OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	01/14/2024 11:47:41 AM	rwxr-xr-x
📄 chk.login.php	936 bytes	12/18/2021 04:01:00 AM	rwxr-xr-x
📄 get.section.article.php	41.34 KB	01/14/2024 11:25:58 AM	rw-r--r--
📄 get.section.author.php	12.17 KB	12/28/2021 03:21:00 AM	rwxr-xr-x
📄 get.section.category.php	9.29 KB	12/18/2021 04:01:00 AM	rwxr-xr-x
📄 get.section.general.php	32.43 KB	02/21/2023 05:59:26 AM	rwxr-xr-x
📄 get.section.issue.php	16.68 KB	12/28/2021 02:59:00 AM	rwxr-xr-x
📄 get.section.tag.php	8.79 KB	12/18/2021 04:29:00 AM	rwxr-xr-x
📄 get.section.user.php	14.23 KB	12/18/2021 04:13:00 AM	rwxr-xr-x
📄 get.section.volume.php	12 KB	12/18/2021 04:01:00 AM	rwxr-xr-x
📄 logout.php	93 bytes	12/18/2021 04:01:00 AM	rwxr-xr-x
📄 upload.php	2.3 KB	12/20/2021 11:28:00 PM	rwxr-xr-x

Editing: get.section.general.php

<?
// ACCS Journal: General

include '../inc/validate.logged.php';
include '../../inc/config.php';

$act = '';
if (!empty($_POST)) $act = isset($_POST["act"]) ? $_POST["act"] : '';

// Slide Upload
if ($act == 'slideUpload') {
 $uploadSlideNum = isset($_POST['uploadSlideNum']) ? $_POST['uploadSlideNum'] : '';
 $uploadFile = $_FILES['uploadSlideFile'];
 if (is_uploaded_file($uploadFile['tmp_name'])) {
  $sql = "SELECT slide_file FROM banners WHERE slide_num=$uploadSlideNum";
  $result = mysqli_query($dbpro, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $slide = $row['slide_file'];
   unlink('../../data/slides/' . $slide);
   $sql = "DELETE FROM banners WHERE slide_num=$uploadSlideNum";
   mysqli_query($dbpro, $sql);
  }
  $fileExt = strtolower(pathinfo($uploadFile['name'], PATHINFO_EXTENSION));
  $slideNew = time() . '.' . $fileExt;
  move_uploaded_file($uploadFile['tmp_name'], '../../data/slides/' . $slideNew);
  $sql = "INSERT INTO banners(slide_num,slide_file,date_created) VALUES($uploadSlideNum,'$slideNew',Now())";
  mysqli_query($dbpro, $sql);
 }
}

// Slide PDF Upload
if ($act == 'slideUploadPDF') {
 $uploadSlideNum = isset($_POST['uploadSlideNum']) ? $_POST['uploadSlideNum'] : '';
 $uploadFile = $_FILES['uploadSlideFile'];
 if (is_uploaded_file($uploadFile['tmp_name'])) {
  $fileExt = strtolower(pathinfo($uploadFile['name'], PATHINFO_EXTENSION));
  $slideNew = time() . '.' . $fileExt;
  move_uploaded_file($uploadFile['tmp_name'], '../../data/slides/pdf/' . $slideNew);
  $sql = "UPDATE banners SET slide_pdf='$slideNew' WHERE slide_num=$uploadSlideNum";
  mysqli_query($dbpro, $sql);
 }
}

// Slide Move Down
if ($act == 'moveDn') {
 $slideNum = isset($_POST['slideNum']) ? $_POST['slideNum'] : '';
 if ($slideNum <> '') {
  $sql = "SELECT slide_file FROM banners WHERE slide_num=$slideNum";
  $result = mysqli_query($dbpro, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $slide = $row['slide_file'];
   $sql = "UPDATE banners SET slide_num=slide_num-1 WHERE slide_num=$slideNum+1 AND slide_num>0";
   mysqli_query($dbpro, $sql);
   $sql = "UPDATE banners SET slide_num=slide_num+1 WHERE slide_file='$slide'";
   mysqli_query($dbpro, $sql);
  }
 }
}

// Slide Move Up
if ($act == 'moveUp') {
 $slideNum = isset($_POST['slideNum']) ? $_POST['slideNum'] : '';
 if ($slideNum <> '') {
  $sql = "SELECT slide_file FROM banners WHERE slide_num=$slideNum";
  $result = mysqli_query($dbpro, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $slide = $row['slide_file'];
   $sql = "UPDATE banners SET slide_num=slide_num+1 WHERE slide_num=$slideNum-1 AND slide_num>0";
   mysqli_query($dbpro, $sql);
   $sql = "UPDATE banners SET slide_num=slide_num-1 WHERE slide_file='$slide'";
   mysqli_query($dbpro, $sql);
  }
 }
}

// Slide Delete
if ($act == 'slideDelete') {
 $slideNum = isset($_POST['delId']) ? $_POST['delId'] : '';
 if ($slideNum <> '') {
  $sql = "SELECT slide_file FROM banners WHERE slide_num=$slideNum";
  $result = mysqli_query($dbpro, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $slide = $row['slide_file'];
   unlink('../../data/slides/' . $slide);
   $sql = "DELETE FROM banners WHERE slide_num=$slideNum";
   mysqli_query($dbpro, $sql);
   if ($slideNum > 0) {
    $sql = "UPDATE banners SET slide_num=slide_num-1 WHERE slide_num>$slideNum";
    mysqli_query($dbpro, $sql);
   }
  }
 }
}

// Slide PDF Delete
if ($act == 'slideDeletePDF') {
 $slideNum = isset($_POST['delId']) ? $_POST['delId'] : '';
 if ($slideNum <> '') {
  $sql = "SELECT slide_pdf FROM banners WHERE slide_num=$slideNum";
  $result = mysqli_query($dbpro, $sql);
  $numRows = mysqli_num_rows($result);
  if ($numRows > 0) {
   $row = mysqli_fetch_assoc($result);
   $slide = $row['slide_file'];
   unlink('../../data/slides/pdf/' . $slide);
   $sql = "UPDATE banners SET slide_pdf='' WHERE slide_num=$slideNum";
   mysqli_query($dbpro, $sql);
  }
 }
}

// Update Slide URL
if ($act == 'updateSlideURL') {
 $slideNum = isset($_POST['slideNum']) ? $_POST['slideNum'] : '';
 $slideURL = isset($_POST['slideURL']) ? $_POST['slideURL'] : '';
 if ($slideNum <> '') {
  if ($slideURL <> '') {
   if (substr($slideURL, 0, 4) <> 'http') $slideURL = 'http://' . $slideURL;
  }
  $sql = "UPDATE banners SET slide_url='$slideURL' WHERE slide_num=$slideNum";
  mysqli_query($dbpro, $sql);
 }
}

// Remove Orphan Authors
if ($act == 'removedOrphanAuthors') {
 $sql = "DELETE FROM authors WHERE author_id NOT IN (SELECT author_id FROM article_authors)";
 mysqli_query($dbpro, $sql);
 echo "OK";
}

// Show Delete
if ($act == 'delForm') {
 $slideNum = isset($_POST['id']) ? $_POST['id'] : '';
?>
<div class="popup" style="width:480px">
<div class="widget">
<form id="frmDel" name="frmDel">
 <div class="card">
  <div class="card-header">Delete Slide</div>
 </div>
 <div id="widgetDel_B" style="padding:15px 25px">
<? if ($slideNum == 0) { ?>
  You are about to delete <b>Side Banner</b>
<? } else { ?>
  You are about to delete Header Slide <b><?=$slideNum?></b>
<? } ?>
 </div>
 <div id="widgetDel_F" style="border-top:1px solid #ebedf2;padding:20px 25px;">
  <div class="col">
   <button type="submit" class="btn btn-primary" onclick="return chkDelSlide()">Confirm</button>
   <div id="panelStatus" class="float-right text-sm text-danger" style="margin-top:5px" align="right"></div>
  </div>
 </div>
 <input type="hidden" id="delId" name="delId" value="<?=$slideNum?>" />
 <input type="hidden" id="act" name="act" value="slideDelete" />
</form>
</div>
</div>
<?
}

// Show Delete for PDF
if ($act == 'delFormPDF') {
 $slideNum = isset($_POST['id']) ? $_POST['id'] : '';
?>
<div class="popup" style="width:480px">
<div class="widget">
<form id="frmDel" name="frmDel">
 <div class="card">
  <div class="card-header">Delete Slide PDF</div>
 </div>
 <div id="widgetDel_B" style="padding:15px 25px">
  You are about to delete PDF for Header Slide <b><?=$slideNum?></b>
 </div>
 <div id="widgetDel_F" style="border-top:1px solid #ebedf2;padding:20px 25px;">
  <div class="col">
   <button type="submit" class="btn btn-primary" onclick="return chkDelSlidePDF()">Confirm</button>
   <div id="panelStatus" class="float-right text-sm text-danger" style="margin-top:5px" align="right"></div>
  </div>
 </div>
 <input type="hidden" id="delId" name="delId" value="<?=$slideNum?>" />
 <input type="hidden" id="act" name="act" value="slideDeletePDF" />
</form>
</div>
</div>
<?
}

// Banners
if ($act == 'banners') {
?>
<ol class="breadcrumb mt-4 mb-3">
 <li class="breadcrumb-item"><a href="dashboard.php">Dashboard</a></li>
 <li class="breadcrumb-item">General</li>
 <li class="breadcrumb-item active">Banners</li>
</ol>
<form id="frmSearch" name="frmSearch">
<div class="card">
 <div class="card-header">Select Images</div>
 <div class="card-body">

<?
 $slide1 = '';
 $slideURL1 = '';
 $sql = "SELECT slide_file,slide_url,slide_pdf FROM banners WHERE slide_num=1";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $slide1 = $row['slide_file'];
  $slideURL1 = $row['slide_url'];
  $slidePDF1 = $row['slide_pdf'];
 }
?>
  <label for="slideFile1"><b>Header Banner 1 [size: 800 x 140]</b></label>
  <div class="row">
   <div class="col">
<? if ($slide1 != '') { ?>
    <div class="float-left"><a href="../data/slides/<?=$slide1?>" target="_blank"><img src="../data/slides/<?=$slide1?>" width="75%" /></a></div>
    <div class="float-right text-right">
     <table cellpadding="5" align="right">
     <tr>
      <td></td>
      <td title="Move down" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveDn',1)"><i data-id="1" class="dnRow cursorHand fas fa-angle-down fa-lg"></i></a></td>
      <td title="Delete Banner" align="center"><i data-id="1" class="delRow cursorHand far fa-trash-alt fa-lg"></i></td>
     </tr>
     </table>
    </div>
<? } else { ?>
    <div class="form-inline">
     <div class="form-group mt-2">
      <input type="file" class="form-control" id="slideFile1" name="slideFile1" accept=".png, .jpg, .jpeg" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlide(1)">Upload</button>
     </div>
    </div>
<? } ?>
   </div>
  </div>
<? if ($slide1 != '') { ?>
  <div class="row">
   <div class="col mt-1">
    Choose one of the two below:
   </div>
  </div>
  <div class="row">
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
      Link to &nbsp;&nbsp;<input type="text" class="form-control" id="slideURL1" name="slideURL1" style="width:300px" placeholder="Insert link here (optional)" value="<?=$slideURL1?>" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlideURL(1)">Update</button>
     </div>
    </div>
   </div>
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
<? if ($slidePDF1 == '') { ?>
      Upload PDF &nbsp;&nbsp;<input type="file" class="form-control" id="slidePDF1" name="slidePDF1" accept=".pdf" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlidePDF(1)">Upload</button>
<? } else { ?>
      <div class="mt-2"><a href="../data/slides/pdf/<?=$slidePDF1?>" target="_blank">View Uploaded PDF</a> &nbsp;&nbsp;<i data-id="1" title="Delete PDF" class="delRowPDF cursorHand far fa-trash-alt fa-lg"></i></div>
<? } ?>
     </div>
    </div>
   </div>
  </div>
<? } ?>
  <div class="mt-4" style="border:1px #000 solid"></div>
  <br>

<?
 $slide2 = '';
 $slideURL2 = '';
 $sql = "SELECT slide_file,slide_url,slide_pdf FROM banners WHERE slide_num=2";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $slide2 = $row['slide_file'];
  $slideURL2 = $row['slide_url'];
  $slidePDF2 = $row['slide_pdf'];
 }
?>
  <label for="slideFile2"><b>Header Banner 2 [size: 800 x 140]</b></label>
  <div class="row">
   <div class="col">
<? if ($slide2 != '') { ?>
    <div class="float-left"><a href="../data/slides/<?=$slide2?>" target="_blank"><img src="../data/slides/<?=$slide2?>" width="75%" /></a></div>
    <div class="float-right text-right">
     <table cellpadding="5" align="right">
     <tr>
      <td title="Move up" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveUp',2)"><i data-id="2" class="upRow cursorHand fas fa-angle-up fa-lg"></i></a></td>
      <td title="Move down" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveDn',2)"><i data-id="2" class="dnRow cursorHand fas fa-angle-down fa-lg"></i></a></td>
      <td title="Delete Banner" align="center"><i data-id="2" class="delRow cursorHand far fa-trash-alt fa-lg"></i></td>
     </tr>
     </table>
    </div>
<? } else { ?>
    <div class="form-inline">
     <div class="form-group mt-2">
      <input type="file" class="form-control" id="slideFile2" name="slideFile2" accept=".png, .jpg, .jpeg" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlide(2)">Upload</button>
     </div>
    </div>
<? } ?>
   </div>
  </div>
<? if ($slide2 != '') { ?>
  <div class="row">
   <div class="col mt-1">
    Choose one of the two below:
   </div>
  </div>
  <div class="row">
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
      Link to &nbsp;&nbsp;<input type="text" class="form-control" id="slideURL2" name="slideURL2" style="width:300px" placeholder="Insert link here (optional)" value="<?=$slideURL2?>" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlideURL(2)">Update</button>
     </div>
    </div>
   </div>
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
<? if ($slidePDF2 == '') { ?>
      Upload PDF &nbsp;&nbsp;<input type="file" class="form-control" id="slidePDF2" name="slidePDF2" accept=".pdf" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlidePDF(2)">Upload</button>
<? } else { ?>
      <div class="mt-2"><a href="../data/slides/pdf/<?=$slidePDF2?>" target="_blank">View Uploaded PDF</a> &nbsp;&nbsp;<i data-id="2" title="Delete PDF" class="delRowPDF cursorHand far fa-trash-alt fa-lg"></i></div>
<? } ?>
     </div>
    </div>
   </div>
  </div>
<? } ?>
  <div class="mt-4" style="border:1px #000 solid"></div>
  <br>

<?
 $slide3 = '';
 $slideURL3 = '';
 $sql = "SELECT slide_file,slide_url,slide_pdf FROM banners WHERE slide_num=3";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $slide3 = $row['slide_file'];
  $slideURL3 = $row['slide_url'];
  $slidePDF3 = $row['slide_pdf'];
 }
?>
  <label for="slideFile3"><b>Header Banner 3 [size: 800 x 140]</b></label>
  <div class="row">
   <div class="col">
<? if ($slide3 != '') { ?>
    <div class="float-left"><a href="../data/slides/<?=$slide3?>" target="_blank"><img src="../data/slides/<?=$slide3?>" width="75%" /></a></div>
    <div class="float-right text-right">
     <table cellpadding="5" align="right">
     <tr>
      <td title="Move up" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveUp',3)"><i data-id="3" class="upRow cursorHand fas fa-angle-up fa-lg"></i></a></td>
      <td title="Move down" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveDn',3)"><i data-id="3" class="dnRow cursorHand fas fa-angle-down fa-lg"></i></a></td>
      <td title="Delete Banner" align="center"><i data-id="3" class="delRow cursorHand far fa-trash-alt fa-lg"></i></td>
     </tr>
     </table>
    </div>
<? } else { ?>
    <div class="form-inline">
     <div class="form-group mt-2">
      <input type="file" class="form-control" id="slideFile3" name="slideFile3" accept=".png, .jpg, .jpeg" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlide(3)">Upload</button>
     </div>
    </div>
<? } ?>
   </div>
  </div>
<? if ($slide3 != '') { ?>
  <div class="row">
   <div class="col mt-1">
    Choose one of the two below:
   </div>
  </div>
  <div class="row">
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
      Link to &nbsp;&nbsp;<input type="text" class="form-control" id="slideURL3" name="slideURL3" style="width:300px" placeholder="Insert link here (optional)" value="<?=$slideURL3?>" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlideURL(3)">Update</button>
     </div>
    </div>
   </div>
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
<? if ($slidePDF3 == '') { ?>
      Upload PDF &nbsp;&nbsp;<input type="file" class="form-control" id="slidePDF3" name="slidePDF3" accept=".pdf" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlidePDF(3)">Upload</button>
<? } else { ?>
      <div class="mt-2"><a href="../data/slides/pdf/<?=$slidePDF3?>" target="_blank">View Uploaded PDF</a> &nbsp;&nbsp;<i data-id="3" title="Delete PDF" class="delRowPDF cursorHand far fa-trash-alt fa-lg"></i></div>
<? } ?>
     </div>
    </div>
   </div>
  </div>
<? } ?>
  <div class="mt-4" style="border:1px #000 solid"></div>
  <br>

<?
 $slide4 = '';
 $slideURL4 = '';
 $sql = "SELECT slide_file,slide_url,slide_pdf FROM banners WHERE slide_num=4";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $slide4 = $row['slide_file'];
  $slideURL4 = $row['slide_url'];
  $slidePDF4 = $row['slide_pdf'];
 }
?>
  <label for="slideFile4"><b>Header Banner 4 [size: 800 x 140]</b></label>
  <div class="row">
   <div class="col">
<? if ($slide4 != '') { ?>
    <div class="float-left"><a href="../data/slides/<?=$slide4?>" target="_blank"><img src="../data/slides/<?=$slide4?>" width="75%" /></a></div>
    <div class="float-right text-right">
     <table cellpadding="5" align="right">
     <tr>
      <td title="Move up" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveUp',4)"><i data-id="4" class="upRow cursorHand fas fa-angle-up fa-lg"></i></a></td>
      <td title="Move down" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveDn',4)"><i data-id="4" class="dnRow cursorHand fas fa-angle-down fa-lg"></i></a></td>
      <td title="Delete Banner" align="center"><i data-id="4" class="delRow cursorHand far fa-trash-alt fa-lg"></i></td>
     </tr>
     </table>
    </div>
<? } else { ?>
    <div class="form-inline">
     <div class="form-group mt-2">
      <input type="file" class="form-control" id="slideFile4" name="slideFile4" accept=".png, .jpg, .jpeg" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlide(4)">Upload</button>
     </div>
    </div>
<? } ?>
   </div>
  </div>
<? if ($slide4 != '') { ?>
  <div class="row">
   <div class="col mt-1">
    Choose one of the two below:
   </div>
  </div>
  <div class="row">
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
      Link to &nbsp;&nbsp;<input type="text" class="form-control" id="slideURL4" name="slideURL4" style="width:300px" placeholder="Insert link here (optional)" value="<?=$slideURL4?>" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlideURL(4)">Update</button>
     </div>
    </div>
   </div>
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
<? if ($slidePDF4 == '') { ?>
      Upload PDF &nbsp;&nbsp;<input type="file" class="form-control" id="slidePDF4" name="slidePDF4" accept=".pdf" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlidePDF(4)">Upload</button>
<? } else { ?>
      <div class="mt-2"><a href="../data/slides/pdf/<?=$slidePDF4?>" target="_blank">View Uploaded PDF</a> &nbsp;&nbsp;<i data-id="4" title="Delete PDF" class="delRowPDF cursorHand far fa-trash-alt fa-lg"></i></div>
<? } ?>
     </div>
    </div>
   </div>
  </div>
<? } ?>
  <div class="mt-4" style="border:1px #000 solid"></div>
  <br>

<?
 $slide5 = '';
 $slideURL5 = '';
 $sql = "SELECT slide_file,slide_url,slide_pdf FROM banners WHERE slide_num=5";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $slide5 = $row['slide_file'];
  $slideURL5 = $row['slide_url'];
  $slidePDF5 = $row['slide_pdf'];
 }
?>
  <label for="slideFile5"><b>Header Banner 5 [size: 800 x 140]</b></label>
  <div class="row">
   <div class="col">
<? if ($slide5 != '') { ?>
    <div class="float-left"><a href="../data/slides/<?=$slide5?>" target="_blank"><img src="../data/slides/<?=$slide5?>" width="75%" /></a></div>
    <div class="float-right text-right">
     <table cellpadding="5" align="right">
     <tr>
      <td title="Move up" align="center"><a href="javascript:np()" onclick="moveHeaderSlide('moveUp',5)"><i data-id="5" class="upRow cursorHand fas fa-angle-up fa-lg"></i></a></td>
      <td></td>
      <td title="Delete Banner" align="center"><i data-id="5" class="delRow cursorHand far fa-trash-alt fa-lg"></i></td>
     </tr>
     </table>
    </div>
<? } else { ?>
    <div class="form-inline">
     <div class="form-group mt-2">
      <input type="file" class="form-control" id="slideFile5" name="slideFile5" accept=".png, .jpg, .jpeg" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlide(5)">Upload</button>
     </div>
    </div>
<? } ?>
   </div>
  </div>
<? if ($slide5 != '') { ?>
  <div class="row">
   <div class="col mt-1">
    Choose one of the two below:
   </div>
  </div>
  <div class="row">
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
      Link to &nbsp;&nbsp;<input type="text" class="form-control" id="slideURL5" name="slideURL5" style="width:300px" placeholder="Insert link here (optional)" value="<?=$slideURL5?>" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlideURL(5)">Update</button>
     </div>
    </div>
   </div>
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
<? if ($slidePDF5 == '') { ?>
      Upload PDF &nbsp;&nbsp;<input type="file" class="form-control" id="slidePDF5" name="slidePDF5" accept=".pdf" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlidePDF(5)">Upload</button>
<? } else { ?>
      <div class="mt-2"><a href="../data/slides/pdf/<?=$slidePDF5?>" target="_blank">View Uploaded PDF</a> &nbsp;&nbsp;<i data-id="5" title="Delete PDF" class="delRowPDF cursorHand far fa-trash-alt fa-lg"></i></div>
<? } ?>
     </div>
    </div>
   </div>
  </div>
<? } ?>
  <div class="mt-4" style="border:1px #000 solid"></div>
  <br>

<?
 $slide0 = '';
 $slideURL0 = '';
 $sql = "SELECT slide_file,slide_url,slide_pdf FROM banners WHERE slide_num=0";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  $row = mysqli_fetch_assoc($result);
  $slide0 = $row['slide_file'];
  $slideURL0 = $row['slide_url'];
  $slidePDF0 = $row['slide_pdf'];
 }
?>
  <label for="slideFile0"><b>Side Banner [size: 255 x 600]</b></label>
  <div class="row">
   <div class="col">
<? if ($slide0 != '') { ?>
    <div class="float-left"><a href="../data/slides/<?=$slide0?>" target="_blank"><img src="../data/slides/<?=$slide0?>" width="75%" /></a></div>
    <div class="float-right text-right">
     <table cellpadding="5" align="right">
     <tr>
      <td title="Delete Banner" align="center"><i data-id="0" class="delRow cursorHand far fa-trash-alt fa-lg"></i></td>
     </tr>
     </table>
    </div>
<? } else { ?>
    <div class="form-inline">
     <div class="form-group mt-2">
      <input type="file" class="form-control" id="slideFile0" name="slideFile0" accept=".png, .jpg, .jpeg" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlide(0)">Upload</button>
     </div>
    </div>
<? } ?>
   </div>
  </div>
<? if ($slide0 != '') { ?>
  <div class="row">
   <div class="col mt-1">
    Choose one of the two below:
   </div>
  </div>
  <div class="row">
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
      Link to &nbsp;&nbsp;<input type="text" class="form-control" id="slideURL0" name="slideURL0" style="width:300px" placeholder="Insert link here (optional)" value="<?=$slideURL0?>" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlideURL(0)">Update</button>
     </div>
    </div>
   </div>
   <div class="col-6">
    <div class="form-inline">
     <div class="form-group mt-2">
<? if ($slidePDF0 == '') { ?>
      Upload PDF &nbsp;&nbsp;<input type="file" class="form-control" id="slidePDF0" name="slidePDF0" accept=".pdf" />
      <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return updateHeaderSlidePDF(0)">Upload</button>
<? } else { ?>
      <div class="mt-2"><a href="../data/slides/pdf/<?=$slidePDF0?>" target="_blank">View Uploaded PDF</a> &nbsp;&nbsp;<i data-id="0" title="Delete PDF" class="delRowPDF cursorHand far fa-trash-alt fa-lg"></i></div>
<? } ?>
     </div>
    </div>
   </div>
  </div>
<? } ?>
  <br>

</div>
</div>
</form>
<script type="text/javascript">
$(function () {
 $('.delRow').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.general.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'delForm',
     id: $(item.el[0]).data('id')
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
 $('.delRowPDF').magnificPopup({
  type: 'ajax',
  closeBtnInside: true,
  ajax: {
   settings: {
    method: 'POST',
    url: 'process/get.section.general.php'
   }
  },
  callbacks: {
   elementParse: function(item){
    postData = {
     act: 'delFormPDF',
     id: $(item.el[0]).data('id')
    }
    this.st.ajax.settings.data = postData;
   }
  }
 });
});
</script>
<?
}

// Downloads
if ($act == 'downloads') {
?>
<ol class="breadcrumb mt-4 mb-3">
 <li class="breadcrumb-item"><a href="dashboard.php">Dashboard</a></li>
 <li class="breadcrumb-item">General</li>
 <li class="breadcrumb-item active">Download Report</li>
</ol>
<form id="frmSearch" name="frmSearch">
<div class="card">
 <div class="card-header">Select Criteria</div>
 <div class="card-body">
  <div class="form-inline">
   <div class="form-group mr-2">
    <label for="srcCategoryId" class="col-form-label-sm">Category</label>
    <select id="srcCategoryId" name="srcCategoryId" class="form-control ml-2">
     <option value="">--[select]--
<?
 $sql = "SELECT category_id,category_name FROM categories ORDER BY category_name";
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 if ($numRows > 0) {
  for ($i=0;$i<$numRows;$i++) {
   $row = mysqli_fetch_array($result);
   $categoryId = $row['category_id'];
   $categoryName = $row['category_name'];
   echo '   <option value="' . $categoryId . '">' . $categoryName;
  }
 }
?>
    </select>
   </div>
   <div class="form-group mr-2">
    <label for="srcDateFrom" class="col-form-label-sm">From</label>
    <input type="date" class="form-control ml-0 ml-sm-2" id="srcDateFrom" name="srcDateFrom" />
   </div>
   <div class="form-group ml-0 ml-sm-4 mr-2">
    <label for="srcDateTo" class="col-form-label-sm">To</label>
    <input type="date" class="form-control ml-0 ml-sm-2" id="srcDateTo" name="srcDateTo" />
   </div>
   <div class="col text-right">
    <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return searchDownload()">Generate Report</button>
   </div>
  </div>
 </div>
</div>
<div id="panelSearch"></div>
<input type="hidden" id="act" name="act" value="searchDownloads" />
</form>
<?
}

// Downloads Result
if ($act == 'searchDownloads') {
 $pageNum = isset($_POST["pageNum"]) ? $_POST["pageNum"] : 1;
 $srcCategoryId = isset($_POST["srcCategoryId"]) ? $_POST["srcCategoryId"] : '';
 $srcDateFrom = isset($_POST["srcDateFrom"]) ? $_POST["srcDateFrom"] : '';
 $srcDateTo = isset($_POST["srcDateTo"]) ? $_POST["srcDateTo"] : '';
 $numRecords = 50;
 $startOrder = (($pageNum - 1) * $numRecords);
 $sql = "SELECT SQL_CALC_FOUND_ROWS DISTINCT A.article_id,B.article_title FROM article_downloads A INNER JOIN articles B ON A.article_id=B.article_id WHERE A.article_id>0";
 if ($srcCategoryId != '') $sql .= " AND B.category_id=$srcCategoryId";
 if ($srcDateFrom != '') $sql .= " AND DATE(A.date_downloaded) >= '$srcDateFrom'";
 if ($srcDateTo != '') $sql .= " AND DATE(A.date_downloaded) <= '$srcDateTo'";
 $sql .= " ORDER BY article_title ASC LIMIT " . $startOrder . "," . ($numRecords+1);
 $result = mysqli_query($dbpro, $sql);
 $numRows = mysqli_num_rows($result);
 $sql = "SELECT FOUND_ROWS()";
 $resultCount = mysqli_query($dbpro, $sql);
 $rowCount = mysqli_fetch_array($resultCount);
 $totalCount = $rowCount[0];
 if ($numRows == 0) {
  echo '<div class="m-2">No results found!</div>';
 } else {
  $maxPages = ceil($totalCount/$numRecords);
  $sql = "SELECT COUNT(A.article_id) AS totalDownloads FROM article_downloads A INNER JOIN articles B ON A.article_id=B.article_id WHERE A.article_id>0";
  if ($srcVolumeNum != '') $sql .= " AND B.volume_num=$srcVolumeNum";
  if ($srcIssueNum != '') $sql .= " AND B.issue_num=$srcIssueNum";
  if ($srcCategoryId != '') $sql .= " AND B.category_id=$srcCategoryId";
  if ($srcDateFrom != '') $sql .= " AND DATE(A.date_downloaded) >= '$srcDateFrom'";
  if ($srcDateTo != '') $sql .= " AND DATE(A.date_downloaded) <= '$srcDateTo'";
  $resultInner = mysqli_query($dbpro, $sql);
  $rowInner = mysqli_fetch_array($resultInner);
  $totalAllDownloads = $rowInner['totalDownloads'];
?>
<div class="float-right ml-3"><button type="submit" class="btn btn-outline-info mt-2 mt-sm-0 px-2 py-0" onclick="return exportXLS('panelExport')">Download Report</button></div>
<div class="text-right mt-2"><b>Total Downloads: <?=$totalAllDownloads?></b></div>
<div id="panelExport" class="table-responsive">
<table class="table table-sm mt-3">
<thead class="thead-light">
 <tr>
  <th width="20"></th>
  <th>Title</th>
  <th>Downloads</th>
  <th>Details</th>
 </tr>
</thead>
<?
  $totalDownloads = 0;
  $j = 0;
  for ($i=0;$i<$numRows;$i++) {
   if ($i < $numRecords) {
    $row = mysqli_fetch_array($result);
    $articleId = $row['article_id'];
    $articleTitle = $row['article_title'];
    $sql = "SELECT count(article_id) AS numDownloads FROM article_downloads WHERE article_id=$articleId";
    if ($srcDateFrom != '') $sql .= " AND DATE(date_downloaded) >= '$srcDateFrom'";
    if ($srcDateTo != '') $sql .= " AND DATE(date_downloaded) <= '$srcDateTo'";
    $resultInner = mysqli_query($dbpro, $sql);
    $rowInner = mysqli_fetch_array($resultInner);
    $downloadTotal = $rowInner['numDownloads'];
    $totalDownloads += $downloadTotal;
    $j += 1;
?>
<tr>
 <th><?=$startOrder+$i+1?>.</th>
 <td><?=$articleTitle?></td>
 <td align="center"><?=$downloadTotal?></td>
 <td>
<?
    $sql = "SELECT count(article_id) AS numDownloads,country FROM article_downloads WHERE article_id=$articleId";
    if ($srcDateFrom != '') $sql .= " AND DATE(date_downloaded) >= '$srcDateFrom'";
    if ($srcDateTo != '') $sql .= " AND DATE(date_downloaded) <= '$srcDateTo'";
    $sql .= " GROUP BY country ORDER BY numDownloads DESC";
    $resultInner = mysqli_query($dbpro, $sql);
    $numRowsInner = mysqli_num_rows($resultInner);
    for ($k=0;$k<$numRowsInner;$k++) {
     $rowInner = mysqli_fetch_array($resultInner);
     $downloadCountry = $rowInner['country'];
     $downloadNumber = $rowInner['numDownloads'];
?>
  <div>
   <div class="float-left"><?=$downloadCountry?></div>
   <div class="float-right"><?=$downloadNumber?></div>
  </div>
  <br>
<?
    }
?>
 </td>
</tr>
<?
   }
  }
?>
<tr>
 <td></td>
 <td></td>
 <td></td>
 <td align="right"><b>Total</b></td>
 <td align="center"><?=$totalDownloads?></td>
 <td></td>
</tr>
</table>
</div>
<div id="listingPageNum" class="float-left text-success" data-pagenum="<?=$pageNum?>">Showing <?=$startOrder+1?> to <?=$startOrder+$j?> of <?=$totalCount?> entries</div>
<div class="float-right" align="right">
<? PageNavBar() ?>
</div>
<div class="cleaner"></div>
<br>
<br>
<?
 }
?>
<?
}

// Remove Orphan Authors
if ($act == 'removeOrphanAuthors') {
?>
<ol class="breadcrumb mt-4 mb-3">
 <li class="breadcrumb-item"><a href="dashboard.php">Dashboard</a></li>
 <li class="breadcrumb-item">General</li>
 <li class="breadcrumb-item active">Remove Orphan Authors</li>
</ol>
<div class="card">
 <div class="card-body">
  <div id="panelResponse" class="form-inline">
    <div class="col">
     This routine will delete Authors who are not assigned to any Article.
    </div>
    <div class="col text-right">
    <button type="submit" class="btn btn-primary mt-2 mt-sm-0" onclick="return removeOrphanAuthors()">Process</button>
   </div>
  </div>
 </div>
</div>
<?
}