R E D

NAME	SIZE	PERMISSION
bower_components	[ DIR ]	drwxr-xr-x
chart-pie	[ DIR ]	drwxr-xr-x
class	[ DIR ]	drwxr-xr-x
dist	[ DIR ]	drwxr-xr-x
font-awesome	[ DIR ]	drwxr-xr-x
icon	[ DIR ]	drwxr-xr-x
img-banner	[ DIR ]	drwxr-xr-x
img-logo	[ DIR ]	drwxr-xr-x
img-new	[ DIR ]	drwxr-xr-x
img-slide	[ DIR ]	drwxr-xr-x
img-system	[ DIR ]	drwxr-xr-x
img-user	[ DIR ]	drwxr-xr-x
lightbox	[ DIR ]	drwxr-xr-x
modal	[ DIR ]	drwxr-xr-x
plugins	[ DIR ]	drwxr-xr-x
.htaccess	154 B	-rwxr-xr-x
about.php	4.15 KB	-rwxr-xr-x
category.php	11.37 KB	-rwxr-xr-x
check_login.php	424 B	-rwxr-xr-x
company.php	13.02 KB	-rwxr-xr-x
edit_service.php	4.65 KB	-rwxr-xr-x
footer.php	249 B	-rwxr-xr-x
header.php	766 B	-rwxr-xr-x
import_script.php	4.4 KB	-rwxr-xr-x
import_style.php	1.28 KB	-rwxr-xr-x
index.php	2.97 KB	-rwxr-xr-x
logout.php	77 B	-rwxr-xr-x
manage_service.php	4.46 KB	-rwxr-xr-x
menu_left.php	2.87 KB	-rwxr-xr-x
menu_main.php	88 B	-rwxr-xr-x
message.php	3.82 KB	-rwxr-xr-x
new.php	10.32 KB	-rwxr-xr-x
person.php	9.81 KB	-rwxr-xr-x
position.php	7.08 KB	-rwxr-xr-x
report.php	11.55 KB	-rwxr-xr-x
reportSale.php	4.55 KB	-rwxr-xr-x
sent.php	1.78 KB	-rwxr-xr-x
service.php	9.92 KB	-rwxr-xr-x
slide.php	10.61 KB	-rwxr-xr-x
type_user.php	549 B	-rwxr-xr-x
uploadImage.php	9.53 KB	-rwxr-xr-x
upload_img.php	793 B	-rwxr-xr-x
user.php	10.07 KB	-rwxr-xr-x

Code Editor : new.php

<?php session_start();
	include('../config/connect.php');
	include('type_user.php');
?>
<!DOCTYPE html>
<html>
<head>
  <meta charset="utf-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <title><?php echo $title;?></title>
  <meta content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" name="viewport">
  <?php include('import_style.php');?>
  <link href="https://fonts.googleapis.com/css?family=Kanit:100,200,300&amp;subset=thai" rel="stylesheet">
</head>
<body class="hold-transition skin-green sidebar-mini">
<?php include('check_login.php');?>
<div class="wrapper">

<?php include('header.php');?>
  
  <?php include('menu_left.php');?>

<div class="content-wrapper">
    
    
    <?php
    	include('menu_main.php');
	?>

<section class="content">
	
<div class="row">
		<div class="col-md-12">
        
          <div class="box">
            <div class="box-header bg-blue text-center">
              <h3 class="box-title">ตั้งค่าข่าวสาร</h3>
            </div>
            
            <div class="box-body">
<?php include('modal/form-add-modal.php');?>
<button type="button" class="btn btn bg-blue btn-sm" data-toggle="modal" data-target="#addNew">
  <span class="fa fa-plus"></span> เพิ่ม
</button>
<p></p>
                                <table id="table1" width="100%" class="table table-hover">
                                	<thead>
                                    	<tr>
                                        	<th width="10%" class="text-center">ลำดับ</th>
                                        	<th width="13%">รูปภาพ</th>
                                            <th width="65%">หัวข้อ</th>
                                            <th width="12%" class="text-center">จัดการ</th>
                                        </tr>
                                    </thead>
                                    
                                    <tbody>
                                    <?php
										$stmt = $conn->prepare("SELECT * FROM tb_new WHERE new_status = '1' ORDER BY new_id DESC");
										$stmt->execute();
										$result = $stmt->fetchAll();
										$i2 = 1;
										foreach($result as $row) {
									?>	
                                    	<tr>
                                        	<td align="center"><?php echo $i2;?></td>
                                            <td><img src="img-new/<?php echo $row['new_img'];?>" width="100"></td>
                                        	<td><?php echo $row['new_name'];?></td>
											<td align="center">
                                            	<button type="button" class="btn btn-success btn-sm" data-toggle="modal" data-target="#editNew<?php echo $row['new_id'];?>"><span class="fa fa-edit"></span> แก้ไข</button>
                                                <button type="button" class="btn btn-danger btn-sm" data-toggle="modal" data-target="#deleteNew<?php echo $row['new_id'];?>"><span class="fa fa-trash"></span> ลบ</button>
                                            </td>
                                         	<?php include('modal/form-edit-modal.php'); ?>
                                            <?php include('modal/form-delete-modal.php'); ?> 
                                               
                                            
                                        </tr>
                                                                                    
                                    <?php $i2++; } ?>
                                    </tbody>
                                </table>

<?php
	if(isset($_POST['btnDeleteNew'])){
		$new_id = $_POST['new_id'];
		$new_status = "0";
		
		$stmt = $conn->prepare("UPDATE tb_new SET new_status=:new_status WHERE new_id=:new_id");
		$stmt->bindParam(':new_id', $new_id , PDO::PARAM_INT);
		$stmt->bindParam(':new_status', $new_status , PDO::PARAM_STR);	
		$result = $stmt->execute();
	
		if($result){			
			echo '
				<script>
					swal({
						title: "ลบข้อมูลสำเร็จ", 
						icon: "success",
						button: "ตกลง",
						}).then( () => {
							location.href = "new"
										
						});	
				</script>
			';	
			
		}
		else
		{
			echo '
				<script>
					swal({
						title: "Error เกิดข้อผิดพลาด", 
						icon: "error",
						button: "ตกลง",
						}).then( () => {
							location.href = "'.$_SERVER['REQUEST_URI'].'"
										
						});	
				</script>
			';	
		}
	}
?>

<?php
	if(isset($_POST['btnEditNew'])){
		$new_id = $_POST['new_id'];
		$new_name = $_POST['new_name'];
		$new_detail = $_POST['new_detail'];
                $new_name_en = $_POST['new_name_en'];
		$new_detail_en = $_POST['new_detail_en'];
                        $date1 = date("Y-m-d");
			$numrand = (mt_rand());
			$new_img = (isset($_POST['new_img']) ? $_POST['new_img'] : '');
			$upload = $_FILES['new_img']['name'];
		
			if($upload != '') {
				$typefile = strrchr($_FILES['new_img']['name'],".");
		
				if($typefile =='.jpg' || $typefile  =='.jpeg' || $typefile  =='.png' || $typefile  =='.JPG' || $typefile  =='.PNG')
				{
					$path = "img-new/";
					$newname = $numrand.$date1.$typefile;
					$path_copy = $path.$newname;
					move_uploaded_file($_FILES['new_img']['tmp_name'],$path_copy); 
				}
				else
				{
					//ถ้าไฟล์ที่อัพโหลดไม่ตรงตามที่กำหนดไว้
					echo '
					<script>
						swal({
							title: "ไม่สามารถ Upload ไฟล์ได้", 
							text: "เนื่องจากนามสกุลไฟล์ที่คุณ Upload ไม่ถูกต้อง", 
							icon: "error",
							button: "ตกลง",
							}).then( () => {
								location.href = "new"
											
							});	
					</script>
					';	
					exit();
				}
			}
			else
			{
				$newname = $_POST['new_img_bf'];
			}

$stmt = $conn->prepare("UPDATE tb_new SET new_name=:new_name, new_detail=:new_detail, new_img=:new_img, new_name_en=:new_name_en, new_detail_en=:new_detail_en WHERE new_id=:new_id");

$stmt->bindParam(':new_id', $new_id , PDO::PARAM_INT);
		$stmt->bindParam(':new_name', $new_name , PDO::PARAM_STR);
		$stmt->bindParam(':new_detail', $new_detail , PDO::PARAM_STR);
                $stmt->bindParam(':new_name_en', $new_name_en , PDO::PARAM_STR);
		$stmt->bindParam(':new_detail_en', $new_detail_en , PDO::PARAM_STR);

$stmt->bindParam(':new_img', $newname , PDO::PARAM_STR);						
		$result = $stmt->execute();
	
		if($result){			
			echo '
				<script>
					swal({
						title: "แก้ไขข้อมูลสำเร็จ", 
						icon: "success",
						button: "ตกลง",
						}).then( () => {
							location.href = "new"
										
						});	
				</script>
			';	
			
		}
		else
		{
			echo '
				<script>
					swal({
						title: "Error เกิดข้อผิดพลาด", 
						icon: "error",
						button: "ตกลง",
						}).then( () => {
							location.href = "'.$_SERVER['REQUEST_URI'].'"
										
						});	
				</script>
			';	
		}
	}
?>	                               
<?php
	if(isset($_POST['btnAddNew'])){
		$user_id = $_SESSION['user_id'];
		
			$date1 = date("Y-m-d");
			$numrand = (mt_rand());
			$new_img = (isset($_POST['new_img']) ? $_POST['new_img'] : '');
			$upload = $_FILES['new_img']['name'];
		
			if($upload != '') {
				$typefile = strrchr($_FILES['new_img']['name'],".");
		
				if($typefile =='.jpg' || $typefile  =='.jpeg' || $typefile  =='.png' || $typefile  =='.JPG' || $typefile  =='.PNG')
				{
					$path = "img-new/";
					$newname = $numrand.$date1.$typefile;
					$path_copy = $path.$newname;
					move_uploaded_file($_FILES['new_img']['tmp_name'],$path_copy); 
				}
				else
				{
					//ถ้าไฟล์ที่อัพโหลดไม่ตรงตามที่กำหนดไว้
					echo '
					<script>
						swal({
							title: "ไม่สามารถ Upload ไฟล์ได้", 
							text: "เนื่องจากนามสกุลไฟล์ที่คุณ Upload ไม่ถูกต้อง", 
							icon: "error",
							button: "ตกลง",
							}).then( () => {
								location.href = "new"
											
							});	
					</script>
					';	
					exit();
				}
			}
			else
			{
				$newname = "-";
			}
		
		$new_name = $_POST['new_name'];
		$new_detail	 = $_POST['new_detail'];
		$new_status = "1";
		$new_save = date('Y-m-d H:i:s');
		$new_view = 0;
		$stmt = $conn->prepare("INSERT INTO tb_new(new_name, new_detail, new_img, new_status, new_save, new_view, user_id) 
		VALUES (:new_name, :new_detail, :new_img, :new_status, :new_save, :new_view, :user_id)");
		$stmt->bindParam(':new_name', $new_name , PDO::PARAM_STR);	
		$stmt->bindParam(':new_detail', $new_detail	, PDO::PARAM_STR);	
		$stmt->bindParam(':new_img', $newname, PDO::PARAM_STR);
		$stmt->bindParam(':user_id', $user_id , PDO::PARAM_INT);
		$stmt->bindParam(':new_status', $new_status , PDO::PARAM_STR);
		$stmt->bindParam(':new_save', $new_save);
		$stmt->bindParam(':new_view', $new_view , PDO::PARAM_INT);
    	$result = $stmt->execute();
		
		
		if($result){			
			echo '
				<script>
					swal({
						title: "บันทึกข้อมูลสำเร็จ", 
						icon: "success",
						button: "ตกลง",
						}).then( () => {
							location.href = "new"
										
						});	
				</script>
			';	
			
		}
		else
		{
			echo '
				<script>
					swal({
						title: "Error เกิดข้อผิดพลาด", 
						icon: "error",
						button: "ตกลง",
						}).then( () => {
							location.href = "'.$_SERVER['REQUEST_URI'].'"
										
						});	
				</script>
			';	
		}
	}
?>                                   
                                
            </div>
            
          </div>
          
        </div>
        
</div>

</section>
    
  </div>

  
  <?php include('footer.php');?>

<?php include('import_script.php');?>
</body>
</html>
<?php
  $conn = null;
?>

${this.title}

Code Editor : new.php