uawdijnntqw1x1x1
IP : 216.73.216.155
Hostname : vm5018.vps.agava.net
Kernel : Linux vm5018.vps.agava.net 3.10.0-1127.8.2.vz7.151.14 #1 SMP Tue Jun 9 12:58:54 MSK 2020 x86_64
Disable Function : None :)
OS : Linux
PATH:
/
var
/
www
/
iplanru
/
data
/
.
/
mod-tmp
/
..
/
old
/
.
/
www
/
.
/
i-plan.ru
/
modules
/
mod_articlecontrol
/
helper.php
/
/
<?php defined ( '_JEXEC' ) or die ( 'Restricted access' ); class modArticleControlHelper { public function addArticle(){ $config = & JFactory::getConfig(); $db = &JFactory::getDBO(); if($_POST['code']!=''){ // preg_replace($_POST['code'], '/<!--(.*?)-->/', ' '); $s = strpos($_POST['code'], 'отчета<o:p>'); $e = strpos($_POST['code'], 'автора<o:p>'); $prop['title'] = substr($_POST['code'], $s+17, $e-$s-54); $prop['title'] = trim(strip_tags($prop['title'])); $s = strpos($_POST['code'], '(фактическая)<o:p>'); $e = strpos($_POST['code'], 'страниц<o:p>'); $prop['date'] = substr($_POST['code'], $s+24, $e-$s-48); $prop['date'] = trim(strip_tags($prop['date'])); $s = strpos($_POST['code'], 'страниц<o:p>'); $e = strpos($_POST['code'], 'Формат'); $prop['page_numbers'] = substr($_POST['code'], $s+14, $e-$s-14); $prop['page_numbers'] = trim(strip_tags($prop['page_numbers'])); $s = strpos($_POST['code'], 'Стоимость'); $e = strpos($_POST['code'], 'НДС'); $prop['price'] = substr($_POST['code'], $s+18, $e-$s-18); $prop['price'] = trim(strip_tags($prop['price'])); $s = strpos($_POST['code'], 'картинки!:<o:p>'); $e = strpos($_POST['code'], 'отчета:<o:p>'); $prop['about'] = substr($_POST['code'], $s+18, $e-$s-80); $prop['about'] = strip_tags($prop['about'],'<p><span><b>'); $s = strpos($_POST['code'], 'отчета:<o:p>'); $e = strpos($_POST['code'], 'графиков:<o:p>'); $prop['oglav'] = substr($_POST['code'], $s+13, $e-$s-142); $prop['oglav'] = strip_tags($prop['oglav'],'<p><span><b>'); $s = strpos($_POST['code'], 'графиков:<o:p>'); $e = strpos($_POST['code'], 'Рубрики'); $prop['prilog'] = substr($_POST['code'], $s+17, $e-$s-17); $prop['prilog'] = strip_tags($prop['prilog'],'<p><span><b>'); $id = $_POST['article_id']; $type = $_POST['type']; if ($type == "mi"){ foreach($_POST['category'] as &$cur_category) $cur_category+=100; } $category=''; foreach($_POST['category'] as $value){ $query="INSERT INTO #__articles_cats VALUES ($id,$value)"; $db->setQuery($query); $db->query(); } $title = trim(str_replace(' ','',$prop['title'])); $date = $prop['date']; $date = $date[6].$date[7].$date[8].$date[9].'-'.$date[3].$date[4].'-'.$date[0].$date[1]; $page_numbers = $prop['page_numbers']; $price = str_replace(' ',' ',str_replace(' ',' ',$prop['price'])); $about = '<p style="font-size: 12px; font-weight: bold; color: #8d381d;">ОПИСАНИЕ</p>'.$prop['about'].'</b>'; $oglav = '<p style="font-size: 12px; font-weight: bold; color: #8d381d;">ОГЛАВЛЕНИЕ</p>'.str_replace('12.0pt','11px',$prop['oglav']).'</b>'; $prilog = '<p style="font-size: 12px; font-weight: bold; color: #8d381d;">ПРИЛОЖЕНИЕ</p>'.$prop['prilog'].'</b>'; //$query="INSERT INTO #__articles(base_id,id,type,category,title,date,page_numbers,price,about,oglav,prilog,keywords) VALUES ('',$id,'$type','$category','$title','$date','$page_numbers','$price','$about','$oglav','$prilog','hhh')"; $query="INSERT INTO #__articles (base_id,id,title,category,type,date,page_numbers,price,about,oglav,prilog,keywords) VALUES ('',$id,'$title','$category','$type','$date','$page_numbers','$price','".mysql_real_escape_string($about)."','".mysql_real_escape_string($oglav)."','".mysql_real_escape_string($prilog)."','')"; $db->setQuery($query); $db->query(); $query = "SELECT * FROM #__articles WHERE id=".$id; $db->setQuery($query); $result = $db->loadObjectList(); foreach ( $result as $row ) { $id = $row->id; $date = $row->date; $date = $date[8].$date[9].'.'.$date[5].$date[6].'.'.$date[2].$date[3]; include("introtext.php"); if($id>=362){ $query = "INSERT INTO #__content (id,introtext,title) VALUES (".$id.",'".$introtext."','".trim(str_replace(" ","",$row->title))."')"; $db->setQuery($query); $db->query(); } } } if($_POST['submit']){ $type = mysql_real_escape_string($_POST['type']); if ($type == "mi"){ foreach($_POST['category'] as &$cur_category) $cur_category+=100; } $category=''; $query="DELETE FROM #__articles_cats WHERE article_id=".mysql_real_escape_string($_POST['article_id']); $db->setQuery($query); $db->query(); $id=mysql_real_escape_string($_POST['article_id']); foreach($_POST['category'] as $value){ $query="INSERT INTO #__articles_cats VALUES (".mysql_real_escape_string($_POST['article_id']).",$value)"; $db->setQuery($query); $db->query(); } $keywords = $_POST['keywords']; if($id>364){ $keywords = explode(',',$_POST['keywords']); foreach($keywords as &$cur_key){ $cur_key = strip_tags($cur_key); $cur_key = '<a href="'.$_POST['type'].'.php?id='.$_POST['article_id'].'">'.$cur_key.'</a>'; } $keywords = implode(",",$keywords); } //$keywords = '<span style="color: #888888;">'.$keywords.'</span>';*/ $query="UPDATE #__articles SET id=".mysql_real_escape_string($_POST['article_id']). ", title='".mysql_real_escape_string(trim(str_replace(' ','',$_POST['article_name']))). "', category='".mysql_real_escape_string($category). "', type='".mysql_real_escape_string($_POST['type']). "', date='".mysql_real_escape_string($_POST['article_date']). "', page_numbers='".mysql_real_escape_string($_POST['article_page_numbers']). "', price='".mysql_real_escape_string(str_replace(' ',' ',$_POST['article_price'])). "', about='".$_POST['about']. "', oglav='".str_replace('12.0pt','11px',$_POST['oglav']). "', prilog='".$_POST['prilog']. "', keywords='".$keywords. "', metakey='".$_POST['metakey']. "', metadesc='".$_POST['metadesc']. "', hits='".mysql_real_escape_string($_POST['article_hits'])."' WHERE id=".mysql_real_escape_string($_POST['article_id']); $db->setQuery($query); $db->query(); $query = "SELECT * FROM #__articles WHERE id=".mysql_real_escape_string($_POST['article_id']); $db->setQuery($query); $result = $db->loadObjectList(); foreach ( $result as $row ) { $id = $row->id; $date = $row->date; $date = $date[8].$date[9].'.'.$date[5].$date[6].'.'.$date[2].$date[3]; include("introtext.php"); $query = "UPDATE #__content SET introtext='".$introtext."' WHERE id = ".$id; $db->setQuery($query); $db->query(); } } if($_GET['updtmpl']==1){ $query = "SELECT * FROM #__articles"; $db->setQuery($query); $result = $db->loadObjectList(); foreach ($result as $row){ $id = $row->id; $date = $row->date; $date = $date[8].$date[9].'.'.$date[5].$date[6].'.'.$date[2].$date[3]; include("introtext.php"); $query = "UPDATE #__content SET introtext='".$introtext."' WHERE id = ".$id; $db->setQuery($query); $db->query(); } } if((!$_GET['edit'])&&(!$_GET['delete'])){ $query = "SELECT MAX(id) AS max_id FROM #__articles"; $db->setQuery($query); $result = $db->loadObjectList(); $max_id=0; foreach ( $result as $row ) { $max_id = $row->max_id; } $max_id++; $query = "SELECT title,id FROM #__categories WHERE id>=12 AND id<=33"; $db->setQuery($query); $result = $db->loadObjectList(); $i=0; foreach ( $result as $row ) { $i++; $cat[$i]['id'] = $row->id; $cat[$i]['title'] = $row->title; } include("tmpl/default.php"); } if($_GET['edit']){ $query = "SELECT title,id FROM #__categories WHERE id>=12 AND id<=33"; $db->setQuery($query); $result = $db->loadObjectList(); $i=0; foreach ( $result as $row ) { $i++; $cat[$i]['id'] = $row->id; $cat[$i]['title'] = $row->title; } $query = "SELECT a.*,c.* FROM #__articles AS a LEFT JOIN #__articles_cats AS c ON a.id=c.article_id WHERE a.id=".mysql_real_escape_string($_GET['edit']); $db->setQuery($query); $result = $db->loadObjectList(); $i=0; foreach ( $result as $row ) { $i++; $cats[$i]=$row->cat_id; } foreach ( $result as $row ) { include("tmpl/edit.php"); break; } } if($_GET['delete']){ include("tmpl/delete.php"); } if($_POST['delete_button']){ if($_POST['sure_delete']){ $query = $query="DELETE FROM #__articles_cats WHERE article_id=".mysql_real_escape_string($_POST['article_id']); $db->setQuery($query); $db->query(); $query = $query="DELETE FROM #__articles WHERE id=".mysql_real_escape_string($_POST['article_id']); $db->setQuery($query); $db->query(); $query = $query="DELETE FROM #__content WHERE id=".mysql_real_escape_string($_POST['article_id']); $db->setQuery($query); $db->query(); } } if($_GET['debug']==1){ echo "debug mode"; $query = "SELECT a.*,c.* FROM #__articles AS a LEFT JOIN #__articles_cats AS c ON a.id=c.article_id"; //$query = "SELECT * FROM #__articles"; $db->setQuery($query); $result = $db->loadObjectList(); echo '<table border="1">'; foreach ( $result as $row ) { if ($row->type=="bp"){$link="bp.php?id=".$row->id;}else{$link="mi.php?id=".$row->id;} echo '<tr><td>'.$row->id.'</td><td><a href="'.$link.'">'.$row->title.'</a></td><td>'.$row->cat_id.'</td><td>'.$row->type.'</td><td>'.$row->price.'</td><td>'.$row->date.'</td></tr>'; } echo '</table>'; /*$market = '<?xml version="1.0" encoding="UTF-8"?>'; $market .= '<!DOCTYPE yml_catalog SYSTEM "shops.dtd">'; $market .= '<yml_catalog date="2011-03-28">'; $market .= '<shop>'; $market .= '<name>Intesco Research Group</name>'; $market .= '<company>Intesco Research Group</company>'; $market .= '<url>http://i-plan.ru</url>'; $market .= '<currencies><currency id="RUR" rate="1" plus="0"></currency></currencies>'; $market .= '<categories>'; $market .= '<category id="1">Бизнес-планы</category>'; $market .= '<category id="100">Маркетинговые исследования</category>'; $query = "SELECT title,id FROM #__categories WHERE (id>=12 AND id<=33) OR (id>=112 AND id<=133)"; $db->setQuery($query); $result = $db->loadObjectList(); foreach ( $result as $row ) { if($row->id < 100){ $parent_id = "1";} else { $parent_id = "100";} $market .= '<category id="'.$row->id.'" parentId="'.$parent_id.'">'.$row->title.'</category>'; $cat[$i]['title'] = $row->title; } $market .= '</categories>'; $market .= '<local_delivery_cost>0</local_delivery_cost>'; $market .= '<offers>'; $query = 'SELECT a.*,c.* FROM #__articles AS a LEFT JOIN #__articles_cats AS c ON a.id=c.article_id'; $db->setQuery($query); $result = $db->loadObjectList(); $i=0; foreach($result as $row){ foreach($ids as $cur_ids){ if($row->id == $cur_ids){ continue 2; } } $i++; $ids[$i]=$row->id; $market .= '<offer id="'.$row->id.'" available="true">'; $market .= '<url>http://i-plan.ru/'.$row->type.'.php?id='.$row->id.'</url>'; $market .= '<price>'.intval(str_replace(" ","",str_replace(" ","",$row->price))).'</price>'; $market .= '<currencyId>RUR</currencyId>'; $market .= '<categoryId>'.$row->cat_id.'</categoryId>'; if($row->type == 'mi'){ $pict_ext = 'gif'; $typePrefix = 'Исследование';}else{$pict_ext = 'png'; $typePrefix = 'Бизнес-план';} $market .= '<picture>http://i-plan.ru/images/stories/'.$row->type.'/'.$row->type.'_'.$row->id.'.'.$pict_ext.'</picture>'; $market .= '<delivery>true</delivery>'; $market .= '<local_delivery_cost>0</local_delivery_cost>'; //$market .= '<typePrefix>'.$typePrefix.'</typePrefix>'; $market .= '<name>'.$row->title.'</name>'; $market .= '<vendor>Intesco Research Group</vendor>'; $market .= '<vendorCode></vendorCode>'; $market .= '<description>'.$row->title.'</description>'; $market .= '<sales_notes></sales_notes>'; $market .= '<country_of_origin>Россия</country_of_origin>'; //$market .= '<barcode></barcode>'; $market .= '<param name="Количество страниц">'.$row->page_numbers.'</param>'; $market .= '</offer>'; } $market .= '</offers>'; $market .= '</shop>'; $market .= '</yml_catalog>'; $file = fopen("market.yml","w"); fwrite($file, $market); fclose($file);*/ } } } ?>
/var/www/iplanru/data/./mod-tmp/../old/./www/./i-plan.ru/modules/mod_articlecontrol/helper.php