| Server IP : 104.21.21.239 / Your IP : 216.73.216.11 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/tgnewdev/admin/mod/ |
Upload File : |
<?php
//ini_set('display_errors',1);
//error_reporting(E_ALL & ~E_NOTICE);
?>
<?php require('_mod_security.php'); ?>
<?php
$sql = '';
switch ($_GET['func']):
case 'grid' :
require_once('classes/lcs_db_grid.php');
$dbg = new lcs_db_grid;
$insert_arr = explode(',', ($_GET['parm2'] ?? ''));
$dbg->start_header_section();
$dbg->start_header();
$dbg->add_column(['label' => 'ID', 'dbcol' => 'id', 'width' => '45px']);
$dbg->add_column(['label' => 'Description', 'dbcol' => 'media_desc', 'width' => '180px']);
if (in_array('insert_js', $insert_arr)) :
$dbg->add_column(['label' => 'Insert', 'sortable' => false, 'searchable' => false, 'width' => '45px', 'align' => 'center']);
endif;
if (in_array('insert_featured', $insert_arr)) :
$dbg->add_column(['label' => 'Feat.', 'sortable' => false, 'searchable' => false, 'width' => '45px', 'align' => 'center']);
endif;
if (in_array('insert_slider', $insert_arr)) :
$dbg->add_column(['label' => 'Slider', 'sortable' => false, 'searchable' => false, 'width' => '45px', 'align' => 'center']);
endif;
$dbg->add_column(['label' => 'Category', 'dbcol' => 'media_cat', 'width' => '60px', 'multi_filter' => APP_MEDIA_CATEGORIES, 'multi_filter_col' => 'media_cat', 'multi_filter_type' => 'string']);
$dbg->add_column(['label' => 'Type', 'dbcol' => 'media_type', 'width' => '50px']);
$dbg->add_column(['label' => 'Filename', 'dbcol' => 'media_filename', 'width' => '200px']);
$dbg->add_column(['label' => 'Full Path', 'sortable' => false, 'searchable' => false, 'width' => '200px']);
$dbg->add_column(['label' => 'Preview', 'sortable' => false, 'searchable' => false, 'width' => '200px']);
$dbg->add_column(['label' => 'Delete', 'sortable' => false, 'searchable' => false, 'width' => '55px', 'align' => 'center']);
$dbg->end_header();
$dbg->end_header_section();
$sql = "SELECT * FROM media ".
"WHERE ".$dbg->search_spec()." ".$_GET['parm1']." ".
"ORDER BY ".$dbg->sort_spec();
//error_log(PHP_EOL . ' === '.$sql.' === ' . PHP_EOL);
//echo ' === '.$sql.' === ';
$xls_sql = $sql;
$xls_sql_encoded = xls_sql_encrypt($xls_sql);
$result = $db->query($sql) or die('Database Error!');
$dbg->start_data_section();
if ($result->rowCount() > 0) :
while ($row = $result->fetch(PDO::FETCH_OBJ)) :
$dbg->start_row();
$dbg->add_cell($row->id);
$dbg->add_cell('<a href="index.php?IX='.$_GET['ix_form'].'&id='.$row->id.'" >'.$row->media_desc.'</a>');
if (in_array('insert_js', $insert_arr)) :
$dbg->add_cell('<a href="javascript:insert_image_into_html(\'' . APP_BASE_USER_SITE_SECURE . $row->media_path . $row->media_filename . '\');"><img src="img/insert_icon_small.png" style="border:none;" /></a>');
endif;
if (in_array('insert_featured', $insert_arr)) :
$dbg->add_cell('<a href="javascript:insert_image_into_field(\'' . $row->media_filename . '\', \'featured_image\');"><img src="img/insert_icon_small.png" style="border:none;" /></a>');
endif;
if (in_array('insert_slider', $insert_arr)) :
$dbg->add_cell('<a href="javascript:insert_image_into_field(\'' . $row->media_filename . '\', \'slider_image\');"><img src="img/insert_icon_small.png" style="border:none;" /></a>');
endif;
$dbg->add_cell($row->media_cat);
$dbg->add_cell($row->media_type);
$dbg->add_cell('<textarea readonly="readonly" rows="4" onclick="copy_to_clipboard($(this))">'.$row->media_filename.'</textarea>');
$dbg->add_cell('<textarea readonly="readonly" rows="4" onclick="copy_to_clipboard($(this))">'.APP_BASE_USER_SITE_SECURE.$row->media_path.$row->media_filename.'</textarea>');
$dbg->add_cell('<img src="../'.image_cache($row->media_path.$row->media_filename, 85, 200, 200).'" loading="lazy">');
//$dbg->add_cell('<img src="../'.$row->media_path.$row->media_filename.'" loading="lazy">');
$dbg->add_cell('<a href="javascript:confirm_delete(\'Are you sure? This action cannot be reversed.\', \''.$row->id.'\', \''.$_GET['div'].'\');"><img src="img/delete_icon.gif" style="border:none;" /></a>');
$dbg->end_row();
endwhile;
else :
$dbg->start_row();
$dbg->add_cell('No records found');
$dbg->end_row();
endif;
$dbg->end_data_section();
echo json_encode(array('row_count' => $result->rowCount(), 'html' => $dbg->get_html(), 'xls_sql' => $xls_sql_encoded, 'extra_data'=> ''));
return;
break;
case 'delete' :
$sql = "SELECT * FROM media WHERE id = ".nz(trim($_GET['id']), '0')." ";
$result = $db->query($sql) or die(json_encode(['result' => 'Database Error!']));
if ($result->rowCount() > 0) :
$row = $result->fetch(PDO::FETCH_OBJ);
$sql = "DELETE FROM media WHERE id = ".nz(trim($_GET['id']), '0')." ";
$db->query($sql) or die(json_encode(array('result' => 'Database Error!')));
$delfile = APP_ROOT_MEDIA_DIR.'/'.$row->media_path.$row->media_filename;
unlink($delfile);
endif;
$msg = 'Success';
echo json_encode(array('result' => $msg));
return;
break;
endswitch;
?>