ikan Uploader :
Directory : /var/www/html/shardahospital_old.org/application/controllers/admin/
Upload File : |
| Current File : /var/www/html/shardahospital_old.org/application/controllers/admin/Newsletter.php |
<?php
defined('BASEPATH') OR exit('No direct script access allowed');
class Newsletter extends CI_Controller {
function __construct() {
parent::__construct();
if((!isset($_SESSION['is_logged']))||($_SESSION['is_logged']==false))
{
$_SESSION['redirect'] = base_url()."admin/Newsletter/view_newsletters";
redirect(base_url().'admin/login');
}
// redirect_admin_not_logged();
$this->load->model('newsletter_model', 'newsletter');
}
public function index()
{
$this->view_newsletters();
}
public function do_upload($field_name, $upload_path= '', $file_name= '')
{
if($upload_path!=''){
$config['upload_path'] = $upload_path;
}
else{
$config['upload_path'] = './uploads';
}
$config['allowed_types'] = 'jpeg|jpg|png|JPEG|JPG|PNG|pdf';
$config['max_size'] = '5000';
$config['max_width'] = '2000';
$config['max_height'] = '1500';
if($file_name!=''){
$config['file_name'] = $file_name;
}
$this->load->library('upload', $config);
$this->upload->initialize($config);
if ( ! $this->upload->do_upload($field_name))
{
$error = array('error' => $this->upload->display_errors());
echo '<script>console.log("'.$error['error'].'")</script>';
// $this->load->view('upload_form', $error);
return 0;
}
else
{
$data = array('upload_data' => $this->upload->data());
return $this->upload->data('file_name');
}
}
public function add_newsletter($id=0)
{
$data = array();
$data['data_string'] = '';
$newsletterID = $id;
echo '<script>console.log("add newsletter")</script>';
if($id){
$records = $this->newsletter->get_newsletter($id);
echo '<script>console.log("update newsletter")</script>';
if(!$records){
show_404();
}
else{
$data = array(
'newsletterID' => $records['newsletterID'],
'newsletterTitle' => $records['newsletterTitle'],
'newsletterDescription' => $records['newsletterDescription'],
'newsletterPdf' => $records['newsletterPdf'],
'status' => $records['status'],
'newsletterPageURL' => $records['newsletterPageURL']
);
}
}
$post=$this->input->post();
if($post){
echo '<script>console.log("post")</script>';
$this->form_validation->set_rules('newsletterTitle', 'Newsletter Title', 'required');
$this->form_validation->set_rules('newsletterPageURL', 'Newsletter Slug', 'required');
// $this->form_validation->set_rules('profile_pic', 'Profile Picture','required');
if ($this->form_validation->run() == FALSE)
{
echo '<script>console.log("Error in validating newsletter")</script>'; //console.log("Error in validating doctor");
// $this->load->view('admin/AddNewsletter');
}
else
{
$document ='';
if($_FILES['document']['name']){
$document = $this->do_upload('document', './uploads/files', 'nl_document_'.$post['newsletterPageURL']);
$data['error'] = array('error' => $this->upload->display_errors());
}
if(($_FILES['document']['name'])&&(!$document)){
echo '<script>console.log("fail upload")</script>';
}
else{
if(isset($post['newsletterID'])){
$newsletterID = $post['newsletterID'];
}
$insert_data = array(
'newsletterTitle' => $post['newsletterTitle'],
'newsletterDescription' => $post['newsletterDescription'],
'status' => $post['status'],
'newsletterPageURL' => $post['newsletterPageURL']
);
if($document!=''){
$insert_data['newsletterPdf'] = $document;
}
$success = '';
echo '<script>console.log("'.$newsletterID.'")</script>';
if($newsletterID){
$success = $this->newsletter->update_newsletter($insert_data,$newsletterID);
}
else{
$success = $this->newsletter->insert_newsletter($insert_data);
echo '<script>console.log("'.$success.'")</script>';
}
if($success){
redirect(base_url()."admin/Newsletter/view_newsletters");
};
}
}
}
$this->load->view('admin/AddNewsletter',$data);
}
public function update_newsletter($id){
$this->add_newsletter($id);
}
public function view_newsletters()
{
$data = array();
$data['records'] = $this->newsletter->get_newsletters();
if(!$data){
show_404();
}
$this->load->view('admin/ViewNewsletter',$data);
}
public function remove_newsletter($id){
$data = array();
$data1 = array();
$newsletterID = $id;
// $id = $_GET['id'];
if($this->newsletter->delete_newsletter($id)){
$data1['msg'] = 'Record deleted succesfully';
}
else{
$data1['msg'] = 'Record could not be deleted';
}
$data['records'] = $this->newsletter->get_newsletters();
if(!$data){
show_404();
}
$this->load->view('admin/ViewNewsletter',$data);
}
}
Kontol Shell Bypass