source: trunk/admin/modules/Elezioni/ele_widget.php@ 325

<?php
/************************************************************************/
/* Eleonline - Raccolta e diffusione dei dati elettorali                */
/* by Roberto Gigli & Luciano Apolito                                   */
/* http://www.eleonline.it                                              */
/* info@eleonline.it  luciano@aniene.net rgigli@libero.it               */
/************************************************************************/
/* Modulo gruppo                                                        */
/* Amministrazione                                                      */
/************************************************************************/
if (!defined('ADMIN_FILE')) {
    die ("You can't access this file directly...");
}

// Offset - visualizza il numero di elementi per pagina
$offset=5;
global $dbi;
$aid=$_SESSION['aid'];
$prefix=$_SESSION['prefix'];
$currentlang=$_SESSION['lang'];
$param=strtolower($_SERVER['REQUEST_METHOD']) == 'get' ? $_GET : $_POST;
$id_cons_gen=$param['id_cons_gen'];     
$perms=ChiSei($id_cons_gen);
if ($perms<32) die("Non hai i permessi per inserire dati, o non hai scelto la consultazione!");

$id_comune=$_SESSION['id_comune'];
#$res = mysql_query("SELECT t1.tipo_cons,t2.id_cons FROM ".$prefix."_ele_consultazione as t1, ".$prefix."_ele_cons_comune as t2 where t1.id_cons_gen=t2.id_cons_gen and t2.id_cons_gen='$id_cons_gen' and t2.id_comune='$id_comune' " , $dbi);

include("modules/Elezioni/funzionidata.php");
include("modules/Elezioni/ele.php");
$row=cur_cons();
$tipo_cons=$row[0];$id_cons=$row[1];

if (isset($param['do'])) get_magic_quotes_gpc() ? $do=$param['do']:$do=addslashes($param['do']); else $do='';
if (isset($param['min'])) $min=intval($param['min']); else $min=0;
if (isset($param['ok'])) get_magic_quotes_gpc() ? $ok=$param['ok']:$ok=addslashes($param['ok']); else $ok='';
if (isset($param['idw'])) $idw=intval($param['idw']); else $idw='';
if (isset($param['nome_file'])) get_magic_quotes_gpc() ? 
$nome_file=$param['nome_file']:$nome_file=addslashes($param['nome_file']); else $nome_file='';
if (isset($param['titolo'])) get_magic_quotes_gpc() ? 
$titolo=$param['titolo']:$titolo=addslashes($param['titolo']); else $titolo='';
if (isset($param['pos_or'])) $pos_or=intval($param['pos_or']); else $pos_or='';
if (isset($param['pos_ver'])) $pos_ver=intval($param['pos_ver']); else $pos_ver='';
if (isset($param['attivo'])) $attivo=intval($param['attivo']); else $attivo='';


############# controllo dei widget
        make_db_widget(); // crea tabella se non esiste
    $tlist='';
        $path = "../client/modules/Elezioni/blocchi";
        $handle=opendir($path);
        while ($file = readdir($handle)) {
                   $tlist .= "$file ";
        }

        closedir($handle);
        $tlist = explode(" ", $tlist);
        sort($tlist);

        for ($i=0; $i < sizeof($tlist); $i++) {
                $ext = substr($tlist[$i], strrpos( $tlist[$i], '.' ) + 1 );

                if($ext=="php"){ // verifica estensione php     
                    $files=$tlist[$i];
                   
                    $sql = "SELECT id FROM ".$prefix."_ele_widget where nome_file='$files'";
                        $sth = $dbi->prepare("$sql");
                        $sth->execute();
                        $row = $sth->fetch(PDO::FETCH_BOTH);
                    $idwid=$row[0];
                    $id = intval($idwid);

                    if (empty($id)) { // inserisce widget db se non esiste
                        $sql="insert into ".$prefix."_ele_widget (id,nome_file,titolo,pos_or,pos_ver, attivo) values ( NULL,'$files', '$files','1','','0')";
                        $sth = $dbi->prepare("$sql");
                        $sth->execute();                  }
                  
                  




        
                }   

        }
 
                  # se non esiste cancella dal db
                  $sql="SELECT * FROM ".$prefix."_ele_widget";
                        $sth = $dbi->prepare("$sql");
                        $sth->execute();        
                        $row2 = $sth->fetchAll();
                        foreach($row2 as $row){
                        $esi=0;
                        for ($i=0; $i < sizeof($tlist); $i++) {
                              $files=$tlist[$i];
                              if($row['nome_file']==$files) $esi=1;
                        }
                        if($esi!=1){
                            $sql="DELETE FROM ".$prefix."_ele_widget WHERE id = '$row[id]'";
                                $sth = $dbi->prepare("$sql");
                                $sth->execute();        
                      }
                }



/******************************************************/
/*Funzione di visualizzazione globale                 */
/*****************************************************/
        function all() {
                global $tipo_cons,$param,$currentlang, $bgcolor1, $bgcolor2, $prefix, $prefix2, $dbi, $offset, $min, $id_cons,$id_cons_gen,$id_comune,$do,$tema;

        
        $sql="SELECT * FROM ".$prefix."_ele_widget order by pos_or,pos_ver asc";
        $sth = $dbi->prepare("$sql");
        $sth->execute();        
        $row2 = $sth->fetchAll();       
        


        
        echo "<br><table border=\"0\" width=\"100%\">";
        echo "<tr bgcolor=\"$bgcolor2\"><td align=\"center\"><b>"._CONFIGWIDGET."</b></td></tr></table>";
        foreach($row2 as $row) {
            echo "<form name=\"widget\" enctype=\"multipart/form-data\" method=\"post\" action=\"admin.php\">";
            echo "<input type=\"hidden\" name=\"do\" value=\"update\">";
            echo "<input type=\"hidden\" name=\"op\" value=\"widget\">";
            echo "<table style=\"border:0.5px solid; width:100%; color: #000000;\"><tr >";
            $idw = intval($row['id']);
            echo "<input type=\"hidden\" name=\"idw\" value=\"$idw\">";
            $titolo=$row['titolo'];
            $nome_file=$row['nome_file'];
            $pos_or = intval($row['pos_or']);
            $pos_ver = intval($row['pos_ver']);
            $attivo = intval($row['attivo']);
            echo "<td><b> Titolo:</b> <input type=\"text\" name=\"titolo\" value=\"".$titolo."\"></td><td>";
            $sel= ($row['pos_or']==1) ? "selected":"";
            echo "<b>Posizione :</b><select name=\"pos_or\"><option value=\"0\">Sx<option value=\"1\" $sel>Dx</select>
            </td><td>
            
            <b>Altezza :</b><input type=\"text\" size=\"4\" name=\"pos_ver\" value=\"".$pos_ver."\"></td><td>";
            echo "<input type=\"hidden\" name=\"id_cons_gen\" value=\"$id_cons_gen\">";
           
            
            
            $sel= ($row['attivo']==1) ? "selected":"";
            echo "<b>"._ATTIVO."</b></td><td><select name=\"attivo\"><option value=\"0\">No<option value=\"1\" $sel>Si</select></td>";
            echo "<td><input type=\"submit\" name=\"add\" value=\""._MODIFY."\"></td>";
            echo "</tr></table>";
            echo "</form>";


        } // while
        
        
        

        }

//***********************************************************
//Funzione di inserimento e gestione dei gruppi
//************************************************************

function confcons() {
        
        global $id_cons_gen, $prefix, $dbi,$idw,$titolo,$pos_or,$pos_ver,$attivo;
        
        
        $aid=$_SESSION['aid'];
        $perms=ChiSei($id_cons_gen);
        if ($perms >128) {
                                
                $sql="update  ".$prefix."_ele_widget set titolo='$titolo', pos_or='$pos_or', pos_ver='$pos_ver', attivo='$attivo' where id='$idw'";
                $sth = $dbi->prepare("$sql");
                $sth->execute();

                Header("Location: admin.php?id_cons_gen=$id_cons_gen&op=widget");

        }
}

if ($do and $do="modify")
        confcons();

ele();

all();
echo"</td></tr></table>";
include("footer.php");

//*********************************************************************
//Funzione crea db se non esiste
//**********************************************************************

function make_db_widget(){
global $dbi,$prefix;
$sql="CREATE TABLE IF NOT EXISTS ".$prefix."_ele_widget (
  `id` int(10) NOT NULL auto_increment,
  `nome_file` varchar(255) NOT NULL default '',
  `titolo` varchar(255) NOT NULL default '',
  `pos_or` int(1) NOT NULL default '1',
  `pos_ver` int(3) NOT NULL default '0',
 `attivo` int(1) NOT NULL default '0',
  PRIMARY KEY  (`id`)
)";
$sth = $dbi->prepare("$sql");
$sth->execute();


}


?>