[Summary view] [Print] [Text view]

   1  <?php
   2  if ($script_name = basename($HTTP_SERVER_VARS["SCRIPT_NAME"]) == "add_document.php" ) {
   3   print "<meta http-equiv=\"refresh\" content=\"0; URL=../index.php\">";
   4   exit;
   5  }
   6  if ($_FILES != "") {
   7      extract($_FILES, EXTR_POST);
   8  }
   9  if ($binFile != "") {
  10      extract($binFile, EXTR_POST);
  11  }
  12  if ($action == "upload") {
  13   if (is_file($tmp_name)) {
  14    $data = addslashes(fread(fopen($tmp_name, "r"), filesize($tmp_name)));
  15    $strDescription = addslashes(nl2br($txtDescription));
  16    $name = addslashes(nl2br(str_replace(' ','_',$name)));
  17    $sql = mysql_query("INSERT INTO tbl_files
  18                       (description, bin_data, filename, filesize, filetype, view)
  19                       VALUES ('$strDescription', '$data', '$name', '$size', '$type', '$view')");
  20    print "<h3>Thank you. The file $name was successfully added.</h3>";
  21   }
  22  } else if ($action == 'update') {
  23   if ($delete == 'Y') {
  24    mysql_query("delete from tbl_files where filename='$filename'");
  25    print "<b>$filename Deleted</b><br>";
  26   } else {
  27    $description = addslashes(nl2br($description));
  28    mysql_query("update tbl_files set view='$view', description='$description' where filename='$filename'");
  29    print "<b>$filename Updated</b><br>";
  30   }
  31   
  32  }
  33  
  34  print "<h2>Current Documents</h2>
  35   <table class=white border=1>
  36    <tr>
  37     <td>File Name</td>
  38     <td>Description</td>
  39     <td>Show</td>
  40     <td>Delete</td>
  41    </tr>";
  42  
  43  $sql = mysql_query("SELECT * FROM tbl_files ORDER BY filename");
  44  
  45  while ($data = mysql_fetch_assoc($sql)) {
  46    $key = $data['filename'];
  47    $file_name = str_replace('_',' ',$data['filename']);
  48    $description = stripslashes($data['description']);
  49    $view = '';
  50    if ($data['view'] == 'Y') {
  51     $view = 'checked';
  52    }
  53    print "<tr><td><a href=./download_document.php?file=$key>$file_name</a></td>
  54    <td><form method=post>
  55     <input type=hidden name=action value=update>
  56     <input type=hidden name=modify_document value=Y>
  57     <input type=hidden name=filename value='$key'>
  58     <TEXTAREA NAME=description ROWS=02 COLS=30>$description</TEXTAREA>
  59    </td>
  60    <td>
  61     <input type=checkbox name=view value=Y $view>
  62    </td>
  63    <td align=center>
  64     <input type=checkbox name=delete value=Y>
  65    </td>
  66    <td align=center>
  67     <input type=submit name=submit value=Submit>
  68    </form></td></tr>\n";
  69  }
  70  mysql_free_result($sql);
  71  
  72  print "\n</table>\n<h2><center>Add Document</h2>";
  73  
  74  print "  <FORM METHOD=post ACTION=./index.php ENCTYPE='multipart/form-data'>
  75   <INPUT TYPE=hidden NAME=modify_document VALUE=Y>
  76   <INPUT TYPE=hidden NAME=MAX_FILE_SIZE VALUE=1000000>
  77   <INPUT TYPE=hidden NAME=action VALUE=upload>
  78   <TABLE >
  79    <TR>
  80    <TD>Description of File: </TD>
  81    <TD><TEXTAREA NAME=txtDescription ROWS=05 COLS=50></TEXTAREA></TD>
  82   </TR>
  83   <TR>
  84    <TD>Viewable: <input type=checkbox name=view checked value=Y></TD>
  85   </TR>
  86   <TR>
  87    <TD>File: </TD>
  88    <TD><INPUT TYPE=file NAME=binFile SIZE=40></TD>
  89   </TR>
  90   <TR>
  91    <TD COLSPAN=2 align=center><INPUT TYPE=submit VALUE='Upload File'></TD>
  92   </TR>
  93  </TABLE>
  94  </FORM>";
  95  
  96  
  97  ?>