ordine_farmacisti/ADMIN/sheets/news/mod.php

<div class="row">
    <div class="col-12">
        <div class="section-title">Modifica notizia</div>
    </div>
    <div class="col-12">

        <div class="sheet-box p-4">

        <?php
            if($_POST['go']){

                $append = array();

                $qa=mysqli_query($conn, "SELECT append FROM news WHERE id=".trim($getQ[3]));
                $ra=mysqli_fetch_array($qa);
                $currentAppend = explode(',',$ra['append']);

                if($_FILES['files']){
                    $files = reArrayFiles($_FILES['files']);
                    foreach ($files as $index => $file) {
                        if(is_uploaded_file($file['tmp_name'])){
                            $filename = date("Ymd")."-".preg_replace('/[^a-zA-Z0-9\-\._]/','_', $file['name']);
                            $filesize = ($file['size'] < 1000000) ? round($file['size'] / 1000)."k" : round($file['size'] / 1000000)."M";
                            $title = $_POST['titles'][$index];
                            $path = '/docs/files/news';

                            move_uploaded_file($file['tmp_name'], "..$path/$filename");
                            $qf=mysqli_query($conn, "INSERT INTO files VALUES(null, '$title', '$filename', '".$path."', NOW(), '$filesize')");
                            $append[$index] = mysqli_insert_id($conn);
                        }
                    }
                }

                $fullAppend = array_filter(array_merge($append,$currentAppend));

                if($_POST['filesDel']){
                    foreach ($_POST['filesDel'] as $fileID) {
                        if (($index = array_search($fileID, $fullAppend)) !== false) {
                            unset($fullAppend[$index]);
                            $qtf=mysqli_query($conn, "SELECT * FROM files WHERE id=".$fileID);
                            $rtf=mysqli_fetch_array($qtf);
                            @unlink("..".$rtf['path']."/".$rtf['filename']);
                            $qtf=mysqli_query($conn, "DELETE FROM files WHERE id=".$fileID);
                        }
                    }
                }

                $q=mysqli_query($conn, "UPDATE news SET
                                        title='".addslashes(trim($_POST['title']))."', text='".addslashes(trim($_POST['text']))."',
                                        date='".trim(conv_date_en($_POST['date']))."', append='".implode(',',$fullAppend)."'
                                        WHERE id=".trim($getQ[3]));

                echo '<div class="col-10 text-center mx-auto my-5">
                        <p><i class="fa fa-check-circle font-alert p-4"></i></p>
                        Notizia modificata correttamente!
                    </div>';

            }else{

                if($getQ[3]){

                $q=mysqli_query($conn, "SELECT * FROM news WHERE id = ".trim($getQ[3]));
                $r=mysqli_fetch_array($q);

        ?>
            <form method="post" enctype="multipart/form-data">
                <div class="row">
                    <div class="col-12 col-sm-6">
                        <span class="font-12">Data</span>
                        <input type="text" name="date" class="datepicker" value="<?= conv_date($r['date']);?>">
                    </div>
                    <div class="col-12">
                        <span class="font-12">Titolo notizia</span>
                        <input type="text" name="title" value="<?= str_replace('"','&#34;',$r['title']);?>">
                    </div>
                    <div class="col-12 pb-2">
                        <span class="font-12">Testo notizia</span>
                        <textarea cols="40" rows="6" name="text" class="mce"><?= $r['text'];?></textarea>
                    </div>

                    <div class="col-12">
                        <span class="font-12">Allegato/i</span>
                        <div class="files-list">
                            <div class="admin-list">
                            <?php
                                $qca=mysqli_query($conn, "SELECT * FROM files WHERE id IN(".$r['append'].")");
                                $cnt=0;
                                while($rca=mysqli_fetch_array($qca)){
                                    $cnt++;
                                    $bg = ($cnt%2) ? "bg-light-grey" : "bg-white";
                                    echo "<div class=\"admin-list-item $bg\"><span>".$rca['title']."</span>
                                        <div class=\"right\">
                                        <input type=\"checkbox\" value=\"".$rca['id']."\" id=\"check_".$rca['id']."\" name=\"filesDel[]\">
                                        <label for=\"check_".$rca['id']."\" class=\"font-10 px-3\">Elimina</label>
                                        </div></div>";
                                }
                            ?>
                            </div>
                            <div class="list">
                                <div class="row master">
                                    <div class="col-8">
                                        <input type="text" name="titles[]" placeholder="Nome del file">
                                    </div>
                                    <div class="col-4">
                                        <input type="file" name="files[]">
                                    </div>
                                </div>
                            </div>
                            <button class="button button-small add-file"><i class="fa fa-plus"></i> aggiungi riga</button>
                        </div>

                    </div>
                    <div class="col-12 text-right">
                        <button type="submit" name="go" value="1">Modifica notizia</button>
                    </div>
                </div>
            </form>

            <?php
                    }else{

                    ?>
                        <form method="post" class="form-mod" data-path="<?= $BASE_URL;?>/sheets/news/mod">
                            <div class="col-12 col-sm-10 mx-auto">
                                <div class="row">
                                    <div class="col">
                                        <span class="font-12">Seleziona una notizia</span>
                                    </div>
                                </div>
                                <div class="row">
                                    <div class="col">
                                        <select name="id" class="id">
                                        <?php
                                            $qn=mysqli_query($conn, "SELECT * FROM news ORDER BY date DESC");
                                            while($rn=mysqli_fetch_array($qn)){
                                                echo "<option value=\"".$rn['id']."\">".conv_date($rn['date'])." - ".$rn['title']."</option>";
                                            }
                                        ?>
                                        </select>
                                    </div>
                                    <div class="col-auto">
                                        <button type="submit">Modifica</button>
                                    </div>
                                </div>
                            </div>
                        </form>

                    <?php

                    }
                }
            ?>

        </div>

    </div>
</div>