byp4a55 professor6T9

Linux premium133.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
LiteSpeed
162.0.232.69

File Name : server.php

<?php
include '../database/config2.php';

if (isset($_POST['save_radi'])) {
    try{
        
        // insert query
        $save_radio_query = "INSERT INTO radio SET name=:name, manager_id=:manager_id, 
        tel=:tel, link=:link , official_flyer=:official_flyer, logo=:logo";
        
        // prepare query for execution
        $save_radio_stmt = $conn->prepare($save_radio_query);
        
        // posted values
        $radio_name=htmlspecialchars(strip_tags($_POST['radio_name']));
        $ass_manager= $_POST['ass_manager'];
        $tel=htmlspecialchars(strip_tags($_POST['tel']));
        $link=htmlspecialchars(strip_tags($_POST['link']));

$flyer=!empty($_FILES["flyer"]["name"])
        ? sha1_file($_FILES['flyer']['tmp_name']) . "-" . basename($_FILES["flyer"]["name"])
        : "";

$flyer=htmlspecialchars(strip_tags($flyer));

$logo=!empty($_FILES["logo"]["name"])
        ? sha1_file($_FILES['logo']['tmp_name']) . "-" . basename($_FILES["logo"]["name"])
        : "";

$logo=htmlspecialchars(strip_tags($logo));

// bind the parameters
        $save_radio_stmt->bindParam(':name', $radio_name);
        $save_radio_stmt->bindParam(':manager_id', $ass_manager);
        $save_radio_stmt->bindParam(':tel', $tel);
        $save_radio_stmt->bindParam(':link', $link);
        $save_radio_stmt->bindParam(':official_flyer', $flyer);
        $save_radio_stmt->bindParam(':logo', $logo);

// Execute the query
        if($save_radio_stmt->execute()){
            if($flyer){
            
                // sha1_file() function is used to make a unique file name
                $target_directory = "../../app/img/stations/";
                $target_file = $target_directory . $flyer;
                $file_type = pathinfo($target_file, PATHINFO_EXTENSION);
            
                $file_upload_error_messages="";
                // make sure file does not exist
                if(file_exists($target_file)){
                    $file_upload_error_messages.="<div>File already exists. Try to change file name.</div>";
                }
            
            // if $file_upload_error_messages is still empty
            if(empty($file_upload_error_messages)){
                // it means there are no errors, so try to upload the file
                if(move_uploaded_file($_FILES["flyer"]["tmp_name"], $target_file)){
                    // it means photo was uploaded
                }else{
                    echo "<div class='alert alert-danger'>
                        <div>Unable to upload file.</div>
                        <div>Update the record to upload file.</div>
                    </div>";
                }
            }
        }

if($logo){
            
                // sha1_file() function is used to make a unique file name
                $target_directory = "../../app/img/stations/logo/";
                $target_file = $target_directory . $logo;
                $file_type = pathinfo($target_file, PATHINFO_EXTENSION);
            
                $file_upload_error_messages="";
                // make sure file does not exist
                if(file_exists($target_file)){
                    $file_upload_error_messages.="<div>File already exists. Try to change file name.</div>";
                }
            
            // if $file_upload_error_messages is still empty
            if(empty($file_upload_error_messages)){
                // it means there are no errors, so try to upload the file
                if(move_uploaded_file($_FILES["logo"]["tmp_name"], $target_file)){
                    // it means photo was uploaded
                }else{
                    echo "<div class='alert alert-danger'>
                        <div>Unable to upload file.</div>
                        <div>Update the record to upload file.</div>
                    </div>";
                }
            }
        }

// Set user as radio admin
        $set_user_as_radio_admin_query = "UPDATE users SET radio_admin = 1 WHERE tel = $ass_manager";

// prepare query for execution
        $set_user_as_radio_admin_query_stmt = $conn->prepare($set_user_as_radio_admin_query);

$set_user_as_radio_admin_query_stmt->execute();

header("Location: ../index.php?addradio=yes");
            
        }else{
            header("Location: ../index.php?addradio=no");
        }
    }

// show error
    catch(PDOException $exception){
        die('ERROR: ' . $exception->getMessage());
    }
}

if (isset($_POST['delete_radio'])) {

// posted values
    $id=htmlspecialchars(strip_tags($_POST['radio_id']));

$delete_sql = "DELETE FROM `radio` WHERE id = $id";

// prepare query for execution
    $delete_sql_stmt = $conn->prepare($delete_sql);
    if($delete_sql_stmt->execute()){
        header("Location: ../index.php?deletradio=yes");
    }

}

if (isset($_POST['delete_radio_prog'])) {

// posted values
    $id=htmlspecialchars(strip_tags($_POST['radio_id']));
    $pid=htmlspecialchars(strip_tags($_POST['prog_id']));

$delete_sql = "DELETE FROM `programs` WHERE id = $pid AND radio_id = $id";

// prepare query for execution
    $delete_sql_stmt = $conn->prepare($delete_sql);
    if($delete_sql_stmt->execute()){
        header("Location: ../index.php?deletprog=yes");
    }

}

if (isset($_POST['add_program'])) {

// insert query
        $add_program_query = "INSERT INTO programs SET radio_id=:radio_id, prog_name=:prog_name, 
        prog_description=:prog_description, prog_dates=:prog_dates , prog_flyer=:prog_flyer, prog_time=:prog_time";

// prepare query for execution
        $add_program_query_stmt = $conn->prepare($add_program_query);

// posted values
        $title=htmlspecialchars(strip_tags($_POST['title']));
        $date=htmlspecialchars(strip_tags($_POST['date']));
        $time=htmlspecialchars(strip_tags($_POST['time']));
        $about=htmlspecialchars(strip_tags($_POST['about']));
        $radio_id=htmlspecialchars(strip_tags($_POST['radio_id']));

$poster=!empty($_FILES["poster"]["name"])
        ? sha1_file($_FILES['poster']['tmp_name']) . "-" . basename($_FILES["poster"]["name"])
        : "";

$poster=htmlspecialchars(strip_tags($poster));

// bind the parameters
        $add_program_query_stmt->bindParam(':radio_id', $radio_id);
        $add_program_query_stmt->bindParam(':prog_name', $title);
        $add_program_query_stmt->bindParam(':prog_description', $about);
        $add_program_query_stmt->bindParam(':prog_dates', $date);
        $add_program_query_stmt->bindParam(':prog_flyer', $poster);
        $add_program_query_stmt->bindParam(':prog_time', $time);

// Execute the query
        if($add_program_query_stmt->execute()){
            if($poster){
            
                // sha1_file() function is used to make a unique file name
                $target_directory = "../../app/img/stations/prog/";
                $target_file = $target_directory . $poster;
                $file_type = pathinfo($target_file, PATHINFO_EXTENSION);
            
                $file_upload_error_messages="";
                // make sure file does not exist
                if(file_exists($target_file)){
                    $file_upload_error_messages.="<div>File already exists. Try to change file name.</div>";
                }
            
            // if $file_upload_error_messages is still empty
            if(empty($file_upload_error_messages)){
                // it means there are no errors, so try to upload the file
                if(move_uploaded_file($_FILES["poster"]["tmp_name"], $target_file)){
                    // it means photo was uploaded
                }else{
                    echo "<div class='alert alert-danger'>
                        <div>Unable to upload file.</div>
                        <div>Update the record to upload file.</div>
                    </div>";
                }
            }
        }

header("Location: ../index.php?progrm=yes");
            
        }else{
            header("Location: ../index.php?progrm=no");
        }

}

if (isset($_POST['edit_program'])) {

$prog_id = htmlspecialchars(strip_tags($_POST['prog_id']));

// insert query
    $add_program_query = "UPDATE programs SET prog_name=:prog_name, 
    prog_description=:prog_description, prog_dates=:prog_dates , prog_flyer=:prog_flyer, prog_time=:prog_time WHERE id = $prog_id ";

// prepare query for execution
    $add_program_query_stmt = $conn->prepare($add_program_query);

// posted values
    $title=htmlspecialchars(strip_tags($_POST['title']));
    $date=htmlspecialchars(strip_tags($_POST['date']));
    $time=htmlspecialchars(strip_tags($_POST['time']));
    $about=htmlspecialchars(strip_tags($_POST['about']));

$poster1=!empty($_FILES["poster"]["name"])
    ? sha1_file($_FILES['poster']['tmp_name']) . "-" . basename($_FILES["poster"]["name"])
    : "";

if($poster1 == ""){
        $poster = htmlspecialchars(strip_tags($_POST['old_pic']));
    }else{
        $poster=htmlspecialchars(strip_tags($poster1));
    }

// bind the parameters
    $add_program_query_stmt->bindParam(':prog_name', $title);
    $add_program_query_stmt->bindParam(':prog_description', $about);
    $add_program_query_stmt->bindParam(':prog_dates', $date);
    $add_program_query_stmt->bindParam(':prog_flyer', $poster);
    $add_program_query_stmt->bindParam(':prog_time', $time);

// Execute the query
    if($add_program_query_stmt->execute()){
        if($poster){
        
            // sha1_file() function is used to make a unique file name
            $target_directory = "../../app/img/stations/prog/";
            $target_file = $target_directory . $poster;
            $file_type = pathinfo($target_file, PATHINFO_EXTENSION);
        
            $file_upload_error_messages="";
            // make sure file does not exist
            if(file_exists($target_file)){
                $file_upload_error_messages.="<div>File already exists. Try to change file name.</div>";
            }
        
        // if $file_upload_error_messages is still empty
        if(empty($file_upload_error_messages)){
            // it means there are no errors, so try to upload the file
            if(move_uploaded_file($_FILES["poster"]["tmp_name"], $target_file)){
                // it means photo was uploaded
            }else{
                echo "<div class='alert alert-danger'>
                    <div>Unable to upload file.</div>
                    <div>Update the record to upload file.</div>
                </div>";
            }
        }
    }

header("Location: ../index.php?Uprogrm=yes");
        
    }else{
        header("Location: ../index.php?progrm=no");
    }

}

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	mboniqkj/mboniqkj	0755	2023-11-20 04:26:32
..	dir	-	mboniqkj/mboniqkj	0755	2025-09-11 09:01:52
bootstrap.css	text/plain	152.11 KB	mboniqkj/mboniqkj	0644	2022-11-22 01:01:54
footer.php	text/html	314 B	mboniqkj/mboniqkj	0644	2023-11-03 02:02:58
head.php	text/html	872 B	mboniqkj/mboniqkj	0644	2023-11-02 12:25:26
server.php	text/x-php	11.03 KB	mboniqkj/mboniqkj	0644	2023-12-27 01:53:36

Team Anon Force

https://t.me/Professor6T9x