Changeset 256 for trunk/admin/modules/Elezioni/ele_configurazione.php

Timestamp:

Jan 16, 2019, 7:06:35 PM (5 years ago)

Author:

roby

Message:

 

File:

• trunk/admin/modules/Elezioni/ele_configurazione.php (modified) (9 diffs)

trunk/admin/modules/Elezioni/ele_configurazione.php

@@ -15 +15 @@
 // Offset - visualizza il numero di elementi per pagina
 $offset=5;
-
+global $dbi;
 $aid=$_SESSION['aid'];
-$dbi=$_SESSION['dbi'];
 $prefix=$_SESSION['prefix'];
 $currentlang=$_SESSION['lang'];
@@ -26 +25 @@
 
 $id_comune=$_SESSION['id_comune'];
+
+include("modules/Elezioni/funzionidata.php");
+include("modules/Elezioni/ele.php");
 $row=cur_cons();
 $tipo_cons=$row[0];$id_cons=$row[1];
-
-include("modules/Elezioni/funzionidata.php");
-include("modules/Elezioni/ele.php");
 
 if (isset($param['do'])) get_magic_quotes_gpc() ? $do=$param['do']:$do=addslashes($param['do']); else $do='';
@@ -73 +72 @@
         echo "<form name=\"gruppo2\" enctype=\"multipart/form-data\" method=\"post\" action=\"admin.php\">"
         ."<input type=\"hidden\" name=\"op\" value=\"confconsiglio\">";
-        $resl = mysql_query("SELECT * FROM ".$prefix."_config", $dbi);
-        $gru=mysql_fetch_array($resl);
+        $sql="SELECT * FROM ".$prefix."_config";
+        $sth = $dbi->prepare("$sql");
+        $sth->execute();        
+        $gru = $sth->fetch(PDO::FETCH_BOTH);    
         echo "<input type=\"hidden\" name=\"do\" value=\"update\">";
         echo "<input type=\"hidden\" name=\"op\" value=\"configurazione\">";
@@ -89 +90 @@
 
         
-        $resmod = mysql_query("SELECT tema FROM ".$prefix."_ele_temi order by tema", $dbi);
-
+        $sql="SELECT tema FROM ".$prefix."_ele_temi order by tema";
+        $sth = $dbi->prepare("$sql");
+        $sth->execute();        
+        $row = $sth->fetchAll();
         echo "<td><select name=\"tema2\">\n";
-
-        while (list($desc) = mysql_fetch_row($resmod)){
+        foreach($row as $com) {$desc=$com[0];
                         if (!$gru['tema']) $gru['tema']=$desc;
                                 $sel= ($gru['tema']==$desc) ? "selected":"";
@@ -117 +119 @@
         echo"<td><b>"._SITENAME."</b></td><td><input type=\"text\" name=\"sitename\" value=\"".$gru['sitename']."\"></td></tr>";
 
-        $resmod = mysql_query("SELECT id_comune,descrizione FROM ".$prefix."_ele_comuni order by descrizione", $dbi);
+        $sql = "SELECT id_comune,descrizione FROM ".$prefix."_ele_comuni order by descrizione";
+        $sth = $dbi->prepare("$sql");
+        $sth->execute();        
+        $row = $sth->fetchAll();
         echo "<tr><td><b>"._SITEISTAT."</b></td>";
         echo "<td><select name=\"siteistat\"><option value=\"\">";
-        while (list($id_comune2,$desc) = mysql_fetch_row($resmod)){
+        foreach($row as $com)
+        {$id_comune2=$com[0];$desc=$com[1];
                         if (!$gru['siteistat']) $gru['siteistat']=$id_comune2;
                         $sel= ($gru['siteistat']==$id_comune2) ? "selected":"";
@@ -187 +193 @@
 #displayerrors='$displayerrors', 
 #per il momento non Ú usato: , site_logo='$site_logo'
-                $result = mysql_query("update  ".$prefix."_config set sitename='$sitename', testata='$stemmablob', nome_testata='$stemmanome', blocco='$blocco', multicomune='$multicomune', language='$language2', siteistat='$siteistat', adminmail='$adminmail', siteurl='$siteurl', flash='$flash2', tema='$tema2',gkey='$gkey',ed_user='$ed_user',googlemaps='$googlemaps',editor='$editor',tema_on='$tema_on'", $dbi) || die("Errore di aggiornamento dei dati!".mysql_error());
+        $sql = "update  ".$prefix."_config set sitename='$sitename', testata='$stemmablob', nome_testata='$stemmanome', blocco='$blocco', multicomune='$multicomune', language='$language2', siteistat='$siteistat', adminmail='$adminmail', siteurl='$siteurl', flash='$flash2', tema='$tema2',gkey='$gkey',ed_user='$ed_user',googlemaps='$googlemaps',editor='$editor',tema_on='$tema_on'";
+        $sth = $dbi->prepare("$sql");
+        $sth->execute();
         if ($tema2=='facebook')
                 $_SESSION['tema']=$tema2;
@@ -223 +231 @@
                 if ( (preg_match('/^([_0-9a-zA-Z]+)([_0-9a-zA-Z]{3})$/',$tlist[$i])) ) $files=$tlist[$i];
                    if($files!=''){
-                        $sql = mysql_query("SELECT id FROM ".$prefix."_ele_temi where tema='$files'", $dbi);
-                                if($sql){
-                                        list($idwid) = mysql_fetch_row($sql);
-                                        $id = intval($idwid);
-                                }
+                        $sql = "SELECT id FROM ".$prefix."_ele_temi where tema='$files'";
+                                $sth = $dbi->prepare("$sql");
+                                $sth->execute();
+                                $row = $sth->fetch(PDO::FETCH_BOTH);
+                                $id = intval($row[0]);
+                                
                         if (empty($id)) { // inserisce widget db se non esiste
-                        $result = mysql_query("insert into ".$prefix."_ele_temi (id,tema) values ( NULL,'$files')", $dbi);
+                                $sql="insert into ".$prefix."_ele_temi (id,tema) values ( NULL,'$files')";
+                                $sth = $dbi->prepare("$sql");
+                                $sth->execute();
                   }
-                }
+                        }
                   
                   
@@ -243 +254 @@
  
                   # se non esiste cancella dal db
-                  $sql2 = mysql_query("SELECT * FROM ".$prefix."_ele_temi", $dbi);
-                  while ($row = mysql_fetch_array($sql2)) {
+                $sql = "SELECT * FROM ".$prefix."_ele_temi";
+                $sth = $dbi->prepare("$sql");
+                $sth->execute();
+                $sql2 = $sth->fetch(PDO::FETCH_BOTH);
+                foreach($sql2 as $row){
                         $esi=0;
                         for ($i=0; $i < sizeof($tlist); $i++) {
@@ -251 +265 @@
                         }
                         if($esi!=1){
-                              $del=mysql_query("DELETE FROM ".$prefix."_ele_tema WHERE id = '$row[id]'",$dbi);
+                            $sql="DELETE FROM ".$prefix."_ele_temi WHERE id = '$row[id]'";
+                                $sth = $dbi->prepare("$sql");
+                                $sth->execute();
                       }
                 }