Linux SRV-16 6.18.44-paas #1 SMP PREEMPT_DYNAMIC Thu Aug 13 10:08:12 UTC 2026 x86_64
/srv/data/web/vhosts/www.volley92.asso.fr/htdocs/admin174/_bin/contenu/corps/_bin/
/srv/data/web/vhosts/www.volley92.asso.fr/htdocs/admin174/_bin/contenu/corps/_bin/annonce-edit.php
 <?php 
ob_start();
include("../header.php");
if(!isset($_SESSION['sessionOuverteAdministrateur']))header('Location: ../../index.php?message=4');
if(!(isset($_GET['id']) && $_GET['id']>0))header('Location: annonces.php');
$idAnnonce=$_GET['id'];
?>
<link rel="stylesheet" href="../../../scripts/datepicker/css/datepicker.css">
<script type='text/javascript' src='../../../scripts/datepicker/js/bootstrap-datepicker.js'></script>
<script type='text/javascript' src="../../../scripts/datepicker/js/locales/bootstrap-datepicker.fr.js"></script>
<script>
$(document).ready(function(){
	$('form .datepicker').datepicker({
	    language: "fr",
	    autoclose: true
	});
});
</script>
<h2><small>Annonce - édition (<a href='annonces.php'>retour</a>)</small></h2>

<?php
$result=$connexion->query("SELECT * FROM annonce WHERE id=$idAnnonce");
$result->setFetchMode(PDO::FETCH_OBJ);
$row=$result->fetch();
if($result->rowCount()==0)header('Location: annonces.php');
ob_end_flush();

$title=(isset($_POST['title']))?stripslashes(trim($_POST['title'])):$row->title;
$dateAdd=(isset($_POST['dateAdd']))?stripslashes(trim($_POST['dateAdd'])):date("d/m/Y", strtotime($row->dateAdd));
$nbRooms=(isset($_POST['nbRooms']))?stripslashes(trim($_POST['nbRooms'])):$row->nbRooms;
$price=(isset($_POST['price']))?stripslashes(trim($_POST['price'])):$row->price;
$surface=(isset($_POST['surface']))?$_POST['surface']:$row->surface;
$city=(isset($_POST['city']))?stripslashes(trim($_POST['city'])):$row->city;
$department=(isset($_POST['department']))?$_POST['department']:$row->department;
$onlyLand=(isset($_POST['submitEdit']))?(($_POST['onlyLand'])?true:false):$row->onlyLand;

$short_desc=(isset($_POST['short_desc']))?stripslashes(trim($_POST['short_desc'])):$row->short_desc;
$long_desc=(isset($_POST['long_desc']))?stripslashes(trim($_POST['long_desc'])):$row->long_desc;

if(isset($_POST['submitEdit'])){
	$err1=($title=='')?true:false;
	//$add_temp=str_replace("/","",trim($dateAdd));
	$err2=!checkdate(substr($dateAdd,3,2),substr($dateAdd,0,2),substr($dateAdd,6,4));
	$err3=(!preg_match("/^[0-9]{1,5}?$/",$surface))?true:false;
	$price=str_replace(" ", "", $price);
	$err4=(!preg_match("/^[0-9]+([,.][0-9]{1,2})?$/",$price))?true:false;
	$err5=($city=='')?true:false;
	$err6=(!preg_match("/^([0-9]{1,3})?$/",$department))?true:false;
	$err7=($short_desc=='')?true:false;
	$err8=($long_desc=='')?true:false;
	
	if(!$err1 && !$err2 && !$err3 && !$err4 && !$err5 && !$err6 && !$err7 && !$err8){
		$price=str_replace(",", ".", $price)*100;
		$dateAddBD=substr($dateAdd,6,4)."-".substr($dateAdd,3,2)."-".substr($dateAdd,0,2);
		$annonce=array($title,$dateAddBD,$nbRooms,$price,$surface,$city,$department,$short_desc,$long_desc,$onlyLand,$idAnnonce);
		//echo $price;die;
		$reqPrep=$connexion->prepare("UPDATE annonce SET title=?,dateAdd=?,nbRooms=?,price=?,surface=?,city=?,department=?,short_desc=?,long_desc=?,onlyLand=? WHERE id=?");
		$reqPrep->execute($annonce);
		$reqPrep->closeCursor();
		echo "<div class='alert alert-success'><button type='button' class='close' data-dismiss='alert'>&times;</button>L'annonce a bien été mise à jour</div>";
	}else{
		echo "<div class='alert alert-danger'>
				<button type='button' class='close' data-dismiss='alert'>&times;</button>
				$err1 && !$err2 && !$err3 && !$err4 && !$err5 && !$err6 && !$err7 && !$err8<br>
				Il y a une erreur dans votre formulaire, assurez-vous que les champs soit correctement remplis.
			</div>";
	}
}	

?>
<div id='ajout' class='well'>
	<form class='form-horizontal margin-auto' style='margin-bottom:0' method='POST' action='' enctype="multipart/form-data">
		<div class="row">
			<div class="col-md-6">
				<div class="form-group  <?php if(isset($err1))echo($err1)?"has-error":""; ?>">
					<label class="control-label col-md-4">Titre*</label>
					<div class="col-md-6">
						<input class='form-control' type="text" name="title" value="<?php echo $title ?>">
					</div>
				</div>
				<div class="form-group <?php if(isset($err2))echo($err2)?"has-error":""; ?>">
					<label class="control-label col-md-4">Date d'ajout</label>
					<div class="col-md-3">
						<input class='form-control datepicker' type="text" name="dateAdd" placeholder="jj/mm/aaaa" value="<?php echo $dateAdd ?>">
					</div>
				</div>	
				<div class="form-group">
					<label class="control-label col-md-4">Nombre de pièces</label>
					<div class="col-md-3">
						<select class='form-control pull-left' name="nbRooms">
							<?php foreach (range(1, 4) as $val) 
								echo "<option ".( ($nbRooms==$val)?"selected":"" ).">$val</option>";
							?>
							<option>5+</option>
						</select>
					</div>
				</div>
				<div class="form-group">
					<label class="control-label col-md-4">Terrain seul</label>
					<div class="col-md-3">
						<div class="checkbox"><input type="checkbox" name="onlyLand" <?php echo ($onlyLand)?"checked":""; ?>></div>
					</div>
				</div>
			</div>
			<div class="col-md-6">
				<div class="form-group <?php if(isset($err3))echo($err3)?"has-error":""; ?>">
					<label class="control-label col-md-4">Surface</label>
					<div class="col-md-4">
						<div class="input-group">
						  <input type="text" class="form-control" name="surface" value="<?php echo $surface ?>">
						  <span class="input-group-addon">m²</span>
						</div>
					</div>
				</div>
				<div class="form-group <?php if(isset($err4))echo($err4)?"has-error":""; ?>">
					<label class="control-label col-md-4">Prix</label>
					<div class="col-md-4">
						<div class="input-group">
						  <input type="text" class="form-control" name="price" value="<?php echo number_format($price/100,0,","," "); ?>">
						  <span class="input-group-addon">€</span>
						</div>
					</div>
				</div>
				<div class="form-group <?php if(isset($err5))echo($err5)?"has-error":""; ?>">
					<label class="control-label col-md-4">Ville</label>
					<div class="col-md-6">
						  <input type="text" class="form-control" name="city" value="<?php echo $city ?>">
					</div>
				</div>
				<div class="form-group <?php if(isset($err6))echo($err6)?"has-error":""; ?>">
					<label class="control-label col-md-4">Département</label>
					<div class="col-md-2">
						  <input type="text" class="form-control" name="department" value="<?php echo $department ?>">
					</div>
				</div>

			</div>
		</div>
		<br>
		<div class="row">
			<div class="col-md-6">
				<div class="<?php if(isset($err7))echo($err7)?"text-danger":""; ?>">
					<div class='text-center'><strong>Description courte</strong></div><br>
					<textarea name="short_desc"><?php echo $short_desc ?></textarea>
				</div>	
			</div>
			<div class="col-md-6">
				<div class="<?php if(isset($err8))echo($err8)?"text-danger":""; ?>">
					<div class='text-center'><strong>Description longue</strong></div><br>
					<textarea name="long_desc"><?php echo $long_desc ?></textarea>
				</div>
			</div>
		</div>
		<hr>
		<div class='text-center'>
			<button type='submit' name='submitEdit' class='btn btn-success' title='Enregistrer les modifications'><i class="glyphicon glyphicon-ok"></i></button>
			<a href="annonces.php" class="btn btn-default"><i class="glyphicon glyphicon-remove"></i></a>
		</div>
	</form>
</div>

<br>
<h3 id="image"><small>Images de l'annonce</small></h3>
<?php 
	if(isset($_POST['submitImage'])){
		$dossier = "img/annonces/";
		//Remplacement caractère image
		$replace = array('_','_','_','',);
		$search  = array(' ',"'",'"','-');
		$image=str_replace($search,$replace,basename($_FILES['image']['name']));			
		//Vérification si le lien est supérieur à 250 caractères (marge de 50), si oui on reduit
		if(strlen($image)>200)$image=str_replace("_","",$image);
		if(strlen($image)>200)$image=substr($image,-200);
		$image =$dossier.$idAnnonce."-".rand(0,999).'-'.$image;
		if(!file_exists($image)) {
			if(move_uploaded_file($_FILES['image']['tmp_name'], "../../../".$image)){ //Si la fonction renvoie TRUE, c'est que ça a fonctionné...	
				$titre=trim($_POST['titre']);
				$legende=trim($_POST['legende']);
				$reqPrep=$connexion->prepare("INSERT INTO annonce_image(annonce,title,legend,image) VALUES (?,?,?,?)"); // on prépare notre requête
				$reqPrep->execute(array($idAnnonce,$titre,$legende,$image));
				$reqPrep->closeCursor();
				
				echo "<div class='alert alert-success'>
						<button type='button' class='close' data-dismiss='alert'>&times;</button>L'image image a été ajoutée.
					  </div>";
			}else
				echo "<div class='alert alert-error'>
						<button type='button' class='close' data-dismiss='alert'>&times;</button>
						Votre image n'a pas pu être ajoutée, merci de réessayer.
					  </div>";
		}else
			echo "<div class='alert alert-error'>
					<button type='button' class='close' data-dismiss='alert'>&times;</button>
					Ce nom de fichier existe déjà. Veuillez renommer votre fichier et le re-uploader, ou supprimer le fichier nommé ".basename($_FILES['image']['name'])."
				  </div>";
	}
	
	if(isset($_POST['supprImage'])){
		if(unlink("../../../".$_POST['image'])){
			$reqPrep=$connexion->prepare("DELETE FROM annonce_image WHERE id=?"); // on prépare notre requête
			$reqPrep->execute(array($_POST['id']));
			$reqPrep->closeCursor();
			echo "<div class='alert alert-success'>
					<button type='button' class='close' data-dismiss='alert'>&times;</button>L'image image a été supprimée.
				  </div>";
		}else 
			echo "<div class='alert alert-danger'>
					<button type='button' class='close' data-dismiss='alert'>&times;</button>
					L'image n'a pas pu être supprimée, merci de réessayer.
				  </div>";
	}

?>
<div class='well'>
		<form class='form-horizontal' method='post' action='#image' enctype="multipart/form-data">
			<input type="hidden" name="MAX_FILE_SIZE" value="5000000">
					<div class="form-group">
						<label class="control-label col-md-3">Titre</label>
						<div class="col-md-4"><input class="form-control" type='text' name='titre' /></div>
					</div>
					<div class="form-group">
						<label class="control-label col-md-3">Légende</label>
						<div class="col-md-6"><input type='text' class='form-control' name='legende'/></div>
					</div>
					<div class="form-group">
						<label class="control-label col-md-3">Image</label>
						<div class="col-md-8"><input type="file" name="image"></div>
					</div>
			<div class='text-center'>
				<button name='submitImage' class='btn btn-mini btn-success' style='margin-top:3px;' type='submit'><i class='glyphicon glyphicon-plus'></i></button>
			</div>
		</form>
		<hr>

<?php 
	$result=$connexion->query("SELECT * FROM annonce_image WHERE annonce=$idAnnonce");
	$result->setFetchMode(PDO::FETCH_OBJ);
	if($result->rowCount()>0){			
		$i=0;
		while($row=$result->fetch()){
			if($i%6==0)echo"<div class='row'>";
			echo"
				<div class='col-md-1 col-lg-1 text-center'>
					<form style='margin:0' method='post' action='#image'>
						<input type='hidden' name='image' value='$row->image'>
						<input type='hidden' name='id' value='$row->id'>
						<img class='img-responsive' src='../../../$row->image' title=\"".htmlspecialchars($row->title)." - ".htmlspecialchars($row->legend)."\">
						<button name='supprImage' class='btn btn-xs btn-danger' style='margin-top:5px;' type='submit'><i class='glyphicon glyphicon-remove'></i></button>
					</form>
				</div>
			";
			if($i%12==11)echo "</div>";
			$i++;
		}
		if(($i-1)%12!=11)echo"</div>";//$i-1 car boucle incrémentée avant de sortir
		
		
	}else echo "<div class='text-center'>Aucun image n'est associée à cette annonce.</div>";
	$result->closeCursor();
?>
</div>
<br><br><div class='text-center'><a class='btn' href='annonces.php'>Retour</a></div><br><br>
<?php include("../footer.php"); ?>