Your IP : 18.117.187.38
<?php
require_once('DbConnect.php');
if (IsSet($_POST["obsah"])){$obsah = $_POST["obsah"];}
if (IsSet($_POST["operace"])){$operace = trim($_POST["operace"]);}
if (IsSet($_POST["idAkce"])){$idAkce = $_POST["idAkce"];}
if (IsSet($_POST["nadpis"])){$nadpis = $_POST["nadpis"];}
if (IsSet($_POST["datum"])){$datum = $_POST["datum"];}
if (IsSet($_POST["cas"])){$cas = $_POST["cas"];}
if (IsSet($_POST["stav"])){$stav = $_POST["stav"];}
if (IsSet($_POST["zverejnit"])){$zverejnit = $_POST["zverejnit"];}
if (IsSet($_POST["kategorie"])){$kategorie = $_POST["kategorie"];}
if (IsSet($_POST["idRok"])){$idRok = $_POST["idRok"];}
if (IsSet($_POST["autor"])){$autor = $_POST["autor"];}
if (IsSet($_POST["uid"])){$uid = $_POST["uid"];}
if (IsSet($_POST["informace"])){$informace = $_POST["informace"];}
if (IsSet($_POST["podilise"])){$podilise = $_POST["podilise"];}
$obsah = html_entity_decode($obsah);
if ($operace == 's') {
$stmt = "UPDATE clanky SET datum = ?, cas = ?, obsah = ?, nadpis = ?, stav = ?, zverejnit = ? WHERE id = ?";
$call = mysqli_prepare($conn, $stmt);
mysqli_stmt_bind_param($call, 'ssssisi', $datum, $cas, $obsah, $nadpis, $stav, $zverejnit, $idAkce);
mysqli_stmt_execute($call);
} else { // nova akce - insert
$tabulka = 'clanky';
$call = mysqli_prepare($conn, 'call GetLastAI (@id, ?)');
mysqli_stmt_bind_param($call, 's', $tabulka);
mysqli_stmt_execute($call);
$result = mysqli_query($conn, 'SELECT @id');
$row = mysqli_fetch_assoc($result);
$idAkce = $row["@id"];
echo $idAkce; // toto musi zustat - podle toho se u nove akce nastavi na novy radek
$stmt = "SELECT `rok` FROM `pl_roky` WHERE id = $idRok";
$result = mysqli_query($conn, $stmt);
$row = mysqli_fetch_object($result);
$rocnik = $row->rok;
$akce = 'akce'.$idAkce;
$stmt = "INSERT INTO `clanky`(`zarazeni`, `datum`, `cas`, `obsah`, `anotace`, `nadpis`, `stav`, "
."`zverejnit`, `autor`, `uid`, `s_nadpis`, `komentare`, `rocnik`, `zobrazeno`) "
."VALUES (',40004,', '$datum', '$cas', '$obsah', '', '$nadpis', $stav, '$zverejnit', '$autor', '$uid', '$akce', 0, '$rocnik', 0) ";
$result = mysqli_query($conn, $stmt);
}
$stmt = "UPDATE pl_akce SET informace = ?, podilise = ? WHERE idclanek = ?";
$call = mysqli_prepare($conn, $stmt);
mysqli_stmt_bind_param($call, 'isi', $informace, $podilise, $idAkce);
mysqli_stmt_execute($call);
//ulozim kategorie
//nejprve smazu stare
$stmt = "DELETE FROM `pl_akce_kategorie` WHERE idakce = ?";
$call = mysqli_prepare($conn, $stmt);
mysqli_stmt_bind_param($call, 'i', $idAkce);
mysqli_stmt_execute($call);
$kodyKategorie = explode('*', $kategorie);
$stmt = "INSERT INTO `pl_akce_kategorie`(`idakce`, `idkategorie`) VALUES (?, ?)";
$call = mysqli_prepare($conn, $stmt);
for ($i = 1; $i<count($kodyKategorie); $i++){
$j = $i - 1;
mysqli_stmt_bind_param($call, 'ii', $idAkce, $kodyKategorie[$j]);
mysqli_stmt_execute($call);
}
?>