo '<form name="form1" method="POST" action="update_logos.php" class="book">';
echo '<table width="550" border="0" style="padding:5px">';
echo '<tr style="background-color:#eaeaea;">
<td>Visible</td>
<td>Image</td>
<td>Link</td>
<td>ALT Text</td>
</tr>';
while ($row1 = mysql_fetch_array($result1)) {
$visible = $row1['visible'];
$id = $row1['id'];
echo '<tr><td>';
if ($visible=='Y') {$checked="checked";}
echo '<input type="checkbox" name="current" id="current" value="' . $id . '" class="maillistadd" '.$checked.' /></td>';
/*if ($visible=='Y') {
echo '<input type="checkbox" name="current" id="current" value="' . $id . '" class="maillistadd" checked /></td>';
}
else {
echo '<input type="checkbox" name="current" id="current" value="' . $id . '" class="maillistadd" /></td>';
}*/
echo '<td><img src="' . $row1[1] . '" /></td>
<td>' . $row1[2] . '</td><td>' . $row1[4] . '</td>';
echo '</tr>';
}
echo '</table>';
?>
<br>
<input name="submit" type="submit" class="submit" value="Update the 'Logos' box">
<br>
<br>
<input type="hidden" value="form1">
<input type="hidden" name="submitted" value="TRUE" />
</p>
</form>
<hr size="2" />
<br />
<p><b>Add new "Footer Logos" box</b></p>
<form name="form2" action="update_logos.php" method="post">
Link<br />
<input type="text" name="link" id="link" value="<?php if (isset($_POST['link'])) echo $_POST['link']; ?>" />
<br /><br />
Alt Text<br />
<input type="text" name="alt_text" id="alt_text" value="<?php if (isset($_POST['alt_text'])) echo $_POST['alt_text']; ?>" />
<br /><br />
Image<br />
<input type="file" name="thumb" id="thumb" />
<br /><br />
<input type="submit" name="submit" value="Add New Logo" />
<input type="hidden" value="form2">
<input type="hidden" name="submitted2" value="TRUE" />
</form>
<?
include ('../include_files/thefooterfile.html');
?>