| Server IP : 195.130.67.5 / Your IP : 216.73.217.154 Web Server : Microsoft-IIS/10.0 System : Windows NT WEBSERVER1 10.0 build 17763 (Windows Server 2016) i586 User : IUSR ( 0) PHP Version : 7.4.19 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Old Sites/repository/wp-content/plugins/slider-image/ |
Upload File : |
<?php
if(function_exists('current_user_can'))
if(!current_user_can('manage_options')) {
die('Access Denied');
}
if(!function_exists('current_user_can')){
die('Access Denied');
}
function showslider()
{
global $wpdb;
if(isset($_POST['search_events_by_title']))
$_POST['search_events_by_title']=esc_html(stripslashes($_POST['search_events_by_title']));
if(isset($_POST['asc_or_desc']))
$_POST['asc_or_desc']=esc_js($_POST['asc_or_desc']);
if(isset($_POST['order_by']))
$_POST['order_by']=esc_js($_POST['order_by']);
$where='';
$sort["custom_style"] ="manage-column column-autor sortable desc";
$sort["default_style"]="manage-column column-autor sortable desc";
$sort["sortid_by"]='id';
$sort["1_or_2"]=1;
$order='';
if(isset($_POST['page_number']))
{
if($_POST['asc_or_desc'])
{
$sort["sortid_by"]=$_POST['order_by'];
if($_POST['asc_or_desc']==1)
{
$sort["custom_style"]="manage-column column-title sorted asc";
$sort["1_or_2"]="2";
$order="ORDER BY ".$sort["sortid_by"]." ASC";
}
else
{
$sort["custom_style"]="manage-column column-title sorted desc";
$sort["1_or_2"]="1";
$order="ORDER BY ".$sort["sortid_by"]." DESC";
}
}
if($_POST['page_number'])
{
$limit=($_POST['page_number']-1)*20;
}
else
{
$limit=0;
}
}
else
{
$limit=0;
}
if(isset($_POST['search_events_by_title'])){
$search_tag=esc_html(stripslashes($_POST['search_events_by_title']));
}
else
{
$search_tag="";
}
if(isset($_GET["catid"])){
$cat_id=$_GET["catid"];
}
else
{
if(isset($_POST['cat_search'])){
$cat_id=$_POST['cat_search'];
}else{
$cat_id=0;}
}
if ( $search_tag ) {
$where= " WHERE name LIKE '%".$search_tag."%' ";
}
if($where){
if($cat_id){
$where.=" AND sl_width=" .$cat_id;
}
}
else{
if($cat_id){
$where.=" WHERE sl_width=" .$cat_id;
}
}
$cat_row_query="SELECT id,name FROM ".$wpdb->prefix."huge_itslider_sliders WHERE sl_width=0";
$cat_row=$wpdb->get_results($cat_row_query);
$query = "SELECT COUNT(*) FROM ".$wpdb->prefix."huge_itslider_sliders". $where;
$total = $wpdb->get_var($query);
$pageNav['total'] =$total;
$pageNav['limit'] = $limit/20+1;
if($cat_id){
$query ="SELECT a.* , COUNT(b.id) AS count, g.par_name AS par_name FROM ".$wpdb->prefix."huge_itslider_sliders AS a LEFT JOIN ".$wpdb->prefix."huge_itslider_sliders AS b ON a.id = b.sl_width LEFT JOIN (SELECT ".$wpdb->prefix."huge_itslider_sliders.ordering as ordering,".$wpdb->prefix."huge_itslider_sliders.id AS id, COUNT( ".$wpdb->prefix."huge_itslider_images.slider_id ) AS prod_count
FROM ".$wpdb->prefix."huge_itslider_images, ".$wpdb->prefix."huge_itslider_sliders
WHERE ".$wpdb->prefix."huge_itslider_images.slider_id = ".$wpdb->prefix."huge_itslider_sliders.id
GROUP BY ".$wpdb->prefix."huge_itslider_images.slider_id) AS c ON c.id = a.id LEFT JOIN
(SELECT ".$wpdb->prefix."huge_itslider_sliders.name AS par_name,".$wpdb->prefix."huge_itslider_sliders.id FROM ".$wpdb->prefix."huge_itslider_sliders) AS g
ON a.sl_width=g.id WHERE a.name LIKE '%".$search_tag."%' group by a.id ". $order ." "." LIMIT ".$limit.",20" ;
}
else{
$query ="SELECT a.* , COUNT(b.id) AS count, g.par_name AS par_name FROM ".$wpdb->prefix."huge_itslider_sliders AS a LEFT JOIN ".$wpdb->prefix."huge_itslider_sliders AS b ON a.id = b.sl_width LEFT JOIN (SELECT ".$wpdb->prefix."huge_itslider_sliders.ordering as ordering,".$wpdb->prefix."huge_itslider_sliders.id AS id, COUNT( ".$wpdb->prefix."huge_itslider_images.slider_id ) AS prod_count
FROM ".$wpdb->prefix."huge_itslider_images, ".$wpdb->prefix."huge_itslider_sliders
WHERE ".$wpdb->prefix."huge_itslider_images.slider_id = ".$wpdb->prefix."huge_itslider_sliders.id
GROUP BY ".$wpdb->prefix."huge_itslider_images.slider_id) AS c ON c.id = a.id LEFT JOIN
(SELECT ".$wpdb->prefix."huge_itslider_sliders.name AS par_name,".$wpdb->prefix."huge_itslider_sliders.id FROM ".$wpdb->prefix."huge_itslider_sliders) AS g
ON a.sl_width=g.id WHERE a.name LIKE '%".$search_tag."%' group by a.id ". $order ." "." LIMIT ".$limit.",20" ;
}
$rows = $wpdb->get_results($query);
global $glob_ordering_in_cat;
if(isset($sort["sortid_by"]))
{
if($sort["sortid_by"]=='ordering'){
if($_POST['asc_or_desc']==1){
$glob_ordering_in_cat=" ORDER BY ordering ASC";
}
else{
$glob_ordering_in_cat=" ORDER BY ordering DESC";
}
}
}
$rows=open_cat_in_tree($rows);
$query ="SELECT ".$wpdb->prefix."huge_itslider_sliders.ordering,".$wpdb->prefix."huge_itslider_sliders.id, COUNT( ".$wpdb->prefix."huge_itslider_images.slider_id ) AS prod_count
FROM ".$wpdb->prefix."huge_itslider_images, ".$wpdb->prefix."huge_itslider_sliders
WHERE ".$wpdb->prefix."huge_itslider_images.slider_id = ".$wpdb->prefix."huge_itslider_sliders.id
GROUP BY ".$wpdb->prefix."huge_itslider_images.slider_id " ;
$prod_rows = $wpdb->get_results($query);
foreach($rows as $row)
{
foreach($prod_rows as $row_1)
{
if ($row->id == $row_1->id)
{
$row->ordering = $row_1->ordering;
$row->prod_count = $row_1->prod_count;
}
}
}
$cat_row=open_cat_in_tree($cat_row);
html_showsliders( $rows, $pageNav,$sort,$cat_row);
}
function open_cat_in_tree($catt,$tree_problem='',$hihiih=1){
global $wpdb;
global $glob_ordering_in_cat;
static $trr_cat=array();
if(!isset($search_tag))
$search_tag='';
if($hihiih)
$trr_cat=array();
foreach($catt as $local_cat){
$local_cat->name=$tree_problem.$local_cat->name;
array_push($trr_cat,$local_cat);
$new_cat_query= "SELECT a.* , COUNT(b.id) AS count, g.par_name AS par_name FROM ".$wpdb->prefix."huge_itslider_sliders AS a LEFT JOIN ".$wpdb->prefix."huge_itslider_sliders AS b ON a.id = b.sl_width LEFT JOIN (SELECT ".$wpdb->prefix."huge_itslider_sliders.ordering as ordering,".$wpdb->prefix."huge_itslider_sliders.id AS id, COUNT( ".$wpdb->prefix."huge_itslider_images.slider_id ) AS prod_count
FROM ".$wpdb->prefix."huge_itslider_images, ".$wpdb->prefix."huge_itslider_sliders
WHERE ".$wpdb->prefix."huge_itslider_images.slider_id = ".$wpdb->prefix."huge_itslider_sliders.id
GROUP BY ".$wpdb->prefix."huge_itslider_images.slider_id) AS c ON c.id = a.id LEFT JOIN
(SELECT ".$wpdb->prefix."huge_itslider_sliders.name AS par_name,".$wpdb->prefix."huge_itslider_sliders.id FROM ".$wpdb->prefix."huge_itslider_sliders) AS g
ON a.sl_width=g.id WHERE a.name LIKE '%".$search_tag."%' AND a.sl_width=".$local_cat->id." group by a.id ".$glob_ordering_in_cat;
$new_cat=$wpdb->get_results($new_cat_query);
open_cat_in_tree($new_cat,$tree_problem. "— ",0);
}
return $trr_cat;
}
function editslider($id)
{
global $wpdb;
if(isset($_GET["removeslide"])){
if($_GET["removeslide"] != ''){
$wpdb->query("DELETE FROM ".$wpdb->prefix."huge_itslider_images WHERE id = ".$_GET["removeslide"]." ");
}
}
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id= %d",$id);
$row=$wpdb->get_row($query);
if(!isset($row->slider_list_effects_s))
return 'id not found';
$images=explode(";;;",$row->slider_list_effects_s);
$par=explode(' ',$row->param);
$count_ord=count($images);
$cat_row=$wpdb->get_results("SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id!=" .$id." and sl_width=0");
$cat_row=open_cat_in_tree($cat_row);
$query=$wpdb->prepare("SELECT name,ordering FROM ".$wpdb->prefix."huge_itslider_sliders WHERE sl_width=%d ORDER BY `ordering` ",$row->sl_width);
$ord_elem=$wpdb->get_results($query);
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_images where slider_id = %d order by ordering ASC ",$row->id);
$rowim=$wpdb->get_results($query);
if(isset($_GET["addslide"])){
if($_GET["addslide"] == 1){
$table_name = $wpdb->prefix . "huge_itslider_images";
$sql_2 = "
INSERT INTO
`" . $table_name . "` ( `name`, `slider_id`, `description`, `image_url`, `sl_url`, `ordering`, `published`, `published_in_sl_width`) VALUES
( '', '".$row->id."', '', '', '', 'par_TV', 2, '1' )";
$wpdb->query($sql_huge_itslider_images);
$wpdb->query($sql_2);
}
}
$query="SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders order by id ASC";
$rowsld=$wpdb->get_results($query);
$query = "SELECT * from " . $wpdb->prefix . "huge_itslider_params ";
$rowspar = $wpdb->get_results($query);
$paramssld = array();
foreach ($rowspar as $rowpar) {
$key = $rowpar->name;
$value = $rowpar->value;
$paramssld[$key] = $value;
}
$query="SELECT * FROM ".$wpdb->prefix."posts where post_type = 'post' and post_status = 'publish' order by id ASC";
$rowsposts=$wpdb->get_results($query);
$rowsposts8 = '';
$postsbycat = '';
if(isset($_POST["iframecatid"])){
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."term_relationships where term_taxonomy_id = %d order by object_id ASC",$_POST["iframecatid"]);
$rowsposts8=$wpdb->get_results($query);
foreach($rowsposts8 as $rowsposts13){
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."posts where post_type = 'post' and post_status = 'publish' and ID = %d order by ID ASC",$rowsposts13->object_id);
$rowsposts1=$wpdb->get_results($query);
$postsbycat = $rowsposts1;
}
}
Html_editslider($ord_elem, $count_ord, $images, $row, $cat_row, $rowim, $rowsld, $paramssld, $rowsposts, $rowsposts8, $postsbycat);
}
function add_slider()
{
global $wpdb;
$table_name = $wpdb->prefix . "huge_itslider_sliders";
$sql_2 = "
INSERT INTO
`" . $table_name . "` ( `name`, `sl_height`, `sl_width`, `pause_on_hover`, `slider_list_effects_s`, `description`, `param`, `sl_position`, `ordering`, `published`) VALUES
( 'New slider', '375', '600', 'on', 'cubeH', '4000', '1000', 'center', '1', '300')";
$wpdb->query($sql_2);
$query="SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders order by id ASC";
$rowsldcc=$wpdb->get_results($query);
$last_key = key( array_slice( $rowsldcc, -1, 1, TRUE ) );
foreach($rowsldcc as $key=>$rowsldccs){
if($last_key == $key){
header('Location: admin.php?page=sliders_huge_it_slider&id='.$rowsldccs->id.'&task=apply');
}
}
}
function popup_posts($id)
{
global $wpdb;
if(isset($_GET["removeslide"])){
if($_GET["removeslide"] != ''){
$wpdb->query("DELETE FROM ".$wpdb->prefix."huge_itslider_images WHERE id = ".$_GET["removeslide"]." ");
}
}
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id= %d",$id);
$row=$wpdb->get_row($query);
if(!isset($row->slider_list_effects_s))
return 'id not found';
$images=explode(";;;",$row->slider_list_effects_s);
$par=explode(' ',$row->param);
$count_ord=count($images);
$cat_row=$wpdb->get_results("SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id!=" .$id." and sl_width=0");
$cat_row=open_cat_in_tree($cat_row);
$query=$wpdb->prepare("SELECT name,ordering FROM ".$wpdb->prefix."huge_itslider_sliders WHERE sl_width=%d ORDER BY `ordering` ",$row->sl_width);
$ord_elem=$wpdb->get_results($query);
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_images where slider_id = %d order by id ASC ",$row->id);
$rowim=$wpdb->get_results($query);
if(isset($_GET["addslide"])){
if($_GET["addslide"] == 1){
$table_name = $wpdb->prefix . "huge_itslider_images";
$sql_2 = "
INSERT INTO
`" . $table_name . "` ( `name`, `slider_id`, `description`, `image_url`, `sl_url`, `ordering`, `published`, `published_in_sl_width`) VALUES
( '', '".$row->id."', '', '', '', 'par_TV', 2, '1' )";
$wpdb->query($sql_huge_itslider_images);
$wpdb->query($sql_2);
}
}
$query="SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders order by id ASC";
$rowsld=$wpdb->get_results($query);
$query = "SELECT * from " . $wpdb->prefix . "huge_itslider_params ";
$rowspar = $wpdb->get_results($query);
$paramssld = array();
foreach ($rowspar as $rowpar) {
$key = $rowpar->name;
$value = $rowpar->value;
$paramssld[$key] = $value;
}
$query="SELECT * FROM ".$wpdb->prefix."posts where post_type = 'post' and post_status = 'publish' order by id ASC";
$rowsposts=$wpdb->get_results($query);
$categories = get_categories( );
if(isset($_POST["iframecatid"])){
$iframecatid = $_POST["iframecatid"];
}
else
{
$iframecatid = $categories[0]->cat_ID;
}
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."term_relationships where term_taxonomy_id = %d order by object_id ASC",$iframecatid);
$rowsposts8=$wpdb->get_results($query);
foreach($rowsposts8 as $rowsposts13){
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."posts where post_type = 'post' and post_status = 'publish' and ID = %d order by ID ASC",$rowsposts13->object_id);
$rowsposts1=$wpdb->get_results($query);
$postsbycat = $rowsposts1;
}
global $wpdb;
if(isset($_GET["closepop"])){
if($_GET["closepop"] == 1){
if($_POST["popupposts"] != 'none' and $_POST["popupposts"] != ''){
$popuppostsposts = explode(";", $_POST["popupposts"]);
array_pop($popuppostsposts);
foreach($popuppostsposts as $popuppostsposts1){
$my_id = $popuppostsposts1;
$post_id_1 = get_post($my_id);
$post_image = wp_get_attachment_url( get_post_thumbnail_id($popuppostsposts1) );
$posturl=get_permalink($popuppostsposts1);
$table_name = $wpdb->prefix . "huge_itslider_images";
$descnohtmlnoq=strip_tags($post_id_1->post_content);
$descnohtmlnoq1 = html_entity_decode($descnohtmlnoq);
$descnohtmlnoq1 = htmlentities($descnohtmlnoq1, ENT_QUOTES, "UTF-8");
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_images where slider_id = %d order by id ASC", $row->id);
$rowplusorder=$wpdb->get_results($query);
foreach ($rowplusorder as $key=>$rowplusorders){
$rowplusorderspl=$rowplusorders->ordering+1;
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET ordering = '".$rowplusorderspl."' WHERE id = %d ", $rowplusorders->id));
}
}
}
if(!($_POST["lastposts"])){
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET published = '".$_POST["posthuge-it-description-length"]."' WHERE id = '".$_GET['id']."' ");
}
}
}
if(isset($_POST["lastposts"])){
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."posts where post_type = 'post' and post_status = 'publish' order by id DESC LIMIT 0, ".$_POST["lastposts"]."");
$rowspostslast=$wpdb->get_results($query);
foreach($rowspostslast as $rowspostslastfor){
$my_id = $rowspostslastfor;
$post_id_1 = get_post($my_id);
$post_image = wp_get_attachment_url( get_post_thumbnail_id($rowspostslastfor) );
$posturl=get_permalink($rowspostslastfor);
$table_name = $wpdb->prefix . "huge_itslider_images";
$descnohtmlno=strip_tags($post_id_1->post_content);
$descnohtmlno1 = html_entity_decode($descnohtmlno);
$lengthtextpost = '300';
$descnohtmlno2 = substr_replace($descnohtmlno1, "", $lengthtextpost);
$descnohtmlno3 = htmlentities($descnohtmlno2, ENT_QUOTES, "UTF-8");
$posttitle = htmlentities($post_id_1->post_title, ENT_QUOTES, "UTF-8");
$posturl2 = htmlentities($posturl, ENT_QUOTES, "UTF-8");
$sql_lastposts = "INSERT INTO
`" . $table_name . "` ( `name`, `slider_id`, `description`, `image_url`, `sl_url`, `ordering`, `published`, `published_in_sl_width`) VALUES
( '".$posttitle."', '".$row->id."', '".$descnohtmlno3."', '".$post_image ."', '".$posturl."', '0', 2, '1' )";
$wpdb->query($sql_huge_itslider_images);
$wpdb->query($sql_lastposts);
}
}
if(isset($_POST["addlastposts"])){
if($_POST["addlastposts"]=='addlastposts'){
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_images where slider_id = %d order by id ASC", $row->id);
$rowplusorder=$wpdb->get_results($query);
foreach ($rowplusorder as $key=>$rowplusorders){
$rowplusorderspl=$rowplusorders->ordering+1;
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET ordering = '".$rowplusorderspl."' WHERE id = %d ", $rowplusorders->id));
}
$table_name = $wpdb->prefix . "huge_itslider_images";
$sql_addlastposts = " INSERT INTO
`" . $table_name . "` ( `name`, `slider_id`, `description`, `image_url`, `sl_url`, `sl_type`, `link_target`, `sl_stitle`, `sl_sdesc`, `sl_postlink`, `ordering`, `published`, `published_in_sl_width`) VALUES
( '".$_POST["titleimage"]."', '".$row->id."', '".$_POST["im_description"]."', '', '".$_POST["sl_url"]."', 'last_posts', '".$_POST["sl_link_target"]."', '".$_POST["sl_stitle"]."', '".$_POST["sl_sdesc"]."', '".$_POST["sl_postlink"]."', '0', '2', '1' )";
$wpdb->query($sql_addlastposts);
}
}
Html_popup_posts($ord_elem, $count_ord, $images, $row, $cat_row, $rowim, $rowsld, $paramssld, $rowsposts, $rowsposts8, $postsbycat);
}
function last_posts($id)
{
global $wpdb;
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id= %d",$id);
$row=$wpdb->get_row($query);
$test = 'test';
if(isset($_POST['sel_categ'])){
$table_name = $wpdb->prefix . "huge_itslider_images";
$sql_lastposts = "
INSERT INTO
`" . $table_name . "` ( `name`, `slider_id`, `description`, `image_url`, `sl_url`, `sl_type`, `link_target`, `ordering`, `published`, `published_in_sl_width`) VALUES
( '".$_POST['sel_categ']."', '".$row->id."', '300', '', '".$_POST['count_posts']."', 'last_posts', 'on', '0', 1, '0' )";
$wpdb->query($sql_lastposts);
}
Html_last_posts($test);
}
function popup_video($id)
{
Html_popup_video();
}
function removeslider($id)
{
global $wpdb;
$sql_remov_tag=$wpdb->prepare("DELETE FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id = %d", $id);
if(!$wpdb->query($sql_remov_tag))
{
?>
<div id="message" class="error"><p>slider Not Deleted</p></div>
<?php
}
else{
?>
<div class="updated"><p><strong><?php _e('Item Deleted.' ); ?></strong></p></div>
<?php
}
}
function apply_cat($id)
{
global $wpdb;
if(!is_numeric($id)){
echo 'insert numerc id';
return '';
}
if(!(isset($_POST['sl_width']) && isset($_POST["name"]) ))
{
return '';
}
$cat_row=$wpdb->get_results($wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id!= %d ", $id));
$corent_ord=$wpdb->get_var($wpdb->prepare('SELECT `ordering` FROM '.$wpdb->prefix.'huge_itslider_sliders WHERE id = %d AND sl_width=%d',$id,$_POST['sl_width']));
$max_ord=$wpdb->get_var('SELECT MAX(ordering) FROM '.$wpdb->prefix.'huge_itslider_sliders');
$query=$wpdb->prepare("SELECT sl_width FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id = %d", $id);
$id_bef=$wpdb->get_var($query);
if(isset($_POST["content"])){
$script_cat = preg_replace('#<script(.*?)>(.*?)</script>#is', '', stripslashes($_POST["content"]));
}
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET name = '".$_POST["name"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET sl_width = '".$_POST["sl_width"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET sl_height = '".$_POST["sl_height"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET pause_on_hover = '".$_POST["pause_on_hover"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET slider_list_effects_s = '".$_POST["slider_effects_list"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET description = '".$_POST["sl_pausetime"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET param = '".$_POST["sl_changespeed"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET sl_position = '".$_POST["sl_position"]."' WHERE id = '".$id."' ");
$wpdb->query("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET ordering = '1' WHERE id = '".$id."' ");
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_sliders WHERE id = %d", $id);
$row=$wpdb->get_row($query);
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_images where slider_id = %d order by id ASC", $row->id);
$rowim=$wpdb->get_results($query);
foreach ($rowim as $key=>$rowimages){
if(isset($_POST["order_by_".$rowimages->id.""])){
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET ordering = '".$_POST["order_by_".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET link_target = '".$_POST["sl_link_target".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET sl_url = '".$_POST["sl_url".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET name = '".$_POST["titleimage".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET description = '".$_POST["im_description".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET image_url = '".$_POST["imagess".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
}
/////////////////update///////////////////////////
if(isset($_POST["sl_stitle".$rowimages->id.""])){
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET sl_stitle = '".$_POST["sl_stitle".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET sl_sdesc = '".$_POST["sl_sdesc".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET sl_postlink = '".$_POST["sl_postlink".$rowimages->id.""]."' WHERE ID = %d ", $rowimages->id));
}
////////////////update///////////////////////////
}
if (isset($_POST['params'])) {
$params = $_POST['params'];
foreach ($params as $key => $value) {
$wpdb->update($wpdb->prefix . 'huge_itslider_params',
array('value' => $value),
array('name' => $key),
array('%s')
);
}
}
if($_POST["imagess"] != ''){
$query=$wpdb->prepare("SELECT * FROM ".$wpdb->prefix."huge_itslider_images where slider_id = %d order by id ASC", $row->id);
$rowim=$wpdb->get_results($query);
foreach ($rowim as $key=>$rowimages){
$orderingplus = $rowimages->ordering+1;
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_images SET ordering = %d WHERE ID = %d ", $orderingplus, $rowimages->id));
}
$table_name = $wpdb->prefix . "huge_itslider_images";
$imagesnewuploader = explode(";;;", $_POST["imagess"]);
array_pop($imagesnewuploader);
foreach($imagesnewuploader as $imagesnewupload){
$sql_2 = "
INSERT INTO
`" . $table_name . "` ( `name`, `slider_id`, `description`, `image_url`, `sl_url`, `ordering`, `published`, `published_in_sl_width`) VALUES
( '', '".$row->id."', '', '".$imagesnewupload."', '', 'par_TV', 2, '1' )";
$wpdb->query($sql_2);
}
}
if(isset($_POST["posthuge-it-description-length"])){
$wpdb->query($wpdb->prepare("UPDATE ".$wpdb->prefix."huge_itslider_sliders SET published = %d WHERE id = %d ", $_POST["posthuge-it-description-length"], $_GET['id']));
}
?>
<div class="updated"><p><strong><?php _e('Item Saved'); ?></strong></p></div>
<?php
return true;
}
?>