abdullahpasa1noluasm.com

upload mass deface mass delete console info server
name : mansetci.php
<?php
include("../db.php");
include("../functions/upload.php");
if($_SESSION['USER_ID']==""){
$_SESSION['login_error']="Giriş yapmadınız";
header( 'Location: ./index.php' );
exit();
}

if($_SESSION['USER_GroupID']!=1){
$_SESSION['login_error']="Yetkiniz Bulunmamaktadır";
header( 'Location: ./index.php' );
exit();
}

if(isset($_GET['islem']) && $_GET['islem']=="ekle"){
$ekle['ID']="";
$ekle['input1']="";
$ekle['input2']="";
$ekle['input3']="";
$ekle['metin1']="";
$ekle['metin2']="";
$ekle['metin3']="";
$ekle['metin4']="";
}

if(isset($_GET['islem']) && $_GET['islem']=="duzenle"){
$catID=trim(formatSQL($_GET['duzenle']));
$result = mysql_query("SELECT * FROM tblmanset WHERE id=" . $catID);

if($row = mysql_fetch_array($result))
{
$ekle['ID']=stripslashes($row['id']);
$ekle['input1']=stripslashes($row['baslik']);
$ekle['input2']=stripslashes($row['link']);
$ekle['input3']=stripslashes($row['nasil']);
$ekle['metin1']=stripslashes($row['metin1']);
$ekle['metin2']=stripslashes($row['metin2']);
$ekle['metin3']=stripslashes($row['metin3']);
$ekle['metin4']=stripslashes($row['metin4']);
$foto=stripslashes($row['picture']);
}else{
header( 'Location: ./mansetci.php?islem=ekle' );
exit();
}
}



if(isset($_GET['islem']) && $_GET['islem']=="eksik" && $_GET['deletepic']!="true"){

		
$ekle['input1']=$_POST['input1'];
$ekle['input2']=$_POST['input2'];
$ekle['input3']=$_POST['input3'];


$ekle['metin1']=$_POST['metin1'];
$ekle['metin2']=$_POST['metin2'];
$ekle['metin3']=$_POST['metin3'];
$ekle['metin4']=$_POST['metin4'];


$picture="";
if ($_FILES["PICTURE"]["error"] == 0 )
{
$picture=DoUpload("PICTURE",10240*1024,$FileUploadPath);	
}else{
$picture="";
}

if(isset($_POST['imgsrc'])){
$picture=trim(formatSQL($_POST['imgsrc']));
}

if ($_FILES["PICTURE"]["error"] == 0 )
{
if($_POST['input1']!="" && $_POST['input2']!="" && $_POST['input3']!=""){

if(mysql_query("INSERT INTO tblmanset (baslik,picture,link,nasil,metin1,metin2,metin3,metin4) 				
VALUES ('" . $_POST['input1'] . "','" . $picture . "','" . $_POST['input2'] . "','" . $_POST['input3'] . "','" . $_POST['metin1'] . "','" . $_POST['metin2'] . "','" . $_POST['metin3'] . "','" . $_POST['metin4'] . "')")){
header( 'Location: ./manset.php' );	
exit();
}
}
}
}










if(isset($_GET['islem']) && $_GET['islem']=="hata" && $_GET['deletepic']!="true"){

$catID=trim(formatSQL($_GET['duzenle']));
$result = mysql_query("SELECT * FROM tblmanset WHERE id=" . $catID);

if($row = mysql_fetch_array($result))
{

$ekle['ID']=stripslashes($row['id']);
$ekle['input1']=stripslashes($row['baslik']);
$ekle['input2']=stripslashes($row['link']);
$ekle['input3']=stripslashes($row['nasil']);
$ekle['metin1']=stripslashes($row['metin1']);
$ekle['metin2']=stripslashes($row['metin2']);
$ekle['metin3']=stripslashes($row['metin3']);
$ekle['metin4']=stripslashes($row['metin4']);
$foto=stripslashes($row['picture']);
}else{
header( 'Location: ./mansetci.php?islem=ekle' );
exit();
}



$picture="";
if ($_FILES["PICTURE"]["error"] == 0 )
{
$picture=DoUpload("PICTURE",10240*1024,$FileUploadPath);	
}else{
$picture="";
}

if(isset($_POST['imgsrc'])){
$picture=trim(formatSQL($_POST['imgsrc']));
}


if($picture!=""){
if(isset($_POST['imgsrc'])){
$picture=trim(formatSQL($_POST['imgsrc']));
}
}else{
$picture=$foto;
}

if($picture!="")
{
if($_POST['input1']!="" && $_POST['input2']!="" && $_POST['input3']!=""){
if(mysql_query("UPDATE tblmanset Set
baslik = '" . $_POST['input1'] . "',
picture = '" . $picture . "',
link = '" . $_POST['input2'] . "',
nasil = '" . $_POST['input3'] . "',
metin1= '" . $_POST['metin1'] . "',
metin2= '" . $_POST['metin2'] . "',
metin3= '" . $_POST['metin3'] . "',
metin4= '" . $_POST['metin4'] . "' WHERE id=" . $catID)){
header( 'Location: ./manset.php' );
exit();
}
}
}
}
$m=mysql_num_rows(mysql_query("select * from tblsupport where durum=0"));
?>
<!DOCTYPE html>
<html lang="en">
<head>

	<title>Yönetim Paneli</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
	<!-- Global stylesheets -->
	<link href="css/reset.css" rel="stylesheet" type="text/css">
	<link href="css/common.css" rel="stylesheet" type="text/css">
	<link href="css/form.css" rel="stylesheet" type="text/css">
	<link href="css/standard.css" rel="stylesheet" type="text/css">
	
	<!-- Comment/uncomment one of these files to toggle between fixed and fluid layout -->
	<!--<link href="css/960.gs.css" rel="stylesheet" type="text/css">-->
	<link href="css/960.gs.fluid.css" rel="stylesheet" type="text/css">
	
	<!-- Custom styles -->
	<link href="css/simple-lists.css" rel="stylesheet" type="text/css">
	<link href="css/block-lists.css" rel="stylesheet" type="text/css">
	<link href="css/planning.css" rel="stylesheet" type="text/css">
	<link href="css/table.css" rel="stylesheet" type="text/css">
	<link href="css/calendars.css" rel="stylesheet" type="text/css">
	<link href="css/wizard.css" rel="stylesheet" type="text/css">
	<link href="css/gallery.css" rel="stylesheet" type="text/css">
	
	<!-- Favicon -->
	<link rel="shortcut icon" type="image/x-icon" href="favicon.ico">
	<link rel="icon" type="image/png" href="favicon-large.png">
	
	<!-- Generic libs -->
	<script type="text/javascript" src="js/html5.js"></script>				<!-- this has to be loaded before anything else -->
	<script type="text/javascript" src="js/jquery-1.4.2.min.js"></script>
	<script type="text/javascript" src="js/old-browsers.js"></script>		<!-- remove if you do not need older browsers detection -->
	
	<!-- Template libs -->
	<script type="text/javascript" src="js/jquery.accessibleList.js"></script>
	<script type="text/javascript" src="js/searchField.js"></script>
	<script type="text/javascript" src="js/common.js"></script>
	<script type="text/javascript" src="js/standard.js"></script>
	<!--[if lte IE 8]><script type="text/javascript" src="js/standard.ie.js"></script>
	<![endif]-->
	<script type="text/javascript" src="js/jquery.tip.js"></script>
	<script type="text/javascript" src="js/jquery.hashchange.js"></script>
	<script type="text/javascript" src="js/jquery.contextMenu.js"></script>
	<script type="text/javascript" src="js/jquery.modal.js"></script>
	
	<!-- Custom styles lib -->
	<script type="text/javascript" src="js/list.js"></script>
	
	<!-- Plugins -->
	<script  type="text/javascript" src="js/jquery.dataTables.min.js"></script>
	<script  type="text/javascript" src="js/jquery.datepick/jquery.datepick.min.js"></script>
	
	<!-- Charts library -->
	<!--Load the AJAX API-->
	<script type="text/javascript" src="http://www.google.com/jsapi"></script>
	<script type="text/javascript">
	
		// Load the Visualization API and the piechart package.
		google.load('visualization', '1', {'packages':['corechart']});
		
	</script>
	
	<script type="text/javascript">
		
		$(document).ready(function()
		{
			/*
			 * Example context menu
			 */
			
			// Context menu for all favorites
			$('.favorites li').bind('contextMenu', function(event, list)
			{
				var li = $(this);
				
				// Add links to the menu
				if (li.prev().length > 0)
				{
					list.push({ text: 'Move up', link:'#', icon:'up' });
				}
				if (li.next().length > 0)
				{
					list.push({ text: 'Move down', link:'#', icon:'down' });
				}
				list.push(false);	// Separator
				list.push({ text: 'Delete', link:'#', icon:'delete' });
				list.push({ text: 'Edit', link:'#', icon:'edit' });
			});
			
			// Extra options for the first one
			$('.favorites li:first').bind('contextMenu', function(event, list)
			{
				list.push(false);	// Separator
				list.push({ text: 'Settings', icon:'terminal', link:'#', subs:[
					{ text: 'General settings', link: '#', icon: 'blog' },
					{ text: 'System settings', link: '#', icon: 'server' },
					{ text: 'Website settings', link: '#', icon: 'network' }
				] });
			});
			
			/*
			 * Table sorting
			 */
			
			// A small classes setup...
			$.fn.dataTableExt.oStdClasses.sWrapper = 'no-margin last-child';
			$.fn.dataTableExt.oStdClasses.sInfo = 'message no-margin';
			$.fn.dataTableExt.oStdClasses.sLength = 'float-left';
			$.fn.dataTableExt.oStdClasses.sFilter = 'float-right';
			$.fn.dataTableExt.oStdClasses.sPaging = 'sub-hover paging_';
			$.fn.dataTableExt.oStdClasses.sPagePrevEnabled = 'control-prev';
			$.fn.dataTableExt.oStdClasses.sPagePrevDisabled = 'control-prev disabled';
			$.fn.dataTableExt.oStdClasses.sPageNextEnabled = 'control-next';
			$.fn.dataTableExt.oStdClasses.sPageNextDisabled = 'control-next disabled';
			$.fn.dataTableExt.oStdClasses.sPageFirst = 'control-first';
			$.fn.dataTableExt.oStdClasses.sPagePrevious = 'control-prev';
			$.fn.dataTableExt.oStdClasses.sPageNext = 'control-next';
			$.fn.dataTableExt.oStdClasses.sPageLast = 'control-last';
			
			// Apply to table
			$('.sortable').each(function(i)
			{
				// DataTable config
				var table = $(this),
					oTable = table.dataTable({
						/*
						 * We set specific options for each columns here. Some columns contain raw data to enable correct sorting, so we convert it for display
						 * @url http://www.datatables.net/usage/columns
						 */
						aoColumns: [
							{ bSortable: false },	// No sorting for this columns, as it only contains checkboxes
							{ sType: 'string' },
							{ bSortable: false },
							{ sType: 'date' },
							{ sType: 'numeric', bUseRendered: false, fnRender: function(obj) // Size is given as float for sorting, convert to format 000 x 000
								{
									return obj.aData[obj.iDataColumn].split('.').join(' x ');
								}
							},
							{ bSortable: false }	// No sorting for actions column
						],
						
						/*
						 * Set DOM structure for table controls
						 * @url http://www.datatables.net/examples/basic_init/dom.html
						 */
						sDom: '<"block-controls"<"controls-buttons"p>>rti<"block-footer clearfix"lf>',
						
						/*
						 * Callback to apply template setup
						 */
						fnDrawCallback: function()
						{
							this.parent().applyTemplateSetup();
						},
						fnInitComplete: function()
						{
							this.parent().applyTemplateSetup();
						}
					});
				
				// Sorting arrows behaviour
				table.find('thead .sort-up').click(function(event)
				{
					// Stop link behaviour
					event.preventDefault();
					
					// Find column index
					var column = $(this).closest('th'),
						columnIndex = column.parent().children().index(column.get(0));
					
					// Send command
					oTable.fnSort([[columnIndex, 'asc']]);
					
					// Prevent bubbling
					return false;
				});
				table.find('thead .sort-down').click(function(event)
				{
					// Stop link behaviour
					event.preventDefault();
					
					// Find column index
					var column = $(this).closest('th'),
						columnIndex = column.parent().children().index(column.get(0));
					
					// Send command
					oTable.fnSort([[columnIndex, 'desc']]);
					
					// Prevent bubbling
					return false;
				});
			});
			
			/*
			 * Datepicker
			 * Thanks to sbkyle! http://themeforest.net/user/sbkyle
			 */
			$('.datepicker').datepick({
				alignment: 'bottom',
				showOtherMonths: true,
				selectOtherMonths: true,
				renderer: {
					picker: '<div class="datepick block-border clearfix form"><div class="mini-calendar clearfix">' +
							'{months}</div></div>',
					monthRow: '{months}', 
					month: '<div class="calendar-controls" style="white-space: nowrap">' +
								'{monthHeader:M yyyy}' +
							'</div>' +
							'<table cellspacing="0">' +
								'<thead>{weekHeader}</thead>' +
								'<tbody>{weeks}</tbody></table>', 
					weekHeader: '<tr>{days}</tr>', 
					dayHeader: '<th>{day}</th>', 
					week: '<tr>{days}</tr>', 
					day: '<td>{day}</td>', 
					monthSelector: '.month', 
					daySelector: 'td', 
					rtlClass: 'rtl', 
					multiClass: 'multi', 
					defaultClass: 'default', 
					selectedClass: 'selected', 
					highlightedClass: 'highlight', 
					todayClass: 'today', 
					otherMonthClass: 'other-month', 
					weekendClass: 'week-end', 
					commandClass: 'calendar', 
					commandLinkClass: 'button',
					disabledClass: 'unavailable'
				}
			});
		});
		
		// Demo modal
		function openModal()
		{
			$.modal({
				content: '<p>This is an example of modal window. You can open several at the same time (click button below!), move them and resize them.</p>'+
						  '<p>The plugin provides several other functions to control them, try below:</p>'+
						  '<ul class="simple-list with-icon">'+
						  '    <li><a href="javascript:void(0)" onclick="$(this).getModalWindow().setModalTitle(\'\')">Remove title</a></li>'+
						  '    <li><a href="javascript:void(0)" onclick="$(this).getModalWindow().setModalTitle(\'New title\')">Change title</a></li>'+
						  '    <li><a href="javascript:void(0)" onclick="$(this).getModalWindow().loadModalContent(\'ajax-modal.html\')">Load Ajax content</a></li>'+
						  '</ul>',
				title: 'Example modal window',
				maxWidth: 500,
				buttons: {
					'Open new modal': function(win) { openModal(); },
					'Close': function(win) { win.closeModal(); }
				}
			});
		}
	
	</script>
	
</head>

<body>
<!-- The template uses conditional comments to add wrappers div for ie8 and ie7 - just add .ie or .ie7 prefix to your css selectors when needed -->
<!--[if lt IE 9]><div class="ie"><![endif]-->
<!--[if lt IE 8]><div class="ie7"><![endif]-->
	<!-- Status bar -->

		
			<footer>
			<div class="float-right">
			<a href="#top" class="button">Sayfa başına dön</a></div>
			</footer>
<!--[if lt IE 8]></div><![endif]-->
<!--[if lt IE 9]></div><![endif]-->
<div align="center"><br><br>
		   <? include("ustmenu.php"); ?>
		<table border="1" width="980" id="table3" cellspacing="0" cellpadding="0">
				<tr>
						<td><br><br><section class="grid_12">
			<div class="block-border">
			<form class="block-content form" id="simple_form" method="post" action="?islem=<?php if($_GET['islem']=="ekle" || $_GET['islem']=="eksik"){?>eksik<?php }else{ if($_GET['islem']=="duzenle" || $_GET['islem']=="hata"){?>hata&duzenle=<?=$ekle['ID']?><?php }}?>"  enctype="multipart/form-data" name="form1">
			<h1>Manşet</h1>
				
			<fieldset class="grey-bg required">
			<legend>Bilgiler</legend>
			<p>
<label for="simple-required">Manşet başlık</label>
<input type="text" name="input1" id="input1" value="<?=$ekle['input1']?>"><br><br>

<label for="simple-required">Metin Satır1</label>
<input type="text" name="metin1" id="metin1" value="<?=$ekle['metin1']?>"><br><br>

<label for="simple-required">Metin Satır2</label>
<input type="text" name="metin2" id="metin2" value="<?=$ekle['metin2']?>"><br><br>

<label for="simple-required">Metin Satır3</label>
<input type="text" name="metin3" id="metin3" value="<?=$ekle['metin3']?>"><br><br>

<label for="simple-required">Metin Satır4</label>
<input type="text" name="metin4" id="metin4" value="<?=$ekle['metin4']?>"><br><br>

<label for="simple-required">Manşet Fotoğrafı</label>
<input type="file" name="PICTURE" id="PICTURE" class="full-width"><br><br>

<label for="simple-required">Manşet Linki</label>
<input type="text" name="input2" id="input2" value="<?=$ekle['input2']?>"><br><br>
<div class="float-left gutter-right">
							<span class="label">Tıklandığında</span>
							<p class="input-height grey-bg">
								<input type="radio" name="input3" id="input3" value="_blank" checked>&nbsp;<label for="stats-sites-0">Yeni pencerede açılsın</label>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
								<br>
								<br>
								<input type="radio" name="input3" id="input3" value="_self">&nbsp;<label for="stats-sites-1">Aynı pencerede açılsın</label>
							</p>
						</div>
			</p>
			</fieldset>
				
				
			&nbsp;
				
			<fieldset class="grey-bg no-margin">

			<table border="1" width="900" id="table4" cellspacing="0" cellpadding="0">
					<tr>
							<td>						
			<input type="submit" value="Kaydet">&nbsp;&nbsp;&nbsp;&nbsp; <i>
			<font face="Tahoma">Tüm Alanların doldurulması zorunludur.</font></i></td>
					</tr>
			</table>
			</fieldset>		
			</form></div>
		</section></td>
				</tr>
		</table>
				<table border="1" width="980" id="table2" cellspacing="0" cellpadding="0" height="25">
		<tr>
		<td align="center" valign="center">
		</td>
		</tr>
		</table>
</div>
</body>
</html>
UnknownSec Shell
