Gecko [ 122.154.134.11 ]

Name	Size	Permission
affair.php	13.31 KB	-rw-r--r--
b_pic.php	5.98 KB	-rw-r--r--
building_building.php	16.72 KB	-rw-r--r--
building_building_report.php	5.4 KB	-rw-r--r--
building_fix.php	15.92 KB	-rw-r--r--
building_fix_report.php	6.52 KB	-rw-r--r--
building_heavy.php	16 KB	-rw-r--r--
building_heavy_report.php	6.55 KB	-rw-r--r--
building_main.php	30.9 KB	-rw-r--r--
category.php	6.52 KB	-rw-r--r--
livesearch_2.php	659 B	-rw-r--r--
livesearch_3.php	667 B	-rw-r--r--
livesearch_4.php	667 B	-rw-r--r--
model.php	15.4 KB	-rw-r--r--
pic_show.php	709 B	-rw-r--r--
report_1.php	13.61 KB	-rw-r--r--
report_1_mobile.php	12.38 KB	-rw-r--r--
report_affair.php	5.02 KB	-rw-r--r--
report_affair_mobile.php	4.87 KB	-rw-r--r--
report_affair_web.php	5.31 KB	-rw-r--r--
return_ajax_cate.php	614 B	-rw-r--r--
return_ajax_type.php	620 B	-rw-r--r--

Code Editor : b_pic.php

<?php
session_start();
if(!(isset($_SESSION['login_user_id']))){
exit();
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<?php
if(isset($_SESSION['user_os'])){
	if($_SESSION['user_os']=='mobile'){
	echo "<meta name = 'viewport' content = 'width = device-width'>";
	}
}
?>
<style type="text/css">

</style>
</head>
<body>

<?php
date_default_timezone_set('Asia/Bangkok');
require_once "../../../amssplus_connect.php";	
require_once("../../../mainfile.php");
require_once("../time_inc.php");

//ฟังชั่นupload
			function file_upload() {
					$uploaddir = '../upload_files/';      //ที่เก็บไไฟล์
					$uploadfile = $uploaddir.$_FILES['userfile']['name'];
					
					$file_name = $_FILES['userfile']['name'] ;
					$array_last = explode("." ,$file_name) ;
					$lastname = strtolower ($array_last[1]) ;
					$lastname_2=".".$lastname;  
					 
					$rand_number1=rand();
					$rand_number2=rand();
					$file_name=$_POST['b_id'].$rand_number1.$rand_number2;
					
					if (move_uploaded_file($_FILES['userfile']['tmp_name'],$uploadfile))
						{
							$before_name  = $uploadfile;
							$name = $file_name.$lastname_2;
							$changed_name = $uploaddir.$file_name.$lastname_2;
							rename("$before_name" , "$changed_name");
					
							//ลดขนาดภาพ
								if(($lastname =="JPG") or ($lastname=="jpg")){		
									$ori_file=$changed_name;
									$ori_size=getimagesize($ori_file);
									$ori_w=$ori_size[0];
									$ori_h=$ori_size[1];
												if($ori_w>1000){
												$new_w=1000;
												$new_h=round(($new_w/$ori_w)*$ori_h);
												$ori_img=imagecreatefromjpeg($ori_file);
												$new_img=imagecreatetruecolor($new_w, $new_h);
												imagecopyresized($new_img, $ori_img,0,0, 0,0, $new_w, $new_h, $ori_w, $ori_h);
												$new_file=$ori_file;
												imagejpeg($new_img, $new_file);
												imagedestroy($ori_img);
												imagedestroy($new_img);
												}	
									}						
							
						return  $name;
						}
			}
			
if(isset($_POST['b_id'])){		
		if($_FILES['userfile']['name']!=""){
				$myfile1_name = $_FILES ['userfile'] ['name'] ;
				 $array_last1 = explode("." ,$myfile1_name) ;
				 $c1 =count ($array_last1) - 1 ;
				 $lastname1 = strtolower ($array_last1 [$c1] ) ;
				 if($lastname1 =="jpg" or $lastname1 =="JPG") { 
		
				$file=file_upload();
				$rec_date = date("Y-m-d");
				$sql = "insert into building_file(building_id,file_name,rec_date) values ('$_POST[b_id]','$file','$rec_date')";
				$dbquery = mysqli_query($connect,$sql);
				 }
		}
}			
		
//ลบไฟล์			
if(isset($_GET['index'])){		
$sql = "select *  from building_file where id='$_GET[id]'";
$dbquery = mysqli_query($connect,$sql);
$result = mysqli_fetch_array($dbquery);
$file_name=$result['file_name'];
$delete="../upload_files/$file_name";
@unlink($delete);

$sql = "delete from building_file where id='$_GET[id]'";
$dbquery = mysqli_query($connect,$sql);
}		
			
$sql = "select *,building_main.id from building_main left join system_school on building_main.school_code=system_school.school_code 
 left join building_model on building_main.model_code=building_model.model_code  where building_main.id='$_REQUEST[b_id]'";
$dbquery = mysqli_query($connect,$sql);
$result = mysqli_fetch_array($dbquery);
$school_name= $result['school_name'];
$model_name= $result['model_name'];

echo "<table width='50%' border='0' align='center'>";
echo "<tr align='center'><td><font color='#006666' size='3'><strong>$model_name</strong></font></td></tr>";
echo "<tr align='center'><td><font color='#006666' size='3'><strong>$school_name</strong></font></td></tr>";
echo "</table>";
			
			
echo "<form Enctype = 'multipart/form-data' id='frm2' name='frm2' action='?option=building&task=main/b_pic' method=post>";
echo "<Br><Br>";
echo "<Table width='70%' Border='0' align='center'>";

echo  "<tr align='center'>";
echo  "<Td ></Td><td align='right'>Upload File&nbsp;&nbsp;</td>";
echo  "<td align='left'><input name = 'userfile' type = 'file'></td>";
echo  "</tr>";
echo  "<tr align='center' height='70'>";
echo  "<Td ></Td><td></td><td align='left'>";
echo "<INPUT TYPE='submit' name='smb' id='submit' value='ตกลง' "; 
echo "</td></tr>";
echo "</Table>";
echo "<INPUT TYPE='Hidden' name='b_id' value='$_REQUEST[b_id]'>";
echo "</form>";

echo  "<table width='70%' border='1' align='center' style='border-collapse: collapse'>";
echo "<Tr bgcolor='#ddd' align='center'><Td width='70'>ที่</Td><td>รูปภาพ</Td><Td width='150'>วันที่</Td><Td width='60'>ลบ</Td></Tr>";
$sql = "select *  from building_file where building_id='$_REQUEST[b_id]' order by id desc";
$dbquery = mysqli_query($connect,$sql);
$N=1;
While ($result = mysqli_fetch_array($dbquery)){
		$id = $result['id'];
		$file_name=$result['file_name'];
		$rec_date=$result['rec_date'];
		$rec_date=thai_date_3($rec_date);
echo "<Tr'><Td align='center'>$N</Td><td align='center'><a href='pic_show.php?&file=$file_name' target='_blank'><img src=../upload_files/$file_name border='0' width='150'></a></Td><Td align='center'>$rec_date</Td><Td align='center'><a href=?option=building&task=main/b_pic&b_id=$_REQUEST[b_id]&id=$id&index=3><img src=../../../images/drop.png border='0'></a></Td></Tr>";
$N++;
}		
echo "</table>";
?>
	<CENTER><FONT SIZE="2" COLOR="#0000FF"></FONT><BR><FONT SIZE="2" COLOR="#999933">************************************</FONT></CENTER>
<CENTER><input border="0" src="../images/button95.jpg" name="I1" width="100" height="20" type="image" onClick=" re_load(1)"></CENTER>

</script>
</body>
</html>

${this.title}

Code Editor : b_pic.php