1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
<?php
header('Content-type: text/html; charset=utf-8');
include('connec.php');
// user ˹ҹҧ Է˹ҹ
if((isset($_SESSION['user_name_']) && $_SESSION['username_']!="") || (isset($_SESSION['password_']) && $_SESSION['password_'])){
$sqlx="select user,pass from cms_main_user where user='".$_SESSION['username_']."' and pass='".$_SESSION['password_']."'";
$resultx=mysql_query($sqlx);
$num = mysql_num_rows($resultx);
if(($num>0) and ($_SESSION['web_name']!=$name_folder)){
session_unregister("id_user_admin");
session_unregister("name_post");
session_unregister("name_email");
session_unregister("username_");
session_unregister("password_");
session_unregister("admin_web");
session_unregister("module_access");
print "<meta http-equiv=refresh content=0;URL=index.php>";
}
}
$_SESSION['web_name'] = $name_folder;
$sql_thm = "SELECT home_template FROM cms_main_themes";
$que_thm = mysql_query($sql_thm);
$thm = mysql_fetch_assoc($que_thm);
$curr_thm = str_replace('t', 'v', $thm['home_template']);
$sql_core = "SELECT * FROM cms_main_themes WHERE id = '$curr_thm'";
$que_core = mysql_query($sql_core);
$core = mysql_fetch_assoc($que_core);
$_SESSION['web_main'] = isset($core['web_main']) && $core['web_main'] != '' ? $core['web_main'] : 'coremain';
include($_SESSION['web_main'].'/function_theme.php');
include($_SESSION['web_main'].'/index.php');
function import_request_variables($g, $prfix) {
foreach ($_GET as $k => $v) {
$v_name = $prfix . $k;
global $$v_name;
${$prfix . $k} = trim($v);
}
foreach ($_POST as $k => $v) {
$v_name = $prfix . $k;
global $$v_name;
${$prfix . $k} = trim($v);
}
}
?>
|