Anonymous

<?php
#   Copyright by: Horfic
#   Support: ICQ 282892739

defined ('main') or die ( 'no direct access' );
defined ('admin') or die ( 'only admin access' );

$design = new design ( 'Admins Area', 'Admins Area', 2 );
$design->header();
$um = '';
if (isset($_REQUEST['um'])) {
  $um = $_REQUEST['um'];
}

if (!empty($_POST['sub'])) {
  $seitenname = escape($_POST['seitenname'], 'string');
  $link = escape($_POST['link'], 'string');
  $ersteller = escape($_POST['ersteller'], 'string');
  $vorschaubild  = escape($_POST['vorschaubild'], 'string');
  $screenshot = escape($_POST['screenshot'], 'string');
  $status = escape($_POST['status'], 'string');
  if ( empty($_POST['sid']) ) {
    db_query('INSERT INTO `prefix_works` (seitenname,link,ersteller,vorschaubild,screenshot,status) VALUES ( "'.$seitenname.'","'.$link.'","'.$ersteller.'","'.$vorschaubild.'","'.$screenshot.'","'.$status.'" ) ' );
  } else {
    $sid = escape($_POST['sid'], 'integer');
    db_query('UPDATE `prefix_works` SET seitenname = "'.$seitenname.'", link = "'.$link.'", ersteller = "'.$ersteller.'", vorschaubild = "'.$vorschaubild.'", screenshot = "'.$screenshot.'", status = "'.$status.'" WHERE id = "'.$sid.'"');
  }
}
if (!empty($_GET['delete']) ) {
  $delete = escape($_GET['delete'], 'integer');
  db_query('DELETE FROM `prefix_works` WHERE id = "'.$delete.'" LIMIT 1');
}

if ( empty($_GET['sid']) ) {
  $row = array();
        $row['sub'] = 'Eintragen';
        $row['seitenname'] = '';
        $row['link'] = '';
        $row['ersteller'] = '';
        $row['vorschaubild'] = '';
        $row['screenshot'] = '';
        $row['status'] = '';
        $row['sid'] = '';
} else {
        $abf = 'SELECT seitenname,link,ersteller,vorschaubild,screenshot,status,id as sid FROM `prefix_works` WHERE id = "'.$_GET['sid'].'"';
        $erg = db_query($abf);
        $row = db_fetch_assoc($erg);
        $row['sub'] = '&Auml;ndern';
}

$clas = '';
$tpl = new tpl ( 'works', 1);
$tpl->set_ar_out($row,0);
$erg = db_query('SELECT * FROM `prefix_works` ORDER BY id');
while ($row = db_fetch_assoc($erg) ) {
  $clas = ($clas == 'Cmite' ? 'Cnorm' : 'Cmite' );
        $row['class'] = $clas;
        $tpl->set_ar_out($row,1);
}
$tpl->out(2);

$design->footer();
?>