MOON
Server: Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4
System: Linux vps.panamaemb.org.sg 3.10.0-1160.80.1.vz7.191.4 #1 SMP Thu Dec 15 20:31:06 MSK 2022 x86_64
User: panama (500)
PHP: 5.2.17
Disabled: NONE
Upload Files
File: /home/panama/public_html_old/managesite/event_andnew -mi.php
<?php
	include("../include/config.php"); 
	include("../include/opner_admin.php");
				 
	
	if(strlen(trim($_POST["btnSave"])) > 0)
	{
		if($_FILES['new_image']['name']<>'')   {    $flag = $functions->isValidImage($_FILES['new_image']['type']); };
		if($flag =='0') { $error=1;  $err_image="Please provide Correct Image Format";	};	
		
		$shortdesc = $functions->anti_injection($_POST['shortdesc']);
		$longdesc = $functions->anti_injection($_POST['longdesc']);
		$title = $functions->anti_injection($_POST['txttitle']);
		$venue = $functions->anti_injection($_POST['venue']);
		$ticketprice = $functions->anti_injection($_POST['ticketprice']);
		$datetime = $functions->anti_injection($_POST['date']);
		$eventtype = $functions->anti_injection($_POST['eventtype']);
		
		$dd = explode(" ",$_POST['date']);
		$date  = explode("-",$dd['0']);
		$eventdate = $date[2]."-".$date[0]."-".$date[1];
		
		if($error <> 1)
		{
			if($flag > 0)
			{
				$tokan = array(" ", "'","`","’");
				$image_name 	= time()."_".strtolower(str_replace($tokan, "_" , $_FILES['new_image']['name']));
				move_uploaded_file($_FILES['new_image']['tmp_name'] , "../uploaded_images/".$image_name);
			} 
			else 
			{  $image_name ='d_photo.jpg';	}
			
			$db = new database();	
			$db->data("title",$title);
			$db->data("eventtype",$eventtype);
			$db->data("venue",$venue);
			$db->data("ticketprice",$ticketprice);
			$db->data("datetime",$datetime);
			$db->data("eventdate",$eventdate);
			$db->data("image",$image_name);			
			$db->data("shortdesc",addslashes($shortdesc));
			$db->data("longdesc",addslashes($longdesc));
			$db->addnew("events");
			$_SESSION['msg'] = "Event information added successfully.";
			header("location:event_listing.php");
		}
	}	
?>
<html>
	<head>
		<title><?=SITE_ADMIN_TITLE?></title>
		<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
		<meta name="description" content="<?=META_DESCRIPTION?>" />
		<meta name="keywords" content="<?=META_KEYWORD?>" />
		<link href="css.css" rel="stylesheet" type="text/css" />
		<link rel="stylesheet" type="text/css" href="js/style.css" />
		<link href="calender/rfnet.css" rel="stylesheet" type="text/css">
	    <script type="text/javascript" src="calender/datetimepicker_css.js"></script>
		<script type="text/javascript" src="js/lib/prototype.js"></script>
		<script type="text/javascript" src="js/src/effects.js"></script>
		<script type="text/javascript" src="js/validation.js"></script>
		<!-- TinyMCE -->
		<script type="text/javascript" src="tinymce/jscripts/tiny_mce/tiny_mce.js"></script>
		<script type="text/javascript">
			tinyMCE.init({
				// General options
				mode : "textareas",
				theme : "advanced",
				plugins : "safari,pagebreak,style,layer,table,save,advhr,advimage,advlink,emotions,iespell,inlinepopups,insertdatetime,preview,media,searchreplace,print,contextmenu,paste,directionality,fullscreen,noneditable,visualchars,nonbreaking,xhtmlxtras,template",
		
				// Theme options
				theme_advanced_buttons1 : "save,newdocument,|,bold,italic,underline,strikethrough,|,justifyleft,justifycenter,justifyright,justifyfull,styleselect,formatselect,fontselect,fontsizeselect",
				theme_advanced_buttons2 : "cut,copy,paste,pastetext,pasteword,|,search,replace,|,bullist,numlist,|,outdent,indent,blockquote,|,undo,redo,|,link,unlink,anchor,image,cleanup,help,code,|,insertdate,inserttime,preview,|,forecolor,backcolor",
				theme_advanced_buttons3 : "tablecontrols,|,hr,removeformat,visualaid,|,sub,sup,|,charmap,emotions,iespell,media,advhr,|,print,|,ltr,rtl,|,fullscreen",
				theme_advanced_buttons4 : "insertlayer,moveforward,movebackward,absolute,|,styleprops,|,cite,abbr,acronym,del,ins,attribs,|,visualchars,nonbreaking,template,pagebreak",
				theme_advanced_toolbar_location : "top",
				theme_advanced_toolbar_align : "left",
				theme_advanced_statusbar_location : "bottom",
				theme_advanced_resizing : true,
		
				// Example content CSS (should be your site CSS)
				content_css : "css/content.css",
		
				// Drop lists for link/image/media/template dialogs
				template_external_list_url : "lists/template_list.js",
				external_link_list_url : "lists/link_list.js",
				external_image_list_url : "lists/image_list.js",
				media_external_list_url : "lists/media_list.js",
		
				// Replace values for the template plugin
				template_replace_values : {
					username : "Some User",
					staffid : "991234"
				}
			});
		</script>
		<!-- /TinyMCE -->
	</head>
	<body>
	<table width="100%" border="0" cellspacing="0" cellpadding="0" >
	  <tr>
		<td><? include("header.php")?></td>
	  </tr>
	  <tr>
		<td align="right" valign="top" width="82%">
		<form name="frmabout" id="frmabout" action="<?=$_SERVER['PHP_SELF']?>" method="post" enctype="multipart/form-data">
		  <table width="100%" border="0" cellpadding="0" cellspacing="0" class="inertable">
			<tr bgcolor="#E6F3F9">
			  <td class="inertr" style="padding-left:7px" align="left"><img src="images/bullet_new.png" align="absmiddle" />&nbsp;&nbsp;Add New Event</td>
			</tr>
			<tr>
				<td align="center">
					<table width="80%" border="0" cellpadding="0" cellspacing="0" class="text">
					<tr><td colspan="3">&nbsp;</td></tr>
					
					<tr><td colspan="3">&nbsp;</td></tr>
					<tr>
					  <td width="20%" align="right" valign="top" class="textbold">Event Title &nbsp;</td>
					  <td colspan="2" align="left"><input type="text" name="txttitle" class="required" size="40" value="<?=$title?>" /></td>
					</tr>
					<tr><td colspan="3">&nbsp;</td></tr>
					<tr> 
					  <td align="right" valign="top" class="textbold">Venue &nbsp;</td>
					  <td colspan="2" align="left"><input type="text" id="venue" name="venue" value="<?=$venue;?>" class="required" size="40"></td>
					</tr>
					<tr><td colspan="3">&nbsp;</td></tr>
					<tr>
						<td align="right" valign="top" class="textbold">Date / Time &nbsp;</td>
						<td width="17%"><input type="Text" id="date" maxlength="25" size="25" name="date" value="<?=$datetime?>" readonly="" class="required"> <a href="javascript: NewCssCal('date','mmddyyyy','dropdown',true,12)"><img src="images/cal.gif" width="16" height="16" alt="Pick a date"></a></td>
					</tr>
					<tr><td colspan="3">&nbsp;</td></tr>
					
					<tr><td colspan="3">&nbsp;</td></tr>
					<tr>
					  <td align="right" valign="top" class="textbold">Image &nbsp;</td>
					  <td colspan="2" align="left" valign="top">
						<input type="file" name="new_image" id="new_image" class="textbox_new" size="35" /><br><span class="error">&nbsp;<?=$err_image;?><br /></span></td>
					</tr>
					<tr> 
					  <td align="right" valign="top" class="textbold">Short Description &nbsp;</td>
					  <td colspan="2" align="left"><textarea id="elm1" name="shortdesc" rows="10" cols="90"><?=$shortdesc?></textarea></td>
					</tr>
					<tr><td colspan="3">&nbsp;</td></tr>
					<tr> 
					  <td align="right" valign="top" class="textbold">Long Description &nbsp;</td>
					  <td colspan="2" align="left"><textarea id="elm1" name="longdesc" rows="25" cols="90"><?=$longdesc?></textarea></td>
					</tr>
					<tr><td colspan="3">&nbsp;</td></tr>
					<tr>
					  <td align="center">&nbsp;&nbsp;</td>
					  <td colspan="2" align="left"><input name="btnSave" type="submit" class="btn" value="Submit" style="border:none;" />&nbsp;&nbsp;
					  <input name="btnBack" type="submit" class="btn" value="Back to Listing" onClick="javascript:history.go(-1);" style="border:none;" /></td>
					</tr>
					<tr>
					  <td colspan="3" align="center">&nbsp;</td>
					</tr>
				  </table>
			  </td>
			  </tr>
			<tr>
			  <td align="left" colspan="2" >&nbsp;</td>
			</tr>
		  </table>
		</form>
		<script type="text/javascript">
			function formCallback(result, form) {
				window.status = "valiation callback for form '" + form.id + "': result = " + result;
			}
			
			var valid = new Validation('frmabout', {immediate : true, onFormValidate : formCallback});
		</script>
	</td>
	  </tr>
	  <tr><td height="50"></td></tr>  
	</table>
	</body>
</html>