rendered paste body<?php
# Copyright by: Horfic
# Support: ICQ 282892739
defined ('main') or die ( 'no direct access' );
defined ('admin') or die ( 'only admin access' );
$design = new design ( 'Admins Area', 'Admins Area', 2 );
$design->header();
$um = '';
if (isset($_REQUEST['um'])) {
$um = $_REQUEST['um'];
}
if (!empty($_POST['sub'])) {
$name = escape($_POST['name'], 'string');
$seite = escape($_POST['seite'], 'string');
$vergehen = escape($_POST['vergehen'], 'string');
$stat = escape($_POST['stat'],'integer');
if ( empty($_POST['sid']) ) {
db_query('INSERT INTO `prefix_rips` (name,seite,vergehen,stat) VALUES ( "'.$name.'","'.$seite.'","'.$vergehen.'","'.$stat.'" ) ' );
} else {
$sid = escape($_POST['sid'], 'integer');
db_query('UPDATE `prefix_rips` SET name = "'.$name.'", seite = "'.$seite.'", vergehen = "'.$vergehen.'", stat = "'.$stat.'" WHERE id = "'.$sid.'"');
}
}
if (!empty($_GET['delete']) ) {
$delete = escape($_GET['delete'], 'integer');
db_query('DELETE FROM `prefix_rips` WHERE id = "'.$delete.'" LIMIT 1');
}
if ( empty($_GET['sid']) ) {
$row = array();
$row['sub'] = 'Eintragen';
$row['name'] = '';
$row['seite'] = '';
$row['vergehen'] = '';
if ($row['stat'] != '') { $row['stat'] = "<img src=\"include/images/icons/{$row['stat']}.gif\" />";
}else{
$row['stat'] = "<img src=\"include/images/icons/1.gif\" />";
}
$row['sid'] = '';
} else {
$abf = 'SELECT name,seite,vergehen,stat,id as sid FROM `prefix_rips` WHERE id = "'.$_GET['sid'].'"';
$erg = db_query($abf);
$row = db_fetch_assoc($erg);
$row['sub'] = 'Ändern';
}
$clas = '';
$tpl = new tpl ( 'rips', 1);
$tpl->set_ar_out($row,0);
$erg = db_query('SELECT * FROM `prefix_rips` ORDER BY id');
while ($row = db_fetch_assoc($erg) ) {
$clas = ($clas == 'Cmite' ? 'Cnorm' : 'Cmite' );
$row['class'] = $clas;
$tpl->set_ar_out($row,1);
}
$tpl->out(2);
$design->footer();
?>