advanced();\n"; } else { require_once INCLUDES."html_buttons_include.php"; } if (isset($_GET['status']) && !isset($message)) { if ($_GET['status'] == "su") { $message = $locale['411']; } if ($message) { echo "
".$message."
\n"; } } $result = dbcount("(projects_id)", DB_PROJECTS); if (!empty($result)) { if (isset($_POST['save'])) { $project = stripinput($_POST['project']); $encyc = stripinput($_POST['encyc']); $forum = stripinput($_POST['forum']); $down = stripinput($_POST['down']); $download = stripinput($_POST['download']); $online = stripinput($_POST['online']); if (isset($_POST['projects_id']) && isnum($_POST['projects_id'])) { // old: //$result = dbquery("UPDATE ".DB_PROJECTS." SET projects_subject='$project' AND ".DB_ENCYCLOPEDIA." SET encyclopedia_subject='$encyc' && ".DB_THREADS." SET thread_subject='$forum' && ".DB_DOWN." SET down_subject='$down' && ".DB_DOWNLOAD_CATS." SET download_cat_name='$download' && ".DB_VIDEO_CAT." SET cat_name='$online WHERE projects_id='".$_POST['projects_id']."'"); // new: $tempAr = array(); // organize table names with their field name and field value in an array $tempAr[DB_PROJECTS] = array('field' => 'projects_subject', 'value' => $project); $tempAr[DB_ENCYCLOPEDIA] = array('field' => 'encyclopedia_subject', 'value' => $encyc); $tempAr[DB_THREADS] = array('field' => 'thread_subject', 'value' => $forum); $tempAr[DB_DOWN] = array('field' => 'down_subject', 'value' => $down); $tempAr[DB_DOWNLOAD_CATS] = array('field' => 'download_cat_name', 'value' => $download); $tempAr[DB_VIDEO_CAT] = array('field' => 'cat_name', 'value' => $online); // protect input from sql injection $primaryKey = (int) mysql_real_escape_string($_POST['projects_id']); foreach($tempAr as $tblName => $fieldValuePair) { dbquery("UPDATE ".$tblName." SET ".$fieldValuePair["field"]." = '".$fieldValuePair["value"]."' WHERE projects_id = '".$primaryKey."'"); } redirect(FUSION_SELF.$aidlink."&status=su"); } } else { $result = dbquery("SELECT ta.projects_id, ta.projects_subject, tab.encyclopedia_subject, tac.thread_subject, tad.down_subject, tae.download_cat_name, taf.cat_name FROM ".DB_PROJECTS." ta LEFT JOIN ".DB_ENCYCLOPEDIA." tab ON ta.projects_subject=tab.encyclopedia_subject LEFT JOIN ".DB_THREADS." tac ON ta.projects_subject=tac.thread_subject LEFT JOIN ".DB_DOWN." tad ON ta.projects_subject=tad.down_subject LEFT JOIN ".DB_DOWNLOAD_CATS." tae ON ta.projects_subject=tae.download_cat_name LEFT JOIN ".DB_VIDEO_CAT." taf ON ta.projects_subject=taf.cat_name ORDER BY ta.projects_subject ASC"); if (dbrows($result)) { $editlist = ""; $sel = ""; while ($data = dbarray($result)) { if ((isset($_POST['projects_id']) && isnum($_POST['projects_id'])) || (isset($_GET['projects_id']) && isnum($_GET['projects_id']))) { $projects_id = isset($_POST['projects_id']) ? $_POST['projects_id'] : $_GET['projects_id']; $sel = ($projects_id == $data['projects_id'] ? " selected='selected'" : ""); } else { $sel = ""; } $editlist .= "\n"; } opentable($locale['400']); echo "
\n
\n"; echo "\n"; echo "\n"; echo "
\n
\n"; closetable(); } if ((isset($_GET['action']) && $_GET['action'] == "edit") && (isset($_POST['projects_id']) && isnum($_POST['projects_id'])) || (isset($_GET['projects_id']) && isnum($_GET['projects_id']))) { $result = dbquery("SELECT ta.projects_id, ta.projects_subject, tab.encyclopedia_subject, tac.thread_subject, tad.down_subject, tae.download_cat_name, taf.cat_name FROM ".DB_PROJECTS." ta LEFT JOIN ".DB_ENCYCLOPEDIA." tab ON ta.projects_subject=tab.encyclopedia_subject LEFT JOIN ".DB_THREADS." tac ON ta.projects_subject=tac.thread_subject LEFT JOIN ".DB_DOWN." tad ON ta.projects_subject=tad.down_subject LEFT JOIN ".DB_DOWNLOAD_CATS." tae ON ta.projects_subject=tae.download_cat_name LEFT JOIN ".DB_VIDEO_CAT." taf ON ta.projects_subject=taf.cat_name WHERE projects_id='".(isset($_POST['projects_id']) ? $_POST['projects_id'] : $_GET['projects_id'])."'"); if (dbrows($result)) { $data = dbarray($result); $project = $data['projects_subject']; $encyc = $data['encyclopedia_subject']; $forum = $data['thread_subject']; $down = $data['down_subject']; $download = $data['download_cat_name']; $online = $data['cat_name']; } else { redirect(FUSION_SELF.$aidlink); } } if ((isset($_POST['projects_id']) && isnum($_POST['projects_id'])) || (isset($_GET['projects_id']) && isnum($_GET['projects_id']))) { opentable($locale['400']); } else { if (!isset($_POST['preview'])) { $project = ""; $encyc = ""; $forum = ""; $down = ""; $download = ""; $online = ""; } opentable($locale['400']); } $result = dbquery("SELECT ta.projects_id, ta.projects_subject, tab.encyclopedia_subject, tac.thread_subject, tad.down_subject, tae.download_cat_name, taf.cat_name FROM ".DB_PROJECTS." ta LEFT JOIN ".DB_ENCYCLOPEDIA." tab ON ta.projects_subject=tab.encyclopedia_subject LEFT JOIN ".DB_THREADS." tac ON ta.projects_subject=tac.thread_subject LEFT JOIN ".DB_DOWN." tad ON ta.projects_subject=tad.down_subject LEFT JOIN ".DB_DOWNLOAD_CATS." tae ON ta.projects_subject=tae.download_cat_name LEFT JOIN ".DB_VIDEO_CAT." taf ON ta.projects_subject=taf.cat_name ORDER BY projects_subject DESC"); $list = ""; $sel = ""; while ($data = dbarray($result)) { if (isset($projects_subject)) $sel = ($projects_subject == $data['projects_subject'] ? " selected='selected'" : ""); $list .= "\n"; } echo "
\n"; echo "\n\n"; echo "\n"; echo "\n"; echo "\n\n"; echo "\n"; echo "\n"; echo "\n\n"; echo "\n"; echo "\n"; echo "\n\n"; echo "\n"; echo "\n"; echo "\n\n"; echo "\n"; echo "\n"; echo "\n\n"; echo "\n"; echo "\n"; echo "\n\n"; echo "\n"; echo "\n
".$locale['401']."
".$locale['402']."
".$locale['403']."
".$locale['404']."
".$locale['405']."
".$locale['406']."

\n"; if ((isset($_POST['projects_id']) && isnum($_POST['projects_id'])) || (isset($_GET['projects_id']) && isnum($_GET['projects_id']))) { echo "\n"; } echo "\n"; echo "
\n
\n"; closetable(); echo "\n"; } } else { opentable($locale['403']); echo "
".$locale['452']."
\n".$locale['453']."
\n"; echo "".$locale['454']."".$locale['455']."
\n"; closetable(); } require_once THEMES."templates/footer.php"; ?>