Advertisement
Guest User

Untitled

a guest
Apr 4th, 2017
61
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.96 KB | None | 0 0
  1. <?php
  2. require_once("DB.php");
  3. session_start();
  4. Class UserClass
  5. {
  6. private static $dbh;
  7. public static function init()
  8. {
  9. self::$dbh = DB::$dbh;
  10. }
  11. public static function LogIn($login, $password)
  12. {
  13. $sth = self::$dbh->prepare("SELECT id FROM client WHERE user =:login AND pass =:pass");
  14. $sth->execute(array(':login' => $login, ':pass' => $password));
  15.  
  16. $row = $sth->rowCount();
  17. if($row == 1)
  18. {
  19. $rows = $sth->fetch(PDO::FETCH_ASSOC);
  20. $_SESSION['id'] = $rows['id'];
  21. }
  22. else
  23. {
  24. var_dump($row);
  25. $_SESSION['err'] = '<p style="text-align: center">Nieprawidłowa nazwa użytkownika lub hasło</p>';
  26.  
  27. }
  28. }
  29.  
  30. public static function GetImages()
  31. {
  32. $sth = self::$dbh->prepare("SELECT url FROM images WHERE user_id =:id");
  33. $sth->execute(array(':id' => $_SESSION['id']));
  34. $row = $sth->rowCount();
  35.  
  36. if($row)
  37. {
  38. $rows = $sth->fetchAll(PDO::FETCH_ASSOC);
  39. return $rows;
  40. }
  41. else
  42. {
  43. return 0;
  44. }
  45. }
  46.  
  47. public static function InsertImage($id, $url)
  48. {
  49. $sth = self::$dbh->prepare("INSERT INTO images(user_id, url) VALUES( :id, :url )");
  50. $result = $sth->execute(array(':id' => $id, ':url' => $url));
  51. return $result;
  52. }
  53.  
  54. public static function LogOut()
  55. {
  56. unset($_SESSION['id']);
  57. session_unset();
  58. header('Location: index.php');
  59. }
  60.  
  61. public static function GetUserList()
  62. {
  63. $result = self::$dbh->query('SELECT id, user FROM client');
  64. $rows = $result->fetchAll(PDO::FETCH_ASSOC);
  65. return $rows;
  66. }
  67.  
  68. public static function AdminPanel()
  69. {
  70. if($_SESSION['id']!=2)
  71. {
  72. self::LogOut();
  73. }
  74. else
  75. {
  76. return 1;
  77. }
  78. }
  79. public static function Max()
  80. {
  81. $result= self::$dbh->query('SELECT MAX(id) FROM images');
  82. $rows = $result->fetchAll();
  83. return $rows[0][0];
  84. }
  85. public static function DeleteImage()
  86. {
  87. echo $_POST['id'];
  88. if(!isset($_SESSION['id']) || $_SESSION['id']!=2)
  89. {
  90. return 0;
  91. }
  92. else
  93. {
  94.  
  95. $sth = self::$dbh->prepare("DELETE FROM images WHERE user_id =:id");
  96. $sth->execute(array(':id' => $_POST['id']));
  97.  
  98. $_SESSION['deleted'] = 'Zdjęcia zostały usunięte z bazy!';
  99. header('location: adminpanel.php?delete=1');
  100. }
  101. }
  102. public static function AddImages()
  103. {
  104. if(!isset($_SESSION['id']) || $_SESSION['id']!=2)
  105. {
  106. header('locatin: index.php');
  107. }
  108. else
  109. {
  110.  
  111.  
  112. $max = userClass::Max();
  113. $uploads_dir = 'img';
  114. define('SITE_ROOT', realpath(dirname(__FILE__)));
  115.  
  116. echo '<pre>';
  117. foreach ($_FILES["image"]["error"] as $key => $error) {
  118. if ($error == UPLOAD_ERR_OK) {
  119. if (!is_dir(SITE_ROOT . '/' . "$uploads_dir/" . $_POST['id'])) {
  120. mkdir(SITE_ROOT . '/' . "$uploads_dir/" . $_POST['id']);
  121. }
  122.  
  123. $max++;
  124. $tmp_name = $_FILES["image"]["tmp_name"][$key];
  125. $array = explode('.', $_FILES['image']['name'][$key]);
  126. $extension = end($array);
  127.  
  128. move_uploaded_file($tmp_name, SITE_ROOT . '/' . "$uploads_dir/" . $_POST['id'] . "/$max" . '.' . $extension);
  129. chmod(SITE_ROOT . '/' . "$uploads_dir/" . $_POST['id'] . "/$max" . '.' . $extension, 0644);
  130. $result = userClass::InsertImage($_POST['id'], "$uploads_dir/" . $_POST['id'] . "/$max" . '.' . $extension);
  131. echo $result;
  132. }
  133. }
  134. $_SESSION['uploaded'] = 'Pliki zostały dodane do bazy!';
  135. header('location: adminpanel.php?add=1');
  136. }
  137. }
  138. }
  139. userClass::init();
  140.  
  141. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement