include "h.inc.htm"; $name = htmlspecialchars($HTTP_GET_VARS['name']); $page = $_GET['page']; $cat = $_GET['cat']; {$perpage = $_GET['per'];}; if (!$perpage) $perpage= "50" ; if ($cat == '' ) $cat='-'; function sqlesc($x) { return "'".mysql_real_escape_string($x)."'"; } function is_valid_id($id) { return is_numeric($id) && ($id > 0) && (floor($id) == $id); } if ($cat == '-' ) {$c =''; } else { $c = "AND cat = '$cat'" ; }; if (!$name) {$n ='';} else { $n =" AND name LIKE " . sqlesc("%$name%") ." " ; }; $query = "WHERE valid='1' $n $c "; print("
$browsemenu
$pagemenu
| Date | "; (!is_valid_id($cat))? Print("Category | ") : ""; // Category echo"Type | Name | "; ($cat >= 4)? Print("cast | ") : "" ; echo"CDs | "; ($cat <= 3)? Print("InfoBy | ") : "" ; // echo"InfoBy | "; echo " "; for ($i = 0; $i < $num; ++$i) { $arr = mysql_fetch_assoc($res); $res2 = mysql_query("SELECT * FROM cat where id = $arr[cat]"); $arr2 = mysql_fetch_assoc($res2); // Date of the add echo "
| $arr[date] | "; (!is_valid_id($cat))? Print("$arr2[name] | ") : "" ; // Name for the product [type] echo"$arr[type] | $arr[name] | "; ($cat >= 4)? Print("$arr[cast] | ") : "" ; // The size of the CDs echo"$arr[cds] | "; // ($cat <= 3)? Print("$arr[rate] | ") : "" ; // echo"$arr[downloader] | "; echo "
$pagemenu
$browsemenu