1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
<?php /*error_reporting(E_ALL); ini_set('display_errors', '1');*/
require("configure.php");
$CoursesCatId = $_POST["CoursesCatId"]; $CoursesDetailSort = $_POST["CoursesDetailSort"]; $CoursesDetailNameen = htmlspecialchars($_POST["CoursesDetailNameen"],ENT_QUOTES); $CoursesDetailAgeen = htmlspecialchars($_POST["CoursesDetailAgeen"],ENT_QUOTES); $CoursesDetailFeeen = htmlspecialchars($_POST["CoursesDetailFeeen"],ENT_QUOTES); $CoursesDetailTimeen = htmlspecialchars($_POST["CoursesDetailTimeen"],ENT_QUOTES); $CoursesDetailDescen = preg_replace("/'/","\'",$_POST["CoursesDetailDescen"]);
$CoursesDetailNametc = htmlspecialchars($_POST["CoursesDetailNametc"],ENT_QUOTES); $CoursesDetailAgetc = htmlspecialchars($_POST["CoursesDetailAgetc"],ENT_QUOTES); $CoursesDetailFeetc = htmlspecialchars($_POST["CoursesDetailFeetc"],ENT_QUOTES); $CoursesDetailTimetc = htmlspecialchars($_POST["CoursesDetailTimetc"],ENT_QUOTES); $CoursesDetailDesctc = preg_replace("/'/","\'",$_POST["CoursesDetailDesctc"]);
$CoursesDetailNamesc = htmlspecialchars($_POST["CoursesDetailNamesc"],ENT_QUOTES); $CoursesDetailAgesc = htmlspecialchars($_POST["CoursesDetailAgesc"],ENT_QUOTES); $CoursesDetailFeesc = htmlspecialchars($_POST["CoursesDetailFeesc"],ENT_QUOTES); $CoursesDetailTimesc = htmlspecialchars($_POST["CoursesDetailTimesc"],ENT_QUOTES); $CoursesDetailDescsc = preg_replace("/'/","\'",$_POST["CoursesDetailDescsc"]);
//print_r($_POST);
$sql = "select max(CoursesDetailId) as maxid "; $sql .= "from CoursesDetail "; $result=mysql_query($sql); $row = mysql_fetch_array($result,MYSQL_ASSOC); $CoursesDetailId = $row{maxid}+1;
// copy image if ($_FILES['CoursesDetailScheduleen']['name'] <> '') { copy ($_FILES['CoursesDetailScheduleen']['tmp_name'], "coursesschedule/".$CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name']) or die ("Could not copy"); $CoursesDetailScheduleen = $CoursesDetailId."_en_".$_FILES['CoursesDetailScheduleen']['name']; $CoursesDetailScheduleen = htmlspecialchars($CoursesDetailScheduleen,ENT_QUOTES); } else { $CoursesDetailScheduleen = ""; } // End upload image code
// copy image if ($_FILES['CoursesDetailScheduletc']['name'] <> '') { copy ($_FILES['CoursesDetailScheduletc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name']) or die ("Could not copy"); $CoursesDetailScheduletc = $CoursesDetailId."_tc_".$_FILES['CoursesDetailScheduletc']['name']; $CoursesDetailScheduletc = htmlspecialchars($CoursesDetailScheduletc,ENT_QUOTES); } else { $CoursesDetailScheduletc = ""; } // End upload image code
// copy image if ($_FILES['CoursesDetailSchedulesc']['name'] <> '') { copy ($_FILES['CoursesDetailSchedulesc']['tmp_name'], "coursesschedule/".$CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name']) or die ("Could not copy"); $CoursesDetailSchedulesc = $CoursesDetailId."_sc_".$_FILES['CoursesDetailSchedulesc']['name']; $CoursesDetailSchedulesc = htmlspecialchars($CoursesDetailSchedulesc,ENT_QUOTES); } else { $CoursesDetailSchedulesc = ""; } // End upload image code
if ($CoursesDetailSort == '' || $CoursesDetailSort == '0') { $sql = "select max(CoursesDetailSort) as maxid "; $sql .= "from CoursesDetail "; $sql .= "WHERE CoursesCatId = $CoursesCatId "; $result=mysql_query($sql); $row = mysql_fetch_array($result,MYSQL_ASSOC); $CoursesDetailSort = $row{maxid}+1; } if( mysql_num_rows(mysql_query("SELECT CoursesDetailId FROM CoursesDetail WHERE CoursesDetailSort=$CoursesDetailSort AND CoursesCatId=$CoursesCatId ")) > 0){ mysql_query("UPDATE CoursesDetail SET CoursesDetailSort= CoursesDetailSort+1 WHERE CoursesDetailSort >=$CoursesDetailSort AND CoursesCatId=$CoursesCatId "); }
$sql = "insert into CoursesDetail (CoursesDetailId, CoursesCatId, CoursesDetailNameen, CoursesDetailAgeen, CoursesDetailFeeen, CoursesDetailTimeen, CoursesDetailDescen, CoursesDetailScheduleen, CoursesDetailNametc, CoursesDetailAgetc, CoursesDetailFeetc, CoursesDetailTimetc, CoursesDetailDesctc, CoursesDetailScheduletc, CoursesDetailNamesc, CoursesDetailAgesc, CoursesDetailFeesc, CoursesDetailTimesc, CoursesDetailDescsc, CoursesDetailSchedulesc, CoursesDetailSort) values ('$CoursesDetailId', '$CoursesCatId', '$CoursesDetailNameen', '$CoursesDetailAgeen', '$CoursesDetailFeeen', '$CoursesDetailTimeen', '$CoursesDetailDescen', '$CoursesDetailScheduleen', '$CoursesDetailNametc', '$CoursesDetailAgetc', '$CoursesDetailFeetc', '$CoursesDetailTimetc', '$CoursesDetailDesctc', '$CoursesDetailScheduletc', '$CoursesDetailNamesc', '$CoursesDetailAgesc', '$CoursesDetailFeesc', '$CoursesDetailTimesc', '$CoursesDetailDescsc', '$CoursesDetailSchedulesc', '$CoursesDetailSort')"; mysql_query($sql); if( mysql_errno() > 0 ){ echo 'Courses Detail Add Error:<br />'. mysql_error() .'<br />SQL: '. $sql; exit; }
mysql_close($dbh);
header("Location: coursesdetail_index.php?CoursesCatId=".$CoursesCatId."&msg=Add Successful"); ?>
|