$value) { $counter++; // Обработка значений, чтобы избежать SQL-инъекций $safeValue = trim($value, "'"); $safeValue = is_numeric($safeValue) ? $safeValue : "'" . addslashes($safeValue) . "'"; $safeValue = $value; if ( $counter == $total ){ $inc = $column; $inc_value = $value; // Составление итогового SQL-запроса $result = "UPDATE `$table` SET $setClause WHERE `$inc` = '$inc_value' "; } else { if ($setClause !== '') { $setClause .= ', '; } $setClause .= "`$column` = $safeValue"; } } //$logfile = set('site_fold').'log/'.$table.'_'.$inc_value.'.sql'; //file_put_contents( $logfile, $result );; //echo $result; return db_get($result, $conn); } function lock_status($table, $id) { $lockfile = lockkey($table, $id); return file_exists($lockfile); } function unlock_id($table, $id, $user){ $lockfile = lockkey($table, $id); $user = trim($user); if (file_exists($lockfile)){ $name = trim(file_get_contents($lockfile)); } if ($name == $user){ if (unlink($lockfile) == False) write_log($_SERVER['PHP_AUTH_USER'].':ip='.$_SERVER['REMOTE_ADDR'].':error unlink: '.$lockfile, 'log/lock.log'); } return; } function fileimg($img, $id, $folder){ if (in_array($img, array('jpg', 'jpeg', 'gif', 'png', 'JPG'))) { $fileimg = $folder . '/' . $id . '.' . $img; } else { $fileimg = $folder . '/' . $img; } return $fileimg; } class AKdmin { private $admin = ''; private $fields = array(); private $where = array(); private $order = array(); // private $limit = 20; private $page = 1; public $link = null; private $userid = 0; private $groupid = 0; private $deleted = False; function xss($value) { $value = htmlentities($value, ENT_QUOTES, 'UTF-8'); $value = htmlspecialchars($value); $value = strip_tags($value); $value = stripslashes ($value); return $value; } function link($link) { $this->link = $link; } //обработка входящих параметров function gparam($name, $default = null, $type = 'str') { if (isset($_GET[$name])) { $value = $_GET[$name]; if ($type == 'str') return $this->xss($value); elseif($type == 'int') return (int)$value; } else return $default; } //загрузка схемы или ее создание по умолчанию function load($shema) { $f_xml = APPPATH.'xml/'. $shema.'.xml'; if (!file_exists($f_xml)){ // если файла нет - пытаемся создать if (!$this->create($shema, $f_xml)) { // если файл не создался echo('not found shema'); exit; } } return simplexml_load_file($f_xml); } /** * автоматическое создание файла модели */ function create($table, $xfile) { $result = mysqli_query($this->link, "SHOW COLUMNS FROM `$table`"); if (mysqli_num_rows($result) == 0) return false; while ($row = mysqli_fetch_assoc($result)) { $xml .= " \n"; $xml .= " ".$row['Field']."\n ".$row['Field']."\n"; if ($row['Extra'] == 'auto_increment') $xml .= " increment\n"; elseif ($row['Type'] == 'tinyint(1)') $xml .= " checkbox\n"; elseif ($row['Type'] == 'varchar(4)') $xml .= " file\n 85\n"; elseif ($row['Type'] == 'text') $xml .= " textareatiny\n 8\n 85\n"; elseif ($row['Type'] == 'datetime') $xml .= " datetime\n"; else $xml .= " text\n 85\n"; $xml .= " \n"; $xml .= " True
\n"; if ($row['Extra'] == 'auto_increment'){ $xml .= "
False
\n"; $increment = $row['Field']; } else $xml .= "
True
\n"; $xml .= " \n"; $xml .= " \n"; } $xml = ''."\n". "
$table
$incremen DESC $increment $table
$xml"; //$xfile = site_fold_ad.'xml/'.$table.'.xml'; return file_put_contents($xfile, $xml); } //построение выпадающих списков и фильтров function lookup($table, $increment, $column, $value, $params = array(), $attrs = array()) { $where = ''; $order = ''; $limit = ''; $join = ''; //поля учавствующее в запросе $fields[] = separ($increment); $fields[] = separ($column); if (sizeof($params) > 0){ If (isset($params['where'])) $where = ' WHERE '.$params['where']; If (isset($params['order'])) $order = ' ORDER BY '.$params['order']; If (isset($params['limit'])) $limit = ' LIMIT '.$params['limit']; if (isset($params['subfilter'])){ $subfilter = $params['subfilter']; //$fields[] = separ($params['subfilter']['column']); /*if ($subfilter['table'] !== $table) { $join = ' LEFT JOIN '.separ($subfilter['table']).' ON ('.separ($subfilter['table']).'.'.separ($subfilter['id']).'='.separ($table).'.'.separ($wh_column).') '; }*/ } } $sql_select = 'SELECT '.implode(',', $fields).' FROM '.separ($table).$join.$where.$order.$limit; //echo $table.': '.$sql_select.'

'; $selectres = mysqli_query($this->link, $sql_select); if (mysqli_num_rows($selectres) !== 0) { foreach ($attrs as $key => $attr) //дополнительные атрибуты $attr_str .= ' '.$key.'="'.$attr.'" '; $null_txt = (isset($params['null'])) ? $params['null'] : '- не выбрано - '; $selected = ($value == 0) ? ' selected="selected"': ''; $result = ''; while ($selectrow = mysqli_fetch_row($selectres)) { if ($selectrow[0] > 0 and $selectrow[0] !== '') { $selected = ($selectrow[0] == $value) ? $selected = ' selected ' : ''; $sel_txt = $selectrow[1]; if (isset($selectrow[2]) and $selectrow[2] !== '') $sel_txt .= '['.$selectrow[2].']'; $result .= ''.$sel_txt.''; } } $result .= ''; return $result; } else return ' - нет данных - '; } function config($fconfig) { configer::load($fconfig); $set = configer::all(); // Выставляем папки по умолчанию if (!isset($set['site'])) $set['SITE'] = 'http://'.str_replace('www', '', $_SERVER['HTTP_HOST']).'/'; if (!isset($set['AD'])) $set['AD'] = 'http://'.str_replace('www', '', $_SERVER['HTTP_HOST']).'/'; if (!isset($set['site_fold'])){ $set['site_fold'] = $_SERVER['DOCUMENT_ROOT'].'/'; } $set['SITEPATH'] = $set['site_fold']; if (!isset($set['site_fold_ad'])) { //автоопределение папки $maindir = dirname($fconfig); if (substr($maindir,-6) == 'config'); $maindir = substr($maindir, 0, -6); $set['site_fold_ad'] = $maindir.'/'; } if (!isset($set['APPPATH'])) $set['APPPATH'] = $set['site_fold_ad'].'app/'; if (!isset($set['site_ad'])) $set['site_ad'] = $set['AD']; if (!isset($set['THEME'])) $set['THEME'] = $set['site_fold_ad'].'vendor/akdelf/akdmin/themes/office/'; if (!isset($set['PUB'])) $set['PUB'] = $set['AD'].'vendor/akdelf/akdmin/themes/office/pub/'; if (!isset($set['psite'])) $set['psite'] = $set['SITE']; if (!isset($set['sysfold'])) $set['psite'] = $set['site_fold'].'system'; if (!isset($set['imgfold'])) $set['imgfold'] = $set['site_fold_ad'].'images/'; if (!isset($set['imgcache'])) $set['imgcache'] = $set['imgfold'].'preview/'; if (!isset($set['imglink'])) $set['imglink'] =$set['AD'].'images/'; // подключаемся к БД if (isset($set['db'])) { kORM::config($set['db']['db'], $set['db']['user'], $set['db']['password'], $set['db']['host']); $this->link=mysqli_connect($set['db']['host'], $set['db']['user'], $set['db']['password'], $set['db']['db']); mysqli_query($this->link, "SET NAMES UTF8"); } if (isset($set['db2'])) { if ( $set['db2']['active'] == 1) { db_config('db2', "mysql:host={$set['db2']['host']};dbname={$set['db2']['db']}", $set['db2']['user'], $set['db2']['password']); } $set['db2_active'] = $set['db2']['active']; } // показываем ошибки if (isset($set['debug']) and $set['debug'] == 1){ error_reporting(E_ALL & ~E_NOTICE & ~E_STRICT & ~E_WARNING); ini_set('display_errors', 1); } else { ini_set('display_errors',0); } configer::load($set); configer::todefines(); return $this; } function start(){ //if (!defined('DEBUG')) { include_once ('auth.lib.php'); $auth = new auth(); $auth->action(); $user_row = kORM::table('users')->where('login', $_SERVER['PHP_AUTH_USER'])->where('active')->one(); /*$user = mysqli_query("SELECT * FROM `users` Where `login`='".$_SERVER['PHP_AUTH_USER']."'"); $user_row = mysqli_fetch_array($user);*/ if ($user_row == null) $auth->authorized(); session_start(); $_SESSION['user_id'] = $user_row['user_id']; setcookie('user_id', $user_row['user_id']); $this->userid = $user_row['user_id']; $group_id = $user_row['group_id']; $this->groupid = $group_id; $nameuser = $user_row['name']; $region_id = $user_row['region_id']; $this->username = $nameuser; $grrow = kORM::table('groupuser')->where('group_id', $group_id)->one(); if ($user_row != null) { $_SESSION['group'] = $grrow['name']; $_SESSION['readonly'] = 0; } else $_SESSION['readonly'] = 0; write_log($_SERVER['PHP_AUTH_USER'].':ip='.$_SERVER['REMOTE_ADDR'].':authorized', 'log/edition.log'); //} //else // $group_id = 1; $menufile = file_get_contents(APPPATH.'menu/'.$group_id.'.json'); $menus = json_decode($menufile, true); include(THEME.'views/layout/main.phtml'); return; } function user_init() { $user_row = kORM::table('users')->where('login', $_SERVER['PHP_AUTH_USER'])->where('active')->one(); if (isset($user_row)) $this->userid = $user_row['user_id']; } function init() { if (count($_GET) == 0) { $this->start(); return; } $this->user_init(); session_start(); require_once ('photos.php'); require_once ('day_and_week.php'); require_once ('acess.php'); require_once ('filter.php'); require_once ('file.php'); $filter = new filter; function tp_quotes($text) { $quotes=array('"', '«', '»', '«', '»', '«', '»', '“', '„', '„', '“'); $text=str_replace($quotes, '"', $text); $text=preg_replace('/([^=]|\A)""(\.{2,4}[а-яА-Я\w\-]+|[а-яА-Я\w\-]+)/', '$1"$2', $text); $text=preg_replace('/([^=]|\A)"(\.{2,4}[а-яА-Я\w\-]+|[а-яА-Я\w\-]+)/', '$1$2', $text); $text=preg_replace('/([а-яА-Я\w\.\-]+)""([\n\.\?\!, \)][^>]{0,1})/', '$1"$2', $text); $text=preg_replace('/([а-яА-Я\w\.\-]+)"([\n\.\?\!, \)][^>]{0,1})/', '$1$2', $text); $text=preg_replace('/(<\/typo:quot1>[\.\?\!]{1,3})"([\n\.\?\!, \)][^>]{0,1})/', '$1$2', $text); $text=preg_replace('/([а-яА-Я\w\.\- \n]*?)(.+?)<\/typo:quot1>/', '$1$2', $text); $text=preg_replace('/(<\/typo:quot2>.+?)(.+?)<\/typo:quot1>/', '$1$2', $text); $text=preg_replace('/(.+?<\/typo:quot2>)\.(.+?)/', '$1<\/typo:quot1>.$2', $text); $text=preg_replace('/(.+?<\/typo:quot2>)\.(?!<\/typo:quot1>)/', '$1.$2$3$4', $text); $text=preg_replace('/""/', '', $text); $text=preg_replace('/(?<=)(.+?)(.+?)(?!<\/typo:quot2>)/', '$1$2', $text); $text=preg_replace('/"/', '', $text); $text=preg_replace('/(<[^>]+)<\/typo:quot\d>/', '$1"', $text); $text=preg_replace('/(<[^>]+)<\/typo:quot\d>/', '$1"', $text); $text=preg_replace('/(<[^>]+)<\/typo:quot\d>/', '$1"', $text); $text=preg_replace('/(<[^>]+)<\/typo:quot\d>/', '$1"', $text); $text=preg_replace('/(<[^>]+)<\/typo:quot\d>/', '$1"', $text); $text=preg_replace('/(<[^>]+)<\/typo:quot\d>/', '$1"', $text); $text=str_replace('', $this->quot11, $text); $text=str_replace('', $this->quot12, $text); $text=str_replace('', $this->quot21, $text); $text=str_replace('', $this->quot22, $text); return; } //превращает в js синтаксис function js_func ($namefunc, $params){ $params_line = ''; foreach ($params as $param) { if ($params_line !== '') $params_line .= ','; $params_line .= chr(39).$param.chr(39); } return $namefunc.'('.$params_line.');'; } function delete_cache($fstr, $increment) { $files = explode(',',$fstr); foreach ($files as $file){ $fname = SITEPATH.str_replace('{%}', $increment, trim($file)); unlink($fname); } return; } //приводим дату в названии папки function date_to_url($date, $time = True, $separ = '/') { $currdate = explode(' ', $date); $date = explode('-', $currdate[0]); $url = $date[0].$separ.$date[1].$separ.$date[2]; if ($time) { $time = explode(':', $currdate[1]); $url .= $separ.$time[0].$separ.$time[1].$separ.$time[2]; } return $url; } //пересчет кол-во значений в таблице function counts($citems, $values) { /* table - таблица, где обновляем данные t_inc - имя инкрементного поля таблицы в которой обновляем t_inc_column - ссылка на значение в поле гл таблицы column - колонка которую обновляем values - все полученные значения переменных */ $col_inc_name = (string)$citems->column_inc; $count_sql = 'SELECT COUNT(*) FROM '.MAINTABLE.' WHERE '.$col_inc_name.'='.$values[$col_inc_name].' '.$citems->sql_where; $countres = mysqli_query ($this->link, $count_sql); if (!$countres) write_log('Ошибка mysqli: '.mysqli_error()); //подсчет else { $sqlrows = mysqli_num_rows($countres); if ($sqlrows > 0) { //запись результатов $row = mysqli_fetch_array($countres, mysqli_NUM); $count = $row[0];//получаем кол-во $sql_update = 'UPDATE '.$citems->table.' SET '. $citems->column.'='.$count.' WHERE '.$citems->t_inc.' = '.$values[$col_inc_name]; $upd_result = mysqli_query($this->link, $sql_update); if (!$upd_result) write_log('Ошибка mysqli: '.mysqli_error()); } } } function separ($txt) { return '`'.$txt.'`'; } function quote($txt) { return "'".$txt."'"; } function NullErrSession() { if (isset($_SESSION['errors'])) unset($_SESSION['errors']); if (isset($_SESSION['values'])) unset($_SESSION['values']); } //спецсимволы при сборе заброса function SqlAddSpec($str, $type) { if (mb_strlen($str) > 0) { if ($type == 0) return ', '; else if ($type == 1) return ' AND '; else return ''; } else return ''; } function fileexpansion ($filename) { $out = array(); preg_match('/\S+\.(\S+)$/', $filename, $out); return $out[1]; } function subfilters($value, $config) { } //построение списка подзаписей function subfilter($value, $config, $id) { $sql_filter = 'SELECT '.separ($config->increment).', '.separ($config->column).' FROM '.separ($config->table).' WHERE '.separ($config->wh_column).'='.quote($value); $selectres = mysqli_query($this->link, $sql_filter); if (@mysqli_num_rows($selectres) !== 0) { $result = ''; return $result; } else return ''; } function GreateMainFilter($admin, $columname, $currvalue, $nullvalue = 'Нулевые значения') { $currvalue = (string)$value_tek; $titles = array('Все', 'Пустые значения', $nullvalue); $values = array( 'all'=>array('name'=>'Все', 'value'=>''), 'null'=>array('name'=>$nullvalue, 'value'=>'0') ); foreach ($values as $value) { $selected = ($value['value'] == $currvalue) ? $selected = ' selected="selected"' : ''; $result .= ''; } return $result; } function GreateMainLookup($value_tek) { $value = (string)$value_tek; $types = array('null', '0'); $titles = array('Пустое значение', 'Нулевое значения'); for ($s = 0; $s < 2; $s++) { $selected = ($value == $types[$s]) ? 'selected="selected"' : ''; echo ''; } } function AnonsText($text, $counts, $counttype) { $text = strip_tags($text); $mb_strlen = mb_strlen($text); if ($mb_strlen < $counts) return $text; else { for ($i = $counts - 1; $i <= $mb_strlen; $i++){ $s = mb_substr($text,$i,1); if ($counttype == 0) { if (($s == ' ') or ( $s == ',') or ($s == '.') or ($s == '!') or ($s == '?')) break; //не обрывать слова. } else { if (( $s == ',') or ($s == '.') or ($s == '!') or ($s == '?')) break; //не обрывать предложения } } if ($i != $mb_strlen ) $countend = $i; else $countend = $counts; return mb_substr($text, 0, $countend). ' ...'; } } #зачитываем параметры $action = $this->gparam('action', 'selectall'); if ($admin = $this->gparam('admin')) $this->admin = $admin; else { echo 'shema zero'; exit; } //доступ группам /*if (isset($_SESSION['group'])) { $grname = $_SESSION['group']; include_once ('acess.php'); if (isset($group[$grname])){ $acs = explode(',', $group[$grname]); if (!in_array($admin, $ac)){ echo 'нет доступа'; exit(); } } } else { echo 'нет доступа'; exit(); }*/ //наличие пустых параметров //if ($f_xml == '' or !file_exists($_SERVER['DOCUMENT_ROOT'].'/xml/'.$f_xml)){ $page = $this->gparam('page', 1, 'int'); $order = (isset($_GET['order'])) ? strip_tags(trim($_GET['order'])) : ''; if ($order !== ''){ $ord_len = mb_strlen($order); $endpos = mb_substr($order, $ord_len-1, 1); if ($endpos == '+') { $order_type = 0; $order = mb_substr($order, 0 ,$ord_len-1); } elseif ($endpos == '-') { $order_type = 1; $order = mb_substr($order, 0 ,$ord_len-1); } else $order_type = 0; } // $order_type = (isset($_GET['order_type'])) ? (int)($_GET['order_type']) : 0; $increment_value = $this->gparam('increment', 0 , 'int'); $like = $this->gparam('like', ''); $like_id = $this->gparam('like_id', 0, int); $maxi = -1; $xml = $this->load($this->admin); //загружаем схему // читаем главные параметры foreach ($xml->xpath('/items/main') as $mainitem) { $nametable = $mainitem->table; $maintable = separ($nametable); $caption = $mainitem->title; $order_main = (string)$mainitem->order; $fields_search = (string)$mainitem->search; //поиск по полям if (isset($mainitem->deleted)){ $deleted = (int)$mainitem->deleted; $this->deleted = $deleted; } else $this->deleted = 1; /*if($this->groupid == 1) $this->deleted = True; else $this->deleted = False; */ if($mainitem->order_type) { $order_main_type = ' '.(string)$mainitem->order_type; } if (isset($mainitem->export)){ $ex_table = $mainitem->export->table; $ex_map = $mainitem->export->map; } //убивание файлов кеша if (isset($mainitem->cache)) $fcache = (string)$mainitem->cache; //пересчет кол-ва if(isset($mainitem->count)) $count_items = $mainitem->count; $increment = (string)$mainitem->increment; if ($mainitem->where !== '') $where_main = $mainitem->where; $link_view = $mainitem->vbutton->link; $inc_view = $mainitem->vbutton->incname; } define('INC', $increment); define('MAINTABLE', $maintable); unset($mainitem); $filters = array(); $filters_count = 0; switch ($action) { case 'select': case 'selectall': case 'selectrow': case 'selectpage': case 'selecttable': //первоначальные значения $filters_count = 0; $increment_num = -1; $maxi = -1; $inc_show = false; //зачитывае данные $item = $xml->xpath('/items/item'); $item_count = sizeof($item); $c_type = array(); $chet = False; if ($action == 'selectall'){ ?>
Редактирование
column; if ($item[$it]->filter == 'True'){ $filters[$filters_count]['column'] = $item[$it]->title; if (isset($_GET[$columnname])){ $colfilter = strip_tags($_GET[$columnname]); $where_filter .= SqlAddSpec($where_filter, 1).$maintable.'.'.$item[$it]->column.' = '.$colfilter; if ($colfilter == 'null' || $colfilter == 0) $nullfilter = True; } if ($action == 'selectall'){ //рисуем фильтры $filters_count ++; if ($filters_count == 1) echo '

Фильтрация

'; if (isset($item[$it]->lookup->fcolumn)) $lookup_column = $item[$it]->lookup->fcolumn; else $lookup_column = $item[$it]->lookup->column; $ftable = table($item[$it]->lookup->table)->select($item[$it]->lookup->id, $lookup_column); if ($item[$it]->lookup->where != '') $ftable->wh($item[$it]->lookup->where); if ($item[$it]->lookup->order != '') $ftable->ord_str($item[$it] ->lookup->order); $fitems = $ftable->all(); if ($fitems !== null){ $id_select = $item[$it]->column; $fvalue = $lookup_column; ?> view->table == 'True'){ // если для таблицы активна $maxi ++; if ($columnname == $increment) { $increment_num = $it; $component[$maxi]['type'] = 'increment'; $component[$maxi]['column'] = $increment; $inc_show = true; } $component[$maxi]['type'] = (string)$item[$it]->type; //запоминаем тип компонета $component[$maxi]['column'] = (string)$item[$it]->column; if (isset($item[$it]->link)) $component[$maxi]['link'] = (string)$item[$it]->link; if (isset($item[$it]->folder)) $component[$maxi]['folder'] = (string)$item[$it]->folder; if (isset($item[$it]->folder)) $component[$maxi]['width'] = (string)$item[$it]->width; if (isset($item[$it]->fieldate)) $component[$maxi]['fieldate'] = (string)$item[$it]->fieldate; if (isset($item[$it]->version)) $component[$maxi]['version'] = (string)$item[$it]->version; /*if (isset($item[$it]->curruser)) $component[$maxi]['curruser'] = (string)$item[$it]->curruser;*/ $new_order_type = ''; if ($columnname == $order) { $order_value = ' ORDER BY '.$maintable.'.'.$columnname; if ($order_type == 1){ $ord_title_type = '+'; $order_value .= ' ASC'; $img = 'по возрастанию'; } else { $ord_title_type = '-'; $order_value .= ' DESC'; $img = 'по убыванию'; } $new_order_type = ($order_type == 1) ? ' ASC' : ' DESC'; $title_class = ' class="order_title"'; } else { $title_class = ' class="std_title"'; $ord_title_type = '+'; $img = ''; } $titles .= 'hint.'" > '.$item[$it]->title.$img.' '; if ($item[$it]->type == 'lookup' && !$nullfilter){ //формируем запрос $sql .= SqlAddSpec($sql, 0).$columnname.'.'.$item[$it]->lookup->column; // $tables .=', '.$item[$it]->lookup->table; $join .= ' LEFT JOIN '.separ($item[$it]->lookup->table).' '.separ($columnname).' ON ('.separ($columnname).'.'.separ($item[$it]->lookup->id).'='.$maintable.'.'.separ($item[$it]->column).')'; /*$where_lookup .= SqlAddSpec($where_lookup, 1).$item[$it]->lookup->table.'.'.$item[$it]->lookup->id.'='.$maintable.'.'.$item[$it]->column;*/ } else $sql .= SqlAddSpec($sql, 0).$maintable.'.'.$item[$it]->column; } } if ($action == 'selectall') { if ($filters_count > 0):?>
title?>

Поиск

Данные

link, $max_sql); if (@mysqli_num_rows($maxres) != 0) { $maxrow = mysqli_fetch_row($maxres); $total_rows = $maxrow[0]; if ($total_rows > $per_page) { $num_pages = ceil($total_rows/$per_page); $vanitem = ($page - 1) * $per_page; if ($page > 1 && $vanitem > $total_rows) $vanitem = 1; $limit = ' LIMIT '.$vanitem.','.$per_page; } } /**/ if ($action != 'selecttable'){ echo '

'; ?>           автоматически 0){ $where_like = separ($increment).'= "'.$like_id.'"'; if (trim($where) == '') $where = ' WHERE '.$where_like; else $where .= SqlAddSpec($where, 1).$where_like; } if ($where !== '') $sqlres .= $where; if ($order_value !== '') $sqlres .= $order_value; $sqlres .= $limit; } //echo $sqlres; $selectres = mysqli_query($this->link, $sqlres); //подсчет; //echo $sqlres; if (@mysqli_num_rows($selectres) != 0) { if ($action != 'selectrow') echo '

'.$titles.''; while ($selectrow = mysqli_fetch_row($selectres)){ $increment_value = $selectrow[$increment_num]; $edit_active = '"StartLink('.chr(39).$admin.chr(39).", 'edit', 'forms', 'increment', '".$increment_value."'".');"'; $print_active = '"StartLink('.chr(39).$admin.chr(39).", 'print_id', 'forms', 'increment', '".$increment_value."'".');"'; if ($action != 'selectrow') { $chet = !$chet; $tr_class = ($chet) ? 'nechet' : 'chet'; $lock_status = lock_status($nametable, $increment_value); if ($lock_status) $substyle = 'style="color: #999999;"'; else $substyle = ''; echo(''); } for ($a = 0; $a <= $maxi; $a++) { switch ($component[$a]['type']) { case 'checkbox' : echo(''); break; case 'checkdate' : echo(''); break; case 'increment': if ($inc_show) { echo(''); } break; case 'spin': echo(''); break; case 'file': echo ''; break; case 'textareatiny': $fulltext = $selectrow[$a]; $fulltext = strip_tags($fulltext); $val_txt = mb_strlen($fulltext); echo ''; break; default: $fulltext = $selectrow[$a]; $fulltext = strip_tags($fulltext); $texttitle = ''; if ($component[$a]['maxtext']) { $maxtext = $component[$a]['maxtext']; $maxtext = strip_tags($maxtext); if (mb_strlen($fulltext) > $maxtext) { $texttitle = 'title="'.$fulltext.'" '; $val_txt = AnonsText($selectrow[$a], $maxtext, 0); } else { $val_txt = $fulltext; } } else $val_txt = $fulltext; echo(''); break; } } echo(''); if ($action != 'selectrow') echo(''); } if ($action != 'selectrow') { echo(''); //общее кол-во echo('
Редактор
'); if ($selectrow[$a] == 1) { $input_value = 'checked'; $checked_value = '0'; } else { $input_value = ''; $checked_value = '1'; } echo (''); echo(''); if ($selectrow[$a] == 1) { $input_value = 'checked'; $checked_value = '0'; } else { $input_value = ''; $checked_value = '1'; } echo (''); echo(''); echo (AnonsText($selectrow[$a], 30, 0)); echo(''); if ($selectrow[$a] != 0) echo $selectrow[$a]; echo(''; $wwwname = SITE.fileimg($selectrow[$a], $increment_value, $component[$a]['folder']); $fwidth = 100; if ($component[$a]['width']) $fwidth = $component[$a]['width']; else $fwidth = 100; $nocacheprefix = date('Y_m_d_h_i_s'); echo''; echo ''.$val_txt.''); if (isset($component[$a]['link'])){ $ulink = str_replace('{%}', $selectrow[$a], $component[$a]['link']); //$link = str_replace('{%inc%}', $increment, $component[$a]['link']); echo ''.$val_txt.''; } else echo $val_txt; echo(''); echo('редактирование записи'); if ($link_view != '') { $vlink = str_replace('{%}', $increment_value, $link_view); echo('Просмотр'); } if (isset($ex_table)): $export_id=$increment_value.'_ex';?> редактирование записи deleted) { echo 'удаление записи'; } echo('Печать записи
всего:'.$total_rows.'
'); if ($action != 'select' && $action != 'selecttable') { if ($total_rows > $per_page) { //рисуем странички echo('

Странички: из '.$num_pages.''); $olimits = array('5', '10', '15', '20', '25', '30'); /*echo('    Элементы:  } */ ?>
xpath('/items/item'); $item_count = sizeof($item); for ($it = 0; $it < $item_count; $it++) { if ($item[$it]->id == $id){ if ($value > 0) $params['where'] = $item[$it]->lookup->subfilter->wh_column.'='.$value; $attrs['name'] = $item[$it]->column; $attrs['id'] = $attr['name']; echo $this->lookup($item[$it]->lookup->table, $item[$it]->lookup->id, $item[$it]->lookup->column, 0, $params, $attrs); break; } } break; //горячий checkbox case "active": $result = 0; if (isset($_GET['increment'])) $increment_value = (int)($_GET['increment']); else $increment_value = 0; if (isset($_GET['active'])) $active = strip_tags(($_GET['active'])); $newactive = ($active == 'true') ? 1 : 0; if (isset($_GET['field'])) $field = strip_tags($_GET['field']); if ($increment_value > 0) { //write_log($_GET['fieldate']); if (isset($_GET['fieldate']) and $newactive == 1){ $act_update_sql = 'UPDATE $maintable SET `'.$field.'` = '.$newactive.', '.'`'.$_GET['fieldate'].'` = '."'".date('Y:m:d G:i:s')."'".' WHERE `'.$increment.'` = '."'".$increment_value."'"; $sql_active = mysqli_query($this->link, 'UPDATE '.$maintable.' SET `'.$field.'` = '.$newactive.', '.'`'.$_GET['fieldate'].'` = '."'".date('Y:m:d G:i:s')."'".' WHERE `'.$increment.'` = '."'".$increment_value."'"); } else { $act_update_sql = "UPDATE `$maintable` SET `$field` = '$newactive' WHERE `$increment` = '$increment_value'"; $sql_active = mysqli_query($this->link ,'UPDATE '.$maintable.' SET `'.$field.'` = '.$newactive.' WHERE `'.$increment.'` = '."'".$increment_value."'"); } db_get($act_update_sql, 'db2'); //временно вместо history_db $result = ($sql_active) ? 1 : 0; } echo (int)$result ; write_log($_SERVER['PHP_AUTH_USER'].': '.'table='.$maintable.':action=active:value='.$newactive.':id='.$increment_value, 'log/edition.log'); break; case "print_id":?> xpath('/items/item'); $item_count = sizeof($item); for ($i = 0; $i < $item_count; $i++) { if ($item[$i]->view->printed == 'True'){ $column = (string)$item[$i]->column; if ($column != $increment){ $sql .= SqlAddSpec($sql, 0).$maintable.'.'.$column; if ($item[$i]->type == 'lookup'){ $join .= ' LEFT JOIN '.separ($item[$i]->lookup->table).' ON ('.separ($item[$i]->lookup->table).'.'.separ($item[$i]->lookup->id).'='.$maintable.'.'.separ($item[$i]->column).')'; $sql .= SqlAddSpec($sql, 0).$item[$i]->lookup->table.'.'.$item[$i]->lookup->column; } else $sql .= SqlAddSpec($sql, 0).$maintable.'.'.$column; } } } $editres = mysqli_query ($this->link, 'SELECT '.$sql.' FROM '.$maintable.$join.' WHERE '.$increment.' = '.$increment_value); $sqlrows = mysqli_num_rows($editres); if ($sqlrows > 0) $editrow = mysqli_fetch_array($editres); for ($f = 0; $f < $item_count; $f++) { if ($item[$f]->view->printed == 'True'){ echo ''.$item[$f]->title.':
'; if($item[$f]->type == 'lookup'){ $column = (string)$item[$f]->lookup->column; echo $editrow[$column]; } else { $column = (string)$item[$f]->column; echo $editrow[$column]; } echo '


'; } } break; case 'export': if (isset($_GET['increment'])) $increment_value = (int)($_GET['increment']); else echo 'no'; $source = array(); $exvalue = array(); $count_element = 0; $elements = explode(',',$ex_map); foreach ($elements as $element) { $count_element++; $params = explode('->',trim($element)); $ex_fields[] = trim($params[0]); $sou_fields[] = separ(trim($params[1])); } $sql_select = 'SELECT '.implode(',',$ex_fields).' FROM '.$maintable.' WHERE '.separ($increment).'='."'".$increment_value."' LIMIT 1;"; $data = mysqli_query($this->link, $sql_select) or die("Invalid query"); if (mysqli_num_rows($data) == 0) { echo "error"; break; } $row = mysqli_fetch_row($data); for ($f = 0; $f < $count_element; $f++) { $curr_value = (isset($row[$f])) ? $row[$f] : 0; $ex_values[] = "'".addslashes($curr_value)."'"; } $sql_insert = 'INSERT INTO'.separ($ex_table).' ('.implode(',',$sou_fields).') VALUES('.implode(',',$ex_values).');'; write_log(':'.$sql_insert); mysqli_query($this->link, $sql_insert) or die("Invalid"); write_log($_SERVER['PHP_AUTH_USER'].': '.'table='.$maintable.':action=export :id='.$increment_value, 'log/edition.log'); break; //формы - добавления и редактирования case "edit": case "add": $lockstring = lock_id($nametable, $increment_value, $_SERVER['PHP_AUTH_USER']); if ($action == 'edit') { if ($lockstring !== False and $lockstring !== '') echo '

Файл занят: '.$lockstring.'

'; } $act_str = ($action == 'edit') ? 'Изменение': 'Добавление';?>
xpath('/items/item'); $item_count = sizeof($item); if ($action == 'edit') { //формируем запрос $f_acton = '&action=update&increment='.$increment_value; if(!$valid) { for ($i = 0; $i < $item_count; $i++) { $column = (string)$item[$i]->column; if ($column != $increment) $sql .= SqlAddSpec($sql, 0).$maintable.'.'.$column; } $editres = mysqli_query ($this->link, 'SELECT '.$sql.' FROM '.$maintable.' WHERE '.$increment.' = '.$increment_value); $sqlrows = mysqli_num_rows($editres); if ($sqlrows > 0) $editrow = mysqli_fetch_array($editres); } } else $f_acton = '&action=insert'; $pr_form = '
'; $active_err = (isset($_SESSION['ferror']) && $_SESSION['ferror'] == 1) ? 1 :0; // узнаем ошибки ли это были или нет $active_err = 0; $_SESSION['ferror'] = 0; // сбрасываем на случай отмены $hash_date = date("Y-m-d H:i:s"); $hash_form = md5($hash_date.$this->userid); $pr_form .= ''; setcookie($hash_form, "1", time()+60*60*24*7, '/'); for ($f = 0; $f < $item_count; $f++) { $column = (string)$item[$f]->column; $column_id = (isset($item[$f]->id)) ? (string)$item[$f]->id : ''; if ($item[$f]->view->form == 'True' && $column != $increment) { if ($active_err == 1 ) { $class_valid = (isset($_SESSION['errors'][$column])) ? $_SESSION['errors'][$column] : 'hidden'; $column_value = $_SESSION['value'][$column]; } else { $class_valid = 'hidden'; if ($action == 'edit') $column_value = $editrow[$column]; else if ($action == 'add') { if (isset($item[$f]->default)) //значение по умолчанию $column_value = $item[$f]->default; else //если есть фильтр ставим значение автоматом $column_value = ($item[$f]->filter && isset($_GET[$column])) ? (int)$_GET[$column] : ''; } } $types = $item[$f]->type; if ($types == 'hidden' or $types == 'user') $title = ''; else $title = ($item[$f]->title == '') ? $column : $item[$f]->title; if ($title != '') $pr_form .= '

'; $valtype = (isset($item[$f]->validate->type)) ? (string)$item[$f]->validate->type : ''; /*$blur = ($valtype != '') ? 'onblur = "validate(this.value, '."'err_".$column."', '".$valtype."'".');"' : ''; */ switch ($types) { case 'textarea': case 'textareatiny': $controls[] = $column; //поля для проверки орфографии $maxlength = (isset($item[$f]->maxsize)) ? ' maxlength = "'.$item[$f]->maxsize.'" ondrop="ismaxlength(this)" onkeypress="ismaxlength(this)" onkeydown="ismaxlength(this)" onkeyup="ismaxlength(this)" onchange="ismaxlength(this)" onfocus="ismaxlength(this)" ' : ''; if ($types == 'textareatiny') { $class = (isset($item[$f]->tinyclass)) ? $item[$f]->tinyclass : 'mceSimple'; $class = ' class="'.$class.'"'; } else $class = 'textarea_'.$column; /*onKeyUp = Len(this.id); onKeyDown = Len(this.id);*/ if (isset($item[$f]->longtextfile)) { $htmlfile = set('site_fold').$item[$f]->longtextfile.'/'.$increment_value.'.html'; if (file_exists($htmlfile)) $text = file_get_contents($htmlfile); else $text = $column_value; } else $text = $column_value; $pr_form .= '

'; //if ($types == 'textarea') $pr_form .= '

символов: '.strlen(strip_tags($text)).'

'; break; case 'text': case 'html': $controls[] = $column; //поля для проверки орфографии $maxlength = (isset($item[$f]->maxsize)) ? ' maxlength="'.$item[$f]->maxsize.'"' : ''; $readonly = ($item[$f]->readonly == TRUE) ? ' READONLY': ''; //readonly $column_value = htmlspecialchars($column_value); $pr_form .= '

Неверное значение

'; break; case 'value': $pr_form .= '

'; break; case 'checkbox': case 'checkdate': $week = date('N'); $hour = date('G'); $checkview = True; if (isset($item[$f]->userid)) { # слежение за юзерами if ($week == 6 or $week == 7) $checkview = True; elseif ($hour < 10 or $hour > 18) $checkview = True; else { if ($action == 'edit') { $curr_user = (string)$item[$f]->userid; if ($editrow[$curr_user] == $this->userid and $column_value == 0) $checkview = False; elseif($column_value == 1) $checkview = TRUE; /*$user_value $userres = mysqli_query ('SELECT '.separ($item[$f]->curruser).' FROM '.$maintable.' WHERE '.$increment.' = '.$increment_value); if (isset($userres)) { $row = mysqli_fetch_row($userres); $curruser = $row[0]; if ($curruser == $this->userid) $checkview = False; }*/ } else $checkview = False; } } $checkview = True; $chstatus = ($checkview == False) ? 'disabled readonly' : ''; //if ($checkview) { $checked = ($column_value == 1) ? 'checked' : ''; $pr_form .= '

'; //} //else // $pr_form .= '- нет прав -'; break; case 'datetime': $datetime = ($column_value == '0000-00-00 00:00:00' or $column_value == '') ? date('Y-m-d G:i:s') : $column_value; $pr_form .= 'Щелкните для открытия календаряНеверный формат даты

'; break; case 'datetimeauto': $datetimeauto = date('Y-m-d G:i:s'); $pr_form .= 'Щелкните для открытия календаряНеверный формат даты

'; break; case 'date': if ($action == 'add' & $active_err == 0) $column_value = date('Y-m-d'); $pr_form .= '

Щелкните для открытия календаряНеверный формат даты

'; break; case 'file': if ($column_value !== '') { $filename = fileimg($column_value, $increment_value, $item[$f]->folder); $wwwname = SITE.$filename; $id = 'fl'.$column; $pr_form .= '

'; $pr_form .= '

'; $pr_form .= 'Скачать'; } else $pr_form .= '

'; $pr_form .= '

'; break; case 'user': if ($action == 'edit') { //проверяем права доступа if (isset($item[$f]->access)){ //проверка защищенных групп if (isset($item[$f]->access->groups)){ $groups = explode(',', $item[$f]->access->groups); $accessed = (in_array($_SESSION['group'], $groups)) ? False : True; } else $accessed = False; //проверять у всех //проверять if ($accessed == False and ($column_value !== $this->userid)){ echo 'Нет доступа на редактирование!'; exit; //прерывание, нет доступа } } } $insert_type = (isset($item[$f]->user_type)) ? True : False; if ($action == 'edit' and $insert_type) $user_value = $column_value; else { $user_value = $this->userid; } $pr_form .= '

'; break; case 'spin': $max = ($item[$f]->max == '') ? 100 : (int)$item[$f]->max; $min = ($item[$f]->min == '') ? 1 : (int)$item[$f]->min; $pr_form .= '

'; break; case 'password': $pr_form .= '

'; break; case 'lookup': $look_params = array(); $attrs = array(); $sub_params = array(); $sub_attrs = array(); $subfiltered = (isset($item[$f]->lookup->subfilter)) ? True : False; //есть ли подфильтр if (isset($item[$f]->lookup->where)) $look_params['where'] = (string)$item[$f]->lookup->where; if (isset($item[$f]->lookup->order)) $look_params['order'] = (string)$item[$f]->lookup->order; if (isset($item[$f]->lookup->nulltxt)) $look_params['null'] = (string)$item[$f]->lookup->nulltxt; $look_params['limit'] = 800; $select_id = 'select_'.$column_id; $attrs = array('id'=>$item[$f]->column, 'name'=>$item[$f]->column); if ($subfiltered) { $look_params['subfilter']['table']=$item[$f]->lookup->subfilter->table; $look_params['subfilter']['id']=$item[$f]->lookup->subfilter->id; $look_params['subfilter']['column']=$item[$f]->lookup->subfilter->column; $look_params['subfilter']['wh_column']=$item[$f]->lookup->subfilter->wh_column; } $pr_form .= '

'.$this->lookup($item[$f]->lookup->table, $item[$f]->lookup->id, $item[$f]->lookup->column, $column_value, $look_params, $attrs).'

'; if ($subfiltered) { if (isset($item[$f]->lookup->subfilter->where)) $sub_params['where'] = (string)$item[$f]->lookup->subfilter->where; if (isset($item[$f]->lookup->subfilter->order)) $sub_params['order'] = (string)$item[$f]->lookup->subfilter->order; $sub_params['null'] = 'Все значения'; $sub_attrs['id'] = 'subfilter_'.$item[$f]->column; $sub_attrs['name'] = $sub_attrs['id']; $sub_func = 'subfilterlink('.chr(39).$sub_attrs['id'].chr(39).','.chr(39).ADMIN.chr(39).', '.chr(39).$column_id.chr(39).','.chr(39).$select_id.chr(39).');'; $sub_attrs['onChange'] = $sub_func; $pr_form .= '

Фильтр: '.$this->lookup($item[$f]->lookup->subfilter->table, $item[$f]->lookup->subfilter->id, $item[$f]->lookup->subfilter->column, 0, $sub_params, $sub_attrs).'

'; } $pr_form .= '

'; /*$lookchange = ($subfiltered) ? 'OnChange="subfilterlink('.ADMIN.', '.$column_id.');"' : ''; if ($where_field != '') $sql_res = 'SELECT '.$item[$f]->lookup->id.', '.$item[$f]->lookup->column.' FROM '.$item[$f]->lookup->table.' WHERE '.$where_field. ' Order By '.$where_field.' LIMIT 260'; else $sql_res = 'SELECT '.$item[$f]->lookup->id.', '.$item[$f]->lookup->column.' FROM '.$item[$f]->lookup->table.$where.$where_order.' LIMIT 200'; $selectres = mysqli_query ($sql_res); if (@mysqli_num_rows($selectres) != 0) { $pr_form .= '

'; if ($subfiltered) { $subfilter_id = 'subfilter_'.$column_id; $pr_form .= 'Фильтр: '.subfilter($column_value, $item[$f]->lookup->subfilter, $subfilter_id).''; } $pr_form .= $input_pr; $pr_form .= '

'; }*/ break; } } } echo $pr_form;//принтеруем форму NullErrSession(); //стираем все на случай отмены /*if ($action = 'edit') echo(''); echo '

Отключить типографику


';*/ //echo 'не забудьте воспользоваться новой замечательной функцией'; write_log('readonly='.$_SESSION['readonly']); echo '

'; if ($_SESSION['readonly'] == 0){ echo(''); } echo ' '; $ctljs = ''; foreach ($controls as $control) { if ($ctljs !== '') $ctljs .= ', '; $ctljs .= 'form.'. $control; } echo('

'); //echo(' //echo('

break; case "insert": case "update": //защита от пустого $POST if (sizeof($_POST) == 0) exit; if (isset($_POST['hashform'])) { $hash_form = $_POST['hashform']; if (isset($_COOKIE[$hash_form])){ unset($_COOKIE[$hash_form]); setcookie($hash_form, null, -1, '/'); } else { exit; //break; } } require_once("validate.php"); require_once("tipograf.php"); $errors = 0; $errresult = false; //if ($action == 'insert') { $div_res = 'content'; $admin_res = 'selectall'; // } // else { // $div_res = $increment_value; // $admin_res = 'selectrow'; // } NullErrSession(); $item = $xml->xpath('/items/item'); $item_count = sizeof($item); $fa = 0; $tip_reg = (isset($_POST['tipogreg'])) ? false : true; /* вкл-выкл типографики */ for ($i = 0; $i <= $item_count - 1; $i++) { $posts = (string)$item[$i]->column; if ($posts !== '') { $column_id = (isset($item[$i]->id)) ? (string)$item[$i]->id : ''; $key = $posts; $type = (string)$item[$i]->type; $values = null; if (isset($item[$i]->view->form)) $view_form = ($item[$i]->view->form == 'True') ? 'True' : 'False'; else $view_form = 'False'; } else $view_form = 'False'; if ($view_form == 'True') { switch ($type) { case 'checkbox': case 'checkdate': $activation = True; if (isset($item[$i]->count) and $item[$i]->count !== ''){ $ccolumn =(string)$item[$i]->count; if (isset($_POST[$ccolumn])) { $txtonly = $_POST[$ccolumn]; $txtonly = html_entity_decode($txtonly); $txtonly = str_replace(" ", '', $txtonly); //$txtonly = str_replace(" ", '', $txtonly); $txtonly = preg_replace('/&([a-zA-Z0-9]{2,6}|#[0-9]{2,4});/', '', $txtonly); $txtonly = str_replace('|+|amp|+|', '&', $txtonly); $txtonly = strip_tags($txtonly); $txtonly = trim($txtonly); $len = mb_strlen($txtonly, 'UTF-8'); if ( $len > 1200 and in_array($_POST['sitepart_id'], array(1, 3, 21)) ) { $values = null; break; } } } if (isset($_POST[$posts])){ $values = '1'; $checkdated = True; } else { $values = '0'; $checkdated = False; } $activation = True; break; case 'file': $file_increment[$fa] = $i; $activation = False; $fa ++; break; case 'increment': $activation = False; break; case 'lookup': $values = (isset($_POST[$posts])) ? (int)$_POST[$posts] : 0; write_log($posts.'='.$values); $activation = True; break; case 'date': $values = (isset($_POST[$posts])) ? $_POST[$posts] : ''; $activation = True; break; case 'user': $values = (isset($_POST[$posts])) ? (int)$_POST[$posts] : 0; $activation = True; break; case 'password': $values = (isset($_POST[$posts])) ? $_POST[$posts] : 0; $subvalues = (isset($_POST[$posts."_2"])) ? $_POST[$posts."_2"] : 0; if ($values == $subvalues) { //$values = crypt($values, substr($values, 0, 2)); $values = crypt($values, base64_encode($values)); } break; default: $values = (isset($_POST[$posts])) ? $_POST[$posts] : ''; $values = str_replace('img src="../images', 'img src="http://www.argumenti.ru/images', $values); //хак для полного адреса фоток $values = str_replace('img src="../photo', 'img src="http://www.argumenti.ru/photo', $values); //хак для полного адреса фоток //$values = preg_replace('//Uis', '', $values); $values = str_replace('http://www.instagram.com', 'https://www.instagram.com', $values); $values = str_replace('http://www.youtube.com', 'https://www.youtube.com', $values); $values = str_replace('http://ok.ru', 'https://ok.ru', $values); $values = str_replace('http://vk.com', 'https://vk.com', $values); if ($type == 'text') { //$values = $filter->source($values)->entity('html'); $values = htmlspecialchars_decode($values); } else if ($type == 'textareatiny'){ $values = str_replace('
', '
', $values);	

						$maxAllowedLength = 65535;
						
						if (isset($item[$i]->longtextfile) and strlen($values) >= $maxAllowedLength ) {
							$htmlfile = set('site_fold').$item[$i]->longtextfile.'/'.$increment_value.'.html';


							file_put_contents($htmlfile, $values);
							$activation = False;
						}	

                   // } else {
						
						
					}

					$values = addslashes($values);

					
					$vald_type = (string)$item[$i]->validate->type;
					$errors = validate($values, $vald_type);

					if ($errors == 0) {
						$err_value = 'error';
						if ($item[$i]->validate->critic)
							$errresult = true;
						}
					else {
						/*$err_value = 'hidden';
						if ($tip_reg) {
							$tip_type = ($item[$i]->tipograf->type != '') ? $item[$i]->tipograf->type : 'standart';
							$tip_kill = ($item[$i]->tipograf->killstyle == 'true') ? true : false;
							$values = tipograf($values, $tip_type, $tip_kill);
						}*/
					}
					$activation = True;
					break;
			}


			//типографика
			$tip_reg = False;
		/*	if ($item[$i]->typograf == 1 and $tip_reg){
				$jerrors = null;
				$jevix = new Jevix();
				$values = $jevix->parse($values, $jerrors);
				write_log($jevix->parse('\"Зениит\"', $jerrors));
				$values = tp_quotes($values);
			}*/


			$exxmlwhere = '';
			//экслюзивность значения, в остальных полях идет сброс его
			if (isset($item[$i]->exclusive) and $item[$i]->exclusive->value !== $values) {
				$exclusives[$posts] = array('value'=>$values, 'reset'=>$item[$i]->exclusive->value);
				if (isset($item[$i]->exclusive->where))
					$exxmlwhere = trim($item[$i]->exclusive->where);
					if ($exxmlwhere !== '') {
						$exclusives[$posts]['where'] = $item[$i]->exclusive->where;
					}
					if (isset($item[$i]->exclusive->wherefields)){
						$exclusives[$posts]['wherefields'] = explode(',', $item[$i]->exclusive->wherefields);

					}
				else
					$exxmlwhere = '';
			}


			if ($type != 'file') {
				$_SESSION['errors'][$posts] = $err_value;
				$_SESSION['value'][$posts] = $values;
			}
			if (!$errresult) {
				if ($activation) {
					if ($posts !== '') {
						$history_items[$posts] = $values; //без кавычек
						$values = chr(39).$values.chr(39);
						$save_items[$posts] = $values;
						
						$posts = '`'.$posts.'`';
						if ($action == 'insert') {
							$incolumns .= SqlAddSpec($incolumns, 0).$posts;
							$value_insert .= SqlAddSpec($value_insert, 0).$values;
							if ($type == 'checkdate' and $checkdated) {
								$incolumns .= SqlAddSpec($incolumns, 0). separ($item[$i]->fieldate);
								$value_insert .= SqlAddSpec($value_insert, 0).quote(date('Y-m-d G:i:s'));
							}
						}
						else if ($action == 'update') {
							//	if ($item[$i]->filter) {
							//	if (isset($_GET[$posts]) && (int)$_GET[$posts] != $values) {
							//		$div_res = 'content';
							//		$admin_res = 'selectall';
							//	}
							//	}
							
							if ($values !== null)
								$sql_update .= SqlAddSpec($sql_update, 0).$posts.' = '.$values;
							
							if ($type == 'checkdate' and $checkdated) { # публикация

								$actupdate = separ($item[$i]->fieldate).' = '.quote(date('Y-m-d G:i:s'));

								//$actupdate = 'UPDATE '.$maintable.' SET  '.$actupdate.' WHERE '.separ($increment).' = '."'".$increment_value."'".' AND '.separ($item[$i]->fieldate).' = '.quote('0000-00-00 00:00:00').' OR '.separ($item[$i]->fieldate).'  IS NULL';
								$actupdate = 'UPDATE '.$maintable.' SET  '.$actupdate.' WHERE '.separ($increment).' = '."'".$increment_value."'".' AND '.separ($item[$i]->fieldate).'  IS NULL';
								mysqli_query($this->link, $actupdate) or write_log('Ошибка mysqli: '.mysqli_error().' SQL:'.$actupdate);
								db_get( $actupdate, 'db2'); //временно вместо history db

								# дата
								$actupdate = 'UPDATE '.$maintable.' SET  '.$actupdate.' WHERE '.separ($increment).' = '."'".$increment_value."'".' AND '.separ($item[$i]->fieldate).'='.quote('0000-00-00 00:00:00');
								mysqli_query($this->link, $actupdate) or write_log('Ошибка mysqli: '.mysqli_error().' SQL:'.$actupdate);
								db_get( $actupdate, 'db2'); //временно вместо history db

								# user activate
								if (isset($item[$i]->curruser)) {
									$usersql = 'UPDATE '.$maintable.' SET  '.separ($item[$i]->curruser).'='.$this->userid.' WHERE '.separ($increment).' = '."'".$increment_value."'";
									mysqli_query($this->link, $usersql) or write_log('Ошибка mysqli: '.mysqli_error().' SQL:'.$usersql);
									db_get( $usersql, 'db2'); //временно вместо history db
								}
							}
						}
					}
				}
			}
		}	

		//копим все полученные значения с ключом
		$allvalues[$key] = $values;



	}


	if ($errresult) {
		$_SESSION['ferror'] = 1;
		$newaction = ($action == 'update') ? 'edit' : 'add';
		echo("");
	}
	else {
	    $_SESSION['ferror'] = 0;
		if ($action == 'insert'){
			$sqltext = 'INSERT INTO '.$maintable.' ('.$incolumns.') VALUES ('.$value_insert.')';
			$sqlres = mysqli_query($this->link, $sqltext);
		}	
		else if ($action == 'update') {
			$sqltext = 'UPDATE '.$maintable.' SET  '. $sql_update.' WHERE '.$increment.' = '."'".$increment_value."'";
			$sqlres = mysqli_query($this->link, $sqltext);
		}	

		if (!$sqlres)
		 	write_log('Ошибка mysqli: '.mysqli_error().' sql:'.$sqltext);

		if ($sqlres) { //если запрос прошел успешно
			if ($action == 'insert') {  // значение инкремента
				$inc_indx = mysqli_insert_id($this->link);
				
				//echo 'созданный id = '.mysqli_insert_id($this->link);
			}	
			else {
				$inc_indx = $increment_value;
			}	

			$save_items[$increment] = $inc_indx;
			$history_items[$increment] = $inc_indx;

			//обработка экслюзивных значений
			if (isset($exclusives)) {
				foreach ($exclusives as $exc_key => $excl){
					$exupdwhere = ' WHERE '.$exc_key.' = '.$excl['value'].'  AND '.$increment.' <> '."'".$inc_indx."'";
					if (isset($excl['where'])){
						$exwhere = $excl['where'];
						preg_match_all("{(\w+)}", $exwhere, $exwherearr);
						if (isset($exwherearr)) {
							foreach ($exwherearr as $exwh){
								$key = $exwh[1];
								if (isset($allvalues[$key]));
									$exwhere = str_replace('{'.$exwh[0].'}', $allvalues[$key], $exwhere);
							}
						}
						$exupdwhere .= ' AND '.$exwhere;
					}

					if (isset($excl['wherefields'])){
						foreach ($excl['wherefields'] as $exfvalue){
							$exfvalue = trim($exfvalue);
							if ($allvalues[$exfvalue] > 0) {
								$exupdwhere .= ' AND '.separ($exfvalue).'='.$allvalues[$exfvalue];
								break;
							}
						}
					}

					$upd_sql = 'UPDATE '.$maintable.' SET '.$exc_key.'='.$excl['reset'].$exupdwhere;
					write_log('exclusive: '.$upd_sql);
					
					$upd_result = mysqli_query($this->link, $upd_sql);
					if (!$upd_result) {
						write_log('Ошибка mysqli: '.mysqli_error().' SQL:'.$upd_sql);
					} else {
						db_get( $upd_sql, 'db2'); //временно вместо history db
					}	
				}
			}

			
			for ($l = 0; $l < $fa; $l ++) { //загрузка файло
				$indx = $file_increment[$l];
				$column = (string)$item[$indx]->column;
				if(isset($_FILES[$column])){
					if ($_FILES[$column]["name"] != '') {
						$f_exp = fileexpansion($_FILES[$column]["name"]);
						//if (in_array($f_exp, array('jpg','jpeg','JPG', 'gif', 'png', 'swf'))){
							$upfolder = SITEPATH.$item[$indx]->folder;

							 if (isset($item[$indx]->dateversion)) {
							     $currversion = date('Ymdhis');
                                 $newfname =  $currversion.'-'.$inc_indx.'.'.$f_exp;
                                 $newfilename = $upfolder.'/'.$newfname;
							 }
							 else {
                                 $newfname =  $f_exp;
                                 $newfilename = $upfolder.'/'.$inc_indx.'.'.$f_exp;
							 }


							 if (file_exists($_FILES[$column]["tmp_name"])){
								if (!is_writable($upfolder))
									echo 'нет прав на запись в папку '.$upfolder;
								else {
									if (copy($_FILES[$column]["tmp_name"], $newfilename)){
										$sql_add_file = 'UPDATE '.$maintable.' SET '.$column.' = '."'".$newfname."'".' WHERE '.$increment.' = '.$inc_indx;
										$file_update = mysqli_query($this->link, 'UPDATE '.$maintable.' SET '.$column.' = '."'".$newfname."'".' WHERE '.$increment.' = '.$inc_indx);
										db_get( $sql_add_file, 'db2'); //временно вместо history db
									}	
									else
										echo 'не удалось скопировать '.$newfilename;
								}
								
								unlink($_FILES[$column]["tmp_name"]);
							}	
							else
								echo 'не найден файл '.$_FILES[$column]["tmp_name"];
							
						}
					//}
			
				}
				if (isset($_POST['DFile_'.$column])){ //признак или несуществующего  файла
						
						$file_update = mysqli_query($this->link, 'UPDATE '.$maintable.' SET '.$column.' = '."''".' WHERE '.$increment.' = '.$inc_indx);
						if (!$file_update)
							write_log('Ошибка mysqli: '.mysqli_error());
				
				}		
			}
		}

		//request duplication
		//copy_sql( $sqltext );

		if ($action == 'update')
			unlock_id($nametable, $inc_indx, $_SERVER['PHP_AUTH_USER']);

		$increm = ($action == 'insert') ? $inc_indx : $increment_value;

		define('INC_VALUE', $increm);
		//add_q((string)$nametable, $increm); //добавить очередь
		$history_save = True;

		if ($history_save) {
			$currdate = date('Y-m-d H:i:s'); //текущая дата
			$histoty_file = set('site_fold_ad').'history/'.$nametable.'/'.date_to_url($currdate, False).'/'.$nametable.'_'.$increm.'_'.date_to_url($currdate, True,'_').'.json'; //файл истории запроса sql
			save($histoty_file, json_encode($save_items)); //сохраняем историю
			history_db( $nametable, $history_items ); //сохраняем во вторую базу
		}

		if (isset($fcache))
			delete_cache($fcache, $increm);


		if (isset($count_items))
			counts($count_items, $allvalues);

		
		write_log($_SERVER['PHP_AUTH_USER'].': '.'table='.$maintable.':action='.$action.':id='.$inc_indx.' save:'.$histoty_file, 'log/edition.log');
		echo("");
	}

break;


case "unlock":  
	unlock_id($nametable, $increment_value, $_SERVER['PHP_AUTH_USER']);
break;

  case "delete":

	if ($this->groupid > 1)
  		break;


	if (isset($_GET['increment']))
	    $increment_value = (int)($_GET['increment']);
	else
	    $increment_value = 0;

	if ($increment_value > 0)
	    $sql_delete = mysqli_query ($this->link, 'DELETE FROM '.$maintable.' WHERE '.$increment.' = '."'".$increment_value."'");
    if (isset($fcache))
		delete_cache($fcache, $increment_value);

	write_log($_SERVER['PHP_AUTH_USER'].': '.'table='.$maintable.':action=delete :id='.$increment_value, 'log/edition.log');
	echo("");

   break;

 }

 }
 }