PHP-Quelltext

<?php    
   
eval ("\$site_body.=\"".templateinclude("zitate/header")."\";"); 

$sql = "SELECT * FROM `phpkit_zit` ORDER BY `zit_id`";
$ausgabe = mysql_query($sql);


if(empty($_GET['where']) AND empty($_POST['where'])) {
while($daten = mysql_fetch_array($ausgabe)) {
      $id    = htmlentities($daten['zit_id']);
      $user = htmlentities($daten['zit_nick']);
      $datum    = $daten['zit_time'];
      $text = htmlentities($daten['zit_text']);
      $status = htmlentities($daten['zit_stat']);
eval ("\$site_body.=\"".templateinclude("zitate/zit")."\";"); }
}
else {
  $where    = intval($_REQUEST['where']);
  $id       = trim($_POST['zit_id']);
  $datum     = trim($_POST['zit_time']);
  $user     = trim($_POST['zit_nick']);
  $text     = trim($_POST['zit_text']);
  $status = trim($_POST['zit_stat']);
  if($_POST['mode'] == "edit") {   
    mysql_query("UPDATE `phpkit_zit` SET `zit_time` = '".addslashes($datum)."', `zit_nick`= '".addslashes($user)."', `zit_id` = '".addslashes($id)."', `zit_text` = '".addslashes($text)."' WHERE `zit_id` = '".intval($where)."'");
    header("location: ./admin.php?path=zitate.php"); exit();
}
elseif($_GET['mode'] == "del") {
          @mysql_query("DELETE FROM `phpkit_zit` WHERE `zit_id` = ".intval($where)." LIMIT 1;");
                      header("location: ./admin.php?path=zitate.php"); exit();
    } else {
          $result = @mysql_query("SELECT * FROM `phpkit_zit` WHERE `zit_id` = ".intval($where)."");
          while($daten = @mysql_fetch_array($result)) {
              $where    = $daten['zit_id'];
              $datum     = htmlspecialchars($daten['zit_time']);
              $user     = htmlspecialchars($daten['zit_nick']);
              $status    = htmlspecialchars($daten['zit_stat']);
              $text     = htmlspecialchars($daten['zit_text']);

 # START Template #
$site_body .= "
<tr>
   <td class=\"left\" align=\"center\">
    <table class=\"standard\" border=\"0\" width=\"100%\" cellpadding=\"2\" cellspacing=\"1\" align=\"center\">
    <form name=\"form1\" method=\"POST\" action=\"./admin.php?path=zitate.php\" autocomplete=\"off\">
    <input type=\"hidden\" name=\"mode\" value=\"edit\">
    <input type=\"hidden\" name=\"where\" value=\"$where\">
    <input type=\"hidden\" name=\"zit_time\" value=\"$datum\">
    <input type=\"hidden\" name=\"zit_stat\" value=\"$status\">
      <tr>
       <td class=\"highlight\" align=\"center\" width=\"15%\"><b>Zeit</b></td>
       <td class=\"right\" align=\"left\" width=\"35%\"><input type=\"text\" name=\"zit_time\" value=\"$datum\" class=\"input\" style=\"width: 200px\" disabled></td>
       <td class=\"highlight\" align=\"center\" width=\"15%\"><b>ID</b></td>
       <td class=\"right\" align=\"left\" width=\"35%\">$id</td>
     </tr>
      <tr>
       <td class=\"highlight\" align=\"center\" width=\"15%\"><b>Name</b></td>
       <td class=\"right\" align=\"left\" width=\"35%\"><input type=\"text\" name=\"zit_nick\" value=\"$user\" id=\"zit_nick\" class=\"input\" style=\"width: 200px\"></td>
       <td class=\"highlight\" align=\"center\" width=\"15%\"><b>Status</b></td>
       <td class=\"right\" align=\"left\" width=\"35%\"><input type=\"text\" name=\"zit_stat\" value=\"$status\" id=\"zit_stat\" class=\"input\" style=\"width: 200px\"></td>
     </tr>
      <tr>
       <td class=\"right\" colspan=\"4\" align=\"center\" width=\"100%\"><textarea style=\"width: 600px; height: 120px\" name=\"zit_text\" id=\"zit_text\" class=\"textarea\" maxlength=\"250\">$text</textarea></td>
     </tr>
      <tr>
       <td class=\"left\" colspan=\"4\" align=\"center\" width=\"100%\"><input type=\"submit\" name=\"action\" value=\"Editieren\" class=\"button\"></td>
     </tr>
    </form>
    </table>
  </td>
 </tr>
";
# ENDE Template # 

          
    } 
}
}


eval ("\$site_body.=\"".templateinclude("zitate/footer")."\";"); 

?>   

Quellcode

 <tr>
   <td class="left" align="center">
    <table class="standard" border="0" width="100%" cellpadding="2" cellspacing="1" align="center">
    <form name="form1" method="POST" action="./admin.php?path=zitate.php" autocomplete="off">
    <input type="hidden" name="mode" value="edit">
    <input type="hidden" name="where" value="$where">
    <input type="hidden" name="time" value="$datum">
    <input type="hidden" name="id" value="$id">
      <tr>
       <td class="highlight" align="center" width="15%"><b>Zeit</b></td>
       <td class="right" align="left" width="35%"><input type="text" name="zit_time" value="$datum" class="input" style="width: 200px" disabled></td>
       <td class="highlight" align="center" width="15%"><b>IP</b></td>
       <td class="right" align="left" width="35%"><input type="text" name="ipadresse" value="$id" class="input" style="width: 200px" disabled></td>
     </tr>
      <tr>
       <td class="highlight" align="center" width="15%"><b>Name</b></td>
       <td class="right" align="left" width="35%"><input type="text" name="zit_nick" value="$user" id="user" class="input" style="width: 200px"></td>
       <td class="highlight" align="center" width="15%"><b>Status</b></td>
       <td class="right" align="left" width="35%"><input type="text" name="zit_stat" value="$status" id="status" class="input" style="width: 200px"></td>
     </tr>
      <tr>
       <td class="right" colspan="4" align="center" width="100%"><textarea style="width: 600px; height: 120px" name="text" id="laber" class="textarea" maxlength="250">$text</textarea></td>
     </tr>
      <tr>
       <td class="left" colspan="4" align="center" width="100%"><input type="submit" name="action" value="Editieren" class="button"></td>
     </tr>
    </form>
    </table>
  </td>
 </tr>