File Manager

✏️ Edit File: /var/www/vhosts/nursoft.al/public_html/FerTours/de/Admin.php

<?php 
ob_start(); 
define('INCLUDE_CHECK',1);
include "all_php_files/dbconnect.php";
error_reporting(0);
include_once("all_php_files/status.php");
// Initialize any variables that the page might echo
$u = "";
// Make sure the _GET username is set, and sanitize it
if(isset($_GET["u"])){$u = preg_replace('#[^a-z0-9]#i', '', $_GET['u']);}else{}
// Select the member from the users table
$sql = "SELECT * FROM users WHERE username='$u' LIMIT 1";
$user_query = mysqli_query($db_conx, $sql);
// Now make sure that user exists in the table
$numrows = mysqli_num_rows($user_query);
if($numrows < 1){ echo "Nuk Ekziston"; }
if($u == $log_username && $user_ok == true){ $isOwner = "yes"; }else{$isOwner == "no"; header("location: asd.php");}
while ($row = mysqli_fetch_array($user_query, MYSQLI_ASSOC)){ $profile_id = $row["id"];	$emri= $row["emri"]; }
$basename = basename($_SERVER['PHP_SELF']);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en" xml:lang="en">
<head>
<title>FerTours</title>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <meta name="description" content="<?php echo $vrow1 ['details'];?>">
<link rel="stylesheet" type="text/css" href="css/stylesheet.css" />
<link rel="stylesheet" type="text/css" href="css/slideshow.css" media="screen" />
<link rel="stylesheet" type="text/css" href="css/carousel.css" media="screen" />
<script type="text/javascript" src="js/jquery-1.6.1.min.js"></script>
<script type="text/javascript" src="js-ui-1.8.16.custom.min.js"></script>
<link rel="stylesheet" type="text/css" href="css/jquery-ui-1.8.16.custom.css" />
<script type="text/javascript" src="js/jquery.cookie.js"></script>
<script type="text/javascript" src="js/jquery.fancybox-1.3.4.pack.js"></script>
<link rel="stylesheet" type="text/css" href="stylesheet/jquery.fancybox-1.3.4.css" media="screen" />
 
<script type="text/javascript" src="js/tabs.js"></script>
<script type="text/javascript" src="js/common.js"></script>
<script type="text/javascript">
	$(document).ready(function() {
		$('div.social > a').animate({'opacity':'0.6'}, 50);
		$('div.social > a').hover( 
		function(){
			$(this).animate({'opacity':'1'}, 200);
		}, function(){
			$(this).animate({'opacity':'.6'}, 200);					  
		});

$('body').has('span.homa').addClass('homa');
		$('.box-category > ul > li').has('ul').find('a.active').addClass('down');
		
		$(window).load(function() { 
			$('#content').wrapInner(document.createElement('span'));
			$("#content > span > .breadcrumb + h1").insertBefore("#content > span");
		})
	});

</script>

</head>

<body <?php if($user_ok == true){ }else{?>oncopy="return false" oncut="return false" onpaste="return false" ondragstart="return false" onselectstart="return false"<?php } ?>>
<div class="bg_bottom">
<?php include_once("header.php"); ?>
<div class="clear"></div>
</div> 
<div class="bg_home">
<div id="container">
<div class="bg_content">
<div id="content" style="text-align: center;">
	<style>
		tr { border-bottom: 1px solid black !important; }	
	.button1 { width:40%; text-align:center;
	color: #FFF;
	font-family: 'Roboto Condensed', sans-serif;
	font-size:1.1em;
	font-weight: normal;
	padding: 10px 30px;
	text-transform: uppercase;
	background:#ABC492;
	display: inline-block;
    margin-top: 3px;
	-webkit-transition: all 0.3s ease-out;
	-moz-transition: all 0.3s ease-out;
	-ms-transition: all 0.3s ease-out;
	-o-transition: all 0.3s ease-out;
	text-decoration:none;
	transition: all 0.3s ease-out;
}
.button1:hover{
	background:#333;
}
</style>
<h2 style='font-size: 1.9em;font-family: "BebasNeueRegular",sans-serif;font-weight: 700;text-align: center;border-bottom: 4px double #000;padding-bottom: 10px;'>Paneli i Administrimit</h2>

<?php if($_GET['v'] =='PostoKeshille'){
$titulli=$_POST['titulli'];
$artikulli=$_POST['artikulli'];
$akkt=$_POST['aktiv'];
$profil=$_FILES["photo"]["name"];
$kaboomt = explode(".", $profil);
$fileExtt = end($kaboomt);
$foto= date("DMjGisY")."".rand(1000,9999).".".$fileExtt; 
if(isset($_POST['submitkesh']))
{
$ssss12="INSERT INTO `destinacione`(`qyteti`, `shteti`, `foto`, `aktiv`, `user_id`)  VALUES('$titulli','$artikulli','$foto','$akkt','$profile_id')";
move_uploaded_file($_FILES["photo"]["tmp_name"],"images/" . $foto);
$rsssqs2 = mysql_query($ssss12);
if($rsssqs2)
{
echo "<p>";
echo "<span style='color:green'><b>Veprimi u krye me sukses !</b></style>";
echo "</p>";
}
else
{
echo mysql_error();
}
}
?>
<form name="example" enctype="multipart/form-data" action="" method="POST"> </br>
     <input name="titulli" type="text"  style="padding:10px; width: 50%;" placeholder="Qyteti" required></br>
			 <input name="artikulli" type="text"  style="padding:10px; width: 50%;" placeholder="Shteti" required></br>
			 	<label class="check_label">Destinacion Aktiv <input type="checkbox" checked value="1" name="aktiv" style="width: 15px;"/></label>
		 </br></br>
								</br>
<label class="check_label"> Shto Fotografi : </label>
								<input type="file" name="photo" style="margin:0 auto;"></br>
								</br></br>
<input type="submit" value="Shto" style=" width:45.5%; padding:5px; font-weight:bold; font-size:15px; " name="submitkesh">
	 </form></br></br><?php } if($_GET['v'] =='ShtoProdukt'){
$emri=  mysql_real_escape_string(trim($_POST['emri'])); 
$pershkrim=  mysql_real_escape_string(trim($_POST['pershkrim'])); 
$pershkrim2=  mysql_real_escape_string(trim($_POST['pershkrim2'])); 
$pershkrim3=  mysql_real_escape_string(trim($_POST['pershkrim3'])); 
$kategoria= $_POST['kategoria'];
$rek=$_POST['rek'];
$price=$_POST['price'];
$price2=$_POST['price2'];
$bileta=$_POST['bileta'];
$bileta2=$_POST['bileta2'];
$bileta3=$_POST['bileta3'];
$intenerari=$_POST['intenerari'];
$intenerari2=$_POST['intenerari2'];
$intenerari3=$_POST['intenerari3'];
$from=$_POST['from'];
$to=$_POST['to'];
$ditet=$_POST['ditet'];
$njsje=$_POST['nisje'];
$mberritje=$_POST['mberritje'];
$koha=$_POST['koha'];
$profil=$_FILES["photosss"]["name"];
$kaboomt = explode(".", $profil);
$fileExtt = end($kaboomt);
$foto= date("DMjGisY")."".rand(1000,9999).".".$fileExtt; 
if($_FILES['spg']['size'][0] == 0 && $_FILES['spg']['tmp_name'][0] == ''){ $slide="";}else{ $slide=$_FILES['spg']['name']; }
	if($_FILES['spg']['size'][0] == 0 && $_FILES['foto_fb']['tmp_name'][0] == ''){ $foto_fb="";}else{ $foto_fb=$_FILES['foto_fb']['name']; }
	if($_FILES['mobile_slide']['size'][0] == 0 && $_FILES['mobile_slide']['tmp_name'][0] == ''){ $mobileslide="";}else{ $mobileslide=$_FILES['mobile_slide']['name']; }
if(isset($_POST['submitproduktin']))
{
$ssss12="INSERT INTO `bileta`(`product_name`,`details`,`endetails`,`dedetails`,`bileta`,`enbileta`,`debileta`,`intenerari`,`enintenerari`,`deintenerari`
,`category`,`price`,`price2`,`date_added`,`foto`,`slide`,`info`,`info2`,`info3`,`nga`,`ne`,`ditet`)
VALUES('$emri','$pershkrim','$pershkrim2','$pershkrim3','$bileta','$bileta2','$bileta3','$intenerari','$intenerari2','$intenerari3','$kategoria','$price','$price2',
now(),'$foto','$slide','$njsje','$mberritje','$koha','$from','$to','$ditet')";
move_uploaded_file($_FILES["spg"]["tmp_name"],"images/" . $slide);
move_uploaded_file($_FILES["photosss"]["tmp_name"],"images/" . $foto);
$rsssqs2 = mysql_query($ssss12);

if($rsssqs2)
{
echo "<p>";
echo "<span style='color:green'><b>Bileta u shtua me sukses !</b></style>";
echo "</p>";
}
else
{
echo mysql_error();
}
}
?>
<form name="example" enctype="multipart/form-data" action="" method="POST"> </br>
     <input name="emri" type="text"  style="padding:10px; width: 60%;" placeholder="Linja" required></br>
										<select name="kategoria" style="width:60%; padding:10px;float: none;">
										<option value ="">Zgjidh Kategorine</option>
<option <?php if($row['category'] == "Bileta Avioni"){ echo "selected"; } ?> value="Bileta Avioni">Bileta Avioni</option>
<option <?php if($row['category'] == "Bileta Autobuzi"){ echo "selected"; } ?> value="Bileta Autobuzi">Bileta Autobuzi</option>
								</select>
							
				</br>		   <select  style=" width:30%; padding:10px; " name="from" required>
                <option value="">Zgjidh Destinacionin Nga</option>
                <?php $asdwe = mysql_query("SELECT * from destinacione");
                while($asdawewqe = mysql_fetch_array($asdwe)){ ?> 
                <option value="<?php echo $asdawewqe["qyteti"]; ?>"><?php echo $asdawewqe["qyteti"]; ?></option>
                <?php } ?>
            </select>       <select  style=" width:30%; padding:10px; " name="to" required>
                <option value="">Zgjidh Destinacionin Ne</option>
                <?php $asdwe = mysql_query("SELECT * from destinacione");
                while($asdawewqe = mysql_fetch_array($asdwe)){ ?> 
                <option value="<?php echo $asdawewqe["qyteti"]; ?>"><?php echo $asdawewqe["qyteti"]; ?></option>
                <?php } ?>
            </select>    	</br>	
								<input name="price" type="text"  style=" width:30%; padding:10px; "placeholder="Cmimi Vajtje">
								<input name="price2" type="text"  style=" width:30%; padding:10px; "placeholder="Cmimi Vajtje - Ardhje">
                            	</br>		</br>	            
	                            <input name="pershkrim" type="text"  style=" width:20%; padding:10px;" value="Arritja në destinacion një ditë me vonë">
								<input name="pershkrim2" type="text"  style=" width:20%; padding:10px;" value="Arrival at destination a day later">
								<input name="pershkrim3" type="text"  style=" width:20%; padding:10px;" value="Fahren Sie einen Tag später ans Ziel">
									</br> 	            
	                            <input name="bileta" type="text"  style=" width:20%; padding:10px;" value="Bileta Tragetit e perfshirë">
								<input name="bileta2" type="text"  style=" width:20%; padding:10px;" value="Ferry tickets included">
								<input name="bileta3" type="text"  style=" width:20%; padding:10px;" value="Fährtickets enthalten">
									</br>
								<input name="intenerari" type="text"  style=" width:20%; padding:10px;" value="Një Drejtim">
								<input name="intenerari2" type="text"  style=" width:20%; padding:10px;" value="One Way">
								<input name="intenerari3" type="text"  style=" width:20%; padding:10px;" value="Eine Richtung">
									</br>	</br>
								<input name="nisje" type="text"  style=" width:20%; padding:10px;" placeholder="Orari Nisjes">
								<input name="mberritje" type="text"  style=" width:20%; padding:10px;" placeholder="Mberritja">
								<input name="koha" type="text"  style=" width:20%; padding:10px;" placeholder="Kohezgjatja">
									</br>	</br>	
<input name="ditet" type="text"  style="padding:10px; width: 60%;" placeholder="Ditet e javes kur niset autobuzi ne anglisht (psh: Monday,Friday)"></br></br>
</br>
	<label class="check_label"> Shto Fotografi : </label></br>
								<input type="file" style=" width:60%;margin: 0 auto;padding:10px; " name="photosss"></br></br>
							<label class="check_label"> Slide : </label></br>
								<input type="file" style=" width:60%;margin: 0 auto;padding:10px; " name="spg"></br>
	<div class="chb_wrapper"></br>
	<label class="check_label">Bilete Aktive <input type="checkbox" checked value="1" name="aktiv" style="width: 15px;"/></label>
							</div>
								</br></br>
<input type="submit" value="Shto" style=" width:45.5%; padding:5px; font-weight:bold; font-size:15px; " name="submitproduktin">
	 </form></br></br><?php }
if( $_GET['v']=='NdryshoFshiProdukt')
{
    if (isset($_GET['deleteid'])) {
	echo '<h2 style="font-weight:bold;">Jeni i sigurt qe deshironi ta fshini kete Bilete ? <a href="Admin.php?yesdelete=' . $_GET['deleteid'] . '&u='.$u.'&v=NdryshoFshiProdukt">Po</a> | <a href="Admin.php?u='.$u.'&v=NdryshoFshiProdukt">Jo</a></h2>';

}
if (isset($_GET['yesdelete'])) {
	$id_to_delete = $_GET['yesdelete'];
		$qfasdasd = mysql_fetch_array(mysql_query("SELECT foto,slide FROM bileta where id ='$id_to_delete'"));
		unlink("images/".$qfasdasd["foto"]);
	unlink("images/".$qfasdasd["slide"]);
	//	$qfasdasd = mysql_query("SELECT foto FROM foto where postimi ='$id_to_delete'");
//	while($asdasdweqwe = mysql_fetch_array($qfasdasd)){	unlink("images/".$asdasdweqwe["foto"]);	}
//	mysql_query("DELETE FROM foto WHERE postimi='$id_to_delete'") or die (mysql_error());
	$sql = mysql_query("DELETE FROM bileta WHERE id='$id_to_delete' LIMIT 1") or die (mysql_error());
  
	header("location: Admin.php?u=$u&v=NdryshoFshiProdukt"); 
    exit();
}
$q = "SELECT id,product_name,foto FROM bileta order by id desc";
$r = mysql_query($q);
if($r)
{echo"</br> <h2>Ndrysho / Fshi Produktet</h2></br>  
<table border=1 width=100% style='text-align:center; a{margin-top:-10px;}'>";echo "<tr> <td>Foto</td><td>Emri</td><td>Ndrysho / Fshi</td></tr>";
while($row=mysql_fetch_array($r))
{
//header("Content-type: text/html");
//$type = "Content-type: ".$row['aphototype'];
$i=$row['foto'];
// Delete Item Question to Admin, and Delete Product if they choose

echo "<tr>";
			echo "<td width=7%>";
if($i !== "" )
{
echo "<img src='images/$i' width=100% height=50/>";
}
else
{
echo "<img src='images/logo.png' width=100% height=50/>";
}
echo "</td>";
echo "<td width=77%>";
echo "<h6>";
echo "<a style='margin-bottom:70px; position:relative;' href='details/$row[id]' class=''> $row[product_name]</a>";
echo '</h6>';
echo "</td>";
echo "<td>";
echo "<a style='margin-bottom:70px; position:relative;' href='Admin.php?post_id=$row[id]&u=$u&v=NdryshoProdukt' 
class='ndrysho'> Ndrysho </a> &nbsp; &nbsp; &nbsp; &nbsp;
<a href='Admin.php?deleteid=$row[id]&u=$u&v=NdryshoFshiProdukt' class='fshi'>Fshi</a>";
echo "</td>";
echo "</tr>";	
}
	echo "</table>";
}	
else
{
echo mysql_error();
}}
$nid=$_GET['post_id'];
$titulli2=  mysql_real_escape_string(trim($_POST['emri'])); 
$artikulli2=  mysql_real_escape_string(trim($_POST['pershkrim'])); 
if($_POST["kategoriere"] ==""){$kat= $_POST['kategoria'];}else{$kat= $_POST['kategoriere'];}
if($_POST["nenkategoriere"] ==""){$nenkat= $_POST['nenkat'];}else{$nenkat= $_POST['nenkategoriere'];}
$shit= $_POST['shit'];
$rekomanduar= $_POST['rek'];
$price= $_POST['price'];
$vetem_kategori= $_POST['vetem_kategori'];
$cmimi= $_POST['cmimi'];
if($_FILES['pg']['size'][0] == 0 && $_FILES['pg']['tmp_name'][0] == '')
{
$pic=$_POST['newpg'];
}
else
{
$pic=$_FILES['pg']['name'];
	unlink("images/".$_POST['newpg']);
}
if($_FILES['spg']['size'][0] == 0 && $_FILES['spg']['tmp_name'][0] == '')
{
$slide=$_POST['snewpg'];
}
else
{
$slide=$_FILES['spg']['name'];
	
	unlink("images/".$_POST['snewpg']);
}if($_FILES['mobile_slide']['size'][0] == 0 && $_FILES['mobile_slide']['tmp_name'][0] == '')
{
$mobileslide=$_POST['new_mobile_slide'];
}
else
{
$mobileslide=$_FILES['mobile_slide']['name'];
	unlink("images/".$_POST['new_mobile_slide']);
}if($_FILES['foto_fb']['size'][0] == 0 && $_FILES['foto_fb']['tmp_name'][0] == '')
{
$foto_fb=$_POST['new_foto_fb'];
}
else
{
$foto_fb=$_FILES['foto_fb']['name'];
	unlink("images/".$_POST['new_foto_fb']);
}
if(!empty($titulli2))
{
$s2s123='UPDATE products SET product_name="'.$titulli2.'", details="'.$artikulli2.'" ,slide="'.$slide.'",price="'.$price.'",product_photo="'.$pic.'", subcategory="'.$nenkat.'", suggested="'.$rekomanduar.'",category="'.$kat.'",mobileslide="'.$mobileslide.'",vetem_kategori="'.$vetem_kategori.'",	foto_fb="'.	$foto_fb.'" Where id="'.$nid.'"';
 move_uploaded_file($_FILES["pg"]["tmp_name"],"images/" . $_FILES["pg"]["name"]);
 move_uploaded_file($_FILES["spg"]["tmp_name"],"images/" . $_FILES["spg"]["name"]);
	 move_uploaded_file($_FILES["mobile_slide"]["tmp_name"],"images/" . $_FILES["mobile_slide"]["name"]);
	 move_uploaded_file($_FILES["foto_fb"]["tmp_name"],"images/" . $_FILES["foto_fb"]["name"]);
$a2s123 = mysql_query($s2s123);
if($_FILES['photo']['size'][0] != 0 && $_FILES['photo']['tmp_name'][0] != ''){
if (isset($_FILES["photo"]["name"]) && isset($nid)){
foreach($_FILES['photo']['tmp_name'] as $key => $tmp_name )
{
	$fileName =  $key.$_FILES["photo"]["name"] [$key];
    $fileTmpLoc = $_FILES["photo"]["tmp_name"][$key];
	$fileType = $_FILES["photo"]["type"][$key];
	$fileSize = $_FILES["photo"]["size"][$key];
	$fileErrorMsg = $_FILES["photo"]["error"];
	$kaboom = explode(".", $fileName);
	$fileExt = end($kaboom);
	$db_file_name = date("DMjGisY")."".rand(1000,9999).".".$fileExt; // WedFeb272120452013RAND.jpg
	list($width, $height) = getimagesize($fileTmpLoc);
	$moveResult = move_uploaded_file($fileTmpLoc, "images/$db_file_name");
				include_once("all_php_files/image_resize.php");
	$wmax = 800;
	$hmax = 800;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$db_file_name";
	    $resized_file = "images/$db_file_name";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExt);
	}
	$sql = "INSERT INTO foto(postimi, foto) VALUES ('$nid','$db_file_name')";
	$query = mysql_query($sql);
}
}
}
if($a2s123)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Produkti  u ndryshua me sukses!</b></style>";
echo "</p>";
}}
$nid=$_GET['post_id'];
if (isset($_POST['fshifotoslideshow'])) {
	$sql = mysql_query("Update products SET slide='' WHERE id='$nid'") or die (mysql_error());
       		    unlink("images/$_POST[fshi_slide]");
}
if (isset($_POST['fshifotoslideshowmobile'])) {
	$sql = mysql_query("Update products SET mobileslide='' WHERE id='$nid'") or die (mysql_error());
       		    unlink("images/$_POST[fshi_mobile_slide]");
}
if (isset($_POST['fshifotoslideshofoto_fb'])) {
	$sql = mysql_query("Update products SET foto_fb='' WHERE id='$nid'") or die (mysql_error());
       		    unlink("images/$_POST[fshi_foto_fb]");
}
if( $_GET['v']=='NdryshoProdukt'){
$qa = "SELECT * FROM products where id ='$nid'";
$rf = mysql_query($qa);
$row = mysql_fetch_assoc ($rf); ?>
<h2>Ndrysho nje Produkt</h2><br/>
<form action='' ENCTYPE="multipart/form-data" method='post'>
<input name="emri" type="text"  style=" width:50%; padding:10px; "value="<?php echo $row['product_name']; ?>" required></br>
									<select name="kategoria" style="width:50%; padding:10px;float: none;">
<?php $maki = mysql_query("SELECT DISTINCT category FROM products where category !='' order by category asc");
while($makina = mysql_fetch_assoc($maki)){  ?>  <option <?php if($row['category'] == $makina["category"]){ echo "selected"; } ?> value="<?php echo $makina['category']; ?>"><?php echo $makina['category']; ?></option><?php } ?>
								</select>
								<input name="kategoriere" type="text"  style=" width:50%; padding:10px; "placeholder="Ose shto kategori te re">
								<br/>
						<select name="nenkat" style="width:50%; padding:10px;float: none;">
							<option value ="">Zgjidh NenKategorine</option>
						<?php $maki = mysql_query("SELECT DISTINCT subcategory FROM products where subcategory !='' order by subcategory asc");
while($makina = mysql_fetch_assoc($maki)){  ?>  <option <?php if($row['subcategory'] == $makina["subcategory"]){ echo "selected"; } ?> value="<?php echo $makina['subcategory']; ?>"><?php echo $makina['subcategory']; ?></option><?php } ?>
								
									</select>
</br><input name="nenkategoriere" type="text"  style=" width:50%; padding:10px; "placeholder="Ose shto nenkategori te re">
						                     
		 <textarea name="pershkrim" style=" width:50%; height:200px;padding:10px; "> <?php echo $row['details']; ?></textarea>
	<input name="price" type="text"  style=" width:50%; padding:10px; "placeholder="Cmimi" value="<?php echo $row['price']; ?>">
	</br>	</br>
								<div class="chb_wrapper">
								<label class="check_label"> Shto Fotografi : </label></br>
								<input type="file" style=" width:50%; padding:10px; " name="pg"></br></br>
								<label class="check_label"> Slide : </label></br>
								<input type="file" style=" width:50%; padding:10px; " name="spg"></br>
<label class="check_label">Mobile Slide : </label></br>
								<input type="file" style=" width:50%; padding:10px; " name="mobile_slide"></br>
<label class="check_label">Foto FB : </label></br>
								<input type="file" style=" width:50%; padding:10px; " name="foto_fb">
								<input type="hidden" name="newpg" value='<?php echo $row['product_photo']; ?>'>
								<input type="hidden" name="snewpg" value='<?php echo $row['slide']; ?>'>
<input type="hidden" name="new_mobile_slide" value='<?php echo $row['mobileslide']; ?>'>
<input type="hidden" name="new_foto_fb" value='<?php echo $row['foto_fb']; ?>'>
								</br></br></br><label class="check_label">Produkt i Rekomanduar
								<input type="checkbox" <?php if($row['suggested'] == "1"){ echo "checked"; } ?> value="1" name="rek" style="width: 15px;"/></label></br></br></br><label class="check_label">Shfaq vetem brenda kategorise
								<input type="checkbox" <?php if($row['vetem_kategori'] == "1"){ echo "checked"; } ?> value="1" name="vetem_kategori" style="width: 15px;"/></label></br></br>
								<input type='submit' name='ndryshoprod' style='padding:10px; width:40%;'value='Ndrysho'></br></br>
								</form>
<?php
if (!empty($row['slide'])){				
echo "<div style='height:90px;float:left;padding-bottom:20px;overflow:hidden;margin-right:10px;'>
<img src='images/$row[slide]' style='height:90px; width:auto;'>
<form method='POST' style='position: absolute;' Action=''>
<input type='hidden' name='fshi_slide' value='$row[slide]'>
<button style='
    padding: 2px;
    line-height: 1;z-index:10;
    background: red;
    color: white;
    font-weight: bold;
    border-radius: 5px 5px 0 0;

'name='fshifotoslideshow'>Fshi Slide</button>
</form></div>";
}
?><?php
if (!empty($row['mobileslide'])){				
echo "<div style='height:90px;float:left;padding-bottom:20px;overflow:hidden;margin-right:10px;'>
<img src='images/$row[mobileslide]' style='height:90px; width:auto;'>
<form method='POST' style='position: absolute;' Action=''>
<input type='hidden' name='fshi_mobile_slide' value='$row[mobileslide]'>
<button style='
    padding: 2px;
    line-height: 1;z-index:10;
    background: red;
    color: white;
    font-weight: bold;
    border-radius: 5px 5px 0 0;

'name='fshifotoslideshowmobile'>Fshi Mobile Slide</button>
</form></div>";
}
	if (!empty($row['foto_fb'])){				
echo "<div style='height:90px;float:left;padding-bottom:20px;overflow:hidden;margin-right:10px;'>
<img src='images/$row[foto_fb]' style='height:90px; width:auto;'>
<form method='POST' style='position: absolute;' Action=''>
<input type='hidden' name='fshi_foto_fb' value='$row[foto_fb]'>
<button style='
    padding: 2px;
    line-height: 1;z-index:10;
    background: red;
    color: white;
    font-weight: bold;
    border-radius: 5px 5px 0 0;

'name='fshifotoslideshofoto_fb'>Fshi Foto FB</button>
</form></div>";
}
?></br></br>
									<?php } 
$asd= mysql_real_escape_string($_POST['asd']);
$asd2= mysql_real_escape_string($_POST['asd2']);
$asd3= mysql_real_escape_string($_POST['asd3']);
$persh= mysql_real_escape_string($_POST['persh']);
$persh2= mysql_real_escape_string($_POST['persh2']);
$persh3= mysql_real_escape_string($_POST['persh3']);
if(!empty($asd) && isset($_POST['rreth']))
{
$ss2="UPDATE permbledhje SET titulli='$asd',entitulli='$asd2',detitulli='$asd3', pershkrimi='$persh', enpershkrimi='$persh2', depershkrimi='$persh3' Where id='$nid'";
$as2 = mysql_query($ss2);
}
if($as2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Veprimi u krye me sukses!</b></style>";
echo "</p>";
}
									if($_GET['v']=='NdryshoRrethNesh'){
$qa = "SELECT * FROM permbledhje where id ='$nid'";
$rf = mysql_query($qa);
$row = mysql_fetch_assoc ($rf); 
 echo" <div style='width:80%;margin:0 auto;' class=contact-form><br/><h2>Ndrysho $row[titulli]</h2><br/><br/><form name=example enctype=multipart/form-data action='' method='POST'> 
									<input type='text' style='width:33%; padding:10px;' name='asd' value='$row[titulli]'>
									<input type='text' style='width:33%; padding:10px;' name='asd2' value='$row[entitulli]'>
									<input type='text' style='width:33%; padding:10px;' name='asd3' value='$row[detitulli]'></br>
									<textarea name='persh'  style=' height:200px; width:45.5%; padding:10px;'>$row[pershkrimi]</textarea>
									<textarea name='persh2'  style=' height:200px; width:45.5%; padding:10px;'>$row[enpershkrimi]</textarea>
									<textarea name='persh3'  style=' height:200px; width:45.5%; padding:10px;'>$row[depershkrimi]</textarea></br>
									<span><input type='submit' style=' width:25.5%; padding:10px;' value='Ndrysho' name='rreth'></span></form></div>";
									}
									
 if($_GET['v']=='Regjistro'){?> <br/><h2>Regjistro Nje Administrator</h2><br/>	<form method='POST' action=''>
								<div class="contact-form"> 	<input type='text' style=" width:45.5%; padding:10px; "name='emri' placeholder='Emri' required></br>
									<input type='text'style=" width:45.5%; padding:10px; " name='username' placeholder='Username' required></br>
									<input type='text' style=" width:45.5%; padding:10px; "name='pass123' placeholder='Password' required></br>
									<input type='text' style=" width:45.5%; padding:10px; "name='email' placeholder='E-Mail'></br>
									<span><input type="submit" style=" width:25.5%; padding:10px; "value="Regjistro"></span></form> </div>
									<?php } 
$emri= $_POST['emri'];
$username= $_POST['username'];$pass123= $_POST['pass123'];$email= $_POST['email'];
if( !empty($pass123) &&  !empty($username))
{
$pass1 = mysql_real_escape_string($pass123);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass1235 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
$s1232="INSERT INTO users VALUES('','$emri','$username','$pass1235','$email','','Admin','')";
$r1232 = mysql_query($s1232);
}
if($r1232)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;margin-top:-40px;'><b>Regjistrimi u krye me sukses !</b></style>";
echo "</p>";
}
else
{
echo mysql_error();
}
if(isset($_POST["pass1"])){
	$p =$_POST['pass1'];
	$p2 =$_POST['pass2'];
	// GET USER IP ADDRESS
    $ip = preg_replace('#[^0-9.]#', '', getenv('REMOTE_ADDR'));
	if( $p == ""  || $p2 == ""){
		echo "Ju duhet te plotesoni te 2-ja fushat per te ndryshuar Fjalekalimin";
    } if( $p != $p2){
		echo "Fjalekalimi juaj nuk perputhet";
    }else {
$pass1 = mysql_real_escape_string($p);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass123 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
		// Add user info into the database table for the main site table
            $_SESSION['userid'] = $profile_id ;
			$_SESSION['username'] = $u;
			$_SESSION['password'] = $pass123;
			setcookie("id", $profile_id, strtotime( '+30 days' ), "/", "", "", TRUE);
			setcookie("user", $u, strtotime( '+30 days' ), "/", "", "", TRUE);
    		setcookie("pass", $pass123, strtotime( '+30 days' ), "/", "", "", TRUE); 
		$sql = "UPDATE  users SET password='$pass123', ip='$ip', lastlogin=now() WHERE username = '$u' AND id = '$profile_id'";
		$query = mysqli_query($db_conx, $sql); 
		if($query)
		{
		echo "<p style='color:green; font-weight:bold; font-size:14px;'>Passwordi u ndryshua me sukses !</p>";}
	}
}
if( $_GET['v']=='NdryshoPass')

{echo'<form name="signupform" Action="" Method="post">
      <input name="pass1" style="width:50%; padding:10px;" type="password" placeholder="Vendos Fjalekalimin e ri" maxlength="200"></br>
    <input name="pass2" style="width:50%; padding:10px;"type="password" placeholder="Konfirmo Fjalekalimin e ri" maxlength="200"></br>
	 <input type="submit" style="width:30%; padding:7px;"name="submit" value="Ndrysho Fjalekalimin"></br>
	</form>';
									}
if( $_GET['v']=='NdryshoKontaktet'){
$titulli= mysql_real_escape_string($_POST['titulli']);
$pershkrimi= mysql_real_escape_string($_POST['pershkrimi']);
$foto= mysql_real_escape_string($_POST['foto']);
if(!empty($titulli) && isset($_POST['ndkon']))
{
 $ss2="UPDATE permbledhje SET pershkrimi='".$pershkrimi."',foto='".$foto."',titulli='".$titulli."' Where id='2'";
$as2 = mysql_query($ss2);
}
if($as2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Kontaktet u ndryshuan me sukses!</b></style>";
echo "</p>";
}
$qa12 = "SELECT titulli,foto,pershkrimi FROM permbledhje where id ='2'";
$rf12 = mysql_query($qa12);
$row12= mysql_fetch_assoc ($rf12); ?>
<form name="signupform" Action="" Method="post">
     <textarea name='titulli' style='width:500px; height:100px;'><?php echo $row12['titulli']; ?></textarea></br>
     <textarea name='pershkrimi' style='width:500px; height:100px;'><?php echo $row12['pershkrimi']; ?></textarea></br>
	 <textarea name='foto' style='width:500px; height:100px;'><?php echo $row12['foto']; ?></textarea></br>
	 <input type="submit" style="width:30%; padding:7px;" name="ndkon" value="Ndrysho Kontaktet"></br>
	</form>
									<?php } 
													if( $_GET['v']=='NdryshoPartner')
{
$titulli= $_POST['titulli'];
$pershkrimi= $_POST['pershkrimi'];
$foto= $_POST['foto'];
$asd123 = $_GET['partnerid'];
if(!empty($titulli) && isset($_POST['ndkon']))
{
$ss2='UPDATE permbledhje SET pershkrimi="'.$pershkrimi.'",titulli="'.$titulli.'" Where id="'.$asd123.'"';
$as2 = mysql_query($ss2);
}
if($as2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Partneri u ndryshua me sukses!</b></style>";
echo "</p>";
}
$qa12 = "SELECT titulli,foto,pershkrimi FROM permbledhje where id ='$asd123'";
$rf12 = mysql_query($qa12);
$row12= mysql_fetch_assoc ($rf12); ?>
<form name="signupform" Action="" Method="post">
     <input type='text' name='titulli' style='width:500px;' value='<?php echo $row12['titulli']; ?>'></br>
     <textarea name='pershkrimi' style='width:500px; height:100px;'><?php echo$row12['pershkrimi']; ?></textarea></br>
	 <input type="submit" style="width:30%; padding:7px;" name="ndkon" value="Ndrysho Partnerin"></br>
	</form>
									<?php }
												if( $_GET['v']=='NdryshoKeshille')
{
$titulli= $_POST['titulli'];
$pershkrimi= $_POST['pershkrimi'];
$foto= $_POST['foto'];
$asd123 = $_GET['keshilleid'];
if(!empty($titulli) && isset($_POST['ndkon']))
{
$ss2="UPDATE permbledhje SET pershkrimi='$pershkrimi',titulli='$titulli' Where id='$asd123'";
$as2 = mysql_query($ss2);
}
if($as2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Keshilla u ndryshua me sukses!</b></style>";
echo "</p>";
}
$qa12 = "SELECT titulli,foto,pershkrimi FROM permbledhje where id ='$asd123'";
$rf12 = mysql_query($qa12);
$row12= mysql_fetch_assoc ($rf12); ?>
<form name="signupform" Action="" Method="post">
     <input type='text' name='titulli' style='width:500px;' value='<?php echo $row12['titulli']; ?>'></br>
     <textarea name='pershkrimi' style='width:500px; height:100px;'><?php echo$row12['pershkrimi']; ?></textarea></br>
	 <input type="submit" style="width:30%; padding:7px;" name="ndkon" value="Ndrysho Keshillen"></br>
	</form>
									<?php }
								if($_GET['v'] =='FshiAdm'){
	if(isset($_POST['usid']) && isset($_POST['fshii']))
	{
	$usid=$_POST['usid'];
	$qa = "DELETE FROM users where id ='$usid' LIMIT 1";
    $rf = mysql_query($qa);
	if($rf)
	{
	echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Fshirja u krye me sukses!</b></style>";
echo "</p>";
	}
	}
	?>
<table border=1 width='98%'>
<tr style='padding:10px; text-align:center;border:1px solid black;'>
<td style='border:1px solid black;'>id</td>
<td style='border:1px solid black;'>Emri</td>
<td style='border:1px solid black;'>Username</td>
<td style='border:1px solid black;'>E-Mail</td>
<td style='border:1px solid black;'>Loguar per here te fundit</td>
<td style='border:1px solid black;'>Fshi</td></tr>
	<?php
$v3 = "select * from users where kategoria = 'Admin'";
$vr3 = mysql_query($v3);
while($vrow3 = mysql_fetch_array($vr3)){ ?>
<tr style='padding:10px; text-align:center;'>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['id']; ?></a></td>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['emri']; ?></a></td>
<td style='border:1px solid black;'><a href="#"><?php echo $vrow3['email']; ?></a></td>
<td style='border:1px solid black;'><a href="#"><?php echo $vrow3['username']; ?></a></td>
<td style='border:1px solid black;'><a href="#"><?php echo $vrow3['lastlogin']; ?></a></td>
<td style='border:1px solid black;'>
<form method='POST' action=''>
<input type='hidden' name='usid' value='<?php echo $vrow3['id']; ?>'>
<button style='width:100%;' name='fshii' class='button'>Fshi</button>
</form>
</td>
</tr>
	<?php }?>
</table><?php }
							if($_GET['v'] =='NdryshoFshiPartner'){
	if(isset($_POST['usidw']) && isset($_POST['fshiiw']))
	{
	$usidw=$_POST['usidw'];
	$qa = "DELETE FROM permbledhje where id ='$usidw' LIMIT 1";
    $rf = mysql_query($qa);
	if($rf)
	{
	echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Fshirja u krye me sukses!</b></style>";
echo "</p>";
	}
	}
	?>
<table border=1 width='98%'>
<tr style='padding:10px; text-align:center;border:1px solid black;'>
<td style='border:1px solid black;'>id</td>
<td style='border:1px solid black;'>Emri</td>
<td style='border:1px solid black;'>Pershkrimi</td>
<td style='border:1px solid black;'>Ndrysho / Fshi</td></tr>
	<?php
$v3 = "select * from permbledhje where kategoria = 'Partneret Tane'";
$vr3 = mysql_query($v3);
while($vrow3 = mysql_fetch_array($vr3)){ ?>
<tr style='padding:10px; text-align:center;'>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['id']; ?></a></td>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['titulli']; ?></a></td>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['pershkrimi']; ?></a></td>
<td style='border:1px solid black;'>
<a href="Admin.php?v=NdryshoPartner&partnerid=<?php echo $vrow3['id']; ?>&u=<?php echo $u; ?>">Ndrysho</a> - 
<form method='POST' action=''>
<input type='hidden' name='usidw' value='<?php echo $vrow3['id']; ?>'>
<button name='fshiiw' class='button'>Fshi</button>
</form>
</td>
</tr>
	<?php }?>
</table><?php } 		if($_GET['v'] =='NdryshoFshiKeshille'){
	if(isset($_POST['usidww']) && isset($_POST['fshiiww']))
	{
	$usidww=$_POST['usidww'];
	$qa = "DELETE FROM destinacione where id ='$usidww' LIMIT 1";
    $rf = mysql_query($qa);
	if($rf)
	{
	echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Fshirja u krye me sukses!</b></style>";
echo "</p>";
	}
	}
	?>
<table border=1 width='98%'>
<tr style='padding:10px; text-align:center;border:1px solid black;'>
<td style='border:1px solid black;'>id</td>
<td style='border:1px solid black;'>Qyteti</td>
<td style='border:1px solid black;'>Shteti</td>
<td style='border:1px solid black;'>Ndrysho / Fshi</td></tr>
	<?php
$v3 = "select * from destinacione";
$vr3 = mysql_query($v3);
while($vrow3 = mysql_fetch_array($vr3)){ ?>
<tr style='padding:10px; text-align:center;'>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['id']; ?></a></td>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['qyteti']; ?></a></td>
<td style='border:1px solid black;'> <a href="#"><?php echo $vrow3['shteti']; ?></a></td>
<td style='border:1px solid black;'>
<a href="Admin.php?v=NdryshoKeshille&keshilleid=<?php echo $vrow3['id']; ?>&u=<?php echo $u; ?>">Ndrysho</a> - 
<form method='POST' action=''>
<input type='hidden' name='usidww' value='<?php echo $vrow3['id']; ?>'>
<button name='fshiiww' class='button'>Fshi</button>
</form>
</td>
</tr>
	<?php }?>
</table><?php }?>
<?php if($_GET['v'] =='Partner'){
$titulli=$_POST['titulli'];
$artikulli=$_POST['artikulli'];
$profil=$_FILES["photo"]["name"];
$kaboomt = explode(".", $profil);
$fileExtt = end($kaboomt);
$foto= date("DMjGisY")."".rand(1000,9999).".".$fileExtt; 
if(isset($_POST['submitkesh']))
{
$ssss12="INSERT INTO permbledhje VALUES('','$titulli','$artikulli','$foto','Partneret Tane',now(),'$u')";
move_uploaded_file($_FILES["photo"]["tmp_name"],"images/" . $foto);
$rsssqs2 = mysql_query($ssss12);
if($rsssqs2)
{
echo "<p>";
echo "<span style='color:green'><b>Partneri u shtua me sukses !</b></style>";
echo "</p>";
}
else
{
echo mysql_error();
}
}
?>
<form name="example" enctype="multipart/form-data" action="" method="POST"> </br>
     <input name="titulli" type="text"  style="padding:10px; width: 50%;"placeholder="Titulli" required></br>
			
		 <textarea name="artikulli" style=" width: 50%; padding:10px; height:200px; " placeholder="Artikulli"></textarea></br></br>
								</br>
<label class="check_label"> Shto Fotografi : </label>
								<input type="file" name="photo"></br>
								</br></br>
<input type="submit" value="Shto" style=" width:45.5%; padding:5px; font-weight:bold; font-size:15px; " name="submitkesh">
</form></br></br><?php } ?></br></br></br></br>
<a href="Admin.php?v=ShtoProdukt&u=<?php echo $u; ?>" style='color: #FFF;' class="button1">Shto Nje Bilete</a>
<a href="Admin.php?v=NdryshoFshiProdukt&u=<?php echo $u; ?>" style='color: #FFF;'class="button1">Ndrysho / Fshi Nje Bilete</a>
<a href="Admin.php?v=PostoKeshille&u=<?php echo $u; ?>"style='color: #FFF;' class="button1">Shto Nje Destinacion</a>
<a href="Admin.php?v=NdryshoFshiKeshille&u=<?php echo $u; ?>" style='color: #FFF;'class="button1">Ndrysho / Fshi Nje Destinacion</a>

<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=1"style='color: #FFF;' class="button1">Ndrysho Rreth Nesh</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=4"style='color: #FFF;' class="button1">Rregullat</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=5"style='color: #FFF;' class="button1">Termat & Privatesia</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=3"style='color: #FFF;' class="button1">Imprint</a>
<a href="Admin.php?v=NdryshoKontaktet&u=<?php echo $u; ?>" class="button1"style='color: #FFF;'>Ndrysho Kontaktet</a>
<a href="Admin.php?v=Regjistro&u=<?php echo $u; ?>" class="button1"style='color: #FFF;'>Shto nje Admin</a>
<a href="Admin.php?v=FshiAdm&u=<?php echo $u; ?>" class="button1"style='color: #FFF;'>Fshi nje Admin</a>
<a href="Admin.php?v=NdryshoPass&u=<?php echo $u; ?>" class="button1"style='color: #FFF;'>Ndrysho Fjalekalimin</a>
<a href="logout.php" style='width:80.3%'class="button1"style='color: #FFF;'>Dil</a>
</br></br></br></br>
</div>
<div style="clear:both; padding-bottom:1px"></div></span></div>
<div style="clear:both"></div>
</div></div>

<?php include_once("footer.php"); ?>
</div> 
</div> 
</div>
</body></html>
<?php if($_GET["v"] != "NdryshoKontaktet"){ ?><script src="//tinymce.cachefly.net/4.2/tinymce.min.js"></script>
<script type="text/javascript">
tinymce.init({
    selector: "textarea",
    theme: "modern",
    plugins: [
        "advlist autolink lists link image charmap print preview hr anchor pagebreak",
        "searchreplace wordcount visualblocks visualchars code fullscreen",
        "insertdatetime media nonbreaking save table contextmenu directionality",
        "emoticons template paste textcolor colorpicker textpattern imagetools"
    ],
    toolbar1: "insertfile undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link image",
    toolbar2: "print preview media | forecolor backcolor emoticons",
    image_advtab: true,
    templates: [
        {title: 'Test template 1', content: 'Test 1'},
        {title: 'Test template 2', content: 'Test 2'}
    ]
});
</script> <?php } ?>

Batal

⬅ Naik ke FerTours 14 item

Nama	Tipe	Ukuran	Diubah	Aksi
🐘Admin.php	php	39.8 KB	2019-03-09 02:28	✏️ Edit 👁️ View
🐘about.php	php	1.3 KB	2019-03-14 01:54	✏️ Edit 👁️ View
🐘captcha.php	php	763 B	2019-03-09 02:28	✏️ Edit 👁️ View
🐘contact.php	php	6.8 KB	2019-03-14 01:50	✏️ Edit 👁️ View
🐘destinacione.php	php	2.5 KB	2019-03-14 01:39	✏️ Edit 👁️ View
🐘destinacione_details.php	php	8.5 KB	2019-03-14 00:28	✏️ Edit 👁️ View
📄error_log	file	10.7 MB	2019-10-01 00:40	✏️ Edit 👁️ View
🐘footer.php	php	6.2 KB	2019-03-14 01:36	✏️ Edit 👁️ View
🐘galeria.php	php	3.3 KB	2019-03-14 01:52	✏️ Edit 👁️ View
🐘header.php	php	7.5 KB	2019-03-16 16:03	✏️ Edit 👁️ View
🐘index.php	php	5.8 KB	2019-03-16 16:05	✏️ Edit 👁️ View
🐘login.php	php	5.6 KB	2019-03-09 02:28	✏️ Edit 👁️ View
🐘rezervo.php	php	9 KB	2019-03-14 01:48	✏️ Edit 👁️ View
🐘search.php	php	12.1 KB	2019-03-14 01:51	✏️ Edit 👁️ View