rendered paste body<?
echo '<table align="center" class="content" cellspacing="0" cellpadding="0">
<tr>
<td>
if ($_GET['part'] == ""){
if ($_GET['do'] == "edit"){
mYsql_query("UPDATE site_news SET content = '".$_POST['content']."',subject = '".$_POST['subject']."' WHERE id = '".$_POST['id']."'");
echo '<center><strong>Edit done!</strong></center>';
}
if ($_GET['do'] == "delete"){
mYsql_query("DELETE FROM site_news WHERE id = '".$_GET['id']."'");
echo '<center><strong>Delete done!</strong></center>';
}
if ($_GET['do'] == "create"){
$time = date("d/m/Y");
mysql_query("INSERT INTO site_news (subject, wroteby, wrotedate,content) VALUES ('".$_POST['subject']."','".$_SESSION['kal_username']."','".$time."','".$_POST['content']."')");
echo '<center><strong>The news are created!</strong></center>';
}
echo ' Only the 5 newest news will be showed.
</table>
<table width="430" align="center">
<tr><td width="150"><strong>Subject:</strong></td>
<td width="100"><strong>Written By:</strong></td>
<td width="100"><strong>Date:</strong></td>
<td width="80"><a href="?site=news&part=new"><strong>- New News -</strong></a></td></tr>';
$query = mysql_query("SELECT * FROM site_news ORDER BY id DESC");
while($r = mysql_fetch_array($query)){
echo '<tr><td>'.$r['subject'].'</td><td>'.$r['wroteby'].'</td>
<td>'.$r['wrotedate'].'</td>
<td><a href="?site=news&do=delete&id='.$r['id'].'">Delete</a> - <a href="?site=news&part=edit&id='.$r['id'].'">Edit</a></td></tr>';
}
echo '</table>';
} else if ($_GET['part'] == "new"){
echo '<form method="post" action="?site=news&do=create"><table width="430" align="center">
<tr><td><center>You can use the following BBCodes: [b][/b], [i][/i], [u][/u], [center][/center] and [url=the-address]Name of like[/url].
You can\'t use any html tags.<br /><br />Subject: <input type="text" name="subject" /><br />
<textarea cols="75" rows="25" name="content" class="opera"></textarea><br />
<input type="submit" value="Create" /></center></td></tr>
</table></form>';
} else if ($_GET['part'] == "edit"){
$query = mysql_query("SELECT * FROM site_news WHERE id = '".$_GET['id']."'");
while($r = mysql_fetch_array($query)){
echo '<form method="post" action="?site=news&do=edit"><table width="430" align="center">
<tr><td><center>You can use the following BBCodes: [b][/b], [i][/i], [u][/u], [center][/center] and [url=the-address]Name of like[/url].
You can\'t use any html tags.<br /><br /><input type="hidden" name="id" value="'.$r['id'].'" />Subject: <input type="text" name="subject" value="'.$r['subject'].'" /><br />
<textarea cols="75" rows="25" name="content" class="opera">'.$r['content'].'</textarea><br />
<input type="submit" value="Edit" /></center></td></tr>
</table></form>';
}
}
echo '</td>
</tr>
</table><br />';
?>