phpBB România

Cod: Selectaţi tot

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script-Filename: /s/admin/admin_inline_ad_code.php
----------------

Request-Method: POST

Matching rule: "
In variable:   ad_code

Possible solution:
------------------

#
#-----[ OPEN ]------------------------------------------
#
/s/admin/admin_inline_ad_code.php

#
#-----[ FIND ]------------------------------------------
#
include($phpbb_root_path . 'common.'.$phpEx);

#
#-----[ BEFORE, ADD ]------------------------------------------
#
define('CT_SECLEVEL', 'MEDIUM');
$ct_ignorepvar = array('ad_code');

#
#-----[ SAVE/CLOSE ALL FILES ]------------------------------------------
#
# EoM

Cod: Selectaţi tot

<php>sql_query($sql) )
		{
			message_die(GENERAL_ERROR, "Failed to update first post ad settings", "", __LINE__, __FILE__, $sql);
		}
	}
	else 
	{
		$sql = "INSERT INTO " . ADS_TABLE . "
				(ad_name, ad_code)
				VALUES ('" . str_replace("\'", "''", $HTTP_POST_VARS['ad_name']) . "','" . str_replace("\'", "''", $HTTP_POST_VARS['ad_code']) . "')";
		if( !$db->sql_query($sql) )
		{
			message_die(GENERAL_ERROR, "Failed to update first post ad settings", "", __LINE__, __FILE__, $sql);
		}
	}
	$message = $lang['Config_updated'] . "<br><br>" . sprintf($lang['Click_return_inline_code'], "<a href="">", "</a>") . "<br><br>" . sprintf($lang['Click_return_admin_index'], "<a href="">", "</a>");

		message_die(GENERAL_MESSAGE, $message);
}
if ($HTTP_GET_VARS['action'] == "edit")
{
	$sql = "SELECT *
			FROM " . ADS_TABLE . " a
			WHERE a.ad_id = " . intval($HTTP_GET_VARS['id']);
	if ( !($result = $db->sql_query($sql)) )
	{
		message_die(GENERAL_ERROR, 'Could not query ad information', '', __LINE__, __FILE__, $sql);
	}
	$adRow = array();
	while( $row = $db->sql_fetchrow($result) )
	{
		$adRow = $row;
	}
	$db->sql_freeresult($result);
	$template->set_filenames(array(
	"body" => "admin/inline_ad_code_edit.tpl")
	);
	$template->assign_vars(array(
	"L_CONFIGURATION_TITLE" => $lang['ad_managment'],
	"L_SUBMIT" => $lang['Submit'],
	"L_RESET" => $lang['Reset'],
	"L_NAME" => $lang['ad_name'],
	"L_CODE" => $lang['ad_code'],
	"AD_CODE" => $adRow['ad_code'],
	"AD_NAME" => $adRow['ad_name'],
	"S_HIDDEN_FIELDS" => '<input><input>',
	"S_ACTION" => append_sid("admin_inline_ad_code.$phpEx"))
	);
	$template->pparse("body");
}
elseif ($HTTP_GET_VARS['action'] == "delete")
{
	$sql = "DELETE 
			FROM " . ADS_TABLE . "
			WHERE ad_id = " . intval($HTTP_GET_VARS['id']);
	if ( !($result = $db->sql_query($sql)) )
	{
		message_die(GENERAL_ERROR, 'Could not query ad information', '', __LINE__, __FILE__, $sql);
	}
	$message = $lang['Config_updated'] . "<br><br>" . sprintf($lang['Click_return_inline_code'], "<a href="">", "</a>") . "<br><br>" . sprintf($lang['Click_return_admin_index'], "<a href="">", "</a>");

		message_die(GENERAL_MESSAGE, $message);
}
elseif ($HTTP_GET_VARS['action'] == "add")
{
	$template->set_filenames(array(
	"body" => "admin/inline_ad_code_edit.tpl")
	);
	$template->assign_vars(array(
	"L_CONFIGURATION_TITLE" => $lang['ad_managment'],
	"L_SUBMIT" => $lang['Submit'],
	"L_RESET" => $lang['Reset'],
	"L_NAME" => $lang['ad_name'],
	"L_CODE" => $lang['ad_code'],
	"AD_CODE" => '',
	"AD_NAME" => '',
	"S_HIDDEN_FIELDS" => '',
	"S_ACTION" => append_sid("admin_inline_ad_code.$phpEx"))
	);
	$template->pparse("body");
}
else
{
	$sql = "SELECT a.ad_name, a.ad_id
			FROM " . ADS_TABLE . " a";
	if ( !($result = $db->sql_query($sql)) )
	{
		message_die(GENERAL_ERROR, 'Could not query ad information', '', __LINE__, __FILE__, $sql);
	}
	$adRow = array();
	while( $row = $db->sql_fetchrow($result) )
	{
		$adRow[] = $row;
	}
	$ad_count = $db->sql_numrows($result);
	$db->sql_freeresult($result);

	$template->set_filenames(array(
	"body" => "admin/inline_ad_code_body.tpl")
	);
	$template->assign_vars(array(
	"L_CONFIGURATION_TITLE" => $lang['inline_ads'],
	"L_CONFIGURATION_EXPLAIN" => $lang['ad_code_about'],
	"L_EDIT" => $lang['Edit'],
	"L_DELETE" => $lang['Delete'],
	"L_ADD" => $lang['ad_add'],
	"S_ADD_ACTION" => append_sid("admin_inline_ad_code.$phpEx?action=add"))
	);

	//$inline_ad_code = $adRow[$adindex]['ad_code'];
	for($i = 0; $i <ad_count>assign_block_vars('ad_row',array( 'AD_NAME' => $adRow[$i]['ad_name'],
		'S_AD_EDIT' => append_sid("admin_inline_ad_code.$phpEx?action=edit&id=$ad_id"),
		'S_AD_DELETE' => append_sid("admin_inline_ad_code.$phpEx?action=delete&id=$ad_id")
		)
		);
	}
	$template->pparse("body");
}
include('./page_footer_admin.'.$phpEx);

?>