File: /var/www/www-root/data/www/NEWs/news.mowik.click/actions/news_edit.php
<?php
//Охуевший Мистер Крабс
include('../inc/conf.php');
crabs_token_check($_POST['token']);
require('../inc/wu_resize_crop.php');
crabs_adm_check();
//Получение данных
$id = intval($_POST['id']);
$ti = mysqli_real_escape_string($connect_db, trim($_POST['iti']));
$ty = intval($_POST['ity']);
$newtab = intval($_POST['newtab']);
$relasttab = intval($_POST['relasttab']);
if ($newtab == 0) { $relasttab = 0; }
$txt = mysqli_real_escape_string($connect_db, trim($_POST['crabs_txt']));
$icou = mysqli_real_escape_string($connect_db, trim($_POST['icou']));
$mkv = mysqli_real_escape_string($connect_db, trim($_POST['mkv']));
$mdescr = mysqli_real_escape_string($connect_db, trim($_POST['mdescr']));
$uchpu = mysqli_real_escape_string($connect_db, trim($_POST['uchpu']));
$uchpu = str_replace(' ','_',$uchpu);
$uchpu = str_replace('.','_',$uchpu);
$uchpu = str_replace(',','_',$uchpu);
if (empty($ti)) { exit('ti'); }
if (empty($txt)) { exit('txt'); }
$data = mysqli_fetch_assoc(mysqli_query($connect_db, "SELECT id,img FROM `t_news` WHERE id='$id' LIMIT 1"));
//Загрузка обложки
if(!empty($_FILES['img_big']['name'])) {
$valid_types = array('jpg', 'png', 'jpeg', 'JPG', 'PNG', 'JPEG');
$path = '../img/upl/';
$si = getimagesize($_FILES['img_big']['tmp_name']);
$exts = substr($_FILES['img_big']['name'], 1 + strrpos($_FILES['img_big']['name'], "."));
$size = $_FILES['img_big']['size'];
if($size>(1024*1024*5)) { exit('img_big_big'); }
if (!in_array($exts, $valid_types)) { exit('img_big_error'); }
if(!stristr($_FILES['img_big']['type'], 'image/')) { exit('img_big_error'); }
if ($si[0] == 0 || $si[1] == 0) { exit('img_big_error'); }
if ($si[0] < 300 || $si[1] < 300) { exit('img_big_error'); }
$rand = rand(0,999);
$src_s_big = $path.$dt.'_'.$rand.'.'.$exts;
$srcs_big = $dt.'_'.$rand.'.'.$exts;
if (move_uploaded_file($_FILES["img_big"]["tmp_name"], $src_s_big)) {
if ($si[0] > 600) { resize($src_s_big, $src_s_big, 600, 0); }
$si2 = getimagesize($src_s_big);
if ($si2[1] > 338) { crop($src_s_big,$src_s_big,array(0,0,600,338)); }
} else { exit('img_big_error'); }
unlink($path.$data['img']);
} else { $srcs_big = $data['img']; }
mysqli_query($connect_db, "UPDATE `t_news` SET `ti` = '$ti', `img` = '$srcs_big', `txt` = '$txt', `mkv` = '$mkv', `mdescr` = '$mdescr', `uchpu` = '$uchpu', `linktype` = '$ty', `newtab` = '$newtab', `relasttab` = '$relasttab', `cou` = '$icou' WHERE id='$id' LIMIT 1");
exit('1');
?>