elseif($_POST['saveedit']) { include("_mysql.php"); include("_settings.php"); include('_functions.php'); if(!ispageadmin($userID)) die('No access.'); $date=mktime(0,0,0,$month,$day,$year); print DEBUG(safe_query("UPDATE ".PREFIX."movies SET name='".$_POST['name']."','".$_POST['code']."','".$_POST['author']."','".$_POST['time']."' WHERE moviesID='".$_POST['moviesID']."'")); $filepath = "./images/movies/"; $id=$_POST['moviesID']; $movies = $_FILES['movies']; $code=$_POST['code']; $time=$_POST['time']; $author=$_POST['author']; if ($movies[name] != "") { move_uploaded_file($movies['tmp_name'], $filepath.$movies['name']); @chmod($filepath.$movies['name'], 0755); $file_ext=strtolower(substr($movies['name'], strrpos($movies['name'], "."))); $file=$id.$file_ext; if(file_exists($filepath.$file)) @unlink($filepath.$file); rename($filepath.$movies['name'], $filepath.$file); safe_query("UPDATE ".PREFIX."movies SET file='$file' WHERE moviesID='$id' "); } header("Location: index.php?site=movies"); } elseif($_GET['delete']) { include("_mysql.php"); include("_settings.php"); include('_functions.php'); if(!ispageadmin($userID)) die('No access.'); $moviesID = $_GET['moviesID']; $filepath = "./images/movies/"; safe_query("DELETE FROM ".PREFIX."movies WHERE moviesID='$moviesID'"); if(file_exists($filepath.$moviesID.'.jpg')) @unlink($filepath.$moviesID.'.jpg'); if(file_exists($filepath.$moviesID.'.gif')) @unlink($filepath.$moviesID.'.gif'); header("Location: index.php?site=movies"); }