";
$accfoldername = substr($tempname, 0, strpos($tempname, '/') );
if ($accfoldername=="shop001") $accfoldername="";
require_once($filepath.$backend."config".$accfoldername.".inc.php");
require_once($filepath.$backend."common.inc.php");
include("config.php");
if ( !empty($_SESSION["acccheck"]) && !empty($_SESSION["acclogin"]) ) {
$sql= "SELECT * FROM `backend_user` WHERE skey = '".$_SESSION["acccheck"]."' AND login = '".$_SESSION["acclogin"]."'";
$rs = $db->query($sql);
if (mysql_num_rows($rs) == 0) {
header("Location: ../error.php");
exit;
}
} else {
header("Location: ../error.php");
exit;
}
include("../../include/fckeditor/fckeditor.php");
$page_field = "";
$num_of_files = 4;
$attachment_text=array(
"-----",
' Photo Large
(W*H: 444*333)',
' Photo Small Top
(W*H: 160*120)',
' Photo Small Middle
(W*H: 160*120)',
' Photo Small Bottom
(W*H: 160*120)'
);
$col_name=array(
"-----",
'Photo Large',
'Photo Small Top',
'Photo Small Middle',
'Photo Small Bottom'
);
//initial
if (empty($id)) {
$id = "";
$temp_id = md5(uniqid(time()));
}
if (empty($page)) {
$page = "1";
}
//Load data
if ($id != "") {
$sql = "SELECT * FROM `".$page_tbname."` WHERE `user_id` = '$id'";
$row = $db->getrow($sql);
foreach($row as $_key=>$_item){
${$_key} = $_item;
}
if ($display == 1) { $displayd = 'checked'; $displayh = '';
} else { $displayd = ''; $displayh = 'checked'; }
if ($displayhot == 1) { $displayhotd = 'checked'; $displayhoth = '';
} else { $displayhotd = ''; $displayhoth = 'checked'; }
if ($displayhot1 == 1) { $displayhotd1 = 'checked'; $displayhoth1 = '';
} else { $displayhotd1 = ''; $displayhoth1 = 'checked'; }
if ($displayhot2 == 1) { $displayhotd2 = 'checked'; $displayhoth2 = '';
} else { $displayhotd2 = ''; $displayhoth2 = 'checked'; }
} else {
$displayh = ''; $displayd = 'checked';
$displayhoth = 'checked'; $displayhotd = '';
$displayhoth1 = 'checked'; $displayhotd2 = '';
$displayhoth2 = 'checked'; $displayhotd2 = '';
}
$category_list = "";
$sql = "SELECT id, en_name, sc_name FROM `levelone` WHERE 1 ";
$rs = $db->query($sql);
while($row = $db->fetch_array($rs)) {
$category_list .= '
';
}
mysql_free_result($result);
}
$files_content = "";
//upload file
for ($i=1;$i<=$num_of_files;$i++) {
if ($id != "") {
$sql = "SELECT * FROM `attachment` WHERE `table_name` = '".$page_tbname."' AND `table_id` = '".$id."' AND `col_name` = '".$col_name[$i]."'";
$rs = $db->query($sql);
if (mysql_num_rows($rs) > 0) {
$rowfile = $db->fetch_array($rs);
${"file".$i} = 'File name: '.$rowfile["real_name"].'
Delete