1#@!#!123s

: / home / grandhou / public_html / admin /
Filename : add-blog.php
back
<?php
session_start();
if(strlen($_SESSION['alogin'])==0)
    {	
header('location:index.php');
}
error_reporting( ~E_NOTICE ); // avoid notice
include('include/constant.php');
include('include/pdo.php');
	if(isset($_POST['btn_save_updates']))
	{
	    
    
	 $metatitle = htmlspecialchars($_POST['metatitle'], ENT_QUOTES, 'UTF-8');
    $metadesc = htmlspecialchars($_POST['metadesc'], ENT_QUOTES, 'UTF-8');
     $heading = htmlspecialchars($_POST['heading'], ENT_QUOTES, 'UTF-8');
      $subdesc = htmlspecialchars($_POST['subdesc'], ENT_QUOTES, 'UTF-8');
	 $blogdescription = htmlspecialchars($_POST['blogdescription'], ENT_QUOTES, 'UTF-8');
		$date = $_POST['date'];
	 $permalink = preg_replace('/[^A-Za-z0-9\-]/', '', $_POST['Permalink']);
   	$imgFile8 = $_FILES['bookimage']['name'];
		$tmp_dir8 = $_FILES['bookimage']['tmp_name'];
		$imgSize8 = $_FILES['bookimage']['size'];
	
	if($imgFile8)
		{
			$upload_dir8 = 'upload/'; // upload directory	
			$imgExt8 = strtolower(pathinfo($imgFile8,PATHINFO_EXTENSION)); // get image extension
			$valid_extensions8 = array('jpeg', 'jpg', 'png', 'gif'); // valid extensions
			$bookimage = rand(1000,1000000).".".$imgExt8;
			if(in_array($imgExt8, $valid_extensions8))
			{			
				if($imgSize8 < 5000000)
				{
					//unlink($upload_dir8.$edit_row['homeimage']);
					move_uploaded_file($tmp_dir8,$upload_dir8.$bookimage);
				}
				else
				{
					$errMSG8 = "Sorry, your file is too large it should be less then 5MB";
				}
			}
			else
			{
				$errMSG8 = "Sorry, only JPG, JPEG, PNG & GIF files are allowed.";		
			}	
		}
					
	if(!isset($errMSG))
		{
			$stmt = $DB_con->prepare("INSERT INTO blog(metatitle,metadesc,heading,subdesc,permalink,blogdescription,date,bookimage) VALUES (:metatitle,:metadesc,:heading,:subdesc,:permalink,:blogdescription,:date,:bookimage)"); 
			$stmt->bindParam(':metatitle',$metatitle);
			$stmt->bindParam(':metadesc',$metadesc);
			$stmt->bindParam(':heading',$heading);
			$stmt->bindParam(':subdesc',$subdesc);
			$stmt->bindParam(':permalink',$permalink);
			$stmt->bindParam(':blogdescription',$blogdescription);
			$stmt->bindParam(':date',$date);
			$stmt->bindParam(':bookimage',$bookimage);
			
				   if($stmt->execute()){?>
                <script>
				alert('Blog Uploaded Succesfully');
				window.location.href='add-blog.php';
				</script>
                <?php
			}
			else{
				$errMSG = "Sorry Data Could Not Updated !";
			}
		}
						
	}
	
?>


<!DOCTYPE html>
<html lang="en">
<head>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Wedding Photo Sydeny </title>
<link rel="shortcut icon" href="upload/favicon.ico">
	<link type="text/css" href="bootstrap/css/bootstrap.min.css" rel="stylesheet">
	<link type="text/css" href="bootstrap/css/bootstrap-responsive.min.css" rel="stylesheet">
	<link type="text/css" href="css/theme.css" rel="stylesheet">
	<link type="text/css" href="images/icons/css/font-awesome.css" rel="stylesheet">
	<link type="text/css" href='http://fonts.googleapis.com/css?family=Open+Sans:400italic,600italic,400,600' rel='stylesheet'>
<script src="<?php echo $tiny; ?>" referrerpolicy="origin"></script>
<script src="tiny.js" type="text/javascript"></script>
<script language="javascript" type="text/javascript">
function getXMLHTTP() { //fuction to return the xml http object
		var xmlhttp=false;	
		try{
			xmlhttp=new XMLHttpRequest();
		}
		catch(e)	{		
			try{			
				xmlhttp= new ActiveXObject("Microsoft.XMLHTTP");
			}
			catch(e){
				try{
				xmlhttp = new ActiveXObject("Msxml2.XMLHTTP");
				}
				catch(e1){
					xmlhttp=false;
				}
			}
		}
		 	
		return xmlhttp;
    }
	
</script>
</head>
<body oncontextmenu="return false;">
<script>
document.onkeydown = function(e) {
if(event.keyCode == 123) {
return false;
}
if(e.ctrlKey && e.shiftKey && e.keyCode == 'I'.charCodeAt(0)){
return false;
}
if(e.ctrlKey && e.shiftKey && e.keyCode == 'J'.charCodeAt(0)){
return false;
}
if(e.ctrlKey && e.keyCode == 'U'.charCodeAt(0)){
return false;
}
}
</script>
<?php include('include/header.php');?>

	<div class="wrapper">
		<div class="container">
			<div class="row">
<?php include('include/sidebar.php');?>				
			<div class="span9">
					<div class="content">

						<div class="module">
							<div class="module-head">
								<h3>Add Blog</h3>
							</div>
							<div class="module-body">

									<?php if(isset($_POST['submit']))
{?>
									<div class="alert alert-success">
										<button type="button" class="close" data-dismiss="alert">×</button>
									<strong>Well done!</strong>	<?php echo htmlentities($_SESSION['msg']);?><?php echo htmlentities($_SESSION['msg']="");?>
									</div>
<?php } ?>
									<br />
			<form class="form-horizontal row-fluid" method="post" enctype="multipart/form-data" >
<input type="hidden" name="edit_id" value="<?php echo $id;?>">
		 							<div class="control-group">
										<label class="control-label" for="basicinput">Meta Title</label>
										<div class="controls">
											<input type="text" name="metatitle" class="span8 tip">
										</div>
									</div>
									<div class="control-group">
										<label class="control-label" for="basicinput">Meta Description</label>
										<div class="controls">
											<input type="text" name="metadesc" class="span8 tip">
										</div>
									</div>
									<div class="control-group">
										<label class="control-label" for="basicinput">Perma Link (*Special characters not allowed)</label>
										<div class="controls">
											<input type="text" name="permalink" class="span8 tip">
										</div>
									</div>
									<div class="control-group">
										<label class="control-label" for="basicinput">Blog Title</label>
										<div class="controls">
											<input type="text" name="heading" class="span8 tip">
										</div>
									</div>
									<div class="control-group">
										<label class="control-label" for="basicinput">Sub Description</label>
										<div class="controls">
											<input type="text" name="subdesc" class="span8 tip">
										</div>
									</div>
									<div class="control-group">
										<label class="control-label" for="basicinput">Description</label>
										<div class="controls">
										<textarea name="blogdescription" id="" cols="30" rows="10"></textarea>
										 <input name="image" type="file" id="upload" class="hidden" onchange="">
										</div>
									</div>
									
<div class="control-group">
<label class="control-label" for="basicinput">Image (600 x 437)</label>
<div class="controls">
<input type="file" name="bookimage"  class="span8 tip" accept="image/*">
</div>
</div>
	<div class="control-group">
										<label class="control-label" for="basicinput">Date</label>
										<div class="controls">
											<input type="text" name="date" class="span8 tip">
										</div>
									</div>
								
									
	<div class="control-group">
											<div class="controls">
												<button type="submit" name="btn_save_updates" class="btn">Add</button>
											</div>
										</div>
									</form>
							</div>
						</div>
						
						
							<div class="module">
							<div class="module-head">
								<h3>Manage Blog</h3>
							</div>
							<div class="module-body table">
	<?php if(isset($_GET['del']))
{?>
									<div class="alert alert-error">
										<button type="button" class="close" data-dismiss="alert">×</button>
									<strong>Oh snap!</strong> 	<?php echo htmlentities($_SESSION['delmsg']);?><?php echo htmlentities($_SESSION['delmsg']="");?>
									</div>
<?php } ?>
	<br />

								<table cellpadding="0" cellspacing="0" border="0" class="datatable-1 table table-bordered table-striped	 display" width="100%">
									<thead>
										<tr>
											<th>#</th>
											<th>Blog Title</th>
											<th>Action</th>
										</tr>
									</thead>
									<tbody>
<?php
include('include/pdo.php');
$STH = $DB_con->query('select * from blog order by id desc');
$STH->setFetchMode(PDO::FETCH_OBJ);
$cnt=1;
while($row = $STH->fetch()) {
	$heading=$row->heading;
?>                 		
										<tr>
											<td><?php echo $cnt;?></td>
											<td><?php echo $row->heading;?></td>
											<td>
																	<form method="post" action="editblog.php">
    <input type="hidden" name="edit_id" value="<?php echo $row->id;?>">
    <button type="submit"><i class="icon-edit"></i></button>
	<a href="delete-blog.php?Id=<?php echo $row->id;?>" onClick="return confirm('Are you sure you want to delete?')"><i class="icon-remove-sign"></i></a>
</form>
											
											</td>
										</tr>
										<?php $cnt=$cnt+1; } ?>
							</table>
							</div>
						</div>	
						
						
						
		
					</div><!--/.content-->
				</div><!--/.span9-->
			</div>
		</div><!--/.container-->
	</div><!--/.wrapper-->
</div>
<?php include('include/footer.php');?>

	<script src="bootstrap/js/bootstrap.min.js" type="text/javascript"></script>
	<script>
		$(document).ready(function() {
			$('.datatable-1').dataTable();
			$('.dataTables_paginate').addClass("btn-group datatable-pagination");
			$('.dataTables_paginate > a').wrapInner('<span />');
			$('.dataTables_paginate > a:first-child').append('<i class="icon-chevron-left shaded"></i>');
			$('.dataTables_paginate > a:last-child').append('<i class="icon-chevron-right shaded"></i>');
		} );
	</script>
	
	<script src="bootstrap/js/script.js" type="text/javascript"></script>

</body>