Файл: vsime.com/diary/inc/act_desc.php
Строк: 20
<?
if_user('is_reg');
ex_head();
if(isset($_POST['msg']) && $_POST['mdp']==$mdp)
{
$msg = $_POST['msg'];
if(strlen($msg) > $max_size_desc)$error[] = 'Описание слишком длинное.';
else
{
mysqli_query($dbi, "UPDATE `user` SET `diary_desc` = '".my_esc($msg)."' WHERE `id` = '$user[id]'");
header("Location: /diary/?act=user&id=$user[id]");
}
}
show_errors();
echo "<form method='post' action=''>n";
echo "Описание ($max_size_desc символов)<br/>n";
echo "<textarea name='msg' rows='5' cols='17' style='width: 95%' placeholder='Введите описание...'>".input_value($user['diary_desc'])."</textarea><br/>n";
echo "<input type='hidden' name='mdp' value='$mdp'/>n";
echo "<input type='submit' name='save' value='Сохранить'>n";
echo "</form>n";
echo "<div class='foot'>n";
echo image_back()." <a href='/diary/?act=user&id=$user[id]'>Назад</a><br/>n";
echo "</div>n";
ex_foot();
?>