Untitled

elseif($_POST['saveedit']) {
	include("_mysql.php");
	include("_settings.php");
	include('_functions.php');
  if(!ispageadmin($userID)) die('No access.');

	$date=mktime(0,0,0,$month,$day,$year);
	print DEBUG(safe_query("UPDATE ".PREFIX."movies SET name='".$_POST['name']."','".$_POST['code']."','".$_POST['author']."','".$_POST['time']."' WHERE moviesID='".$_POST['moviesID']."'"));					 
	$filepath = "./images/movies/";
	$id=$_POST['moviesID'];
	$movies = $_FILES['movies'];
	$code=$_POST['code'];
	$time=$_POST['time'];
	$author=$_POST['author'];
	if ($movies[name] != "") {
        move_uploaded_file($movies['tmp_name'], $filepath.$movies['name']);
		@chmod($filepath.$movies['name'], 0755);
		$file_ext=strtolower(substr($movies['name'], strrpos($movies['name'], ".")));
		$file=$id.$file_ext;
		if(file_exists($filepath.$file)) @unlink($filepath.$file);
		rename($filepath.$movies['name'], $filepath.$file);
		safe_query("UPDATE ".PREFIX."movies SET file='$file' WHERE moviesID='$id' ");
	}
	header("Location: index.php?site=movies");
}
elseif($_GET['delete']) {
	include("_mysql.php");
	include("_settings.php");
	include('_functions.php');
  if(!ispageadmin($userID)) die('No access.');

	$moviesID = $_GET['moviesID'];
  	$filepath = "./images/movies/";
	safe_query("DELETE FROM ".PREFIX."movies WHERE moviesID='$moviesID'");
	if(file_exists($filepath.$moviesID.'.jpg')) @unlink($filepath.$moviesID.'.jpg');
	if(file_exists($filepath.$moviesID.'.gif')) @unlink($filepath.$moviesID.'.gif');
	header("Location: index.php?site=movies");
}