rendered paste body<?
include "h.inc.htm";
$name = htmlspecialchars($HTTP_GET_VARS['name']);
$page = $_GET['page'];
$cat = $_GET['cat'];
{$perpage = $_GET['per'];};
if (!$perpage) $perpage= "50" ;
if ($cat == '' ) $cat='-';
function sqlesc($x) {
return "'".mysql_real_escape_string($x)."'";
}
function is_valid_id($id)
{
return is_numeric($id) && ($id > 0) && (floor($id) == $id);
}
if ($cat == '-' ) {$c =''; } else { $c = "AND cat = '$cat'" ; };
if (!$name) {$n ='';} else { $n =" AND name LIKE " . sqlesc("%$name%") ." " ; };
$query = "WHERE valid='1' $n $c ";
print("<table><tr></tr><tr><td><form method=get action=?>\n");
print("<table><tr><td valign=\"middle\"><B><font Color=Black>Name: </font></B><input type=text size=20 name=name value=\"$name\">\n");
print("<B><font Color=Black>Titles Per Page: </font></B><input type=text size=2 name=per value=".$_GET['per'].">\n");
print("<select size=1 name=cat>\n");
print("<option value='-'>(All Categories)</option>\n");
$ct_r = mysql_query("SELECT id,name FROM cat");
$num_recs = mysql_num_rows($ct_r);
for($ii=1 ; $ii<=$num_recs ; $ii++) {
($ct_a = mysql_fetch_array($ct_r));
$cate = "<option value=$ii" . ($cat == $ii ? " selected" : "") . ">$ct_a[name]</option>\n";
echo $cate;
}
print("</select></td>\n");
print("<td valign=\"middle\"><INPUT type=image height=22 alt=Search width=80 src=\"files/search_up.jpg\" value=search border=0 name=search>\n");
print("</td></tr></table></form></td></tr></table>\n");
// error reporting needed
$res = mysql_query("SELECT COUNT(*) FROM product $query order by id desc") or sqlerr();
$arr = mysql_fetch_row($res);
$pages = floor($arr[0] / $perpage);
if ($pages * $perpage < $arr[0])
++$pages;
if ($page < 1)
$page = 1;
else
if ($page > $pages)
$page = $pages;
for ($i = 1; $i <= $pages; ++$i)
if ($i == $page)
$pagemenu .= "<b>$i</b>\n";
else
$pagemenu .= "<a href=?name=$name&cat=$cat&page=$i&per=$perpage><b>$i</b></a>\n";
if ($page != 1)
$browsemenu .= "<a href=?name=$name&cat=$cat&page=1&per=$perpage><b><<< First</b></a> ";
if ($page == 1)
$browsemenu .= "<b><<< First</b> <b><< Prev</b>";
else
$browsemenu .= "<a href=?name=$name&cat=$cat&page=" . ($page - 1) . "&per=$perpage><b><< Prev</b></a>";
$arnumb = $page * $perpage;
if ($arnumb > $arr[0]) $arnumb = $arr[0] ;
$browsemenu .= " <FONT color=black><B>Showing $arnumb of $arr[0]</B></FONT> ";
if ($page == $pages)
$browsemenu .= "<b>Next >></b> Last >>>";
else
$browsemenu .= "<a href=?name=$name&cat=$cat&page=" . ($page + 1) . "&per=$perpage><b>Next >></b></a>";
if ($page != $pages)
$browsemenu .= " <a href=?name=$name&cat=$cat&page=$pages&per=$perpage><b>Last >>></b></a>";
print("<p>$browsemenu<br>$pagemenu</p>");
$offset = ($page * $perpage) - $perpage;
$res = mysql_query("SELECT * FROM product $query order by id desc LIMIT $offset,$perpage") or sqlerr();
$num = mysql_num_rows($res);
// Date
echo "<TABLE cellSpacing=1 cellPadding=3 width=798 align=center
border=0>
<TBODY>
<!-- <TR bgColor=#003300 align=center> -->
<TD width=75 ><b><FONT color=black size=2>Date</FONT></b></TD>";
(!is_valid_id($cat))? Print("<TD width=15><b><FONT color=black size=2>Category</FONT></b></TD>") : "";
// Category
echo"<TD> <b><FONT color=black size=2>Type<FONT size=+0></FONT></FONT></b></TD>
<TD> <b><FONT color=black size=2> Name </FONT></b></TD>";
($cat >= 4)? Print("<TD width=220><b><FONT color=black>cast</FONT><b></TD>") : "" ;
echo"<TD><b><FONT color=black size=2>CDs </FONT></b></TD>";
($cat <= 3)? Print("<TD> <b><FONT color=white size=2>InfoBy </FONT></b></TD>") : "" ;
// echo"<TD width=70><b><FONT color=black size=2>InfoBy </A></FONT></b></TD>";
echo "
</TR>
";
for ($i = 0; $i < $num; ++$i) {
$arr = mysql_fetch_assoc($res);
$res2 = mysql_query("SELECT * FROM cat where id = $arr[cat]");
$arr2 = mysql_fetch_assoc($res2);
// Date of the add
echo "
<TR onmouseover=\"this.bgColor='89d2fe'\" onmouseout=\"this.bgColor='white'\" _<!-- bgColor=#003300 align=center> -->
<TD width=75><FONT color=black size=1>$arr[date]</FONT></TD>";
(!is_valid_id($cat))? Print("<TD><FONT color=black size=1>$arr2[name]</FONT></TD>") : "" ;
// Name for the product [type]
echo"<TD width=90><FONT color=black size=1>$arr[type]</FONT></TD>
<TD align=left><FONT color=black size=2> <b><A href=preview.php?id=$arr[id] >$arr[name]</A></b> </FONT></TD>";
($cat >= 4)? Print("<TD width=220><FONT color=black size=1>$arr[cast]</FONT></TD>") : "" ;
// The size of the CDs
echo"<TD ><FONT color=black size=1>$arr[cds]</FONT></TD>";
// ($cat <= 3)? Print("<TD ><FONT color=#ffffff size=1>$arr[rate]</FONT></TD>") : "" ;
// echo"<TD width=70><FONT color=#ffffff size=1><A>$arr[downloader]</A></FONT></TD>";
echo "
</TR>";
}
echo "
</TBODY>
</TABLE>
<BR>";
print("<p>$pagemenu<br>$browsemenu</p>");
include "l.inc.htm";
?>