header(); function icUpload () { $seitenname = escape($_POST['seitenname'], 'string'); $link = escape($_POST['link'], 'string'); $zweck = escape($_POST['zweck'], 'string'); $ersteller = escape($_POST['ersteller'], 'string'); $status = escape($_POST['status'], 'string'); $screenshot = ( empty($_POST['screenshot']) ? '' : escape($_POST['screenshot'],'string') ); $file = ( empty($_POST['file']) ? '' : escape($_POST['file'],'string') ); //Vorschaubild $pfad="./include/images/works/"; $speichername= $pfad.basename($_FILES['file']['name']); $file = $_FILES['file']['tmp_name']; move_uploaded_file($file,$speichername); @chmod($speichername, 0777); // Screenshot $speichername1= $pfad.basename($_FILES['screenshot']['name']); $file1 = $_FILES['screenshot']['tmp_name']; move_uploaded_file($file1,$speichername1); @chmod($speichername1, 0777); db_query('INSERT INTO `prefix_works` (seitenname,link,ersteller,vorschaubild,screenshot,status,zweck) VALUES ( "'.$seitenname.'","'.$link.'","'.$ersteller.'","'.$speichername.'","'.$speichername1.'","'.$status.'","'.$zweck.'" ) ' ); echo $file; return (true); } $um = ''; if (isset($_REQUEST['um'])) { $um = $_REQUEST['um']; } if (!empty($_POST['sub'])) { $seitenname = escape($_POST['seitenname'], 'string'); $link = escape($_POST['link'], 'string'); $zweck = escape($_POST['zweck'], 'string'); $ersteller = escape($_POST['ersteller'], 'string'); $vorschaubild = escape($_POST['file'], 'string'); $screenshot = escape($_POST['screenshot'], 'string'); $status = escape($_POST['status'], 'string'); if ( empty($_POST['sid']) ) { icUpload(); } else { $sid = escape($_POST['sid'], 'integer'); db_query('UPDATE `prefix_works` SET seitenname = "'.$seitenname.'", link = "'.$link.'", ersteller = "'.$ersteller.'", vorschaubild = "'.$vorschaubild.'", screenshot = "'.$screenshot.'", status = "'.$status.'", zweck = "'.$zweck.'" WHERE id = "'.$sid.'"'); } } if (!empty($_GET['delete']) ) { $delete = escape($_GET['delete'], 'integer'); db_query('DELETE FROM `prefix_works` WHERE id = "'.$delete.'" LIMIT 1'); } if ( $menu->get(1) == 'status' ) { db_query('UPDATE `prefix_works` SET status = IF(status=ONLINE,OFFLINE,ONLINE) WHERE id = "'.$menu->get(2).'" LIMIT 1'); } if ( empty($_GET['sid']) ) { $row = array(); $row['sub'] = 'Eintragen'; $row['seitenname'] = ''; $row['link'] = ''; $row['zweck'] = ''; $row['ersteller'] = ''; $row['vorschaubild'] = ''; $row['screenshot'] = ''; $row['status'] = ''; $row['sid'] = ''; } else { $abf = 'SELECT seitenname,link,ersteller,vorschaubild,screenshot,zweck,status,id as sid FROM `prefix_works` WHERE id = "'.$_GET['sid'].'"'; $erg = db_query($abf); $row = db_fetch_assoc($erg); $row['sub'] = 'Ändern'; } $clas = ''; $tpl = new tpl ( 'works', 1); $tpl->set_ar_out($row,0); $erg = db_query('SELECT * FROM `prefix_works` ORDER BY id'); while ($row = db_fetch_assoc($erg) ) { $clas = ($clas == 'Cmite' ? 'Cnorm' : 'Cmite' ); $row['class'] = $clas; $tpl->set_ar_out($row,1); } $tpl->out(2); $design->footer(); ?> -------- HTM

Referenzen

{EXPLODE} {EXPLODE}

Seitenname	Link
{seitenname}	{link}		Bearbeiten	Löschen