Changeset 256 for trunk/admin/modules/Elezioni/ele_widget.php

Timestamp:

Jan 16, 2019, 7:06:35 PM (5 years ago)

Author:

roby

Message:

 

File:

• trunk/admin/modules/Elezioni/ele_widget.php (modified) (10 diffs)

trunk/admin/modules/Elezioni/ele_widget.php

@@ -15 +15 @@
 // Offset - visualizza il numero di elementi per pagina
 $offset=5;
-
+global $dbi;
 $aid=$_SESSION['aid'];
-$dbi=$_SESSION['dbi'];
 $prefix=$_SESSION['prefix'];
 $currentlang=$_SESSION['lang'];
@@ -26 +25 @@
 
 $id_comune=$_SESSION['id_comune'];
-$res = mysql_query("SELECT t1.tipo_cons,t2.id_cons FROM ".$prefix."_ele_consultazione as t1, ".$prefix."_ele_cons_comune as t2 where t1.id_cons_gen=t2.id_cons_gen and t2.id_cons_gen='$id_cons_gen' and t2.id_comune='$id_comune' " , $dbi);
-list($tipo_cons,$id_cons) = mysql_fetch_row($res);
+#$res = mysql_query("SELECT t1.tipo_cons,t2.id_cons FROM ".$prefix."_ele_consultazione as t1, ".$prefix."_ele_cons_comune as t2 where t1.id_cons_gen=t2.id_cons_gen and t2.id_cons_gen='$id_cons_gen' and t2.id_comune='$id_comune' " , $dbi);
 
 include("modules/Elezioni/funzionidata.php");
 include("modules/Elezioni/ele.php");
+$row=cur_cons();
+$tipo_cons=$row[0];$id_cons=$row[1];
 
 if (isset($param['do'])) get_magic_quotes_gpc() ? $do=$param['do']:$do=addslashes($param['do']); else $do='';
@@ -64 +64 @@
                     $files=$tlist[$i];
                    
-                    $sql = mysql_query("SELECT id FROM ".$prefix."_ele_widget where nome_file='$files'", $dbi);
-                    list($idwid) = mysql_fetch_row($sql);
+                    $sql = "SELECT id FROM ".$prefix."_ele_widget where nome_file='$files'";
+                        $sth = $dbi->prepare("$sql");
+                        $sth->execute();
+                        $row = $sth->fetch(PDO::FETCH_BOTH);
+                    $idwid=$row[0];
                     $id = intval($idwid);
 
-
                     if (empty($id)) { // inserisce widget db se non esiste
-                        $result = mysql_query("insert into ".$prefix."_ele_widget (id,nome_file,titolo,pos_or,pos_ver, attivo) values ( NULL,'$files', '$files','1','','0')", $dbi);
-                  }
+                        $sql="insert into ".$prefix."_ele_widget (id,nome_file,titolo,pos_or,pos_ver, attivo) values ( NULL,'$files', '$files','1','','0')";
+                        $sth = $dbi->prepare("$sql");
+                        $sth->execute();                  }
                   
                   
@@ -84 +87 @@
  
                   # se non esiste cancella dal db
-                  $sql2 = mysql_query("SELECT * FROM ".$prefix."_ele_widget", $dbi);
-                  while ($row = mysql_fetch_array($sql2)) {
+                  $sql="SELECT * FROM ".$prefix."_ele_widget";
+                        $sth = $dbi->prepare("$sql");
+                        $sth->execute();        
+                        $row2 = $sth->fetchAll();
+                        foreach($row2 as $row){
                         $esi=0;
                         for ($i=0; $i < sizeof($tlist); $i++) {
@@ -92 +98 @@
                         }
                         if($esi!=1){
-                              $del=mysql_query("DELETE FROM ".$prefix."_ele_widget WHERE id = '$row[id]'",$dbi);
+                            $sql="DELETE FROM ".$prefix."_ele_widget WHERE id = '$row[id]'";
+                                $sth = $dbi->prepare("$sql");
+                                $sth->execute();        
                       }
                 }
@@ -105 +113 @@
 
         
-        $result = mysql_query("SELECT * FROM ".$prefix."_ele_widget order by pos_or,pos_ver asc", $dbi);
-        
+        $sql="SELECT * FROM ".$prefix."_ele_widget order by pos_or,pos_ver asc";
+        $sth = $dbi->prepare("$sql");
+        $sth->execute();        
+        $row2 = $sth->fetchAll();       
         
 
@@ -113 +123 @@
         echo "<br><table border=\"0\" width=\"100%\">";
         echo "<tr bgcolor=\"$bgcolor2\"><td align=\"center\"><b>"._CONFIGWIDGET."</b></td></tr></table>";
-        
-        while ($row = mysql_fetch_array($result)) {
+        foreach($row2 as $row) {
             echo "<form name=\"widget\" enctype=\"multipart/form-data\" method=\"post\" action=\"admin.php\">";
             echo "<input type=\"hidden\" name=\"do\" value=\"update\">";
@@ -163 +172 @@
         if ($perms >128) {
                                 
-                $result = mysql_query("update  ".$prefix."_ele_widget set titolo='$titolo', pos_or='$pos_or', pos_ver='$pos_ver', attivo='$attivo' where id='$idw'", $dbi) || die("Errore di aggiornamento dei dati!".mysql_error());
+                $sql="update  ".$prefix."_ele_widget set titolo='$titolo', pos_or='$pos_or', pos_ver='$pos_ver', attivo='$attivo' where id='$idw'";
+                $sth = $dbi->prepare("$sql");
+                $sth->execute();
 
                 Header("Location: admin.php?id_cons_gen=$id_cons_gen&op=widget");
@@ -185 +196 @@
 function make_db_widget(){
 global $dbi,$prefix;
-$result = mysql_query("CREATE TABLE IF NOT EXISTS ".$prefix."_ele_widget (
+$sql="CREATE TABLE IF NOT EXISTS ".$prefix."_ele_widget (
   `id` int(10) NOT NULL auto_increment,
   `nome_file` varchar(255) NOT NULL default '',
@@ -193 +204 @@
  `attivo` int(1) NOT NULL default '0',
   PRIMARY KEY  (`id`)
-)",$dbi);
+)";
+$sth = $dbi->prepare("$sql");
+$sth->execute();