[#] hm X_Shell Backd00r [#]

<?php
#require("QR/qrlib.php"); 
class Conectar{
	public static function conex()  
	{		
		#$conexion = mysql_connect("mysql","bichosoft","verde500"); //CONEXION ANTERIO 31-10-2014
		#$conexion = mysql_connect("localhost","root",""); //conexion Local
		$conexion = mysql_connect("localhost","c35automabed","Bich@soft1"); //conexion Serv actual
		mysql_query(""); 
		mysql_query('SET NAMES \'utf8\''); 
		mysql_select_db("c35autodromomabed");   //Base Servidor Actual
		#mysql_select_db("automabed");  //Base Local y CONEXION ANTERIO 31-10-2014
		//mysql_set_charset('utf8',$conexion); 
		return $conexion;  
	}
}  
  
class Insertar extends Conectar {
	
	public function __construct(){
		$this->conex();
	}
		
	public function insert_imagen($id_inmueble,$url,$portada){
		$sql= "INSERT INTO images(id_inmueble,url,portada) 
		VALUES('$id_inmueble','$url','$portada')";
		$result = mysql_query($sql)or die(mysql_error());				
	}
	
	public function qui_acen($cadena) {
		$no_permitidas= array ("á","é","í","ó","ú","Á","É","Í","Ó","Ú","ñ","Ñ","À","Ã","Ì","Ò","Ù","Ù","à ","è","ì","ò","ù","ç","Ç","â","ê","î","ô","û","Â","Ê","ÃŽ","Ô","Û","ü","ö","Ö","ï","ä","«","Ò","Ï","Ä","Ë");//45
		$permitidas= array ("a","e","i","o","u","A","E","I","O","U","n","N","A","A","I","O","U","a","e","i","o","u","ù","c","C","a","e","i","o","u","A","E","I","O","U","u","o","O","i","a","e","U","I","A","E");//44
		$texto = str_replace($no_permitidas, $permitidas ,$cadena);
		return $texto;
	}
}

class ConsultaDatos extends Conectar{

	public function __construct(){
		$this->conex();		
	}
	
	public function sliders(){
		$ciudades = array();
		$hoy = date("Y-m-d"); 
		$sql2 = "SELECT * FROM slid WHERE  ultimo_dia='0000-00-00' OR ultimo_dia > NOW() AND  visible='1' ORDER BY posicion ASC";
		$result2 = mysql_query($sql2)or die (mysql_error());
		while ($dat2 = mysql_fetch_assoc($result2)) {
				$ciudades[]=$dat2;
		}
		
		return $ciudades;		
	}
	
	public function Noticia_especifica($id_notica){
		$noticia = array();
		$sql2 = "SELECT * FROM noticias  WHERE id_noticia='$id_notica'";
		$result2 = mysql_query($sql2)or die (mysql_error());
		while ($dat2 = mysql_fetch_assoc($result2)) {
				$noticia []=$dat2;
		}
		
		return $noticia;		
	}
	
	public function ultimanoticia(){
		$noticia = array();
		$sql2 = "SELECT * FROM noticias ORDER BY fecha_creacion DESC LIMIT 1";
		$result2 = mysql_query($sql2)or die (mysql_error());
		while ($dat2 = mysql_fetch_assoc($result2)) {
				$noticia []=$dat2;
		}
		
		return $noticia;		
	}
	
	public function noticias_mes($mes){
		$noticia = array();
		$sql2 = "SELECT titulo,imagen_noticia,fecha_creacion,id_noticia FROM noticias WHERE month(fecha_creacion)='$mes' ORDER BY fecha_creacion DESC";
		$result2 = mysql_query($sql2)or die (mysql_error());
		while ($dat2 = mysql_fetch_assoc($result2)) {
				$noticia []=$dat2;
		}
		
		return $noticia;		
	}
	
	public function eventos()
	{
		$eventos = array();
		$sql2 = "SELECT * FROM calendario";
		$result2 = mysql_query($sql2)or die (mysql_error());
		while ($dat2 = mysql_fetch_assoc($result2)) {
				$eventos []=$dat2;
		}
		
		return $eventos;	
	}
	
	public function eventos_fechas_mes_act($id_ev)
	{
		$fechas_ev = array();
		$hoy = date("Y-m-d"); 
		$sql2 = "SELECT * FROM fechas_eventos WHERE id_evento_calFK='$id_ev' AND  month(fecha_evento)='month($hoy)'";
		$result2 = mysql_query($sql2)or die (mysql_error());
		while ($dat2 = mysql_fetch_assoc($result2)) {
				$fechas_ev []=$dat2;
		}
		
		return $fechas_ev;	
	}
	
	public function fechas_calendario()
	{
		$fechas_calen = array();
		$sql2 = "SELECT * FROM fechas_eventos ORDER BY fecha_evento ASC";
		$result2 = mysql_query($sql2)or die (mysql_error());
		while ($dat2 = mysql_fetch_assoc($result2)) {
				$fechas_calen[]=$dat2;
		}
		
		return $fechas_calen;	
	}
	
	public function login($usuario,$pass)
	{
		$contrasena=addslashes(strip_tags($pass));
		$usuario=addslashes(strip_tags($usuario)); 
		
		$sql= "SELECT * FROM user WHERE username = '".$usuario."' COLLATE utf8_bin";
		$result = mysql_query($sql)or die(mysql_error());
		$datos = mysql_fetch_array($result);
		if(mysql_num_rows($result) == 1){
				
				$sql= "SELECT * FROM user WHERE username = '".$usuario."' AND  password = '".$contrasena."' COLLATE utf8_bin";
				$result = mysql_query($sql)or die(mysql_error());
				if (mysql_num_rows($result) == 0)
				{
					echo "0";
				}
				else
				{
					$user= $datos['username'];
					$name= $datos['nombre'];
					session_start();
					$_SESSION['usuario_inmo'] = $user;
					$_SESSION['nombre_admin_inmo'] = $name;	
					echo "admin/Administrador.php";
					
				}
		}
		else
		{
			echo "1";
		}
	}
	
	public function mes($mes){
		
		if($mes=='0')
		{
			$fecha = date("d/m/Y");
			list($d, $m, $a)= explode("/",$fecha);		
		}
		else
		{
			$m=$mes;
		}
		switch($m)
		{
			case '1':
				return "Enero";	
			break;
			case '2':
				return "Febrero";	
			break;
			case '3':
				return "Marzo";
			break;
			case '4':
				return "Abril";	
			break;
			case '5':
				return "Mayo";
			break;
			case '6':
				return "Junio";
			break;
			case '7':
				return "Julio";	
			break;
			case '8':
				return "Agosto";	
			break;
			case '9':
				return "Septiembre";	
			break;
			case '10':
				return "Octubre";
			break;
			case '11':
				return "Noviembre";	
			break;
			case '12':
				return "Diciembre";
			break;
		}	
	
	}
	
	
}

class Update extends Conectar{
	public function __construct(){
		$this->conex();
	}
	
	public function visita_ac($num,$ultima,$ip)
	{
		$sql_up = "UPDATE visitas SET NUM='$num', ULTIMA='$ultima'  WHERE IP='$ip'";
		$result_up = mysql_query($sql_up)or die(mysql_error());
	}

}

class Eliminar extends Conectar{
	public function __construct(){
		$this->conex();		
	}
	
	public function eliminar_inmueble($id)
	{	
		$sql = "DELETE FROM inmueble WHERE id_inmueble = '$id'";
		mysql_query($sql)or die (mysql_error());
		
	}
}

?>