Stuff

$out .= '<tr><td>Add URL:</td><td><input type=text name=url style="vertical-align: middle"> <input type=button onClick="go(\'add_site\')" value="Add" style="vertical-align: middle"></td></tr>';

$out .= '<tr><td>Export From File:</td><td><input type=file name=file style="vertical-align: middle"> <input type=button  onClick="go(\'export\')" value="Upload" style="vertical-align: middle"></td></tr>';

$out .= '<tr><td></td><td>';


case 'export':
    foreach((array)$_REQUEST['form'] as $file){
      foreach((array)@file($upload_dir.'/'.$file) as $url){
        $url = mysql_escape_string(trim($url));
        if($url) mysql_query($query = 'INSERT INTO '.prefix.'url SET parent=0, url = "'.$url.'", base = '.$id.'');
      }
    }
    foreach((array)@file($_FILES['file']['tmp_name']) as $url){
      $url = mysql_escape_string(trim($url));
      if($url) mysql_query($query = 'INSERT INTO '.prefix.'url SET parent=0, url = "'.$url.'", base = '.$id.'');
    }
    header('location: '.self.'&action=edit&id='.$id.''); exit;
    break;

case 'add_site':
if(!preg_match('/^https?\:\/\//i', $_REQUEST['url'])) $_REQUEST['url'] = 'http://'.$_REQUEST['url'];
mysql_query($query = 'INSERT INTO '.prefix.'url SET parent=0, url = "'.mysql_escape_string($_REQUEST['url']).'", base = '.$id.'');
header('location: '.self.'&action=edit&id='.$id.''); exit;
break;