| Server IP : 172.67.189.169 / Your IP : 216.73.216.59 Web Server : Apache/2 System : Linux cat167-197.static.lnwhostname.com 5.10.0-20-amd64 #1 SMP Debian 5.10.158-2 (2022-12-13) x86_64 User : paphayomho ( 1042) PHP Version : 5.6.40 Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /home/paphayomho/domains/paphayomhospital.go.th/private_html/PolicyPaphayom/ |
Upload File : |
<?php
session_start(); require_once('db.php');
if(!isset($_SESSION['admin_login'])) { header("Location: login.php"); exit(); }
if(isset($_GET['del'])){
$r = $conn->query("SELECT * FROM announcements WHERE id=".(int)$_GET['del'])->fetch_assoc();
if($r['image_path']) unlink($r['image_path']);
if($r['file_path']) unlink($r['file_path']);
$conn->query("DELETE FROM announcements WHERE id=".(int)$_GET['del']);
header("Location: admin.php");
}
if(isset($_POST['save'])){
$img = ""; $pdf = "";
if($_FILES['img']['name']){ $img="uploads/img_".time()."_".$_FILES['img']['name']; move_uploaded_file($_FILES['img']['tmp_name'],$img); }
if($_FILES['pdf']['name']){ $pdf="uploads/pdf_".time()."_".$_FILES['pdf']['name']; move_uploaded_file($_FILES['pdf']['tmp_name'],$pdf); }
$st = $conn->prepare("INSERT INTO announcements (category,tag,title,description,image_path,file_path,update_date) VALUES (?,?,?,?,?,?,?)");
$d = date('d/m/Y'); $st->bind_param("sssssss",$_POST['cat'],$_POST['tag'],$_POST['ttl'],$_POST['desc'],$img,$pdf,$d);
$st->execute(); header("Location: admin.php");
}
?>
<!DOCTYPE html>
<html lang="th"><head><meta charset="UTF-8"><title>Admin Panel</title><link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet"><link href="https://fonts.googleapis.com/css2?family=Prompt&display=swap" rel="stylesheet"></head>
<body style="font-family:'Prompt'; background:#f4f7f6;">
<nav class="navbar navbar-dark bg-dark mb-4"><div class="container"><span class="navbar-brand">Admin</span><a href="logout.php" class="btn btn-outline-light btn-sm">ออก</a></div></nav>
<div class="container"><div class="row">
<div class="col-md-4"><div class="card p-3 border-0 shadow-sm">
<h5>เพิ่มประกาศ</h5>
<form method="post" enctype="multipart/form-data">
<select name="cat" class="form-select mb-2"><option value="policy">นโยบาย</option><option value="job">งาน</option><option value="purchase">พัสดุ</option></select>
<input type="text" name="tag" class="form-control mb-2" placeholder="Tag" required>
<input type="text" name="ttl" class="form-control mb-2" placeholder="หัวข้อ" required>
<textarea name="desc" class="form-control mb-2" placeholder="คำอธิบาย"></textarea>
<label class="small">รูปประกอบ (ถ้ามี):</label><input type="file" name="img" class="form-control mb-2" accept="image/*">
<label class="small">ไฟล์ PDF:</label><input type="file" name="pdf" class="form-control mb-3" accept=".pdf" required>
<button name="save" class="btn btn-success w-100">บันทึก</button>
</form>
</div></div>
<div class="col-md-8"><div class="card p-3 border-0 shadow-sm"><table class="table"><thead><tr><th>เรื่อง</th><th>จัดการ</th></tr></thead><tbody>
<?php $res = $conn->query("SELECT * FROM announcements ORDER BY id DESC"); while($r = $res->fetch_assoc()): ?>
<tr><td><?php echo $r['title']; ?></td><td><a href="?del=<?php echo $r['id']; ?>" class="btn btn-danger btn-sm" onclick="return confirm('ลบหรือไม่?')">ลบ</a></td></tr>
<?php endwhile; ?>
</tbody></table></div></div>
</div></div></body></html>