Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- include "incluso/verifica_sessao.php";
- ?>
- <!doctype html>
- <?php
- error_reporting(0);
- $id = (int)$_REQUEST["id"];
- $dia=date("d");
- $mes=date("m");
- $ano=date("Y");
- $dt = date("Y-m-d");
- $tabela = "imagens";
- $lnk = "img";
- $lnk_pag = "img_cad";
- if ($u[nivel] == 3) { $lnk_rd = "col_lst.php"; } else {$lnk_rd = "not_lst.php";}
- $seguro=substr(md5(rand(2,99999999)),0,6) ;
- if ($u[nivel] == 3) {
- require_once 'paginas/topo_colunista.php';
- } else {
- require_once 'paginas/topo.php';
- }
- $config = array();
- // Tamano máximo da imagem, em bytes
- $config["tamanho"] = 153600;
- $tamanho = By2M($config["tamanho"]);
- // Largura Máxima, em pixels
- $config["largura"] = 850;
- // Altura Máxima, em pixels
- $config["altura"] = 650;
- // Diretório onde a imagem será salva
- $config["diretorio"] = "../images/noticias/";
- $criapasta = @mkdir("$config[diretorio]", 0777); //CRIANDO O DIRETÓRIO
- @chmod("$config[diretorio]", 0777); //DANDO PERMISSAO DE ESCRITA
- copy("index_diretorios.html",$config[diretorio]."index.html");
- //INSERINDO CADASTRO
- if (isset($_FILES["foto"])){
- $data_cad = date ("Y-m-d");
- $hora_cad = strftime("%H:%M:%S");
- $id_conteudo = $_POST['id_conteudo'];
- $titulo = $_POST['titulo'];
- $legenda = $_POST['legenda'];
- $destaque = $_POST['destaque'];
- $status = $_POST['status'];
- $arquivo = isset($_FILES["foto"]) ? $_FILES["foto"] : FALSE;
- //EVITAR ATAQUE DDOS
- // Verifica se $_GET não está vazio
- if (!empty($_REQUEST)) {
- $segundos = "$i[tempo]"; // Tempo mínimo entre dois submits (em segundos)
- $agora = time(); // "Agora" em UNIXTIMESTAMP
- // Verifica se a variável da sessão existe E verifica a diferença de tempo
- if (isset($_SESSION['ultimoSubmit']) AND ($_SESSION['ultimoSubmit'] > ($agora - $segundos))) {
- // O submit será bloqueado
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- <strong>".ATTENTION."</strong> ".WAIT." <strong>$segundos</strong> ".SECONDS.". ".BLOCKDDOS."</div>";
- }
- // Salva a hora do último submit
- $_SESSION['ultimoSubmit'] = $agora;
- }
- if ($_POST['titulo'] == ""){
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- <strong>".ERROR."</strong>".ERRORIMGNAME."</div>";
- }
- elseif (strlen($titulo) > 50) {
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- <strong>".ERROR."</strong>".ERRORIMGNAMEMAX."</div>";
- } elseif (strlen($titulo) < 3) {
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- <strong>".ERROR."</strong>".ERRORIMGNAMEMIN."</div>";
- }
- if ($_POST['status'] == ""){
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- <strong>".ERROR."</strong>".ERRORSTATUS."</div>";
- }
- //Verifica se o código é válido
- if ($_POST['pin'] != $_POST['pin2']){
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- <strong>".ERROR."</strong>".ERRORCAPTCHA."</div>";
- }
- // Gera um nome para a imagem e verifica se já não existe, caso exista, gera outro nome e assim sucessivamente..
- // Função Recursiva
- function nome($extensao)
- {
- global $config;
- // Gera um nome único para a imagem
- $temp = substr(md5(uniqid(time())), 0, 18);
- $imagem_nome = $temp . "." . $extensao;
- // Verifica se o arquivo já existe, caso positivo, chama essa função novamente
- if(file_exists($config["diretorio"] . $imagem_nome))
- {
- $imagem_nome = nome($extensao);
- }
- return $imagem_nome;
- }
- if(!eregi("^image\/(pjpeg|jpeg)$", $arquivo["type"]))
- {
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- ".NOTEFILETYPEERROR."".NOTEFILETYPE." jpg, jpeg. ".NOTEUPLOADANOTHERFILE."</div>";
- } else {
- // Verifica tamanho do arquivo
- if($arquivo["size"] > $config["tamanho"])
- {
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- ".NOTESIZEERROR."" . $tamanho . ". ".NOTEUPLOADANOTHERFILE."</div>";
- }
- // Para verificar as dimensões da imagem
- $tamanhos = getimagesize($arquivo["tmp_name"]);
- // Verifica largura
- if($tamanhos[0] > $config["largura"])
- {
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- ".NOTEWIDTHERROR."" . $config["largura"] . " pixels.</div>";
- }
- // Verifica altura
- if($tamanhos[1] > $config["altura"])
- {
- $acao[] = "<div class=\"alert alert-error\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- ".NOTEHEIGHTERROR."" . $config["altura"] . " pixels.</div>";
- }
- }
- //Verifica se todas estão corretas
- if (!isset($acao)){
- // Pega extensão do arquivo, o indice 1 do array conterá a extensão
- preg_match("/\.(gif|bmp|png|jpg|jpeg){1}$/i", $arquivo["name"], $ext);
- // Gera nome único para a imagem
- $imagem_nome = nome($ext[1]);
- // Caminho de onde a imagem ficará
- $imagem_dir = $config["diretorio"] . $imagem_nome;
- // Faz o upload da imagem
- move_uploaded_file($arquivo["tmp_name"], $imagem_dir);
- $sql_inclu = "INSERT INTO $tabela (id_usu, id_conteudo, titulo, descricao, nome, destaque, status, data, hora, ip) VALUES ('".$u[id]."', '$id', '$titulo', '$legenda', '$imagem_nome', '$destaque', '$status', '$data_cad', '$hora_cad', '". $_SERVER['REMOTE_ADDR'] ."')";
- $exe_inclu = mysql_query($sql_inclu) or die (mysql_error());
- $id_cadastro = mysql_insert_id();
- $acao[] = "<div class=\"alert alert-success\">
- <button type=\"button\" class=\"close\" data-dismiss=\"alert\">×</button>
- <strong>".SUCCESS."</strong>".CADOK."</div>
- <div class=\"control-group\">
- <label for=\"textfield\" class=\"control-label\"></label>
- <div class=\"controls\">
- <div class=\"fileupload fileupload-new\" data-provides=\"fileupload\">
- <div class=\"fileupload-new thumbnail\" style=\"width: 200px; height: 150px;\"><img src=\"$config[diretorio]"."/$imagem_nome\" /></div>
- <div>
- </div>
- </div>
- </div>
- </div>
- <META http-equiv=Refresh content=\"2; URL=\"not_lst.php\">
- ";
- }
- }
- ?>
- <html xmlns="http://www.w3.org/1999/xhtml" lang="<?php echo $lang ?>" dir="ltr">
- <head>
- <meta charset="iso-8859-1">
- <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
- <!-- Apple devices fullscreen -->
- <meta name="apple-mobile-web-app-capable" content="yes" />
- <!-- Apple devices fullscreen -->
- <meta names="apple-mobile-web-app-status-bar-style" content="black-translucent" />
- <title><?php echo "Gerenciador | $i[titulo_da_pagina]"; ?></title>
- <!-- Bootstrap -->
- <link rel="stylesheet" href="css/bootstrap.min.css">
- <!-- Bootstrap responsive -->
- <link rel="stylesheet" href="css/bootstrap-responsive.min.css">
- <!-- jQuery UI -->
- <link rel="stylesheet" href="css/plugins/jquery-ui/smoothness/jquery-ui.css">
- <link rel="stylesheet" href="css/plugins/jquery-ui/smoothness/jquery.ui.theme.css">
- <!-- Tagsinput -->
- <link rel="stylesheet" href="css/plugins/tagsinput/jquery.tagsinput.css">
- <!-- chosen -->
- <link rel="stylesheet" href="css/plugins/chosen/chosen.css">
- <!-- multi select -->
- <link rel="stylesheet" href="css/plugins/multiselect/multi-select.css">
- <!-- timepicker -->
- <link rel="stylesheet" href="css/plugins/timepicker/bootstrap-timepicker.min.css">
- <!-- colorpicker -->
- <link rel="stylesheet" href="css/plugins/colorpicker/colorpicker.css">
- <!-- Datepicker -->
- <link rel="stylesheet" href="css/plugins/datepicker/datepicker.css">
- <!-- Daterangepicker -->
- <link rel="stylesheet" href="css/plugins/daterangepicker/daterangepicker.css">
- <!-- Plupload -->
- <link rel="stylesheet" href="css/plugins/plupload/jquery.plupload.queue.css">
- <!-- select2 -->
- <link rel="stylesheet" href="css/plugins/select2/select2.css">
- <!-- icheck -->
- <link rel="stylesheet" href="css/plugins/icheck/all.css">
- <!-- Theme CSS -->
- <link rel="stylesheet" href="css/style.css">
- <!-- Color CSS -->
- <link rel="stylesheet" href="css/themes.css">
- <!-- jQuery -->
- <script src="js/jquery.min.js"></script>
- <!-- Nice Scroll -->
- <script src="js/plugins/nicescroll/jquery.nicescroll.min.js"></script>
- <!-- imagesLoaded -->
- <script src="js/plugins/imagesLoaded/jquery.imagesloaded.min.js"></script>
- <!-- jQuery UI -->
- <script src="js/plugins/jquery-ui/jquery.ui.core.min.js"></script>
- <script src="js/plugins/jquery-ui/jquery.ui.widget.min.js"></script>
- <script src="js/plugins/jquery-ui/jquery.ui.mouse.min.js"></script>
- <script src="js/plugins/jquery-ui/jquery.ui.resizable.min.js"></script>
- <script src="js/plugins/jquery-ui/jquery.ui.sortable.min.js"></script>
- <!-- Touch enable for jquery UI -->
- <script src="js/plugins/touch-punch/jquery.touch-punch.min.js"></script>
- <!-- slimScroll -->
- <script src="js/plugins/slimscroll/jquery.slimscroll.min.js"></script>
- <!-- Bootstrap -->
- <script src="js/bootstrap.min.js"></script>
- <!-- Bootbox -->
- <script src="js/plugins/bootbox/jquery.bootbox.js"></script>
- <!-- Bootbox -->
- <!-- Masked inputs -->
- <script src="js/plugins/maskedinput/jquery.maskedinput.min.js"></script>
- <!-- TagsInput -->
- <script src="js/plugins/tagsinput/jquery.tagsinput.min.js"></script>
- <!-- Datepicker -->
- <?php
- if (!isset($_COOKIE["lang"]) || ($_COOKIE["lang"]=="pt-BR")){
- echo "<script src=\"js/plugins/datepicker/bootstrap-datepicker.js\" charset=\"utf-8\"></script>"; }
- elseif ($_COOKIE["lang"]=="en") {
- echo "<script src=\"js/plugins/datepicker/bootstrap-datepicker-en.js\"></script>"; }
- ?>
- <!-- Daterangepicker -->
- <script src="js/plugins/daterangepicker/daterangepicker.js"></script>
- <script src="js/plugins/daterangepicker/moment.min.js"></script>
- <!-- Timepicker -->
- <script src="js/plugins/timepicker/bootstrap-timepicker.min.js"></script>
- <!-- Colorpicker -->
- <script src="js/plugins/colorpicker/bootstrap-colorpicker.js"></script>
- <!-- Chosen -->
- <script src="js/plugins/chosen/chosen.jquery.min.js"></script>
- <!-- MultiSelect -->
- <script src="js/plugins/multiselect/jquery.multi-select.js"></script>
- <!-- CKEditor -->
- <script src="js/plugins/ckeditor/ckeditor.js"></script>
- <!-- PLUpload -->
- <script src="js/plugins/plupload/plupload.full.js"></script>
- <script src="js/plugins/plupload/jquery.plupload.queue.js"></script>
- <!-- Custom file upload -->
- <script src="js/plugins/fileupload/bootstrap-fileupload.min.js"></script>
- <script src="js/plugins/mockjax/jquery.mockjax.js"></script>
- <!-- select2 -->
- <script src="js/plugins/select2/select2.min.js"></script>
- <!-- icheck -->
- <script src="js/plugins/icheck/jquery.icheck.min.js"></script>
- <script src="js/plugins/form/jquery.form.min.js"></script>
- <!-- Validation -->
- <?php
- if (!isset($_COOKIE["lang"]) || ($_COOKIE["lang"]=="pt-BR")){
- echo "<script src=\"js/plugins/validation/jquery.validate.min.js\" charset=\"utf-8\"></script>"; }
- elseif ($_COOKIE["lang"]=="en") {
- echo "<script src=\"js/plugins/validation/jquery.validate-en.min.js\"></script>"; }
- ?>
- <script src="js/plugins/validation/additional-methods.min.js"></script>
- <!-- Theme framework -->
- <script src="js/eakroko.min.js"></script>
- <!-- Theme scripts -->
- <script src="js/application.min.js"></script>
- <!-- Just for demonstration -->
- <?php
- if (!isset($_COOKIE["lang"]) || ($_COOKIE["lang"]=="pt-BR")){
- echo "<script src=\"js/demonstration.min.js\" charset=\"utf-8\"></script>"; }
- elseif ($_COOKIE["lang"]=="en") {
- echo "<script src=\"js/demonstration.min-en.js\"></script>"; }
- ?>
- <script src="./js/funcoes.js"></script>
- <!--[if lte IE 9]>
- <script src="js/plugins/placeholder/jquery.placeholder.min.js"></script>
- <script>
- $(document).ready(function() {
- $('input, textarea').placeholder();
- });
- </script>
- <![endif]-->
- <!-- Favicon -->
- <link rel="shortcut icon" href="img/favicon.ico" />
- <!-- Apple devices Homescreen icon -->
- <link rel="apple-touch-icon-precomposed" href="img/apple-touch-icon-precomposed.png" />
- </head>
- <body data-layout-sidebar="fixed" data-layout-topbar="fixed" class="theme-grey">
- <?php
- if ($u[nivel] == 3) {
- include "paginas/colunista_topo.php";
- } else {
- include "paginas/menu_topo.php";
- }?>
- <div class="container-fluid" id="content">
- <div id="left">
- <?php if ($u[nivel] == 3) {
- include "paginas/colunista_lateral.php";
- } else {
- include "paginas/menu_lateral.php";
- }?>
- </div>
- <div id="main">
- <div class="container-fluid">
- <div class="page-header">
- <div class="pull-left">
- <h1><?php echo IMGCADN ?></h1>
- </div>
- <?php include "paginas/relogio.php";?>
- </div>
- <div class="breadcrumbs">
- <ul>
- <li> <a href="./admin.php"><?php echo HOME ?></a> <i class="icon-angle-right"></i> </li>
- <li> <a href="./<?php echo "$lnk_pag".".php?id=$id";?>"><?php echo IMGCAD ?></a> <i class="icon-angle-right"></i> </li>
- <?php /*if (!empty($codigo)) {
- $dados_categoria = mysql_fetch_array(mysql_query("SELECT * FROM secao WHERE id='$codigo' AND codigo_radio = '".$u[codigo_radio]."'"));
- echo "<li> <a href=\"./not_cad?secao=$codigo\">Cadastrar Notícia em $dados_categoria[secao_nome]</a> </li>";
- } */?>
- </ul>
- <div class="close-bread"> <a href="#"><i class="icon-remove"></i></a> </div>
- </div>
- <div class="row-fluid">
- <div class="span12">
- <div class="box">
- <div class="box-title"> </div>
- <div class="box-content">
- <?php
- if (isset($acao)){
- for($i=0;$i<count($acao);$i++){ ?>
- <?php echo $acao[$i];?>
- <?
- }
- }
- if ($id_cadastro == 0) { ?>
- <form action="<?php echo "$lnk_pag".".php?id=$id";?>" method="POST" class='form-horizontal form-validate' id="bb" ENCTYPE="multipart/form-data">
- <div class="alert alert-info">
- <button type="button" class="close" data-dismiss="alert">×</button>
- <?php echo "<strong>".WARNING."</strong>".NOTEJPG."".NOTEIMGLARGER."<strong>".$tamanho."</strong> ".NOTEIMGDIMENSION." <strong>".$config["largura"] . " px</strong> de largura x <strong>" . $config["altura"]." px</strong> de altura."; ?></div>
- <div class="control-group">
- <label for="textfield" class="control-label"><?php echo IMAGE ?></label>
- <div class="controls">
- <div class="fileupload fileupload-new" data-provides="fileupload">
- <div class="fileupload-new thumbnail" style="width: 200px; height: 150px;">
- <?php
- $dados_img = mysql_fetch_array(mysql_query("SELECT id, id_usu, id_conteudo, titulo, nome FROM imagens WHERE id_conteudo='".$id."' AND id_usu='".$u[id]."' ORDER by id DESC"));
- if (!empty($dados_img[nome]) && file_exists("../images/noticias/$dados_img[nome]")){
- $imagem_dep = "../images/noticias/$dados_img[nome]";
- } else {
- $imagem_dep = "../images/noticias/sem-foto.jpg";
- }
- echo "<img src=\"$imagem_dep\"/>";
- ?>
- </div>
- <div class="fileupload-preview fileupload-exists thumbnail" style="max-width: 200px; max-height: 150px; line-height: 20px;"></div>
- <div> <span class="btn btn-file"><span class="fileupload-new"><?php echo "".SELECT." ".IMAGE."";?></span><span class="fileupload-exists"><?php echo CHANGE ?></span>
- <input type="file" name='foto' />
- </span> <a href="#" class="btn fileupload-exists" data-dismiss="fileupload"><?php echo REMOVE ?></a> </div>
- </div>
- </div>
- </div>
- <div class="control-group">
- <label for="textfield" class="control-label"><?php echo NOTICIAS ?></label>
- <div class="controls">
- <select name="id" id="id" class='select2-me input-xxlarge'>
- <?php if (empty($id)) { echo "<option selected='selected'>".SELECTANEWS."</option>"; }
- $sql_cat = mysql_query("SELECT id, id_usu, titulo FROM conteudo WHERE id_usu='".$u[id]."' ORDER by id DESC");
- while($linha2 = mysql_fetch_array($sql_cat)){
- echo '<option value="'.$linha2['id'].'"';
- if ($linha2['id'] == $id) {
- echo 'selected="selected"'; }
- echo '>'.$linha2['titulo'].'</option>';
- }
- ?>
- </select>
- </div>
- </div>
- <div class="control-group">
- <label for="textfield" class="control-label"><?php echo IMGNAME ?></label>
- <div class="controls">
- <input type="text" name="titulo" id="titulo" value="<?php if(empty($_POST[titulo])) { echo "$dados_img[titulo]"; } else { echo $_POST['titulo'];}?>" class="input-xxlarge" data-rule-minlength="3" data-rule-required="true">
- </div>
- </div>
- <div class="control-group">
- <label for="textfield" class="control-label"><?php echo CAPTION ?></label>
- <div class="controls">
- <input type="text" name="legenda" id="legenda" value="<?php if (empty($legenda)) { echo "".DIVULGATION.""; } else { echo $_POST['legenda'];}?>" class="input-xxlarge" data-rule-minlength="3" data-rule-required="true">
- </div>
- </div>
- <div class="control-group">
- <label for="textfield" class="control-label"><?php echo FEATURED ?></label>
- <div class="check-demo-col">
- <div class="check-line">
- <input type="radio" id="destaque" class='icheck-me' name="destaque" value="sim" data-skin="square" data-color="blue" <?php if ($destaque == "sim" || $destaque == "") { echo "checked"; }?>>
- <label class='inline' for="c7"><?php echo YES ?></label>
- </div>
- <div class="check-line">
- <input type="radio" id="destaque" class='icheck-me' name="destaque" value="nao" data-skin="square" data-color="blue" <?php if ($destaque == "nao") { echo "checked"; }?>>
- <label class='inline' for="c8"><?php echo NO ?></label>
- </div>
- </div>
- </div>
- <div class="control-group">
- <label for="textfield" class="control-label"><?php echo PUBLISH ?></label>
- <div class="check-demo-col">
- <div class="check-line">
- <input type="radio" id="status" class='icheck-me' name="status" value="sim" data-skin="square" data-color="blue" <?php if ($status == "sim" || $status == "") { echo "checked"; }?>>
- <label class='inline' for="c7"><?php echo YES ?></label>
- </div>
- <div class="check-line">
- <input type="radio" id="status" class='icheck-me' name="status" value="nao" data-skin="square" data-color="blue" <?php if ($status == "nao") { echo "checked"; }?>>
- <label class='inline' for="c8"><?php echo NO ?></label>
- </div>
- </div>
- </div>
- <div class="control-group">
- <label for="maxlengthfield" class="control-label"><?php echo SECURITYCOD ?></label>
- <div class="controls">
- <input type="hidden" name="pin" id="pin" value="<?php echo "$seguro";?>">
- <img src="./verifyimage.php?pin=<?php echo "$seguro";?>" /> </div>
- </div>
- <div class="control-group">
- <label for="maxlengthfield" class="control-label"><?php echo REPEAT ?> <small><?php echo SECURITYCOD ?></small></label>
- <div class="controls">
- <input name="pin2" type="text" class="input-small" id="pin2" maxlength="6" data-rule-equalTo="#pin" data-rule-minlength="6" data-rule-required="true" autocomplete="off">
- </div>
- </div>
- <div class="form-actions">
- <input type="submit" class="btn btn-primary" value="<?php echo REGISTER ?>">
- </div>
- </form>
- <?php } ?>
- </div>
- </div>
- </div>
- </div>
- <div class="row-fluid">
- <div class="span12"></div>
- </div>
- </div>
- </div>
- </div>
- <?php include "paginas/rodape.php";?>
- </body>
- </html>
Advertisement
Add Comment
Please, Sign In to add comment