403Webshell
Server IP : 193.86.120.172  /  Your IP : 216.73.216.215
Web Server : Apache/2.4.63 (Unix)
System : Linux JServices 3.10.108 #86003 SMP Wed Oct 22 13:20:46 CST 2025 x86_64
User : kubec ( 1026)
PHP Version : 8.2.28
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /volume1/web/hotellesnizatisi_cz/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /volume1/web/hotellesnizatisi_cz/new/pokoje-upravit.php
<?php
require_once __DIR__ . '/includes/auth.php';
$user = require_role(['admin', 'manazer']);
require_once __DIR__ . '/includes/layout.php';

$id = isset($_GET['id']) ? (int)$_GET['id'] : null;

$p = [
    'nazev_cs' => '', 'nazev_en' => '', 'nazev_de' => '',
    'popis_cs' => '', 'popis_en' => '', 'popis_de' => '',
    'kapacita' => 2, 'cena_za_noc' => 0, 'jednotka_ceny' => 'za_osobu',
    'poradi' => 0, 'aktivni' => 1,
];

if ($id) {
    $stmt = db()->prepare('SELECT * FROM web_typy_pokoju WHERE id = ?');
    $stmt->execute([$id]);
    $row = $stmt->fetch();
    if (!$row) {
        set_flash('error', 'Pokoj nebyl nalezen.');
        header('Location: pokoje.php');
        exit;
    }
    $p = $row;
}

if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    $values = [
        trim($_POST['nazev_cs'] ?? ''),
        trim($_POST['nazev_en'] ?? ''),
        trim($_POST['nazev_de'] ?? ''),
        trim($_POST['popis_cs'] ?? ''),
        trim($_POST['popis_en'] ?? ''),
        trim($_POST['popis_de'] ?? ''),
        (int)($_POST['kapacita'] ?? 1),
        (float)str_replace(',', '.', $_POST['cena_za_noc'] ?? '0'),
        ($_POST['jednotka_ceny'] ?? '') === 'za_pokoj' ? 'za_pokoj' : 'za_osobu',
        (int)($_POST['poradi'] ?? 0),
        isset($_POST['aktivni']) ? 1 : 0,
    ];

    if ($id) {
        db()->prepare('
            UPDATE web_typy_pokoju SET
                nazev_cs=?, nazev_en=?, nazev_de=?,
                popis_cs=?, popis_en=?, popis_de=?,
                kapacita=?, cena_za_noc=?, jednotka_ceny=?,
                poradi=?, aktivni=?
            WHERE id=?
        ')->execute([...$values, $id]);
        set_flash('success', 'Pokoj byl uložen.');
    } else {
        db()->prepare('
            INSERT INTO web_typy_pokoju
                (nazev_cs, nazev_en, nazev_de, popis_cs, popis_en, popis_de, kapacita, cena_za_noc, jednotka_ceny, poradi, aktivni)
            VALUES (?,?,?,?,?,?,?,?,?,?,?)
        ')->execute($values);
        set_flash('success', 'Nový pokoj byl přidán.');
    }

    header('Location: pokoje.php');
    exit;
}

admin_layout_start('pokoje', $id ? 'Upravit pokoj' : 'Přidat pokoj', '', $user);
?>

<form method="post" class="card" style="padding:26px 28px;max-width:680px;">

  <h3 style="font-size:.9rem;margin-bottom:14px;">Čeština</h3>
  <div class="field">
    <label for="nazev_cs">Název</label>
    <input type="text" id="nazev_cs" name="nazev_cs" value="<?= htmlspecialchars($p['nazev_cs']) ?>">
  </div>
  <div class="field">
    <label for="popis_cs">Popis</label>
    <textarea id="popis_cs" name="popis_cs"><?= htmlspecialchars($p['popis_cs']) ?></textarea>
  </div>

  <h3 style="font-size:.9rem;margin:24px 0 14px;border-top:1px solid var(--border);padding-top:20px;">English</h3>
  <div class="field">
    <label for="nazev_en">Název</label>
    <input type="text" id="nazev_en" name="nazev_en" value="<?= htmlspecialchars($p['nazev_en']) ?>">
  </div>
  <div class="field">
    <label for="popis_en">Popis</label>
    <textarea id="popis_en" name="popis_en"><?= htmlspecialchars($p['popis_en']) ?></textarea>
  </div>

  <h3 style="font-size:.9rem;margin:24px 0 14px;border-top:1px solid var(--border);padding-top:20px;">Deutsch</h3>
  <div class="field">
    <label for="nazev_de">Název</label>
    <input type="text" id="nazev_de" name="nazev_de" value="<?= htmlspecialchars($p['nazev_de']) ?>">
  </div>
  <div class="field">
    <label for="popis_de">Popis</label>
    <textarea id="popis_de" name="popis_de"><?= htmlspecialchars($p['popis_de']) ?></textarea>
  </div>

  <div class="field-row" style="margin-top:24px;border-top:1px solid var(--border);padding-top:20px;">
    <div class="field">
      <label for="kapacita">Kapacita (osob)</label>
      <input type="number" id="kapacita" name="kapacita" value="<?= (int)$p['kapacita'] ?>" min="1">
    </div>
    <div class="field">
      <label for="cena_za_noc">Cena za noc (Kč)</label>
      <input type="number" id="cena_za_noc" name="cena_za_noc" step="0.01" value="<?= htmlspecialchars((string)$p['cena_za_noc']) ?>">
    </div>
  </div>

  <div class="field">
    <label for="jednotka_ceny">Jednotka ceny</label>
    <select id="jednotka_ceny" name="jednotka_ceny">
      <option value="za_osobu" <?= $p['jednotka_ceny'] === 'za_osobu' ? 'selected' : '' ?>>Za osobu / noc</option>
      <option value="za_pokoj" <?= $p['jednotka_ceny'] === 'za_pokoj' ? 'selected' : '' ?>>Za pokoj / noc</option>
    </select>
  </div>

  <div class="field" style="max-width:140px;">
    <label for="poradi">Pořadí</label>
    <input type="number" id="poradi" name="poradi" value="<?= (int)$p['poradi'] ?>">
  </div>

  <div class="toggle-row">
    <label for="aktivni">Zobrazit na webu</label>
    <input type="checkbox" id="aktivni" name="aktivni" <?= $p['aktivni'] ? 'checked' : '' ?>>
    <label class="switch" for="aktivni"></label>
  </div>

  <div style="display:flex;gap:10px;margin-top:26px;">
    <button type="submit" class="btn btn-primary">Uložit</button>
    <a href="pokoje.php" class="btn btn-secondary">Zrušit</a>
  </div>
</form>

<?php admin_layout_end(); ?>

Youez - 2016 - github.com/yon3zu
LinuXploit