Файл: tankon.mobi/tanks/clan_ob.php
Строк: 32
<?php
if($mcu['status']<=3 && isset($_GET['titleText']))
{
if(isset($_POST['titleText']) && strlen2($_POST['titleText'])<=64)
{
mysql_querll("UPDATE `collective` SET `titleText` = '".htmlspecialchars(my_esc($_POST['titleText']))."', `titleText_user` = '$tanks_code[id]', `titleText_time` = '$time' WHERE `id` = '$mc[id]'");
header("Location:/myclan");
}
else {
echo'<table class="chat-msg-panel mt10 mb6">
<tbody><tr>
<td class="msg">
<div class="trnt-block mb0">
<div class="wrap1"><div class="wrap2"><div class="wrap3"><div class="wrap4"><div class="wrap5"><div class="wrap6"><div class="wrap7"><div class="wrap8">
<div class="p5"><form method="post">';
echo'<input id="titleText" class="chat-msg bold sh_b small lh1 cyan1" value="'.$mc['titleText'].'" type="text" size="20" maxlength="64" name="titleText">';
echo'</div>
</div></div></div></div></div><div></div></div></div></div>
</div>
</td>
<td class="btn"><span ><span><input class="simple-but mb0 inbl" style="height:28px;" type="submit" value="Отправить"></span></span></td>
</tr>
</tbody></table>';
echo "</form>n";
}
}
if($mc['titleText']!=NULL && !isset($_GET['titleText']))
{
$uk=mysql_fetch_array(mysql_querll("SELECT * FROM `user` WHERE `id` = '$mc[titleText_user]'"));
err_sms('<div class="medium white bold p5">'.$uk['nick'].' <span class="green2">('.vremja($mc['titleText_time']).')</span><br>'.output_text($mc['titleText']).'</div>');
echo'<a class="simple-but green" href="?titleText"><span><span>Редактировать</span></span></a></div>';
}
if($mcu['status']<=2 && $mc['titleText']==NULL && !isset($_GET['titleText'])){
echo'<a class="simple-but red" href="?titleText"><span><span>Дать обьявление</span></span></a></div>';
}
?>