Файл: Kagao-v3.0/upload/kateadmin.php
Строк: 62
<?php
session_start();
require('classes/config.php');
error_reporting(0);
if(empty($_SESSION['login'])){
header('Location: mainmeineanzeigen');
exit();
}
if($_SESSION['login'] != 1100){
header('Location: mainmeineanzeigen');
exit();
}
include "inc/rain.tpl.class.php";
include "inc/db.php";
include "inc/kategorie.php";
$db = new db();
if(empty($_SESSION['login'])){ header('Location: mainmeineanzeigen'); exit(); }
if($_GET['sk'] == 'editbottom'){
$pos = $_GET['pos'];
$end = $pos+1;
$e->query('UPDATE kategorie_big SET korder = korder-1 WHERE korder = "'.$end.'"');
$e->query('UPDATE kategorie_big SET korder = korder+1 WHERE id = "'.$_GET['id'].'"');
header('Location: kateadmin.php');
die;
}
if($_GET['sk'] == 'edittop'){
$pos = $_GET['pos'];
$end = $pos-1;
$e->query('UPDATE kategorie_big SET korder = korder+1 WHERE korder = "'.$end.'"');
$e->query('UPDATE kategorie_big SET korder = korder-1 WHERE id = "'.$_GET['id'].'"');
header('Location: kateadmin.php');
die;
}
if($_POST['sk'] == 'edit'){
$e->query('UPDATE '.$_POST['kate'].' SET name = "'.htmlspecialchars($_POST['name']).'" WHERE id = "'.intval($_POST['i']).'"');
die;
}
raintpl::configure("base_url", null );
raintpl::configure("tpl_dir", "tpl/" );
raintpl::configure("cache_dir", "tmp/" );
$tpl = new RainTPL;
include "load.php";
$info = array( 'title' => $title5,
'copyright' => $copyright,
'page' => 'createadmin',
'isLogin' => $_SESSION['login'] ? true : false );
$tpl->assign( $info );
$cat = new controller_cate();
$tpl->assign("cats2", $cat->getCategory());
$html = $tpl->draw( 'page', $return_string = true );
echo $html;
?>