File Manager

✏️ Edit File: /var/www/vhosts/nursoft.al/public_html/LaMokaCaffe/Admin.php

<?php
ob_start(); 
define('INCLUDE_CHECK',1);
include "lamokaphp/dbconnect.php";
error_reporting(0);
include_once('lamoka.php');
$u="";
$nid= preg_replace("/[^0-9]/", "", $_GET['post_id']);
// Make sure the _GET username is set, and sanitize it
if(isset($_GET["u"])){
	$u = preg_replace('#[^a-z0-9]#i', '', $_GET['u']);
} else {    
}
// Select the member from the users table
$sql = "SELECT * FROM admin WHERE username='$u' LIMIT 1";
$user_query = mysqli_query($db_conx, $sql);
// Now make sure that user exists in the table
$numrows = mysqli_num_rows($user_query);
if($numrows < 1){
 
}
if($u == $log_username && $user_ok == true){
	$isOwner = "yes";

}
else
{
$isOwner == "no";
}
while ($row = mysqli_fetch_array($user_query, MYSQLI_ASSOC)) 
{
$profile_id = $row["id"];	
$emri= $row["emri"];	
}
						if(isset($_POST['email']))
					{
					$regg=mysql_real_escape_string($_POST['email']);
$v21 = "INSERT INTO registed VALUES('','$regg',now(),'it')";
$vr21 = mysql_query($v21);
if($vr21)
{
echo 'È successo registrarti';
exit();
}else{echo 'La registrazione non è fatto!';
exit();}
					}$basename=basename(__FILE__);
?><!doctype html>




<html class="no-js" lang="">

<head>

</head>
<body>

<header id="header" class="header">
			<div class="header-inner">
				<div class="container">
					
					<div class="header-top">

<div class="row">
							<div class="col-sm-4 header-left col-xs-6">
								
							</div>
							<div style="text-align: right;" class="col-sm-4 header-right col-sm-push-4  col-xs-6">
									<a href="#"><img alt=""
									src="images/sq_al.png"></a>
									<a href="en/<?php echo $basename; ?>?kategoria=<?php echo $kategoria; ?>&subcategory=<?php echo $subcategory; ?>"><img alt=""
									src="images/default.png"></a>
									
							</div>
							
							
							<div id="logo" class="col-sm-4 logo col-sm-pull-4">
								<a href="index.html"><img alt="The Retation"
									src="images/logo.png"></a>
							</div>
							
						</div>
					</div>

</div>
				
				
					<nav id="primary-navigation" class="navbar" role="navigation">
						<div class="navbar-inner">
							<div class="navbar-header">
								<button type="button" class="navbar-toggle collapsed"
									data-toggle="collapse" data-target="#navbar">
									<span class="sr-only">Toggle navigation</span> <span
										class="icon-bar"></span> <span class="icon-bar"></span> <span
										class="icon-bar"></span>
								</button>
								<h3 class="navbar-brand">Menu</h3>
							</div>
							<div id="navbar" class="navbar-collapse collapse">
								<ul class="nav navbar-nav">
									<li <?php if($basename=="index.php"){ ?>class="active" <?php } ?>><a href="index.php">La Moka</a></li>
									<li <?php if($basename=="about.php"){ ?>class="active" <?php } ?>><a href="about.php">Rreth Nesh</a></li>
									<li <?php if($basename=="posts.php" && $kategoria=="Kafe"){ ?>class="active" <?php } ?>><a href="posts.php?kategoria=Kafe">Kafe</a>
										<div class="mega-menu">
											<div class="mega-menu-inner">
												<div class="mega-cols">
													<ul class="sub-menu">
														<li><a href="posts.php?kategoria=Kafe&subcategory=Kafe Bari">Kafe Bari</a>
														<li><a href="posts.php?kategoria=Kafe&subcategory=Kafe Familjare">Kafe Familjare</a>
													</ul>
												</div>

</div>
										</div>
									</li>
									<li <?php if($basename=="posts.php" && $kategoria=="Espresso"){ ?>class="active" <?php } ?>><a href="posts.php?kategoria=Espresso">Makineri Express</a>
										<div class="dropdown">
											<ul class="sub-menu">
												<li><a href="posts.php?kategoria=Espresso&subcategory=Automatike">Automatike</a></li>
												<li><a href="posts.php?kategoria=Espresso&subcategory=Semi">Gjysëm - Automatike</a></li>
												<li><a href="posts.php?kategoria=Espresso&subcategory=Leva">Levë</a></li>
											</ul>
										</div>
									</li>
									<li <?php if($basename=="HowToBuy.php"){ ?>class="active" <?php } ?>><a href="HowToBuy.php">Si te Blej?!</a>
								
									</li>
									<li <?php if($basename=="contact.php"){ ?>class="active" <?php } ?>><a href="contact.php">Kontakt</a></li>
								</ul>
							</div>
							
						</div>
					</nav>
					
			</div>

</header>

<div id="main-content" class="main-content">
			<div class="page-header">
				<figure class="post-thumbnail">
					<img alt="" src="images/galleries.jpg">
				</figure>
				<h1 class="title">
					<span class="line-title">Paneli i administrimit<i class="fa">&#xf111;</i></span>
				</h1>
			</div>
			<div class="page-content">
				<div id="galleries" class="galleries galleries-v2">
					<div class="container">
												<div class="row">
							<section id="latest" class="section latest" style="padding-top: 0 !important;"
				>	
				
				
<?php 
if( $_GET['v']=='ShtoProdukt')
{
$emri= mysql_real_escape_string($_POST['emri']);
$nome= mysql_real_escape_string($_POST['nome']);
$description= mysql_real_escape_string($_POST['description']);
$description2= mysql_real_escape_string($_POST['description2']);
$kategoria= $_POST['kategoria'];
$subcategory= $_POST['subcategory'];
$speciali= $_POST['speciali'];
$cmimi= $_POST['cmimi'];
$profil=$_FILES["photoa"]["name"];
$fileTmpLoc=$_FILES["photoa"]["tmp_name"];
$kaboomt = explode(".", $profil);
$fileExtt = end($kaboomt);
$foto= date("DMjGisY")."".rand(1000,9999).".".$fileExtt; 
	list($width, $height) = getimagesize($fileTmpLoc);
$moveResult = move_uploaded_file($fileTmpLoc, "images/$foto");
				include_once("lamokaphp/image_resize.php");
	$wmax = 1200;
	$hmax = 1200;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto";
	    $resized_file = "images/$foto";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExt);
	}
if(isset($_POST['shtoprod']))
{
$ss2="INSERT INTO `paketa`(`titulli`, `pershkrimi`, `kategoria`, `subcategory`, `data`,`cmimi`,`postuesi`,`status`,`oferte`, `foto`, `title`, `article`) VALUES 
('$emri','$description','$kategoria','$subcategory',now(),'$cmimi','$profile_id','1','$speciali','$foto','$nome','$description2')";
$as2 = mysql_query($ss2);
$mysqlid=mysql_insert_id();
if($_FILES['photo']['size'][0] == 0 && $_FILES['photo']['tmp_name'][0] == '')
{echo"";}else{
if (isset($_FILES["photo"]["name"]) && isset($mysqlid)){
foreach($_FILES['photo']['tmp_name'] as $key => $tmp_name )
{
	$fileName =  $key.$_FILES["photo"]["name"] [$key];
    $fileTmpLoc = $_FILES["photo"]["tmp_name"][$key];
	$fileType = $_FILES["photo"]["type"][$key];
	$fileSize = $_FILES["photo"]["size"][$key];
	$fileErrorMsg = $_FILES["photo"]["error"];
	$kaboom = explode(".", $fileName);
	$fileExt = end($kaboom);
	$db_file_name = date("DMjGisY")."".rand(1000,9999).".".$fileExt; // WedFeb272120452013RAND.jpg
	list($width, $height) = getimagesize($fileTmpLoc);
	$moveResult = move_uploaded_file($fileTmpLoc, "images/$db_file_name");
				include_once("lamokaphp/image_resize.php");
	$wmax = 1200;
	$hmax = 1200;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$db_file_name";
	    $resized_file = "images/$db_file_name";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExt);
	}
	$sql = "INSERT INTO foto(postimi, foto, data) VALUES ('$mysqlid','$db_file_name',now())";
	$query = mysql_query($sql);
}
}
}
if($as2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Produkti u shtua me sukses!</b></style>";
echo "</p>";
}} ?><script src="//tinymce.cachefly.net/4.2/tinymce.min.js"></script>
<script type="text/javascript">
tinymce.init({
    selector: "textarea",
    theme: "modern",
    plugins: [
        "advlist autolink lists link image charmap print preview hr anchor pagebreak",
        "searchreplace wordcount visualblocks visualchars code fullscreen",
        "insertdatetime media nonbreaking save table contextmenu directionality",
        "emoticons template paste textcolor colorpicker textpattern imagetools"
    ],
    toolbar1: "insertfile undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link image",
    toolbar2: "print preview media | forecolor backcolor emoticons",
    image_advtab: true,
    templates: [
        {title: 'Test template 1', content: 'Test 1'},
        {title: 'Test template 2', content: 'Test 2'}
    ]
});
</script>
<form name="signupform" Action="" style="text-align:left;" enctype="multipart/form-data" Method="POST">
  <input type="text" style='width:49.7%; float:left;' name="emri" placeholder="Titulli">
  <input type="text" style='width:49.7%; float:right;' name="nome" placeholder="Title">
  </br>
  <style>
  #mceu_21{width:49.5%;float:left;}
  #mceu_66{width:49.5%; float:right;}
  </style>

<textarea name='description' style='height:100px; width:49.5%; float:left;' placeholder="Pershkrimi"></textarea>
  <textarea name='description2' style='height:100px; width:49.5%; float:right;' placeholder="Description"></textarea>
  <select id="slct1" onchange="populate(this.id,'slct2')" name="kategoria" style='width:100%' >
  <option value="">--- Kategoria ---</option>
  <option value="Kafe">Kafe</option>
  <option value="Espresso">Makineri Ekspresi</option>
  </select>
  <select name='subcategory' id="slct2" style='width:100%'>
            <option value=""> --- Nen Kategoria --- </option>
          </select>
  <input type="text" style='width:100%' name="cmimi" placeholder="Cmimi"> </br>
  </br>
    <label class="check_label"> Produkt i vacant: </label>
  <input type="checkbox" name="speciali" value="1"> </br>
  <label class="check_label"> Foto Reklamuese : </label>
  <input type="file" name="photoa" accept="image/*"> 
  </br><label class="check_label"> Foto te tjera : </label>
  <input type='file' name='photo[]' multiple accept="image/*"></br>
  <input type="submit" style="width:30%; padding:7px;color: #FFF;"  class="button1"name="shtoprod" value="Shto Produktin"></br> </br>
  </br>
  </br>
  </form> <?php } 
if( $_GET['v']=='NdryshoFshiProdukt')
{
		if($_GET["kategoria"] =='Slide') 
		{
if($_GET["update"] != "true")
{
		$titulli=mysql_real_escape_string($_POST['titulli']);
			$title=mysql_real_escape_string($_POST['title']);
			$description=mysql_real_escape_string($_POST['description']);
			$description2=mysql_real_escape_string($_POST['description2']);
				$profil=$_FILES["phpp"]["name"];
$fileTmpLocw=$_FILES["phpp"]["tmp_name"];
$kaboomtw = explode(".", $profil);
$fileExttw = end($kaboomtw);
$foto= date("DMjGisY")."".rand(1000,9999).".".$fileExttw; 
	list($width, $height) = getimagesize($fileTmpLocw);
$moveResultw = move_uploaded_file($fileTmpLocw, "images/$foto");
				include_once("lamokaphp/image_resize.php");
	$wmax = 2000;
	$hmax = 2000;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto";
	    $resized_file = "images/$foto";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExttw);
	}if($_FILES['phpp1']['size'][0] == 0 && $_FILES['phpp1']['tmp_name'][0] == '')
	{$foto2='';}else{
					$profil1=$_FILES["phpp1"]["name"];
$fileTmpLocw1=$_FILES["phpp1"]["tmp_name"];
$kaboomtw1 = explode(".", $profil1);
$fileExttw1 = end($kaboomtw1);
$foto1= date("DMjGisY")."".rand(1000,9999).".".$fileExttw1; 
	list($width, $height) = getimagesize($fileTmpLocw1);
$moveResultw1 = move_uploaded_file($fileTmpLocw1, "images/$foto1");
				include_once("lamokaphp/image_resize.php");
	$wmax = 400;
	$hmax = 400;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto1";
	    $resized_file = "images/$foto1";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExttw1);
	}}
	if($_FILES['phpp2']['size'][0] == 0 && $_FILES['phpp2']['tmp_name'][0] == '')
	{$foto2='';}else{
$profil2=$_FILES["phpp2"]["name"];
$fileTmpLocw2=$_FILES["phpp2"]["tmp_name"];
$kaboomtw2 = explode(".", $profil2);
$fileExttw2 = end($kaboomtw2);
$foto2= date("DMjGisY")."".rand(1000,9999).".".$fileExttw2; 
list($width, $height) = getimagesize($fileTmpLocw2);
$moveResultw2 = move_uploaded_file($fileTmpLocw2, "images/$foto2");
include_once("lamokaphp/image_resize.php");
	$wmax = 400;
	$hmax = 400;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto2";
	    $resized_file = "images/$foto2";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExttw2);
	}}
		if(isset($_POST['shtoa'])){
 $sql = "INSERT INTO permbledhje(titulli,pershkrimi,title,article,foto,exp2,exp3, kategoria, data,postuesi) VALUES 
	('$titulli','$description','$title','$description2','$foto','$foto2','$foto1','Slide',now(),'$profile_id')";
	$query = mysql_query($sql);
	if($query)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Produkti u shtua me sukses!</b></style>";
echo "</p>";
}
}
		echo "<form action='' enctype='multipart/form-data' Method='POST'> 
		<div style='width:20%;margin:0 auto;'><input type=file required name=phpp accept=image/*></div> 
		<div style='float:left;'><input type=file name=phpp1 accept=image/*></div> 
		<div style='float:right;'><input type=file name=phpp2 accept=image/*></div> </br></br>
		<input type='text' name='titulli' placeholder='Titulli' required style='width:49.5%; float:left;padding:10px;'>
		<input type='text' name='title' placeholder='Title' required style='width:49.5%;float:right;padding:10px;'>
		<textarea name='description' style='height:100px; width:49.5%; float:left;' placeholder=Pershkrimi></textarea>
        <textarea name='description2' style='height:100px; width:49.5%; float:right;' placeholder=Description></textarea>
 <input type=submit style=width:30%; padding:7px;color: #FFF;  class=button1 name=shtoa value=Shto></form></br></br>"; 
}
elseif($_GET["update"] == "true")
{
	$titulli=mysql_real_escape_string($_POST['titulli']);
	$title=mysql_real_escape_string($_POST['title']);
	$description=mysql_real_escape_string($_POST['description']);
	$description2=mysql_real_escape_string($_POST['description2']);
if($_FILES['phpp']['size'][0] == 0 && $_FILES['phpp']['tmp_name'][0] == '')
{$foto=$_POST['exphp'];}else{
$profil=$_FILES["phpp"]["name"];
$fileTmpLocw=$_FILES["phpp"]["tmp_name"];
$kaboomtw = explode(".", $profil);
$fileExttw = end($kaboomtw);
$foto= date("DMjGisY")."".rand(1000,9999).".".$fileExttw; 
	list($width, $height) = getimagesize($fileTmpLocw);
$moveResultw = move_uploaded_file($fileTmpLocw, "images/$foto");
				include_once("lamokaphp/image_resize.php");
	$wmax = 2000;
	$hmax = 2000;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto";
	    $resized_file = "images/$foto";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExttw);
	}
	}
	if($_FILES['phpp1']['size'][0] == 0 && $_FILES['phpp1']['tmp_name'][0] == '')
{$foto1=$_POST['exphp2'];}else{
$profil1=$_FILES["phpp1"]["name"];
$fileTmpLocw1=$_FILES["phpp1"]["tmp_name"];
$kaboomtw1 = explode(".", $profil1);
$fileExttw1 = end($kaboomtw1);
$foto1= date("DMjGisY")."".rand(1000,9999).".".$fileExttw1; 
	list($width, $height) = getimagesize($fileTmpLocw1);
$moveResultw1 = move_uploaded_file($fileTmpLocw1, "images/$foto1");
				include_once("lamokaphp/image_resize.php");
	$wmax = 400;
	$hmax = 400;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto1";
	    $resized_file = "images/$foto1";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExttw1);
	}}if($_FILES['phpp2']['size'][0] == 0 && $_FILES['phpp2']['tmp_name'][0] == '')
{$foto2=$_POST['exp3'];}else{
					$profil2=$_FILES["phpp2"]["name"];
$fileTmpLocw2=$_FILES["phpp2"]["tmp_name"];
$kaboomtw2 = explode(".", $profil2);
$fileExttw2 = end($kaboomtw2);
$foto2= date("DMjGisY")."".rand(1000,9999).".".$fileExttw2; 
	list($width, $height) = getimagesize($fileTmpLocw2);
$moveResultw2 = move_uploaded_file($fileTmpLocw2, "images/$foto2");
				include_once("lamokaphp/image_resize.php");
	$wmax = 400;
	$hmax = 400;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto2";
	    $resized_file = "images/$foto2";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExttw2);
	}}
		if(isset($_POST['nshtoa'])){
 $sql = "UPDATE permbledhje SET titulli='$titulli',pershkrimi='$description',title='$title',article='$description2',foto='$foto',exp2='$foto2',exp3='$foto1' where id = '$nid'";
	$query = mysql_query($sql);
	if($query)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Ndryshimi u krye me sukses!</b></style>";
echo "</p>";
}
}
 $qa="Select * FROM permbledhje where id='$nid'";
 $rf = mysql_query($qa);
$row = mysql_fetch_assoc ($rf);
 	echo "<form action='' enctype='multipart/form-data' Method='POST'> 
		<div style='width:20%;margin:0 auto;'>
		<input type=file name=phpp accept=image/*></div> 
		<input type='hidden' name='exphp' value='$row[foto]'>
		<div style='float:left;'>
		<input type=file name=phpp1 accept=image/*>
		<input type='hidden' name='exphp2' value='$row[exp2]'>
		</div> 
		<div style='float:right;'><input type=file name=phpp2 accept=image/*>
		<input type='hidden' name='exp3' value='$row[exp3]'>
		</div> </br></br>
		<input type='text' name='titulli' value='$row[titulli]' style='width:49.5%; float:left;padding:10px;'>
		<input type='text' name='title' value='$row[title]' style='width:49.5%;float:right;padding:10px;'>
		<textarea name='description' style='height:100px; width:49.5%; float:left;'>$row[pershkrimi]</textarea>
        <textarea name='description2' style='height:100px; width:49.5%; float:right;'>$row[article]</textarea>
 <input type=submit style=width:30%; padding:7px;color: #FFF;  class=button1 name=nshtoa value=Ndrysho></form></br></br>"; 
}
} 
if($_GET["kategoria"]=="Produkte")
{	
$q = "SELECT id,titulli,foto FROM paketa order by id desc";
}elseif($_GET["kategoria"]=="Slide")
{
$q = "SELECT id,titulli,foto FROM permbledhje where kategoria='$_GET[kategoria]' order by id desc";
}
$r = mysql_query($q);

if (isset($_GET['deleteid'])) {
	echo '<h2 style="font-weight:bold;">Jeni i sigurt qe doni ta fshini kete produkt ? &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a style=color:red; href="Admin.php?yesdelete=' . $_GET['deleteid'] . '&u='.$u.'&v=NdryshoFshiProdukt&kategoria='.$_GET['kategoria'].'">Po</a> | <a href="Admin.php?u='.$u.'&v=NdryshoFshiProdukt&kategoria='.$_GET['kategoria'].'">Jo</a></h2>';
	exit();
}
if (isset($_GET['yesdelete'])) 
{
	$id_to_delete = $_GET['yesdelete'];
	if($_GET["kategoria"]=="Produkte")
{		$sql = mysql_query("DELETE FROM paketa WHERE id='$id_to_delete' LIMIT 1") or die (mysql_error());
 
	$sql = mysql_query("DELETE FROM foto WHERE postimi='$id_to_delete'") or die (mysql_error());
}
	if($_GET["kategoria"]=="Slide")
{
$sql = mysql_query("DELETE FROM permbledhje WHERE id='$id_to_delete' LIMIT 1") or die (mysql_error());	
}
}
if($r)
{echo"
<table border=1 width=100% style='text-align:center; a{margin-top:-10px;}'>";echo "<tr>";
    echo" <td>Foto</td>";
	  echo"<td>Nome</td><td>Ndrysho / ";echo" Fshi </td></tr>";
while($row=mysql_fetch_array($r))
{
//header("Content-type: text/html");
//$type = "Content-type: ".$row['aphototype'];
$i=$row['foto'];
// Delete Item Question to Admin, and Delete Product if they choose

echo "<tr>";
	echo "<td width=7%>";

echo "<img src='images/$i' width=100% height=50/>";
		echo "</td>";
echo "<td>";
echo "<h6>";
echo "<a style='margin-bottom:70px; position:relative;' href='details.php?pid=$row[id]$row[id_post]' class=''> $row[titulli]</a>";
echo '</h6>';
echo "</td>";
echo "<td>";echo "<a style='margin-bottom:70px; position:relative;' href='Admin.php?post_id=$row[id]&u=$u&";if($_GET["kategoria"] =='Slide') 
		{echo "v=NdryshoFshiProdukt&kategoria=$_GET[kategoria]&update=true";}else{echo "v=NdryshoProdukt&kategoria=$_GET[kategoria]";} echo"' 
		class='ndrysho'> Ndrysho </a> &nbsp; &nbsp; &nbsp; &nbsp; ";echo"
<a href='Admin.php?deleteid=$row[id]&u=$u&v=NdryshoFshiProdukt&kategoria=$_GET[kategoria]' class='fshi'>Fshi</a>";
echo "</td>";
echo "</tr>";	
}
	echo "</table></br></br>";
}	
else
{
echo mysql_error();
}}
$emri= mysql_real_escape_string($_POST['titulli']);
$nome= mysql_real_escape_string($_POST['title']);
$description= mysql_real_escape_string($_POST['description']);
$description2= mysql_real_escape_string($_POST['description2']);
$kategoria= $_POST['kategoria'];
$subcategory= $_POST['subcategory'];
$speciali= $_POST['speciali'];
$cmimi= $_POST['cmimi'];
if($_FILES['newpg']['size'][0] == 0 && $_FILES['newpg']['tmp_name'][0] == '')
{

$foto= $_POST['pg'];
}
else
{

$profil=$_FILES["newpg"]["name"];
$fileTmpLocw=$_FILES["newpg"]["tmp_name"];
$kaboomtw = explode(".", $profil);
$fileExttw = end($kaboomtw);
$foto= date("DMjGisY")."".rand(1000,9999).".".$fileExttw; 
	list($width, $height) = getimagesize($fileTmpLocw);
$moveResultw = move_uploaded_file($fileTmpLocw, "images/$foto");
				include_once("lamokaphp/image_resize.php");
	$wmax = 1200;
	$hmax = 1200;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$foto";
	    $resized_file = "images/$foto";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExtw);
	}
}
if(isset($_POST['ndrysho']))
{
$ss2="UPDATE `paketa` set `titulli`='$emri', `pershkrimi`='$description', `kategoria`='$kategoria', `subcategory`='$subcategory',oferte='$speciali',cmimi='$cmimi',
 `foto`='$foto', `title`='$nome', `article`='$description2' where id='$nid'";
$as2 = mysql_query($ss2);

if($_FILES['phph']['size'][0] == 0 && $_FILES['phph']['tmp_name'][0] == '')
{echo"";}else{
if (isset($_FILES["phph"]["name"]) && isset($nid)){
foreach($_FILES['phph']['tmp_name'] as $key => $tmp_name )
{
	$fileName =  $key.$_FILES["phph"]["name"] [$key];
    $fileTmpLoc = $_FILES["phph"]["tmp_name"][$key];
	$fileType = $_FILES["phph"]["type"][$key];
	$fileSize = $_FILES["phph"]["size"][$key];
	$fileErrorMsg = $_FILES["phph"]["error"];
	$kaboom = explode(".", $fileName);
	$fileExt = end($kaboom);
	$db_file_name = date("DMjGisY")."".rand(1000,9999).".".$fileExt; // WedFeb272120452013RAND.jpg
	list($width, $height) = getimagesize($fileTmpLoc);
	$moveResult = move_uploaded_file($fileTmpLoc, "images/$db_file_name");
				include_once("lamokaphp/image_resize.php");
	$wmax = 1200;
	$hmax = 1200;
	if($width > $wmax || $height > $hmax){
		$target_file = "images/$db_file_name";
	    $resized_file = "images/$db_file_name";
		img_resize($target_file, $resized_file, $wmax, $hmax, $fileExt);
	}
	$sql = "INSERT INTO foto(postimi, foto, data) VALUES ('$nid','$db_file_name',now())";
	$query = mysql_query($sql);
}
}
}
if($asa2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Ndryshimi u krye me sukses!</b></style>";
echo "</p>";
}}
if( $_GET['v']=='NdryshoProdukt'){
	if($_GET["kategoria"]=="Produkte")
{	
$qa = "select * from paketa where id ='$nid'";
}
$rf = mysql_query($qa);
$row = mysql_fetch_assoc ($rf); ?>
<script src="//tinymce.cachefly.net/4.2/tinymce.min.js"></script>
<script type="text/javascript">
tinymce.init({
    selector: "textarea",
    theme: "modern",
    plugins: [
        "advlist autolink lists link image charmap print preview hr anchor pagebreak",
        "searchreplace wordcount visualblocks visualchars code fullscreen",
        "insertdatetime media nonbreaking save table contextmenu directionality",
        "emoticons template paste textcolor colorpicker textpattern imagetools"
    ],
    toolbar1: "insertfile undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link image",
    toolbar2: "print preview media | forecolor backcolor emoticons",
    image_advtab: true,
    templates: [
        {title: 'Test template 1', content: 'Test 1'},
        {title: 'Test template 2', content: 'Test 2'}
    ]
});
</script>
<form name="signupform" Action="" style="text-align:left;" enctype="multipart/form-data" Method="POST">
  <input type="text" style='width:49.7%; float:left;' name="titulli" value="<?php echo $row["titulli"]; ?>">
  <input type="text" style='width:49.7%; float:right;' name="title" value="<?php echo $row["title"]; ?>">
  </br>
  <style>
  #mceu_21{width:49.5%;float:left;}
  #mceu_66{width:49.5%; float:right;}
  </style>
  <textarea name='description' style='height:100px; width:49.5%; float:left;' placeholder="Pershkrimi"><?php echo $row["pershkrimi"]; ?></textarea>
  <textarea name='description2' style='height:100px; width:49.5%; float:right;' placeholder="Description"><?php echo $row["article"]; ?></textarea>
  <select id="slct1" onchange="populate(this.id,'slct2')" name="kategoria" style='width:100%' >
  <option value="<?php echo $row["kategoria"]; ?>"><?php echo $row["kategoria"]; ?></option>
  <option value="Kafe">Kafe</option>
  <option value="Espresso">Makineri Ekspresi</option>
  </select>
  <select name='subcategory' id="slct2" style='width:100%'>
            <option value="<?php echo $row["subcategory"]; ?>"> <?php echo $row["subcategory"]; ?></option>
          </select>
  <input type="text" style='width:100%' name="cmimi" value="<?php echo $row["cmimi"]; ?>"> 
   <input type="hidden" style='width:100%' name="pg" value="<?php echo $row["foto"]; ?>"> 
  </br>
    <label class="check_label"> Produkt Special : </label>
  <input type="checkbox" name="speciali" <?php if($row["oferte"]!='0'){ echo "checked"; } ?> value="1"> </br>
  <label class="check_label"> Foto Reklamuese : </label>
  <input type="file" name="newpg" accept="image/*"> 
  </br><label class="check_label"> Foto Te tjera: </label>
  <input type='file' name='phph[]' multiple accept="image/*"></br>
  <input type="submit" style="width:30%; padding:7px;color: #FFF;"  class="button1"name="ndrysho" value="Ndrysho"></br> </br>
  </br>
  </br>
  </form> <div style='overflow:hidden;'><?php 
if (isset($_POST['fshiidd'])) {
	$sql = mysql_query("DELETE FROM foto WHERE id='$_POST[fshiidd]' LIMIT 1") or die (mysql_error());
 $pictodelete = ("images/$_POST[fotofshi]");
    if (file_exists($pictodelete)) {
       		    unlink($pictodelete);
    }
}				
		$qa123 = "SELECT * FROM foto where postimi ='$nid'";
		$rf123 = mysql_query($qa123);
		while($row2=mysql_fetch_array($rf123))
{
echo "<div style='width:110px;float:left;padding-bottom:20px;overflow:hidden;'>
<img src='images/$row2[foto]' width=100 height=100>
<form method='POST' Action=''>
<input name='fshiidd' type='hidden' value=".$row2['id'].">
<input name='fotofshi' type='hidden' value=".$row2['foto'].">
<button name='Fshi'>Fshi</button>
</form></div>";
} ?>
       </div> 
									<?php } ?>
<?php 	$asd2=mysql_real_escape_string($_POST['asd2']);
$tit= mysql_real_escape_string($_POST['asd3']);
if(isset($_POST['rreth']))
{
$ss2="UPDATE permbledhje SET titulli='$tit',pershkrimi='$asd2' Where id='$nid'";
$as2 = mysql_query($ss2);

if($as2)
{
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Ndryshimi u krye me sukses!</b></style>";
}
}
									if( $_GET['v']=='NdryshoRrethNesh'){
$qa = "SELECT pershkrimi,titulli FROM permbledhje where id ='$nid'";
$rf = mysql_query($qa);
$row = mysql_fetch_assoc ($rf); 
 ?>
 <script src="//tinymce.cachefly.net/4.2/tinymce.min.js"></script>
<script type="text/javascript">
tinymce.init({
    selector: "textarea",
    theme: "modern",
    plugins: [
        "advlist autolink lists link image charmap print preview hr anchor pagebreak",
        "searchreplace wordcount visualblocks visualchars code fullscreen",
        "insertdatetime media nonbreaking save table contextmenu directionality",
        "emoticons template paste textcolor colorpicker textpattern imagetools"
    ],
    toolbar1: "insertfile undo redo | styleselect | bold italic | alignleft aligncenter alignright alignjustify | bullist numlist outdent indent | link image",
    toolbar2: "print preview media | forecolor backcolor emoticons",
    image_advtab: true,
    templates: [
        {title: 'Test template 1', content: 'Test 1'},
        {title: 'Test template 2', content: 'Test 2'}
    ]
});
</script>
<?php echo" <div class=contact-form><br/>
 <form name=example enctype=multipart/form-data action='' method='POST'> 
									<textarea name='asd3'  style=' height:200px; width:47.5%;float:right; padding:10px;' required=''>$row[titulli]</textarea>
									<textarea name='asd2'  style=' height:200px; width:47.5%;float:right; padding:10px;' required=''>$row[pershkrimi]</textarea></br>
									<span><input type='submit' style=' width:25.5%; padding:10px;' class='button1' value='Ndrysho'
									name='rreth'></span></form></div></br></br></br>";
									} if( $_GET['v']=='NdryshoKontaktet')
{
$titulli= $_POST['titulli'];
$pershkrimi= $_POST['pershkrimi'];
$foto= $_POST['foto'];
if(!empty($titulli) && isset($_POST['ndkon']))
{
$ss2='UPDATE permbledhje SET pershkrimi="'.$pershkrimi.'",foto="'.$foto.'",titulli="'.$titulli.'" Where id="2"';
$as2 = mysql_query($ss2);
if($as2)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Kontaktet u ndryshuan me sukses!</b></style>";
echo "</p>";
}}
$qa12 = "SELECT titulli,foto,pershkrimi FROM permbledhje where id ='2'";
$rf12 = mysql_query($qa12);
$row12= mysql_fetch_assoc ($rf12); ?>
<form name="signupform" Action="" Method="post">
     <textarea name='titulli' style='width:49.5%; float:left;'><?php echo $row12['titulli']; ?></textarea>
     <textarea name='pershkrimi' style='width:49.5%; float:right;;'><?php echo$row12['pershkrimi']; ?></textarea>
	 <textarea name='foto' style='width:100%;'><?php echo $row12['foto']; ?></textarea></br>
	 <input type="submit" style="width:30%; padding:7px;" name="ndkon" class='button1' value="Ndrysho Kontaktet"></br>
	</form></br></br></br>
									<?php }  if($_GET['v']=='Regjistro'){ 
$emri= $_POST['emri'];
$username= $_POST['username'];
$pass123= $_POST['pass123'];
$email= $_POST['email2'];
if( !empty($pass123) &&  !empty($username))
{
$pass1 = mysql_real_escape_string($pass123);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass1235 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
$s1232="INSERT INTO admin VALUES('','$emri','$email','$username','$pass1235','','')";
$r1232 = mysql_query($s1232);

if($r1232)
{
echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;margin-top:-40px;'><b>Regjistrimi u krye me sukes!</b></style>";
echo "</p>";
}
else
{
echo mysql_error();
}}?> <br/><br/>	<form method='POST' action=''>
								<div class="contact-form"> 	<input type='text' style=" width:45.5%; padding:10px; "name='emri' placeholder='Emri' required></br>
									<input type='text'style=" width:45.5%; padding:10px; " name='username' placeholder='Username' required></br>
									<input type='text' style=" width:45.5%; padding:10px; "name='pass123' placeholder='Password' required></br>
									<input type='text' style=" width:45.5%; padding:10px; "name='email2' placeholder='E-Mail'></br>
									<span><input type="submit" style=" width:25.5%; padding:10px; "value="Shto"></span></form> </div>
								</br></br></br>	<?php } 
if(isset($_POST["pass1"])){
	$p =$_POST['pass1'];
	$p2 =$_POST['pass2'];
	// GET USER IP ADDRESS
    $ip = preg_replace('#[^0-9.]#', '', getenv('REMOTE_ADDR'));
	if( $p == ""  || $p2 == ""){
		echo "Ju duhet ti plotesoni te dyja fushat per te ndryshuar passwordin tuaj";
    } if( $p != $p2){
		echo "Passwordi juaj nuk perputhet";
    }else {
$pass1 = mysql_real_escape_string($p);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass123 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
		// Add user info into the database table for the main site table
            $_SESSION['userid'] = $profile_id ;
			$_SESSION['username'] = $u;
			$_SESSION['password'] = $pass123;
			setcookie("id", $profile_id, strtotime( '+30 days' ), "/", "", "", TRUE);
			setcookie("user", $u, strtotime( '+30 days' ), "/", "", "", TRUE);
    		setcookie("pass", $pass123, strtotime( '+30 days' ), "/", "", "", TRUE); 
		$sql = "UPDATE  admin SET password='$pass123', ip='$ip', lastlogin=now() WHERE username = '$u' AND id = '$profile_id'";
		$query = mysqli_query($db_conx, $sql); 
		if($query)
		{
		echo "<p style='color:green; font-weight:bold; font-size:14px;'>Passwordi u ndryshua me sukses!</p>";}
	}
}
if( $_GET['v']=='NdryshoPass' &&  $_COOKIE['pass'] =='true')

{echo"<p style='color:green; font-size:16px; font-weight:bold;'>Passwordi u konfirmua me sukses!</p>";
	echo'<form name="signupform" Action="" Method="post">
    <input name="pass1" style="width:50%; padding:10px;" type="password" placeholder="Passwordi i ri" maxlength="200"></br>
    <input name="pass2" style="width:50%; padding:10px;"type="password" placeholder="Konfirmo Passwordin Tend" maxlength="200"></br>
	<input type="submit" style="width:30%; padding:7px;"name="submit" value="Ndrysho"></br></br></br>
	</form>';
									}if($_GET['v'] =='FshiAdm'){
	if(isset($_POST['usid']) && isset($_POST['fshii']))
	{
	$usid=$_POST['usid'];
	$qa = "DELETE FROM admin where id ='$usid' LIMIT 1";
    $rf = mysql_query($qa);
	if($rf)
	{
	echo "<p>";
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Fshirja u krye me sukses!</b></style>";
echo "</p>";
	}
	}
	?>
<table border=1 width='98%'>
<tr style='padding:10px; text-align:center;border:1px solid black;'>
<td style='border:1px solid black;'>id</td>
<td style='border:1px solid black;'>Emri</td>
<td style='border:1px solid black;'>Username</td>
<td style='border:1px solid black;'>E-Mail</td>
<td style='border:1px solid black;'>Hera e fundit ne sistem</td>
<td style='border:1px solid black;'>Fshi</td></tr>
	<?php
$v3 = "select * from admin";
$vr3 = mysql_query($v3);
while($vrow3 = mysql_fetch_array($vr3)){ ?>
<tr style='padding:10px; text-align:center;'>
<td style='border:1px solid black;'><?php echo $vrow3['id']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['emri']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['email']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['username']; ?></td>
<td style='border:1px solid black;'><?php echo $vrow3['lastlogin']; ?></td>
<td style='border:1px solid black;'>
<form method='POST' action=''>
<input type='hidden' name='usid' value='<?php echo $vrow3['id']; ?>'>
<button style='width:100%;' name='fshii' class='button'>Fshi</button>
</form>
</td>
</tr>
	<?php }?>
</table></br></br><?php }
if(isset($_POST["pass"])){
$p2 =$_POST['pass'];
$pass1 = mysql_real_escape_string($p2);
$pass2 = md5($pass1);
$pass3 = sha1($pass2);
$pass4 = crypt($pass3, st);
$pass123 = preg_replace('#[^a-z0-9]#i', '', $pass4); 
if($log_password == $pass123)
{
 setcookie( 'pass', 'true', time()+1800);
	header("location: Admin.php?u=$u&v=NdryshoPass");
    exit();	
}else
{
echo "</br></br></br><p style='color:red; font-size:16px; font-weight:bold;'>Fjalekalimi juaj nuk perputhet!</p>";
}
} if($_GET['v'] == 'pass') { ?>	
<form method='POST' id='a' action='' style='margin: 0 auto;width: 70%;'></br></br></br>
<p style='color:green; font-size:16px; font-weight:bold;'>Ju lutem konfirmoni fjalekalimin tuaj!</p>
          
		<input type='text' name='pass'style='padding: 5px;
margin-bottom: 3px;
width: 100%;
margin: 0 auto;' placeholder='la password' required></br>
		<input type='hidden' name='veprimi' value='<?php echo $_GET['v']; ?>'>
		<button class='button' style='padding:2px; color:green;width:20%;'> Konfirmo </button>
		</form></br></br></br>
		
<?php } if( $_GET['v']=='NdryshoFshiFoto')
{
if(isset($_POST["ndryshoslide"]))	
 {
$link=mysql_real_escape_string($_POST['link']);
$ss2="UPDATE permbledhje SET titulli='$link' Where id='30'";
$as2 = mysql_query($ss2);

if($as2)
{
echo "<span style='color:green; font-weight:bold; font-size:13px;'><b>Ndryshimi u krye me sukses!</b></span>";
}
}	
 $qa12 = "SELECT titulli FROM permbledhje where id ='30'";
$asdrrr=mysql_query($qa12);
$slide=mysql_fetch_array($asdrrr);
	echo "<form action='' enctype='multipart/form-data' Method='POST'> 
		 <input type='text' name='link' value='$slide[titulli]' style='width:40%;padding:10px;'></br></br>
 <input type=submit style=width:30%; padding:7px;color: #FFF;  class=button1 name=ndryshoslide value=Ndrysho></form></br></br>"; 
	
}?>
				
				 <a href="Admin.php?v=ShtoProdukt&u=<?php echo $u; ?>&kategoria=Produkte" style='color: #FFF;' class="button1">Shto Nje Produkt</a>
<a href="Admin.php?v=NdryshoFshiProdukt&u=<?php echo $u; ?>&kategoria=Produkte" style='color: #FFF;'class="button1">Ndrysho / Fshi Produkt</a>
<a href="Admin.php?v=NdryshoFshiProdukt&u=<?php echo $u; ?>&kategoria=Slide" style='color: #FFF;' class="button1">Shto / Ndrysho / Fshi Foto</a>
<a href="Admin.php?v=NdryshoKontaktet&u=<?php echo $u; ?>" style='color: #FFF;' class="button1">Ndrysho Kontaktet</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=1" style='color: #FFF;' class="button1">Ndrysho Rreth Nesh</a>
<a href="Admin.php?v=NdryshoRrethNesh&u=<?php echo $u; ?>&post_id=7" style='color: #FFF;' class="button1">Ndrysho Si Te Blej</a>
<a href="Admin.php?v=Regjistro&u=<?php echo $u; ?>" class="button1" style='color: #FFF;'>Shto Nje Admin</a>
<a href="Admin.php?v=FshiAdm&u=<?php echo $u; ?>" class="button1" style='color: #FFF;'>Fshi Nje Admin</a>
<a href="Admin.php?v=pass&u=<?php echo $u; ?>" class="button1" style='color: #FFF; margin-left: -3px;'>Ndrysho Passwordin</a>
<a href="logout.php" class="button1"style='color: #FFF;'>DIL</a><style>
.button1 { width:40%; text-align:center;
	color: #FFF;
	font-family: 'Roboto Condensed', sans-serif;
	font-size:1.1em;
	font-weight: normal;
	padding: 10px 30px;
	text-transform: uppercase;
	background:#ABC492;
	display: inline-block;
	margin: 0.1em 0 0;
	-webkit-transition: all 0.3s ease-out;
	-moz-transition: all 0.3s ease-out;
	-ms-transition: all 0.3s ease-out;
	-o-transition: all 0.3s ease-out;
	text-decoration:none;
	transition: all 0.3s ease-out;
}
.button1:hover{
	background:#333;
}
				
			</section>
						</div>
					</div>
				</div>
			</div>
		</div>

<footer id="footer" style="background-color:white;">
			<div class="footer-info">
				<div class="container">
					<div class="row">
						<div class="col-sm-3">
							<aside class="widget">
					<h3 class="title">Rreth Nesh</h3>
								<div class="widget-content contact-us">
									<p><?php echo substr(strip_tags($rowa['pershkrimi']),0,200); ?>...</p>
									
								</div>
							</aside>
						</div>
						<div class="col-sm-3">
							<aside class="widget">
								<h3 class="title">Kontakt</h3>
								<div class="widget-content">

<p><i class="fa">&#xf0e0;</i> <span> <?php echo $email; ?></span></p>
									<p><i class="fa">&#xf095;</i> <span> <?php echo $cel; ?></span></p>
									<p><i class="fa">&#xf015;</i> <span> <?php echo $adresa; ?></span></p>
								</div>
							</aside>
						</div>
						<div class="col-sm-3">
							<aside class="widget">
							
								<h3 class="title"><?php	if(isset($_POST['email2']))
					{
					$regg=mysql_real_escape_string($_POST['email2']);
					$name=mysql_real_escape_string($_POST['name']);
$v21 = "INSERT INTO registed VALUES('','$name','$regg',now())";
$vr21 = mysql_query($v21);
if($vr21)
{
echo '<span style="color:red;font-size:16px;">Ju u regjistruat me sukses !</span>';
}else{echo '<span style="color:red;font-size:16px;">Regjistrimi juaj nuk u krye!</span>';}
}else{echo 'Leter Njoftim';}

?></h3>
								<div class="widget-content">

<form method="post" action="">
								
										<p>
											<input type="text" value="" name="name" placeholder="Emri"
												required="required" class="name">
										</p>
										<p>
											<input type="email" value="" name="email2" placeholder="Email"
												required="required" class="email">
										</p>
										<p>
												<button class="hvr-shutter-out-horizontal">Regjistrohu</button>
										</p>
									</form>
								</div>
							</aside>
						</div>
						<div class="col-sm-3">
							<aside class="widget">
								<h3 class="title">Na Ndiqni ne:</h3>
								<div class="widget-content">
									<ul class="social">
										<li><a href="#" class="hvr-rectangle-out" target="_blank"><i class="fa">&#xf09a;</i></a></li>
										<li><a href="#" class="hvr-rectangle-out" target="_blank"><i class="fa">&#xf099;</i></a></li>
										<li><a href="#" class="hvr-rectangle-out" target="_blank"><i class="fa">&#xf0d5;</i></a></li>
										<li><a href="#" class="hvr-rectangle-out" target="_blank"><i class="fa">&#xf09e;</i></a>
										</li>
									</ul>
								</div>
							</aside>
						</div>
					</div>
				</div>
			</div>
			<div class="copyright">
				<div class="container">
					<p>
						Copyright &copy; 2015 <a href="http://nursoftalbania.com">NurSoft</a>. All Rights Reserved.
					</p>
				</div>
			</div>

</footer>
	</div>

</body>
</html>

Batal

⬅ Naik ke public_html 15 item

Nama	Tipe	Ukuran	Diubah	Aksi
📁.well-known	dir	—	2024-09-08 18:17	📂 Buka
📁cgi-bin	dir	—	2019-01-09 19:45	📂 Buka
📁css	dir	—	2017-12-26 16:41	📂 Buka
📁en	dir	—	2024-02-04 23:15	📂 Buka
📁images	dir	—	2017-12-26 16:41	📂 Buka
📁js	dir	—	2017-12-26 16:41	📂 Buka
📁lamokaphp	dir	—	2017-12-27 01:05	📂 Buka
📁sq	dir	—	2023-04-12 02:23	📂 Buka
📄.htaccess	htaccess	322 B	2024-08-29 23:36	✏️ Edit 👁️ View
🐘Admin.php	php	44.2 KB	2017-12-26 16:41	✏️ Edit 👁️ View
🐘captcha.php	php	741 B	2019-03-18 15:29	✏️ Edit 👁️ View
📄error_log	file	430.1 KB	2019-10-02 13:57	✏️ Edit 👁️ View
🐘index.php	php	1.4 KB	2018-01-03 23:10	✏️ Edit 👁️ View
🐘login.php	php	12.2 KB	2017-12-26 16:41	✏️ Edit 👁️ View
🐘logout.php	php	638 B	2017-12-26 16:41	✏️ Edit 👁️ View