0byt3m1n1-V2

Path: /home/bangtoey/domains/bangtoey.go.th/public_html/albums/ [ Home ]
File: delfiles.php
<?
session_start();
Header("Content-Type: text/html; charset=utf-8");
if ( !isset($_SESSION[user]) || ($_SESSION[user]=="") ) {
    session_unset();session_destroy();
    echo "<Script language=\"javascript\">window.location=\"login.php\"</script>";
} else {
	require_once('../include/config_db.php');
	$p_path = $_GET['c_file_path'];
	$p_path = trim($p_path);
	$cid = $_GET['c_id'];
	$contentid = $_GET['content_id'];
	if($p_path != '')
	{
		switch ($contentid) {
			case '1': $sql = "select * from `activity_attachfiles` where (`id`='".$cid."') LIMIT 1";
				$dbquery = mysql_query($sql);
				$nRows = mysql_num_rows($dbquery);
				if($nRows>0){
					$row = mysql_fetch_assoc($dbquery);
					$c_filename = $row["at_filename"];
					$c_al_id = $row["al_id"];
					$file_del = "../files/albums/".'a'.$c_al_id.'_t/'.$c_filename;
					//$file_del_icon = iconv("tis-620","utf-8",$file_del);
					$file_del_icon = $file_del;
					if(@file_exists($file_del_icon))
					{
						@chmod($file_del_icon,0777);
						unlink($file_del_icon);
					}
					$sql = "delete from `activity_attachfiles` where (`id`='".$cid."') LIMIT 1";
					$dbquery = mysql_query($sql);
				}
				break;			
		}
	}
	include("../include/close_db.php");
}
?>