mysql_connect(localhost,"",""); mysql_select_db("btssu") or die("Unable to select database"); function sqlesc($x) { return "'".mysql_real_escape_string($x)."'"; } if ($_SERVER["REQUEST_METHOD"] == "POST"){ if($_GET["action"]=="add"){ $name=trim(sqlesc($_POST["name"])); $location=trim(sqlesc($_POST["location"])); $url=trim(sqlesc($_POST["url"])); if (!$name || !$location || !$url){ //if ($name=="" || $location=="" || $url==""){ print "Error, missing form data."; }else{ mysql_query("INSERT INTO hosts (name, location, url) VALUES($name, $location, $url)"); header("location:hosts.php"); } }else if($_GET["action"]=="rate"){ $rated=$_POST['rating']; if($rated==0){ exit; } $id=$_GET["id"]; list($rate_sum, $rate_num) = mysql_fetch_array(mysql_query("SELECT rate_sum,rate_num FROM hosts WHERE id='".mysql_real_escape_string($id)."'")); $rate_sum=$rate_sum+$rated; $rate_num++; mysql_query("UPDATE hosts SET rate_sum='$rate_sum', rate_num='$rate_num' WHERE id='$id'"); header("location:hosts.php"); } } ?>
| Host | Location | URL | Rating |
| $name | $location | $url | |
| Rating |
");*/
ob_start("ob_gzhandler");
print " "; print(" |