Public feed
#892070
<?php include("includes/dbconn.php"); include("includes/clean.php"); $title = mysql_real_escape_string(clean($_POST['title'])); $description = mysql_real_escape_string(clean($_POST['description'])); $imgnum = mysql_real_escape_string(clean($_POST['id'])); $imgdir = "../uploads/"; if(isset($_POST['delete'])) { $query = "DELETE FROM pictures WHERE ID = '$imgnum';"; mysql_query($query); unlink($imgdir . $_POST['imgpath']); header("Location: list_images.php"); } elseif (isset($title, $description) && !isset($_POST['delete'])) { $query = "UPDATE pictures SET title = '$title', description = '$description' WHERE ID = '$imgnum';"; mysql_query($query); header("Location: list_images.php"); } else { echo "Edit Failed"; } include("includes/dbclose.php");?>