Диссертация (1167217), страница 72
Текст из файла (страница 72)
":2-" . strval($i-4);}elseif ($i < 5 ) {$newline .= $fieldnames[$key] . ":1-" . $i;}}else $newline .= $fieldnames[$i-1] . ":3";if ($i < 9) {$newline .= ",";}}//echo "<script>alert('" . $newline . "');</script>";$email_temp = $_SESSION['login_user'];$query = "UPDATE users SET cards2='$newline' WHEREuemail='$email_temp'";$result = $conn->query($query);if (!$result) die($conn->error);448echo <<<_END<script>window.location.href ="http://agoroz.bget.ru/changeshowcards2.php";</script>_END;} // if isset} // if ($_SESSION['login_user'])else {echo <<<_END<script>window.location.href = "http://agoroz.bget.ru/login.php";</script>_END;}$result->close();$conn->close();?>ФАЙЛ SAVEEDITSET .PHP<?phprequire_once 'config.php';session_start();// Что выводить для зарегистрированного пользователя////////////////////////////////////////////////if ($_SESSION['login_user']) {isexpired();// Проверено, не истекла ли сессия// Продолжение работы зарегистрированного пользователя$conn = new mysqli($hn, $un, $pw, $db);if ($conn->connect_error) die($conn->connect_error);// Сохранение в БДif (isset($_POST['setname']) && isset($_POST['setid']) &&isset($_POST['setdescr'])) {$setid = $_POST['setid'];$setname = sanitizeMySQL($conn, $_POST['setname']);$setdescr = sanitizeMySQL($conn, $_POST['setdescr']);$query = "UPDATE lexsets SET setname='$setname', setdescr='$setdescr'WHERE setid=$setid";$result = $conn->query($query);if (!$result) die($conn->error);else {$conn->close();echo <<<_END<script>window.location.href = "http://agoroz.bget.ru/mysets.php";</script>_END;}}} // if ($_SESSION['login_user'])else {echo <<<_END<script>window.location.href = "http://agoroz.bget.ru/login.php";</script>_END;}?>449ФАЙЛ SAVEEDITWORD.PHP<?phprequire_once 'config.php';session_start();// Что выводить для зарегистрированного пользователя////////////////////////////////////////////////if ($_SESSION['login_user']) {isexpired();// Проверено, не истекла ли сессия// Продолжение работы зарегистрированного пользователя$conn = new mysqli($hn, $un, $pw, $db);if ($conn->connect_error) die($conn->connect_error);// Сохранение в БДif (isset($_POST['wordid']) && isset($_POST['refsetid']) &&isset($_POST['phonetics']) && isset($_POST['transl']) && isset($_POST['grammar'])&& isset($_POST['forms']) && isset($_POST['examples']) && isset($_POST['extra'])&& isset($_POST['partsval'])) {$wordid = $_POST['wordid'];// Отделить id от имени набора$refsetid = preg_split("/[|]{3}/", $_POST['refsetid'])[0];$setname = preg_split("/[|]{3}/", $_POST['refsetid'])[1];$mainword = sanitizeMySQL($conn, $_POST['mainword']);$phonetics = sanitizeMySQL($conn, $_POST['phonetics']);$transl = sanitizeMySQL($conn, $_POST['transl']);$grammar = sanitizeMySQL($conn, $_POST['grammar']);$forms = sanitizeMySQL($conn, $_POST['forms']);$examples = sanitizeMySQL($conn, $_POST['examples']);$extra = sanitizeMySQL($conn, $_POST['extra']);$partsval = $_POST['partsval'];$query = "UPDATE words SET refsetid='$refsetid', mainword='$mainword',phonetics='$phonetics', transl='$transl', grammar='$grammar', forms='$forms',examples='$examples', extra='$extra', parts='$partsval' WHERE wordid=$wordid";$result = $conn->query($query);if (!$result) die($conn->error);else {$conn->close();// (isset($_SESSION['setidfromdel']) &&isset($_SESSION['setnamefromdel']))$_SESSION['setidfromdel'] = $refsetid;$_SESSION['setnamefromdel'] = $setname;echo <<<_END<script>window.location.href ="http://agoroz.bget.ru/showwords.php";</script>_END;}}} // if ($_SESSION['login_user'])else {echo <<<_END<script>window.location.href = "http://agoroz.bget.ru/login.php";</script>_END;}?>450ФАЙЛ SAVESET.PHP<?phprequire_once 'config.php';session_start();if ($_SESSION['login_user']) {isexpired();// Проверено, не истекла ли сессия// Получение из БД порядка расположения пунктов карточки$conn = new mysqli($hn, $un, $pw, $db);if ($conn->connect_error) die($conn->connect_error);$email = $_SESSION['login_user'];$query = "SELECT * FROM users WHERE uemail='$email'";$result = $conn->query($query);if (!$result) die($conn->error);else {$row = $result->fetch_array(MYSQLI_ASSOC);}if (isset($_POST['setid']) && isset($_POST['setname']) &&isset($_POST['saveset'])) {$setid = $_POST['setid'];$setname = $_POST['setname'];$query = "SELECT * FROM words WHERE refsetid=$setid";$result = $conn->query($query);$num = $result->num_rows;if (!$result) die($conn->error);elseif ($num > 0) {$content = "<?xml version='1.0' encoding='UTF-8'?>";$content .= "<set><setname>" .
$setname . "</setname>";$content .= "<q>" . $num . "</q>";foreach ($result as $row) { // Перебор карточек по порядку$content .= "<card><wordid>". $row['wordid'] . "</wordid>";$content .= "<refsetid>". $row['refsetid'] . "</refsetid>";$content .= "<mainword>". $row['mainword'] . "</mainword>";$content .= "<phonetics>". $row['phonetics'] ."</phonetics>";$content$content$content$content$content$content$content.=.=.=.=.=.=.="<transl>". $row['transl'] .
"</transl>";"<grammar>". $row['grammar'] . "</grammar>";"<forms>". $row['forms'] . "</forms>";"<examples>". $row['examples'] . "</examples>";"<extra>". $row['extra'] . "</extra>";"<levels>". $row['levels'] . "</levels>";"<parts>". $row['parts'] . "</parts></card>";} // foreach ($result as $row)$content .= "</set>";$content = str_replace("<br>", "[(br)]", $content);}$result->close();$conn->close();451header('Content-Description: File Transfer');header('Content-Type: application/octet-stream');header('Content-disposition: attachment; filename=set.xml');header('Content-Length: ' .
strlen($content));header('Cache-Control: must-revalidate, post-check=0, pre-check=0');header('Expires: 0');header('Pragma: public');echo $content; // Вывод результата} // if (isset($_POST['setid']))else {echo <<<_END<script>window.location.href ="http://agoroz.bget.ru/mysets.php";</script>_END;}} // if ($_SESSION['login_user'])// Что выводить для НЕзарегистрированного пользователя////////////////////////////////////////////////else {echo <<<_END<script>window.location.href ="http://agoroz.bget.ru/login.php";</script>_END;}?>ФАЙЛ SHOWCARDS1.PHP<?phprequire_once 'config.php';session_start();?><!DOCTYPE html><html><head><meta charset="UTF-8"><title>Show Words</title><link rel="stylesheet" type="text/css" href="css/main2.css"><link rel="stylesheet" type="text/css" href="css/jquery.dataTables.min.css"><script type="text/javascript" src='http://code.jquery.com/jquerylatest.min.js'></script><script type="text/javascript" src="js/jquery.dataTables.min.js"></script><script type="text/javascript" src="js/nav.js"></script><script src="js/main.js"></script><script>$(document).ready(function() {$("#markZero").replaceWith(siteHead);$("#markA").replaceWith(navBar);$("#markB").replaceWith(siteFooter);$('#dtab').DataTable( {"searching": false,452"paging": false,"info": false});});function clickTheButton(buttonId) {$("#"+buttonId).click();}</script><style></style></head><body><a id="markZero"></a> <!-- site head --><a id="markA"></a> <!-- Nav bar --><?php// Что выводить для зарегистрированного пользователя////////////////////////////////////////////////if ($_SESSION['login_user']) {isexpired();// Проверено, не истекла ли сессияecho "<p class='right'>" .
$_SESSION['login_user_firstname'] . " " .$_SESSION['login_user_famname'] . "| <a href='logout.php'>Выйти</a>";// Продолжение работы зарегистрированного пользователя$conn = new mysqli($hn, $un, $pw, $db);if ($conn->connect_error) die($conn->connect_error);if ((isset($_POST['setid']) && isset($_POST['cards1']))) {$setid = $_POST['setid'];$query = "SELECT * FROM lexsets WHERE setid=$setid";$result = $conn->query($query);if (!$result) die($conn->error);else {$row = $result->fetch_array(MYSQLI_ASSOC);$setname = $row['setname'];}echo "<div class='cmain'>";echo "<table><tr>";echo "<td><form method='post' action='showwords.php'><inputtype='hidden' name='setid' value='" .
$setid . "'><input type='hidden'name='setname' value='" . $setname . "'>";echo "<input type='submit' class='custombutton'value='НАЗАД'></form></td>";echo "<td><form method='post' action='dlcards1.php'><input type='hidden'name='setid' value='" . $setid . "'><input type='hidden' name='setname' value='" .$setname . "'><input type='hidden' name='cards1' value='yes'>";echo "<input type='submit' class='custombutton' value='Загрузитьнабор'></form></td>";echo "</tr></table>";$query = "SELECT * FROM words WHERE refsetid=$setid";$result = $conn->query($query);if (!$result) die($conn->error);elseif ($result->num_rows == 0) {echo "<h3 class='center'>Набор \"" . $setname .
"\" (0)</h3>";453}elseif ($result->num_rows > 0) {echo "<h3 class='center'>Набор \"" . $setname . "\" (" .$result->num_rows . ")</h3>";echo "<table class='cards1'>";$counter = 0;foreach ($result as $row) {$counter++;echo "<tr><td>" . $counter . "(" . $row['wordid'] .")<br><br>" . $row['mainword'] .
"</td><td>" . $row['transl'] . "<br><br>" .$row['examples'] . "</td></tr>";$hiddenButtons .= "";}echo "</table>";}$result->close();$conn->close();} // if (isset($_POST['setid']))else {echo <<<_END<script>window.location.href ="http://agoroz.bget.ru/mysets.php";</script>_END;}} // if ($_SESSION['login_user'])// Что выводить для НЕзарегистрированного пользователя////////////////////////////////////////////////else {echo <<<_END<script>window.location.href ="http://agoroz.bget.ru/login.php";</script>_END;}?></div><a href="#0" class="cd-top">Top</a><a id="markB"></a> <!-- site footer --></body></html>ФАЙЛ SHOWCARDS2.PHP<?phprequire_once 'config.php';session_start();?><!DOCTYPE html><html><head><meta charset="UTF-8"><title>Show Words</title><link rel="stylesheet" type="text/css" href="css/main2.css"><link rel="stylesheet" type="text/css" href="css/jquery.dataTables.min.css">454<script type="text/javascript" src='http://code.jquery.com/jquerylatest.min.js'></script><script type="text/javascript" src="js/jquery.dataTables.min.js"></script><script type="text/javascript" src="js/nav.js"></script><script src="js/main.js"></script><script>$(document).ready(function() {$("#markZero").replaceWith(siteHead);$("#markA").replaceWith(navBar);$("#markB").replaceWith(siteFooter);$('#dtab').DataTable( {"searching": false,"paging": false,"info": false});});function clickTheButton(buttonId) {$("#"+buttonId).click();}</script><style></style></head><body><a id="markZero"></a> <!-- site head --><a id="markA"></a> <!-- Nav bar --><?php// Что выводить для зарегистрированного пользователя////////////////////////////////////////////////if ($_SESSION['login_user']) {isexpired();// Проверено, не истекла ли сессия// Получение из БД порядка расположения пунктов карточки$conn = new mysqli($hn, $un, $pw, $db);if ($conn->connect_error) die($conn->connect_error);$email = $_SESSION['login_user'];$query = "SELECT * FROM users WHERE uemail='$email'";$result = $conn->query($query);if (!$result) die($conn->error);else {$row = $result->fetch_array(MYSQLI_ASSOC);$cards2 = $row['cards2'];}echo "<p class='right'>" .