<?php
session_start();
//ini_set('display_errors', 1);
//require_once("../include/funzioni.php");
//GESTIONE MENU//	

//colori delle sezioni
#999999 //grigio home
#266dbb //blu utenti
#b545bf //viola stanze
#227338 //verde collezioni
#963a40 //rosso pagine
#024c5f //petrolio eventi
#d18300 //arancio news
#D4C522 //giallone prodotti
#5F703E //oliva ordini  

//CREO I MENU
//talmente facile che non commento nemmeno

unset($permessi, $arrayLink);
$permessi = array("9");
$arrayLink[] = array("index.php","Resoconto", "icon-home");
$arrayLink[] = array("elenco.php","Contenuti Home", "icon-list");
$arrayLink[] = array("aggiungi.php","Aggiungi Contenuto", "icon-plus-sign");
$arrayLink[] = array("newsletter.php","Newsletter", "icon-envelope-alt");
$arrayLink[] = array("traduzioni.php","Traduzioni", "icon-list");
$sezioni[] = array("Home", "home", "#999999", $arrayLink, "index.php", $permessi);

unset($permessi, $arrayLink);
$permessi = array("9");
$arrayLink[] = array("elenco.php","Elenco Utenti", "icon-list");
$arrayLink[] = array("aggiungi.php","Aggiungi Utente", "icon-plus-sign");
$sezioni[] = array("Utenti", "utenti", "#266dbb", $arrayLink, "elenco.php", $permessi);

unset($permessi, $arrayLink);
$permessi = array("9");
$arrayLink[] = array("elenco.php","Elenco Pagine", "icon-list");
$arrayLink[] = array("aggiungi.php","Aggiungi Pagina", "icon-plus-sign");
$arrayLink[] = array("categorie.php","Categorie", "icon-tags");
$sezioni[] = array("Pagine", "pagine", "#963a40", $arrayLink, "elenco.php", $permessi);

unset($permessi, $arrayLink);
$permessi = array("9");
$arrayLink[] = array("elenco.php","Elenco News", "icon-list");
$arrayLink[] = array("aggiungi.php","Aggiungi News", "icon-plus-sign");
$arrayLink[] = array("categorie.php","Categorie", "icon-tags");
$sezioni[] = array("News", "news", "#d18300", $arrayLink, "elenco.php", $permessi);

//FINE GESTIONE MENU//

//DIMENSIONI IMMAGINI STANDARD altezza-larghezza-nome-1croppata0noncroppata    //
$dimensioniImm = array(
"50x50-tp-1",
"75x75-tm-1",
"100x100-tg-1",
"270x180-pc-1",
"570x375-mc-1",
"1170x600-gc-1",
"270x9000-p-0",
"570x9000-m-0",
"1170x9000-g-0",
"340x120-hpgc-1",
"750x750-sb-0"

);



//RECUPERO VARIABILI DA URL E CREO CONNESSIONI//
$url = $_SERVER['PHP_SELF'] ;
$explode_url = explode("/", $url);
$cartella = $explode_url[2];
$pagina = $explode_url[3];

$numUploader = 0;

$nome_sqle = $_SERVER['DOCUMENT_ROOT'];
$nome_sqle = explode("/", $nome_sqle);
$nome_sql = $nome_sqle[4];
define("__BASEURL__", "/");

//DEFINE UNICO PER ATTIVARE SEO
define("__SEO__", "0");


define("__SITEURL__", "https://www.pmlab.it/");


$nome_mysql = str_replace(".", "_", $nome_sql);
define("__SERVERURL__", __SITEURL__.'bn/');
define("__SERVER__", "/var/www/vhosts/beenetwork.it/httpdocs/");
require_once("../../include/beenetwork/eliseo/funzioni.php");

$DB_User = "c43ut3hs_bee";
$DB_Pass = "-RYXd9fLQ44jHJviA7JG";
$DB_Name = "c43ut3hs_pmlab_it";
$DB_Host = "localhost";


$DB_Conn = mysql_connect($DB_Host, $DB_User, $DB_Pass) or die(mysql_error());
mysql_select_db($DB_Name, $DB_Conn) or die(mysql_error());
//FINE RECUPERO E CONNESSIONI//


mysql_query("SET character_set_results = 'utf8', character_set_client = 'utf8', character_set_connection = 'utf8', character_set_database = 'utf8', character_set_server = 'utf8'");

//PROMEMORIA AVVISI NUOVI DI BOOTSTRAP//
//alert-error, alert-success, alert-info e alert-warning


//GESTIONE LOGIN//

	//!!!!!! DA RIVEDERE GESTIONE PERMESSI
	 
	 if($_COOKIE['cookid'] != ""){
	$U = mysql_query("SELECT * FROM utenti WHERE ID = '" . $_COOKIE['cookid'] . "'")or die(mysql_error());
	$u = mysql_fetch_array($U);
	if($u['Stato'] == "9" || $u['Stato'] == '7' || $u['Stato'] == '8')
	{
		$_SESSION['admin'] = '1';
		$_SESSION['nome_admin'] = $u['Nome'];
		$_SESSION['ID_admin'] = $u['ID'];
		$_SESSION['Stato_admin'] = $u['Stato'];
		

		if($u['Stato'] == '7'){
			header("Location: ../news/elenco.php");
		}
		if($u['Stato'] == '8'){
			header("Location: ../ordini/elenco.php");
		}
		
	 }
	 }
if($_POST['invia'] == "Entra")
{
	$U = mysql_query("SELECT * FROM utenti WHERE Email = '" . $_POST['username'] . "' AND Password = '" . md5($_POST['password']) . "'")or die(mysql_error());
	$u = mysql_fetch_array($U);
		if($_POST['ricordati'] == '1'){
	setcookie("cookid", $u['ID'], time()+60*60*24*100, "/");
		}
	if($u['Stato'] == "9" || $u['Stato'] == '7' || $u['Stato'] == '8')
	{
		$_SESSION['admin'] = '1';
		$_SESSION['nome_admin'] = $u['Nome'];
		$_SESSION['ID_admin'] = $u['ID'];
		$_SESSION['Stato_admin'] = $u['Stato'];
		

		if($u['Stato'] == '7'){
			header("Location: ../news/elenco.php");
		}
		if($u['Stato'] == '8'){
			header("Location: ../ordini/elenco.php");
		}
		
	}
}
if($_GET['l'] == "1")
{
		$_SESSION['admin'] = '';
		$_SESSION['nome_admin'] = '';
		$_SESSION['ID_admin'] = '';
	header("Location: ../index.php?m=2");
}
if($_SESSION['admin'] != '1')
{
	header("Location: ../index.php?m=1");
}			  
if($cartella != "ordini" && $_SESSION['Stato_admin'] == '8'){
	header("Location: ../ordini/elenco.php"); }
if($cartella != "news" && $_SESSION['Stato_admin'] == '7'){
	header("Location: ../news/elenco.php"); }
	//!!!!!!DA RIVEDERE GESTIONE PERMESSI
//FINE GESTIONE LOGIN//

//UPLOADER MULTIPLO//
	
	//AGGIORNO TUTTI I DATI DA RICE
	//GUARDO CHE UPLOADER HO
	$uploaderPresenti = $_POST['uploaderPresenti'];
	foreach($uploaderPresenti as $idUploader){ 
	
	
	$tabellaSql = $_POST['tabella' . $idUploader];
	$tipoSql = $_POST['tipo' . $idUploader];
	$cartellaSql = $_POST['cartella' . $idUploader];
	
	
	if($_POST['classico'.$idUploader.''] == '1'){
		
		//� un classico, sposto anche il file
		$file = $_FILES['classicoFile'.$idUploader.''];
		//se il file non � vuoto e se sono in MODIFICA
		if($file['name'] != "" && $_POST['id_hid'] < 10000){
		$nomeFile = $file['name'];

		$lungNomeFile = strlen($nomeFile);
		$puntoNomeFile = strpos($nomeFile, '.');
		$taglio = $lungNomeFile - $puntoNomeFile - 1;
		$taglioSql = $lungNomeFile - $puntoNomeFile;
		$estFile = substr($nomeFile, "-" . $taglio);
		$estFile = strtolower($estFile);
		$nomeFileSql = substr($nomeFile, 0, "-" . $taglioSql);
		$nomeFileIntSql = "" . $nomeFileSql . "." . $estFile . "";
		$rand = rand(0,1000);
		$nomeFileIntSqlRand = "" . $nomeFileSql . "_" . $rand . "." . $estFile . "";

		move_uploaded_file($file['tmp_name'],"../../" . $cartellaSql . "/" . $nomeFileIntSqlRand . "");
		
		if($_POST['multi'.$idUploader] == "false"){
			mysql_query("DELETE FROM $tabellaSql WHERE Tipo = '$tipoSql' AND Incrocio = '$_POST[id_hid]'")or die(mysql_error());
		}
		mysql_query("INSERT INTO $tabellaSql (File, Nome, Estensione, Tipo, Incrocio, Ordinamento, DataCaricamento) VALUES ('$nomeFileIntSqlRand', '". $nomeFileSql . "_" . $rand . "', '$estFile', '$tipoSql', '$_POST[id_hid]', '99', NOW())")or die(mysql_error());
		//riprendere con aggiungi
		
		}
	
	} //FINE if classico
	
	//TOLGO TEMP DA DB
	//mysql_query("UPDATE $tabellaSql SET Temp = '', Incrocio = '$id' WHERE Temp = '$temp'")or die(mysql_error());
	if($_POST['estensione'.$idUploader] == "immagini"){
		
	$F = mysql_query("SELECT * FROM $tabellaSql WHERE Tipo = '$tipoSql' AND Incrocio = '$id'")or die(mysql_error());
	while($f = mysql_fetch_array($F)){ 
		//SONO IMMAGINI, LE COPIO TUTTE
		foreach($_POST['dimImm'.$idUploader] as $dim){
			$dimExpl = explode("-", $dim);
			$dimFile = $dimExpl[1];
			
	copy("../temp/" . $f['Nome'] . "_" . $dimFile . "." . $f['Estensione'] . "", "../../" . $cartellaSql . "/" . $f['Nome'] . "_" . $dimFile . "." . $f['Estensione'] . "");
	}
	}
}
	
	
	
	if($_POST['estensione'.$idUploader] != "immagini"){
		
	$F = mysql_query("SELECT * FROM $tabellaSql WHERE Tipo = '$tipoSql' AND Incrocio = '$id'")or die(mysql_error());
	while($f = mysql_fetch_array($F)){ 
	
	copy("../temp/" . $f['Nome'] . "." . $f['Estensione'] . "", "../../" . $cartellaSql . "/" . $f['Nome'] . "." . $f['Estensione'] . "");
	}
	}
	}

//AGGIORNO DESCRIZIONI FILE UPLOADER
$uploaderPresentiT = $_POST['uploaderPresenti'];
if(! empty($uploaderPresentiT)){
	$k = 0;
	foreach($uploaderPresentiT as $uploader){
		
		$idPagina = $_POST['id_hid'];
		$tabella = $_POST['tabella' . $k];
		$tipo = $_POST['tipo' . $k];

		$F = mysql_query("SELECT * FROM $tabella WHERE Temp = '$idPagina'")or die(mysql_error());
		if($_POST['id_hid'] < 10000){
		$F = mysql_query("SELECT * FROM $tabella WHERE Incrocio = '$idPagina' AND Tipo = '$tipo'")or die(mysql_error());
		}
		while($f = mysql_fetch_array($F)){
			$descrizione = mysql_real_escape_string($_POST['descrizione'.$f['ID'] . '' . $tabella . '']);
			if($_POST['descrizione'.$f['ID'] . '' . $tabella . ''] != ""){
			mysql_query("UPDATE $tabella SET Descrizione = '$descrizione' WHERE ID = '$f[ID]'")or die(mysql_error()); }
			
			$ordine = $_POST['ordineUploader'.$k];
			$lenght = count($ordine);
			for($i = 0; $i < $lenght; $i++)
			{
				mysql_query("UPDATE $tabella SET Ordinamento = '$i' WHERE ID = '" . $ordine['' . $i] . "'")or die(mysql_error());
			}
			
		}
		$k++;
	}
}
//FINE GESTIONE UPLOADER MULTIPLO//	

//CREO VARIABILE DATA PER LE VARIE PAGINE//
$data = date('d/m/Y');


?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
<title>CMS | <?= $nome_sql ?></title>

<meta name="viewport" content="width=device-width, initial-scale=1.0">
    

<!-- Le styles -->
    
<link rel="stylesheet/less" href="<?= __SITEURL__ ?>admin/less/bootstrap.less">
<script src="<?= __SITEURL__ ?>admin/js/less-1.3.0.min.js"></script>

<!-- Script per sviluppo TOGLIERE IN PRODUZIONE -->


<link href="<?= __SITEURL__ ?>admin/css/bootstrap-responsive.css" rel="stylesheet">

<!--[if lt IE 9]>
<script src="http://html5shim.googlecode.com/svn/trunk/html5.js"></script>
<![endif]-->
 
<!-- DA AGGIUNGERE ICONVE VARIE E POI TOGLIERE QUESTO COMMENTO -->
<link rel="shortcut icon" href="../assets/ico/favicon.ico">
<link rel="apple-touch-icon-precomposed" sizes="144x144" href="../assets/ico/apple-touch-icon-144-precomposed.png">
<link rel="apple-touch-icon-precomposed" sizes="114x114" href="../assets/ico/apple-touch-icon-114-precomposed.png">
<link rel="apple-touch-icon-precomposed" sizes="72x72" href="../assets/ico/apple-touch-icon-72-precomposed.png">
<link rel="apple-touch-icon-precomposed" href="../assets/ico/apple-touch-icon-57-precomposed.png">












<script src="https://code.jquery.com/jquery-1.7.min.js"></script>
 
<!-- JQUERY UI DA PROBLEMI CON BOOTSTRAP -->
<!--<script src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js"></script>-->
<!--<link type="text/css" href="<?= __SERVERURL__ ?>eliseo/admin/css/ui-lightness/jqueryLightness.css" rel="stylesheet" />-->

<!-- SCRIPT ELISEO -->
<script src="<?= __SERVERURL__ ?>eliseo/admin/include/scripts.js" type="text/javascript"></script>
<script src="<?= __SERVERURL__ ?>eliseo/admin/include/ajax.php" type="text/javascript"></script>

<!-- UPLOADER PER BOOTSTRAP -->
<script src="<?= __SERVERURL__ ?>eliseo/admin/include/upload/client/fileuploaderBoot.js" type="text/javascript"></script>
<link href="<?= __SERVERURL__ ?>eliseo/admin/include/upload/client/fileuploaderBoot.css" rel="stylesheet" type="text/css" />

<!-- SHADOWBOX -->
<link rel="stylesheet" type="text/css" href="<?= __SERVERURL__ ?>eliseo/admin/include/shadowbox/shadowbox.css">
<script type="text/javascript" src="<?= __SERVERURL__ ?>eliseo/admin/include/shadowbox/shadowbox.js"></script>

<!-- EDITOR TINYMCE -->
<script type="text/javascript" src="<?= __SITEURL__ ?>admin/include/editor/tinymce/jscripts/tiny_mce/tiny_mce.js" ></script>
<script type="text/javascript" >
tinyMCE.init({
        mode : "textareas",
        theme : "advanced",
		width : "100%",
		height: "300",
		convert_urls : false,
		theme_advanced_layout_manager : "SimpleLayout",
		 theme_advanced_buttons1 : "bold,italic,underline, separator, bullist,numlist,separator, link,unlink,separator,undo,redo, separator, removeformat, code",
        theme_advanced_buttons2 : "",
        theme_advanced_buttons3 : "",
		plugins : "paste",
        paste_auto_cleanup_on_paste : true,
        paste_preprocess : function(pl, o) {
            // Content string containing the HTML from the clipboard
            o.content = "" + o.content;
        },
        paste_postprocess : function(pl, o) {
            // Content DOM node containing the DOM structure of the clipboard
            o.node.innerHTML = o.node.innerHTML + "";
        }  
});
</script>
<!-- FINE EDITOR -->


<!--<link href="<?= __SERVERURL__ ?>eliseo/admin/css/main.css" rel="stylesheet" type="text/css" />
<link href="<?= __SERVERURL__ ?>eliseo/admin/css/dettagli.css" rel="stylesheet" type="text/css" />
<link href="<?= __SERVERURL__ ?>eliseo/admin/css/elenchi.css" rel="stylesheet" type="text/css" />-->

<!-- ULTIMI CSS VARI -->
<link href="<?= __SERVERURL__ ?>public/css/admin/main.css" rel="stylesheet" type="text/css"> <!-- comune da server -->
<link href="<?= __SITEURL__ ?>admin/css/main.css" rel="stylesheet" type="text/css"> <!-- locale -->
<link href="<?= __SERVERURL__ ?>eliseo/admin/css/calendario.css" rel="stylesheet" type="text/css" />
<link href="<?= __SERVERURL__ ?>eliseo/admin/css/bottoni.css" rel="stylesheet" type="text/css" />
<link type="text/css" href="<?= __SERVERURL__ ?>eliseo/admin/css/ui-lightness/jqueryLightness.css" rel="stylesheet" /> <!--jQuery UI-->
<!-- FINE -->

</head>
<body>




<div class="testata">
<div class="container container-testata">
<div class="row">


<div class="span4">
<div class="titoloSito" >
<a id="prependedInput" href="https://<?= $nome_sql ?>/it/index.html" target="_blank"><?= $nome_sql ?></a>
</div>
</div>


<div class="span3 offset5">
<div class="btn-group pull-right">
<button class="btn dropdown-toogle" data-toggle="dropdown"><i class="icon-user"></i> Ciao <strong><?= $_SESSION['nome_admin'] ?></strong> <i class="icon-chevron-down pull-right"></i> &nbsp;</button>
<ul class="dropdown-menu">
  <li><a href="../utenti/modifica.php?ID=<?=$_SESSION['ID_admin'] ?>">Modifica i tuoi dati</a></li>
<!--  <li><a href="#">Visualizza i tuoi post</a></li>
  <li><a href="#">Altro</a></li>
-->  <li class="divider"></li>
  <li><a href="#" onclick="LogoutAdmin('<?=$nome_sql?>')" /><i class="icon-off"></i> Logout</a></li>
</ul>
</div>


</div>



<br /><br /><br /><br />




<div class="span12">
<div class="versioneEliseo">2.5</div>

<ul style="margin-bottom:0px; border-bottom:0px;" class="nav nav-tabs menu">

<?php
//STAMPO IL MENU PRINCIPALE DA ARRAY A INIZIO TESTATA
foreach($sezioni as $sezione){ if(in_array($_SESSION['Stato_admin'], $sezione[5])){ ?>
 
<li>  
<a <?php if($cartella == $sezione[1]){ ?>  style="background-color:<?= $sezione[2] ?>; background-image:none; color:#FFF;" <?php $coloreMenu = $sezione[2]; } ?> href="<?=__SITEURL__?>admin/<?=$sezione[1]?>/<?=$sezione[4]?>"><?=$sezione[0]?></a>
</li>

<?php  } }
//FINE MENU
?>

</ul>

</div>






</div></div></div>


<div style="background-color:<?= $coloreMenu ?>;" class="sottoMenu" >
<div class="container">
<div class="row">

<div  class="span12">
<ul style="margin-bottom:0px; padding-top:10px; border-bottom:0px;" class="nav nav-tabs">
<?php
//STAMPO IL MENU SECONDARIO DA ARRAY A INIZIO TESTATA
foreach($sezioni as $sezione){ if(in_array($cartella, $sezione)){ foreach($sezione[3] as $link){		?>
<li  class="<?php if($pagina == $link[0]){ ?>active<?php }?>">
<a href="<?= __SITEURL__ ?>admin/<?= $sezione[1] ?>/<?= $link[0] ?>" ><i class="<?php if($pagina != $link[0]){ ?> <?= $link[2]?> icon-white<?php }?>"></i> <?= $link[1] ?> </a>
</li>
<?php } } }
//FINE MENU
 ?>
</ul>


</div>


</div></div></div>






<div class="contenuto">
<div class="container">
<div class="row">