All pastes #765742 Raw Edit

Something

public php v1 · immutable
·published 2007-11-08 09:31 UTC
rendered paste body
<?php// COntent Management System (18th Sept 2007 - Drafted over a One Week period)// Built for Young Enterprise Company 2007-08// (c) Thomas Cameron 2007. Only for usage by authorised license holders.class content{  function clean($var)  {    return mysql_real_escape_string($var);  }  function get_content_page($id)  {    $sql = mysql_query("SELECT * FROM pages WHERE id = ".clean($id)) or die("MySQL Error: ".mysql_error());    if(mysql_num_rows($sql) == 1) {      $row = mysql_fetch_array($sql);            $retarray = array();            $retarray['id'] = $id;      $retarray['title'] = $row['title'];      $retarray['maincont'] = $row['maincont'];      $retarray['author'] = $row['author'];      $retarray['date'] = $row['date'];            return $retarray;    } else {      return false;    }  }  function get_pages_list()  {    $sql = mysql_query("SELECT id, title, author, date FROM pages") or die("MySQL Error: ".mysql_error());    if(mysql_num_rows($sql) == 0) {      return false;    } else {      $i = 0;      $retarray = array();            mysql_data_seek($sql, 0);      while($row = mysql_fetch_assoc($sql)) {        $retarray[$i]['id'] = $row['id'];        $retarray[$i]['title'] = $row['title'];        $retarray[$i]['author'] = $row['author'];        $retarray[$i]['date'] = $row['date'];                $i++;      }            return $retarray;    }  }  function add_page($title, $content)  {    $sql = mysql_query("INSERT INTO pages (title, maincont, author, date) VALUES('".$title."', '".$content."', '".$_SESSION['fname']."', ".time().")") or die("MySQL Error: ".mysql_error());    return true;  }  function remove_page($id)  {    $sql = mysql_query("DELETE FROM pages WHERE id = ".$id) or die("MySQL Error: ".mysql_error());    return true;  }  function edit_page($id, $title, $maincont)  {    $sql = mysql_query("SELECT title FROM pages WHERE id = ".$id) or die("MySQL Error: ".mysql_error());    if(mysql_num_rows($sql) == 1) {      $sql = mysql_query("UPDATE pages SET title = '".$title."', maincont = '".$maincont."' WHERE id = ".$id) or die("MySQL Error: ".mysql_error());    } else {      return false;    }  }  function delete_page($id)  {    $sql = mysql_query("DELETE FROM pages WHERE id = ".$id) or die("MySQL Error: ".mysql_error());    return true;  }}?>