| Server IP : 85.158.181.41 / Your IP : 216.73.217.12 Web Server : Apache System : Linux cloud9-vm129 6.1.178+1-ph #ph SMP PREEMPT_DYNAMIC Wed Jul 29 09:00:54 UTC 2026 x86_64 User : moncbefd ( 1024) PHP Version : 7.3.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/moncbefd/www.moneta.at/admin/ |
Upload File : |
<?php
/* --------------------------------------------------------------
popup_memo.php 2015-09-28 gm
Gambio GmbH
http://www.gambio.de
Copyright (c) 2015 Gambio GmbH
Released under the GNU General Public License (Version 2)
[http://www.gnu.org/licenses/gpl-2.0.html]
IMPORTANT! THIS FILE IS DEPRECATED AND WILL BE REPLACED IN THE FUTURE.
MODIFY IT ONLY FOR FIXES. DO NOT APPEND IT WITH NEW FEATURES, USE THE
NEW GX-ENGINE LIBRARIES INSTEAD.
--------------------------------------------------------------
based on:
(c) 2000-2001 The Exchange Project (earlier name of osCommerce)
(c) 2002-2003 osCommercecoding standards www.oscommerce.com
(c) 2003 XT-Commerce - community made shopping http://www.xt-commerce.com ($Id: popup_memo.php 1125 2005-07-28 09:59:44Z novalis $)
Released under the GNU General Public License
--------------------------------------------------------------*/
require('includes/application_top.php');
$coo_lang_file_master->init_from_lang_file('lang/' . $_SESSION['language'] . '/admin/customers.php');
if ($_GET['action']) {
switch ($_GET['action']) {
case 'save':
if($_SESSION['coo_page_token']->is_valid($_POST['page_token']))
{
$memo_title = xtc_db_prepare_input($_POST['memo_title']);
$memo_text = xtc_db_prepare_input($_POST['memo_text']);
if ($memo_text != '' && $memo_title != '' ) {
$sql_data_array = array(
'customers_id' => $_POST['ID'],
'memo_date' => date("Y-m-d"),
'memo_title' =>$memo_title,
'memo_text' => nl2br($memo_text),
'poster_id' => $_SESSION['customer_id']);
xtc_db_perform(TABLE_CUSTOMERS_MEMO, $sql_data_array);
}
}
break;
case 'remove':
if($_SESSION['coo_page_token']->is_valid($_GET['page_token']))
{
xtc_db_query("DELETE FROM ".TABLE_CUSTOMERS_MEMO." where memo_id='".$_GET['mID']."'");
}
break;
}
}
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html <?php echo HTML_PARAMS; ?>>
<head>
<meta http-equiv="x-ua-compatible" content="IE=edge">
<meta http-equiv="Content-Type" content="text/html; charset=<?php echo $_SESSION['language_charset']; ?>">
<title><?php echo $page_title; ?></title>
<link rel="stylesheet" type="text/css" href="html/assets/styles/legacy/stylesheet.css">
</head>
<body bgcolor="#FFFFFF" marginwidth="10" marginheight="10" topmargin="10" bottommargin="10" leftmargin="10" rightmargin="10" style="background-color:#ffffff;margin:15px;">
<table border="0" width="100%" cellspacing="0" cellpadding="0">
<tr>
<td>
<div class="pageHeading" style="background-image:url(html/assets/images/legacy/gm_icons/kunden.png)">
<div style="float:left">
<?php echo TITLE_MEMO; ?>
</div>
</td>
</tr>
</table>
<br />
<table border="0" width="100%" cellspacing="0" cellpadding="0" class="pdf_menu">
<tr>
<td width="120" class="dataTableHeadingContent" style="border-right: 0px;">
<?php echo TITLE_MEMO; ?>
</td>
</tr>
</table>
<form name="customers_memo" method="POST" action="popup_memo.php?action=save&ID=<?php echo (int)$_GET['ID'];?>">
<table border="0" width="100%" cellspacing="0" cellpadding="2" class="gm_border dataTableRow">
<tr><td colspan="2" class="main" valign="top"> </td></tr>
<tr>
<td width="100" class="main gm_strong" valign="top">
<?php echo TEXT_TITLE ?>
</td>
<td class="main" valign="top">
<?php echo xtc_draw_input_field('memo_title').xtc_draw_hidden_field('ID',(int)$_GET['ID']); ?>
</td>
</tr>
<tr>
<td width="100" class="main gm_strong" valign="top">
Text
</td>
<td class="main" valign="top">
<?php
echo xtc_draw_textarea_field('memo_text', 'soft', '40', '5');
echo xtc_draw_hidden_field('page_token', $_SESSION['coo_page_token']->generate_token());
?>
</td>
</tr>
<tr>
<td width="100" class="main gm_strong" valign="top">
</td>
<td class="main" valign="top">
<?php echo '<input type="submit" class="button" onClick="this.blur();" value="' . BUTTON_INSERT . '"/>'; ?>
</td>
</tr>
</table>
</form>
<?php
$memo_query = xtc_db_query("
SELECT
*
FROM
" . TABLE_CUSTOMERS_MEMO . "
WHERE
customers_id = '" . (int)$_GET['ID'] . "'
ORDER BY
memo_id
DESC
");
while ($memo_values = xtc_db_fetch_array($memo_query)) {
$poster_query = xtc_db_query("SELECT customers_firstname, customers_lastname FROM " . TABLE_CUSTOMERS . " WHERE customers_id = '" . $memo_values['poster_id'] . "'");
$poster_values = xtc_db_fetch_array($poster_query);
?>
<table border="0" width="100%" cellspacing="0" cellpadding="2" class="gm_border dataTableRow">
<tr>
<td width="100" class="main gm_strong" valign="top">
<?php echo TEXT_DATE; ?>
</td>
<td class="main" valign="top">
<?php echo $memo_values['memo_date']; ?>
</td>
</tr>
<tr>
<td width="100" class="main gm_strong" valign="top">
<?php echo TEXT_TITLE; ?>
</td>
<td class="main" valign="top">
<?php echo htmlspecialchars_wrapper($memo_values['memo_title']); ?>
</td>
</tr>
<tr>
<td width="100" class="main gm_strong" valign="top">
<?php echo TEXT_POSTER; ?>
</td>
<td class="main" valign="top">
<?php echo $poster_values['customers_lastname']; ?> <?php echo $poster_values['customers_firstname']; ?>
</td>
</tr>
<tr>
<td width="100" class="main gm_strong" valign="top">
Text
</td>
<td class="main" valign="top">
<?php echo htmlspecialchars_wrapper($memo_values['memo_text']); ?>
</td>
</tr>
<tr><td colspan="2" class="main" valign="top"> </td></tr>
<tr>
<td width="100" class="main gm_strong" valign="top">
</td>
<td class="main" valign="top">
<a class="button" onClick="this.blur();" href="<?php echo xtc_href_link('popup_memo.php', 'ID=' . $_GET['ID'] . '&action=remove&page_token=' . $_SESSION['coo_page_token']->generate_token() . '&mID=' . $memo_values['memo_id']); ?>" onClick="return confirm('<?php echo DELETE_ENTRY; ?>')"><?php echo BUTTON_DELETE; ?></a>
</td>
</tr>
</table>
<?php
}
?>
</body>
</html>