HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/_upmc/pancreaseq.alanwaldron.com/wp-content/themes/pancreaseq/admin/admin.php
<?php

add_action('admin_menu', 'aw_admin');
function aw_admin()
{
    add_menu_page('Conference Banner', 'Conference Banner', 'edit_others_posts',
        'banner', 'pseq_banners', get_stylesheet_directory_uri() . '/assets/img/dna-icon.png', 30);

    add_menu_page('Site Settings', 'Site Settings', 'edit_others_posts',
        'site_settings', 'site_settings', get_stylesheet_directory_uri() . '/assets/img/dna-icon.png', 30);
}

function site_settings()
{
    $action = (isset($_GET['action']) ? $_GET['action'] : '');

    global $wpdb;
    $db = new wpdb(DB_USER, DB_PASSWORD, DB_NAME, DB_HOST);

    if ($action === 'update' && $_POST['submit_btn']) {
        foreach ($_POST as $name => $value) {
            $upd = "UPDATE bim_settings SET value='".$value."' WHERE name='".$name."'";
            $db->query($upd);
        }
    }
    $settings = $db->get_results("SELECT * FROM bim_settings", ARRAY_A);

    $out = '
    <div class="wrap">
        <h1 class="wp-heading">Site Settings</h1>
        <hr>'.($action === 'update' ? '<div id="moderated" class="updated notice is-dismissible"><p>Site Settings updated.</p></div>' : '').'
        <br />
        <form action="/wp-admin/admin.php?page=site_settings&action=update" method="post">
        <table cellspacing="10">
    ';

    foreach ($settings as $set) {
        $out .= '<tr>';
        $out .= '<td>'.ucwords(str_ireplace('_',' ',$set['name'])).'</td>';
        $out .= '<td><td><input type="text" name="'.$set['name'].'" value="'.$set['value'].'" style="width:375px"></td></td>';
        $out .= '</tr>';
    }

$out .= '
        <tr><td colspan="2">&nbsp;</td></tr>
        <tr><td colspan="2"><input type="submit" name="submit_btn" value="Submit" class="button action" /></td></tr>
        </table></div>';
    echo $out;
}

function pseq_banners()
{
    $action = (isset($_GET['action']) ? $_GET['action'] : '');

    global $wpdb;
    $db = new wpdb(DB_USER, DB_PASSWORD, DB_NAME, DB_HOST);

    if ($action === 'update' && $_POST['submit_btn']) {
        $upd = "UPDATE bim_conference_banners SET ";
        $upd .= "headline='".$_POST['headline']."', ";
        $upd .= "date_start='".bim_format_date( $_POST['date_start'], 'db')."', ";
        $upd .= "date_end='".bim_format_date( $_POST['date_end'], 'db')."', ";
        $upd .= "city='".$_POST['city']."', ";
        $upd .= "booth='".$_POST['booth']."', ";
        $upd .= "link='".$_POST['link']."', ";
        $upd .= "more_info='".$_POST['more_info']."', ";
        $upd .= "active='".$_POST['active']."' ";
        $upd .= "WHERE banner_id=1";
        $db->query($upd);
    }

    $banners = $db->get_results("SELECT * FROM bim_conference_banners WHERE banner_id=1", ARRAY_A);
    $b = $banners[0];

    echo '    
    <div class="wrap">
        <h1 class="wp-heading">Conference Banner</h1>
        <hr>
        '.($action === 'update' ? '<div id="moderated" class="updated notice is-dismissible"><p>Conference banner updated.</p></div>' : '').'
        <br>
        <form action="/wp-admin/admin.php?page=banner&action=update" method="post">
        <table cellspacing="10">
        <tr><td style="width:125px">Banner Active?</td>
            <td>
                <label><input type="radio" name="active" value="1" '.($b['active']==1?'checked':'').' /> Yes</label>
                &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
                <label><input type="radio" name="active" value="0" '.($b['active']==0?'checked':'').' /> No</label>
            </td>
        </tr>
        <tr><td>Headline</td>
            <td><input type="text" name="headline" value="'.$b['headline'].'" style="width:375PX"></td>
        </tr>
        <tr><td>Date Start</td>
            <td><input type="text" name="date_start" value="'.bim_format_date($b['date_start']).'" style="width:375PX" placeholder="MM/DD/YYYY"></td>
        </tr>
        <tr><td>Date End</td>
            <td><input type="text" name="date_end" value="'.bim_format_date($b['date_end']).'" style="width:375PX" placeholder="MM/DD/YYYY"></td>
        </tr>
        <tr><td>City</td>
            <td><input type="text" name="city" value="'.$b['city'].'" style="width:375PX"></td>
        </tr>
        <tr><td>Booth</td>
            <td><input type="text" name="booth" value="'.$b['booth'].'" style="width:375PX"></td>
        </tr>
         <tr><td>Button Link</td>
            <td><input type="text" name="link" value="'.$b['link'].'" style="width:375PX" placeholder="http://www.example.com"></td>
        </tr>
         <tr><td>More Info Text</td>
            <td><textarea name="more_info" style="width:375PX;height:100px;">'.$b['more_info'].'</textarea></td>
        </tr>
        <tr><td colspan="2">&nbsp;</td></tr>
        <tr><td colspan="2"><input type="submit" name="submit_btn" value="Submit" class="button action" /></td></tr>
        </table>
        </form>
    </div>
    ';
}