1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
<?php include 'config.php';
// Check if the user is logged in
if ((!isSet($_SESSION['loginname'])) || ($loggin <> '1')) { header("Location: login.php"); exit; } require("configure.php"); $serdlwid = htmlspecialchars($_POST["serdlwid"],ENT_QUOTES); $serid = htmlspecialchars($_POST["serid"],ENT_QUOTES); $serdlwtitleen = htmlspecialchars($_POST["serdlwtitleen"],ENT_QUOTES); $serdlwtitlesc = htmlspecialchars($_POST["serdlwtitlesc"],ENT_QUOTES); $nowdate = date("Y-m-d H:i:s"); //print_r($_POST);
// Upload File if ($_FILES['serdlwfileen']['name'] <> '') { copy ($_FILES['serdlwfileen']['tmp_name'], "../service_download/serdlwid_".$serdlwid."_en_".$_FILES['serdlwfileen']['name']) or die ("Could not copy the file: 服务 下载 File (EN)"); $serdlwfileen = "serdlwid_".$serdlwid."_en_".$_FILES['serdlwfileen']['name']; $serdlwfileen = htmlspecialchars($serdlwfileen,ENT_QUOTES); } else { $serdlwfileen = ""; }
if ($_FILES['serdlwfilesc']['name'] <> '') { copy ($_FILES['serdlwfilesc']['tmp_name'], "../service_download/serdlwid_".$serdlwid."_sc_".$_FILES['serdlwfilesc']['name']) or die ("Could not copy the file: 服务 下载 File (SC)"); $serdlwfilesc = "serdlwid_".$serdlwid."_sc_".$_FILES['serdlwfilesc']['name']; $serdlwfilesc = htmlspecialchars($serdlwfilesc,ENT_QUOTES); } else { $serdlwfilesc = ""; } // End Upload File
// Modify $sql = "update service_download set serdlwtitleen='$serdlwtitleen', serdlwtitlesc='$serdlwtitlesc', modifyday='$nowdate', cmsloginid='".$_SESSION['cmsloginid']."' "; if ($serdlwfileen <> '') $sql .= ", serdlwfileen='$serdlwfileen' "; if ($serdlwfilesc <> '') $sql .= ", serdlwfilesc='$serdlwfilesc' "; $sql .= " where serdlwid=". $serdlwid ." "; mysql_query($sql);
if( mysql_errno() > 0 ){ echo 'Modify 服务 下载 Error:<br />'. mysql_error() .'<br />SQL: '. $sql; exit; }
mysql_close($dbh);
header("Location: servicedownload_index.php?serid=$serid&msg=修改成功"); ?>
|