1 <?php

2

3 if(isset($_GET['edit']))

4 {

5 sms_carrier_edit($_GET['edit']);

6 }

7 elseif(isset($_GET['delete']))

8 {

9 sms_carrier_delete($_GET['delete']);

10 }

11 elseif(isset($_GET['add']))

12 {

13 sms_carrier_add();

1 <?php

2 include('config.php');

3 if (isset($_GET['id']) ) {

4 $id = (int) $_GET['id'];

6 foreach($_POST AS $key => $value) { $_POST[$key] = mysql_real_escape_string($value); }

7 $sql = "UPDATE `opportunities` SET `AccountId` = '{$_POST['AccountId']}' , `Amount` = '{$_POST['Amount']}' , `CampaignId` = '{$_POST['CampaignId']}' , `CloseDate` = '{$_POST['CloseDate']}' , `CreatedById` = '{$_POST['CreatedById']}' , `CreatedDate` = '{$_POST['CreatedDate']}' , `CurrentGenerators__c` = '{$_POST['CurrentGenerators__c']}' , `DeliveryInstallationStatus__c` = '{$_POST['DeliveryInstallationStatus__c']}' , `Description` = '{$_POST['Description']}' , `ExpectedRevenue` = '{$_POST['ExpectedRevenue']}' , `Fiscal` = '{$_POST['Fiscal']}' , `FiscalQuarter` = '{$_POST['FiscalQuarter']}' , `FiscalYear` = '{$_POST['FiscalYear']}' , `ForecastCategory` = '{$_POST['ForecastCategory']}' , `ForecastCategoryName` = '{$_POST['ForecastCategoryName']}' , `HasOpportunityLineItem` = '{$_POST['HasOpportunityLineItem']}' , `IsClosed` = '{$_POST['IsClosed']}' , `IsDeleted` = '{$_POST['IsDeleted']}' , `IsPrivate` = '{$_POST['IsPrivate']}' , `IsWon` = '{$_POST['IsWon']}' , `LastActivityDate` = '{$_POST['LastActivityDate']}' , `LastModifiedById` = '{$_POST['LastModifiedById']}' , `LastModifiedDate` = '{$_POST['LastModifiedDate']}' , `LeadSource` = '{$_POST['LeadSource']}' , `MainCompetitors__c` = '{$_POST['MainCompetitors__c']}' , `Name` = '{$_POST['Name']}' , `NextStep` = '{$_POST['NextStep']}' , `OrderNumber__c` = '{$_POST['OrderNumber__c']}' , `OwnerId` = '{$_POST['OwnerId']}' , `Pricebook2Id` = '{$_POST['Pricebook2Id']}' , `Probability` = '{$_POST['Probability']}' , `StageName` = '{$_POST['StageName']}' , `SystemModstamp` = '{$_POST['SystemModstamp']}' , `TotalOpportunityQuantity` = '{$_POST['TotalOpportunityQuantity']}' , `TrackingNumber__c` = '{$_POST['TrackingNumber__c']}' , `Type` = '{$_POST['Type']}' WHERE `id` = '$id' ";

8 mysql_query($sql) or die(mysql_error());

9 echo (mysql_affected_rows()) ? "Edited row.<br />" : "Nothing changed. <br />";

10 echo "<a href='list.php'>Back To Listing</a>";

11 }

12 $row = mysql_fetch_array ( mysql_query("SELECT * FROM `opportunities` WHERE `id` = '$id' "));

13 ?>

14

2 include 'includes/mysqlAdminLoginAssignment.php';

3

4 $table=$_GET["table"];

5

6 if ($table == "assignment")

7 {

8 $assnID=$_GET["assnID"];

9 $assnName=$_GET["assnName"];

10 $groupWork=$_GET["groupWork"];

11 $maxMark=$_GET["maxMark"];

12 $avgMark=$_GET["avgMark"];

13 $medianMark=$_GET["medianMark"];

15 global $c;

16 $is =

17 mysql_query(

18 "SELECT u.*,us.* FROM users u LEFT JOIN userstats us ON u.userid=us.userid WHERE u.userid=$userid",

19 $c) or die(mysql_error());

29 <table width=75%> <tr> <td><a href='halloffame.php?action=level'>LEVEL</a></td> <td><a href='halloffame.php?action=money'>MONEY</a></td> <td><a href='halloffame.php?action=crystals'>CRYSTALS</a></td> <td><a href='halloffame.php?action=total'>TOTAL STATS</a></td> </tr>

30 <tr> <td><a href='halloffame.php?action=strength'>STRENGTH</a></td> <td><a href='halloffame.php?action=agility'>AGILITY</a></td> <td><a href='halloffame.php?action=guard'>GUARD</a></td> <td><a href='halloffame.php?action=labour'>LABOUR</a></td> <td><a href='halloffame.php?action=iq'>IQ</a></td> </tr> </table>";

31 switch ($_GET['action'])

32 {

33 case "level":

67 <table width=75%><tr style='background:gray'> <th>Pos</th> <th>User</th> <th>Level</th> </tr>";

68 $q =

69 mysql_query(

70 "SELECT u.* FROM users u WHERE u.user_level != 0 ORDER BY level DESC,userid ASC LIMIT 20",

71 $c);

30 */

31

32 if($_POST['error'] || isset($_GET['error'])){

33 errorMessage('Error message flag set');

34 }

150 $errorvalue = urlencode($value);

151 $value = mysql_real_escape_string($errorvalue);

152 mysql_query("INSERT INTO panel(userid,rss,posx,posy,sizex,sizey,themeid,minimized) VALUES ('$userid','$value','$posx','$posy','$sizex','$sizey','$themeid','$minimized')");

153 $rows = mysql_affected_rows();

154 if($rows != -1){

170 {

171 $feed = mysql_real_escape_string(urlencode($feed));

172 $rssCheck = mysql_query("DELETE FROM panel WHERE userid='$userid' AND rss='$feed'");

173 $rssCheckTheme = mysql_query("DELETE FROM theme WHERE userid='$userid' AND rss='$feed'");

192 //Get it so it matches the database

193 $feed = mysql_real_escape_string(urlencode($rss[0]));

194 if(mysql_query("UPDATE panel SET posx='$posx',posy='$posy', sizex='$sizex' , sizey='$sizey' WHERE userid='$userid' AND rss='$feed'")){

195 successMessage('');

196 }

10 require("connect.php");

11

12 $config=mysql_fetch_assoc(mysql_query("SELECT * FROM config WHERE id = '1'"));

13

14 if (($config['klubadresse']=="") || ($config['klubpath']=="") || ($config['klubnavn']=="")){

24 require("theme.php");

25

26 if(!mysql_num_rows(mysql_query("SELECT * FROM `teams` WHERE `name` = '-'"))){

27 mysql_query("INSERT INTO `teams` (`id`, `name`) VALUES ('9999','-')");

30 $viewgames="default";

31

32 if(isset($_GET["view"])){

33 $viewgames=$_GET["view"];

39 switch ($viewgames) {

40 case "default":

41 $query = mysql_query("SELECT * FROM `games` WHERE CURDATE() <= `date` AND `homegame`= 1 ORDER BY `date`,`time` ASC ");

42 $query2 = mysql_query("SELECT * FROM `games` WHERE `date` = '0000-00-00' AND `homegame`= 1 ORDER BY `date`,`time` ASC ");

14

15 //Added way to vote without using ajax (robogeek)

16 if ($_GET["mode"] == "vote") {

17

18 //confirm profil_id

19 if ($u == null || $u !== $_GET['profile_id']) die("Are you trying to hack the vote?");

20

21 //confirm plugin_id and plugin_version

22 $getPluginId = $_GET['plugin_id'];

23 $getPluginVersion = $_GET['plugin_version'];

24 $res = mysql_query("SELECT * FROM plugins WHERE plugin_ID='$getPluginId' AND plugin_Version='$getPluginVersion'");

25 $numrows = mysql_numrows($res);

26 if ($numrows <> 1) die("Are you scamming an old or non-existant plugin?");

9 if($_SESSION['access_type'] != "mgr"){ echo "Operation cannot be performed in demo mode"; exit; }

10

11 $settings_result = mysql_query("SELECT * FROM settings where id = '1'", $db);

12 $setting = mysql_fetch_object($settings_result);

13

15 $image_path = "../uploaded_images/";

16

17 switch($_GET['pmode']){

18

19 /*-----------------------------------------------------------------------------------------------------------------------*/

27 // SAVE DATA

28 $sql = "INSERT INTO email_copy (title,subject,article,image_upload,image_area_name,image_w,image_h,file_upload,file_area_name) VALUES ('$title','$subject','$article','$set_image_upload','$set_image_area_name','$set_image_width','$set_image_height','$set_file_upload','$set_file_area_name')";

29 $result = mysql_query($sql);

30

31 $last_result = mysql_query("SELECT id FROM email_copy order by id desc", $db);

6 $session->STUDENT_ID = '000256615';

7

8 $student_id=$_GET['studentid'];

9 if($session->userlevel>=8)

10

13 if(isset($_POST['Submit'])){

14 $query="SELECT * FROM Behavior b, Groups g WHERE g.GROUP_ID=" . $session->GROUP_ID . " AND b.CONTRACT_ID=g.CONTRACT_ID";

15 $btwo = mysql_query($query) or die(mysql_error());

16 $numB = mysql_num_rows($btwo);

17 $query2="INSERT INTO Eval (STUDENT_ID, Grader_ID, GROUP_ID, Grade) VALUES (" . $_POST[graded] . ", " . $session->STUDENT_ID . ", " . $session->GROUP_ID . ", '10')";

18 mysql_query($query2) or die(mysql_error());

19

20 $evalid = mysql_insert_id();

7 <body>

8 <?php

9 if(($_GET['No_SPP']) OR ($_GET['no_SPP']))

10 {

11 if ($_GET['No_SPP'])

12 {

13 $no_SPP = $_GET['No_SPP'];

14 }

15 else

16 {

17 $no_SPP = $_GET['no_SPP'];

18 }

19 $date = $_GET['date'];

1 <? include("include/init.php");

2 check_login();

3 check_isset_array($_GET, 'notitie_id');

4 check_isnonempty_array($_GET, 'notitie_id');

5

6 $week_options = gen_week_select($_GET['week'], 0, &$week);

7 $dag_options = gen_dag_select($_GET['dag'], 0, &$dag, 0, 0);

8 $lesuur_options = gen_lesuur_select($_GET['lesuur'], 0, &$lesuur, 0);

9

10 $notitie_id = mysql_escape_safe($_GET['notitie_id']);

11

12 $result = mysql_query_safe(<<<EOQ

13 SELECT tag, CONCAT(IFNULL(CONCAT(afkorting, ' '), ''), parents.text) text, CONCAT(agenda.week, CASE agenda.dag WHEN 1 THEN 'ma' WHEN 2 THEN 'di' WHEN 3 THEN 'wo' WHEN 4 THEN 'do' ELSE 'vr' END, agenda.lesuur) moment

14 FROM notities

2 // populate the topics panel

3 $query_getTopics = sprintf("SELECT cat_id, cat_name, undone, (SELECT COUNT(quiz_id) FROM `q_quizzes` WHERE isPublished = 1 AND fk_quiz_cat = cat_id) as total FROM (SELECT COUNT(fk_quiz_cat) as undone, fk_quiz_cat FROM q_quizzes q WHERE q.quiz_id NOT IN (SELECT DISTINCT(fk_quiz_id) FROM `q_store_result` WHERE `fk_member_id` = %s) AND isPublished = 1 GROUP BY fk_quiz_cat) t RIGHT JOIN q_quiz_cat r ON t.fk_quiz_cat = r.cat_id", $member->id);

4 $getTopics = mysql_query($query_getTopics, $quizroo) or die(mysql_error());

5 $row_getTopics = mysql_fetch_assoc($getTopics);

6 $totalRows_getTopics = mysql_num_rows($getTopics);

7

8 if(isset($_GET['topic'])){

9 $topic = $_GET['topic'];

5 mysql_select_db($uiucDB) or die("Cannot connect to uiucDB.");

6

7 $table=$_GET["table"];

8

9

10 if ($table == "assignment")

11 {

12 $rowID=$_GET["rowID"];

13 $query = "DELETE FROM assignment WHERE assnID = '$rowID'";

14

15 if (!mysql_query($query, $mysqlConnection))

16 {

17 die ('Error: ' . mysql_error());

9 // Settings page, if user is loaded.

10

11 $input = $_GET[id];

12

13 $userid = @mysql_result(mysql_query(

60 for ( $i=0 ; $i<intval( $_GET['iSortingCols'] ) ; $i++ )

61 {

62 if ( $_GET[ 'bSortable_'.intval($_GET['iSortCol_'.$i]) ] == "true" )

63 {

64 $iColumnIndex = array_search( $_GET['mDataProp_'.$_GET['iSortCol_'.$i]], $aColumns );

83 */

84 $sWhere = "";

85 if ( isset($_GET['sSearch']) && $_GET['sSearch'] != "" )

86 {

87 $sWhere = "WHERE (";

97 for ( $i=0 ; $i<count($aColumns) ; $i++ )

98 {

99 if ( isset($_GET['bSearchable_'.$i]) && $_GET['bSearchable_'.$i] == "true" && $_GET['sSearch_'.$i] != '' )

100 {

101 if ( $sWhere == "" )

1 <?php // get result number

2 if(isset($_GET['load'])){

3 $unikey = $_GET['unikey'];

4 require('quizrooDB.php');

5

6 $query = sprintf("SELECT result_id, result_title, result_description, result_picture FROM q_results WHERE fk_quiz_id = %d", GetSQLValueString($_GET['id'], "int"));

7 $getQuery = mysql_query($query, $quizroo) or die(mysql_error());

69 }while($row_getQuery = mysql_fetch_assoc($getQuery));

70 }

71 }elseif(isset($_GET['delete'])){

72 // delete the result

73 require('member.php');

75

76 // also pass in the member id for security check

77 $quiz = new Quiz($_GET['id']);

78 $member = new Member();

79 if(!$quiz->removeResult($_GET['result'], $member->id)){

22 admin_page_head("Failures grouped by app version and host");

23

24 $query_appid = $_GET['appid'];

25 $query_received_time = time() - $_GET['nsecs'];

62 ";

63

64 $result = mysql_query($main_query);

65

66 start_table();

5 include_once("conn.php");

6

7 $type=isset($_GET["type"])?$_GET["type"]:null; /*get是获取、update是修改、delete是删除、add是添加*/

8 $id=isset($_GET["id"])?$_GET["id"]:null;

29 mysql_query("SET NAMES 'UTF8'",$conn);

30 $page =isset($_GET['page'])?$_GET['page']:1; //获取查询页数，如果没有get到page，默认就是第一页！

31 if(!preg_match('/^\d+$/',$page) || $page < 1) $page = 1; //如果输入的不是数字 或者小于1 默认第一页

32 $table=$table; //获取要查询的数据表

33 $pageSize =$size; //每页多少条

34 $result_pag_num = mysql_query("SELECT COUNT(*) AS count FROM $table"); //获取数据表中总记录条数

35 $row = mysql_fetch_array($result_pag_num);

36 $count = $row['count']; //返回记录总条数

39 $start = ($page - 1) * $pageSize; //sql查询起始位置

40 $query_pag_data = "SELECT $field from $table order by id $sort LIMIT $start, $pageSize";

41 $result_pag_data = mysql_query($query_pag_data) or die('MySql Error' . mysql_error());

42 $arrList = array(); //初始化列表数组

43 $arr=array();

10 $flag_for_checking=false;

11

12 if(array_key_exists('id',$_GET)&& $_GET['id']!=0){

13 $clientid=$_GET['id'];

17 if($status==1){

18

19 $mysql_query=mysql_query("select * from cdeptmaster where clientId='$clientid' order by id desc");

20 if(mysql_num_rows($mysql_query)>0){

74 include("../dbinfo.php");

75 include("../editable_forms/department.php");

76 if(array_key_exists('id',$_GET) && $_GET['id']!=0){

77 $clientid1=$_GET['id'];

127

128 }

129 else if(array_key_exists('id',$_GET) && $_GET['id']==0) {

130 echo "Fill General Details First.";

131

34 }

35 if( !isset($_POST['submit_red']) ){

36 $query = mysql_query("SELECT COUNT(id) FROM products WHERE article='".mysql_real_escape_string($value)."'");

37 if(mysql_result($query, 0) > 0){

38 return "Изделие с таким артикулом уже существует";

107

108 if ( !isset($_POST['submit_red']) ){

109 mysql_query("INSERT INTO products SET".$query);

110 $current_id = mysql_insert_id();

111 }

112 else{

113 $current_id = $_GET["id"];;

114 mysql_query("UPDATE products SET".$query." WHERE id = ".$current_id);

126 move_uploaded_file($_FILES["image"]["tmp_name"], "../files/product_images/" . $image_name);

127 */

128 mysql_query("UPDATE products

129 SET image='".$image_name."'

130 WHERE id='".$current_id."'");

19 );

20 ";

21 $rs = mysql_query($sql);

22 ?>

23 <script type="text/javascript">

33 $sql = "select * from user,student where user.user_id = student.user_id";

34

35 $rs = mysql_query($sql);

36 $Num_Rows = mysql_num_rows($rs);

37 $i = 1;

40 $Per_Page = 10; // Per Page

41

42 $Page = $_GET["Page"];

43 if (!$_GET["Page"]) {

59

60 $sql .=" order by user.user_id ASC LIMIT $Page_Start , $Per_Page";

61 $objQuery = mysql_query($sql);

62 ?>

63

17 <body>

18 <?php

19 $id=$_GET['id'];

20 $aid=$_GET['id'];

21 $sid=$_GET['id'];

22 $gid=$_GET['id'];

23 $inmate=$_GET['inmate'];

24 if($inmate=='student')

25 {

26 $query="SELECT * FROM student WHERE uid='$id'";

27 $result=mysql_query($query);

28 ?>

29 <table class="form"><tr>

3 public $language = "";

4 function execute(){

5 $action = $_GET["action"];

6 switch ($action){

7 case "start":

8 $serviceid = $_SESSION["serviceid"];

9 $qr = mysql_query("SELECT id FROM states WHERE checked = 'checked' AND serviceid=$serviceid LIMIT 1");

10 $_SESSION["states_open"] = array();

11 $_SESSION["history_stack"] = array();

34 for($i=0; $i<sizeof($_SESSION["states_open"]); $i++){

35 if($_SESSION["states_open"][$i]["id"] == $_SESSION["current_state"]){

36 $_SESSION["states_open"][$i]["answer"] = $_GET["answer"];

37 $_SESSION["states_open"][$i]["advanced"] = false;

38 break;

58 }

59

60 if(isset($_GET['owner_district_code']) || isset($_GET['business_main_offc_district_code'])){

61

62 if ($_GET['business_main_offc_district_code']=='') {

102

103 echo "obj.options[obj.options.length] = new Option('-Please Select Barangay-','');\n";

104 $resultset = mysql_query("SELECT * FROM ebpls_barangay where upper='$_GET[business_district_code]'") or die(mysql_error()."dd");

105 while($datarow = @mysql_fetch_array($resultset))

106 {

115

116 echo "obj.options[obj.options.length] = new Option('-Please Select Zone-','');\n";

117 $resultset = mysql_query("SELECT * FROM ebpls_zone where upper='$_GET[business_barangay_code]'") or die(mysql_error()."dd");

118 while($datarow = @mysql_fetch_array($resultset))

119 {

1 <?php require_once("header.php"); ?>

2 <?php

3 if(intval($_GET['subj']) == 0) {

4 redirect_to("content.php");

5 }

22

23 if(empty($errors)) {

24 $id = mysql_prepare($_GET['subj']);

25 $menu_name = mysql_prepare($_POST["menu-name"]);

26 $position = mysql_prepare($_POST["position"]);

32 visible = {$visible}

33 where id = {$id}";

34 $result = mysql_query($query);

35 if(mysql_affected_rows() == 1) {

36 $message = "Update successful.";

2 require_once('../define.conf');

3

4 $ryear = $_GET['ryear'];

5 $fyear = $ryear - 1;

6

15

16 $cardq = "SELECT card_no FROM " . DB_LOGNAME . ".PR_redeemed WHERE YEAR(datetime) = '$ryear'";

17 $cardr = mysql_query($cardq) OR die(mysql_error() . "<br />" . $cardq);

18 while ($row = mysql_fetch_array($cardr)) {

19 $card_array .= $row[0] . ",";

26 // echo 'Card array=' . $card_array . '<br>';

27

28 if (isset($_GET['popup'])) {

29

30 if ($_GET['popup'] == 'redeemed') {

2 if($_POST['room_code'])

3 {

4 if(mysql_query("UPDATE `room` SET `ROOM_CODE`='".$_POST['room_code']."', `ROOM_DESC`='".$_POST['room_name']."', `ROOM_CAPACITY`='".$_POST['capacity']."', `LOCATION_NO`='".$_POST['location']."', `STATUS`='".$_POST['is_active']."' WHERE `ROOM_NO`=".$_GET['rid']))

5 $_SESSION['s_msg']="<strong>Well done!</strong> room successfully updated";

6 else

7 $_SESSION['e_msg']="<strong>Oh snap!</strong> Room is not updated";

8 }

9 if($_GET['rid'])

10 {

11 $cond="where `ROOM_NO`=".$_GET['rid'];

6 }

7 }else{

8 foreach ($_GET AS $key => $value) {

9 $$key = $value;

10 }

71 ORDER BY hour";

72

73 $result1 = mysql_query($query1);

74 $result2 = mysql_query($query2);

75 $result3 = mysql_query($transCountQ);

76 $num1 = mysql_num_rows($result1);

77 $num2 = mysql_num_rows($result3);

11 // mysql_select_db($db_slave, 'is4c_log');

12

13 if (is_numeric($_GET['periodID']) && is_numeric($_GET['emp_no'])) { // If submitted.

14 $emp_no = $_GET['emp_no'];

15 $periodID = $_GET['periodID'];

16 $query = "SELECT ROUND(SUM(TIMESTAMPDIFF(MINUTE, t.time_in, t.time_out))/60, 2),

17 date_format(t.date, '%a %b %D'),

56 AND t.area = 13";

57

58 $weekoneR = mysql_query($weekoneQ);

59 $weektwoR = mysql_query($weektwoQ);

60 $vacationR = mysql_query($vacationQ);

61

62 list($weekone) = mysql_fetch_row($weekoneR);

1 <?php

2 include_once('functions.php');

3 $searchquery = $_GET['query'];

4

5 $start = "";

6 if(isset($_GET['duration'])) {

7 $start = "&duration=" . $_GET['duration'];

8 }

9 if((isset($_GET['type'])) && ($_GET['type'] != "")) {

10 $type = $_GET['type'];

11 }

12

13 if((isset($_GET['host'])) && ($_GET['host'] != "")) {

14 $host = $_GET['host'];

9 if(isset($_GET['did']))

10 {

11 $del=mysql_query("delete from users where username='".$_GET['did']."'")or die(mysql_error());

12 $delet=mysql_query("delete from emsuser where username='".$_GET['did']."'")or die(mysql_error());

62 </thead>

63 <?php

64 $qry=mysql_query("select * from emsuser")or die(mysql_error());

65 $i=1;

66 while($fetch=mysql_fetch_array($qry)){

21 <br>

22 <?

23 $id = $_GET[id];

24 if(empty($id)){

25 $sql= mysql_query("SELECT * FROM galeria where destaque='S' order by data desc");

33 </select>

34 <? } else {

35 $dados=mysql_fetch_array(mysql_query("SELECT * FROM galeria where destaque='S' AND id='$id'"));

36 ?>

37 <input type="hidden" name="pasta" value="<?=$dados[pasta]?>">

73 <option>======================================</option>

74 <?

75 $sql= mysql_query("SELECT * FROM galeria where destaque='S' order by data desc");

76 while ($dados=mysql_fetch_array($sql)){?>

77 <option value=<? echo "$dados[pasta]";?>><? $data=explode("-",$dados[data]); echo "$data[2]/$data[1]/$data[0] - $dados[nome]";?></option>

15 $flag_for_checking=false;

16

17 if(array_key_exists('workerid',$_GET)&& $_GET['workerid']!=0){

18 $workerId=$_GET['workerid'];

19 $mysql_query=mysql_query("select * from wfamilydetail where workerId='$workerId' order by id desc");

20 if(mysql_num_rows($mysql_query)>0){

21 $flag_for_checking=true;

22 $POST=mysql_fetch_array($mysql_query);

23 $workerId=$POST['workerId'];

24 $name=$POST['name'];

178 include("../dbinfo.php");

179 include("../editable_forms/family.php");

180 if(array_key_exists('workerid',$_GET) && $_GET['workerid']!=0){

181 $workerid=$_GET['workerid'];

34 }else

35 echo "";

36 //$section_id = $_GET['sec'];

37 }

38 }else

78 }else

79 echo "";

80 //$section_id = $_GET['sec'];

81 }

82 }else

126 }else

127 echo "";

128 //$section_id = $_GET['sec'];

129 }

130 }else

1 <?php

2 $no=$_GET['no'];

3 $workerid=$_REQUEST['workerid'];

4 include("../dbinfo.php");

5

6 $no_of_entries_in_database=mysql_num_rows(mysql_query("select id from wfamilydetail where workerId='$workerid'"));

7 if($no_of_entries_in_database>0)

8 $no=$no+$no_of_entries_in_database-1;

76 <?php

77

78 $query_for_city_names=mysql_query("select city_name,city_id from cities where city_name!='Jodhpur' order by city_name asc");

79 if(mysql_num_rows($query_for_city_names)>0){

80 while($row_for_city_names=mysql_fetch_array($query_for_city_names)){

38 include ('connect_to_database.php');

39 include ('cso_enrollment_functions.php');

40 $action = $_GET['by'];

41

42 if ($action == 'class') echo byClass();

52 function byClass() {

53

54 $prog_array = mysql_query("SELECT * FROM degree_program");

55 while ($programs = mysql_fetch_array($prog_array)) {

56 extract($programs);

68 </tr>";

69

70 $offered_subjects = mysql_query("SELECT * FROM offered_subjects a, section b WHERE a.degree_program_id=$degree_program_id AND a.course_code = b.course_code ");

71 $count=1;

72 $rowclass=0;

16 t.courseID=c.courseID AND

17 a.assnID='" . $assnID ."'";

18 $result = mysql_query($query);

19 if (mysql_errno()) print(mysql_error());

20

21 //print_r($_POST);

22 //print("Mode: ". $_POST['mode']);

23 //print_r($_GET);

24 if (mysql_num_rows($result)){

25

26 //list all submissions

27 if (!empty($_GET['mode']) && $_GET['mode'] == "ListFiles"){

28 $query = "SELECT * FROM submission WHERE AssnID='".$_GET['AssnID']."' AND StudentID='".$_GET['StudentID']."'";

29 $result = mysql_query($query);

30 //there should be only one result

31 if (mysql_errno()) die ("Error finding submission. " . mysql_error());

3 $link = connectToDB();

4 $monthnames=array("Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec");

5 $sql_freq=mysql_query("SELECT options FROM `quest_fields` WHERE field_id IN (SELECT field_id FROM quest_fields WHERE field_name='How often are you using the Hifadhi stove?');") or die(mysql_error());

6 $sql_resultset=mysql_fetch_assoc($sql_freq);

7 $sql_valueset=$sql_resultset['options'];

8 $string_exploded = explode(",",$sql_valueset);

9

10 if(!isset($_GET['parameters'])){

11 $result = date('Y');

12 //echo $year;

13 $sql_months = "select distinct MONTH(date_added) as month from quest_field_results WHERE YEAR(date_added) = $result order by month asc;";

14 $sql_result_months = mysql_query($sql_months) or die(mysql_error());

15 $months = array();

16 $counter = 0;

8 a.CourseID=c.CourseID AND

9 t.CourseID=c.CourseID";

10 $result = mysql_query($query);

11 if (mysql_errno()) print(mysql_error());

12 $row = mysql_fetch_array($result);

13 if(!empty($row['AssnID'])){

14 if (htmlspecialchars($_GET['q'] == "GetAssessments")){

15 $query = "SELECT AssnName FROM assignment WHERE AssnID=" . htmlspecialchars($_GET['AssnID']);

16 $result = mysql_query($query);

17 if (mysql_errno()) print(mysql_error());

18 $row = mysql_fetch_array($result);

19 $assnName = $row['AssnName'];

20

21 $query = "SELECT CourseName FROM course, assignment Where AssnID=".htmlspecialchars($_GET['AssnID']) . " AND

22 assignment.CourseID=course.CourseID";

23 $result = mysql_query($query);

7

8 $colname_confirmation = "-1";

9 if (isset($_GET['confirmcode'])) {

10 $colname_confirmation = $_GET['confirmcode'];

12 mysql_select_db($database_powermigrate, $powermigrate);

13 $query_confirmation = sprintf("SELECT * FROM customers WHERE passkey = %s", GetSQLValueString($colname_confirmation, "text"));

14 $confirmation = mysql_query($query_confirmation, $powermigrate) or die(mysql_error());

15 $row_confirmation = mysql_fetch_assoc($confirmation);

16 $totalRows_confirmation = mysql_num_rows($confirmation);

19

20 $update_confirmation_SQL = sprintf("UPDATE customers SET isactive = '1' WHERE passkey = %s", GetSQLValueString($colname_confirmation, "text"));

21 $update_confirmation = mysql_query($update_confirmation_SQL, $powermigrate);

22 $updateRow_confirmation = mysql_fetch_assoc($update_confirmation);

23 $totalRows_updated = mysql_num_rows($update_confirmation);

24 }

25

26 if ($_GET['reset_filter']) {

27 unset($_GET);

28 }

29

30 if (isset($_GET['online_status']) && ($_GET['online_status'] != '')) {

31 if ($_GET['online_status'] == 1) {

32 $on = 'checked="checked"';

33 } else if ($_GET['online_status'] == 2) {

34 $all = 'checked="checked"';

35 } else if ($_GET['online_status'] == 0) {

40 }

41

42 $group = abs($_GET['group']);

43

44 $sql_groups = implode(',', $_SESSION['groups']);

9

10 defined('_IN_JOHNCMS') or die('Error: restricted access');

11 $us = mysql_fetch_array(mysql_query("SELECT * FROM `soo_users` where `website` = '$website' AND `sid` = ' " . $sid . " ' AND `user_id`=' " . $user_id . " ' "));

12 if ($us['rights'] >= 8) {

13 $topic_vote = mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_forum_vote` where `website` = '$website' AND `type`='1' AND `topic`='$id'"), 0);

18 exit;

19 }

20 if (isset($_GET['delvote']) && !empty($_GET['vote'])) {

21 $vote = abs(intval($_GET['vote']));

22 $totalvote = mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_forum_vote` where `website` = '$website' AND `type` = '2' AND `id` = '$vote' AND `topic` = '$id'"), 0);

23 $countvote = mysql_result(mysql_query("SELECT COUNT(*) FROM `soo_forum_vote` where `website` = '$website' AND `type` = '2' AND `topic` = '$id'"), 0);

24 if ($countvote <= 2)

25 header('location: ../soo/?mod=forum&act=editvote&id=' . $id . '');

30 $topic_vote = mysql_fetch_array(mysql_query("SELECT `count` FROM `soo_forum_vote` where `website` = '$website' AND `type` = '1' AND `topic` = '$id' LIMIT 1"));

31 $totalcount = $topic_vote['count'] - $countus;

32 mysql_query("UPDATE `soo_forum_vote` SET `count` = '$totalcount' where `website` = '$website' AND `type` = '1' AND `topic` = '$id'");

33 mysql_query("DELETE FROM `soo_forum_vote_users` where `website` = '$website' AND `vote` = '$vote'");

44 */

45 $sLimit = "";

46 if ( isset( $_GET['iDisplayStart'] ) && $_GET['iDisplayLength'] != '-1' )

47 {

48 $sLimit = "LIMIT ".mysql_real_escape_string( $_GET['iDisplayStart'] ).", ".

82 */

83 $sWhere = "";

84 if ( isset($_GET['sSearch']) && $_GET['sSearch'] != "" )

85 {

86 $sWhere = "WHERE (";

96 for ( $i=0 ; $i<count($aColumns) ; $i++ )

97 {

98 if ( isset($_GET['bSearchable_'.$i]) && $_GET['bSearchable_'.$i] == "true" && $_GET['sSearch_'.$i] != '' )

99 {

100 if ( $sWhere == "" )

12 $where.=" ORDER BY nombrefp ASC";

13 $query_busqueda="SELECT count(*) as filas FROM formapago WHERE borrado=0 AND ".$where;

14 $rs_busqueda=mysql_query($query_busqueda);

15 $filas=mysql_result($rs_busqueda,0,"filas");

16

66 <input type="hidden" name="numfilas" id="numfilas" value="<? echo $filas?>">

67 <? $iniciopagina=$_POST["iniciopagina"];

68 if (empty($iniciopagina)) { $iniciopagina=$_GET["iniciopagina"]; } else { $iniciopagina=$iniciopagina-1;}

69 if (empty($iniciopagina)) { $iniciopagina=0; }

70 if ($iniciopagina>$filas) { $iniciopagina=0; }

72 <? $sel_resultado="SELECT * FROM formapago WHERE borrado=0 AND ".$where;

73 $sel_resultado=$sel_resultado." limit ".$iniciopagina.",10";

74 $res_resultado=mysql_query($sel_resultado);

75 $contador=0;

76 while ($contador < mysql_num_rows($res_resultado)) {

23 </script>

24

25 <? $cat = $_GET[cat];?>

26

27 <form action="?pg=../estrutura/galeria/admin/gal-cadastrar_db.php" method="post" onsubmit="return validate(this);" enctype="multipart/form-data">

48 <td width="320" valign="middle" style="border-bottom:1px solid #cccccc"><strong>

49 <select name="idcat" style="width:300" onChange="if(options[selectedIndex].value) window.location.href= (options[selectedIndex].value)">

50 <? $sql = mysql_query("SELECT * FROM galeria_cat order by categoria");

51

52 if($cat == ""){

53 echo "<option>Selecione</option>";

54 } else {

55 $sql4 = mysql_query("SELECT * FROM galeria_cat WHERE id='$cat'");

56 $dados4=mysql_fetch_array($sql4);

57 echo "<option value=$dados4[id]>$dados4[categoria]</option>";

3 include('include/config.php');

4

5 $trackingNo = $_GET['id'];

6 $query = "SELECT * FROM it_item WHERE trackingNo = '$trackingNo'";

7 $run = mysql_query($query);

19 connectDB();

20

21 if (isset($_GET['id'])) {

22 include('Includes/login.php');

23

27 $sQuery = "SELECT consoleid, naam FROM consoles WHERE consoleid='" . add($_GET['id']) . "';";

28 $cResult = mysql_query($sQuery);

29 if ($cResult && $aData = mysql_fetch_assoc($cResult)) {

30 $cTPL->setPlace('NAAMCONSOLE', $aData['naam']);

34

35 /* Controleren of er een letter is geselecteerd */

36 if (isset($_GET['letter'])) {

37 $cTPL->setBlock('CONTENT', 'spellen');

38 /* Controleren of deze letter een # is */

51 } else {

52 $sQuery = "SELECT spelid, naam, rating, stemmen FROM spellen

53 WHERE consoleid='" . add($_GET['id']) . "' AND naam LIKE '" . add($_GET['letter']) . "%'

54 ORDER BY naam;";

55 }

26 */

27 $sql = "SELECT `access` FROM ".TABLE_PREFIX."courses WHERE course_id=$course_id";

28 $result = mysql_query($sql, $db);

29 $course_info = mysql_fetch_assoc($result);

30

48 require (AT_INCLUDE_PATH.'header.inc.php');

49

50 $_GET['room_id'] = abs($_GET['room_id']);

51 $_GET['sid'] = addslashes($_GET['sid']);

53

54 <div>

55 <a href="<?php echo $_SERVER['PHP_SELF']; ?>" onclick="window.open('<?php echo $_config['openmeetings_location']; ?>/main.lzx.lzr=swf8.swf?roomid=<?php echo $_GET['room_id']; ?>&sid=<?php echo $_GET['sid'];?>','marratechwin','width=800,height=720,scrollbars=yes, resizable=yes'); return false"><?php echo _AT('openmeetings_own_window'); ?></a> </li>

56

57 <iframe name="openmeetings" id="openmeetings" title="Openmeetings" frameborder="1" scrolling="auto" src="<?php echo $_config['openmeetings_location']; ?>/main.lzx.lzr=swf8.swf?roomid=<?php echo $_GET['room_id']; ?>&sid=<?php echo $_GET['sid'];?>" height="700" width="90%" align="center" style="border:thin white solid; align:center;" allowautotransparency="true"></iframe>

53 // echo $query;

54

55 mysql_query($query);

56

57 }

67 // echo $query;

68

69 mysql_query($query);

70

71 }

75 $_SESSION['returnpage']=$PHP_SELF;

76

77 if ($_GET['woid']!="")

78

79 $_SESSION['woid']=$_GET['woid'];

2 include_once(realpath(dirname(__FILE__)) . "/../../../fonctions/authplugins.php");

3 autorisation("declidispinfo");

4 if(!preg_match('/^[0-9]{1,}$/', $_GET['id'])) exit('Mauvais identifiant');

5 ?>

6 <script type="text/javascript">

33 $declidisp = new Declidisp();

34

35 $resul = CacheBase::getCache()->mysql_query('SELECT id FROM '. Declidisp::TABLE . ' WHERE declinaison=' . $_GET['id'], $declidisp->link);

36 $i=0;

37 foreach((array) $resul as $row) {

6 // echo $file_path;

7 move_uploaded_file($file_temp, $file_path);

8 mysql_query("UPDATE `users`

9 SET `profile` = '" . mysql_real_escape_string($file_path) . "'

10 WHERE `user_id` = " . (int)$user_id);

12

13 function mail_users($subject, $body) {

14 $query = mysql_query("SELECT `email`, `first_name`

15 FROM `users`

16 WHERE `allow_email` = 1");

23 // function is_admin($user_id) {

24 // $user_id = (int)$user_id;

25 // $query = mysql_query("SELECT COUNT(`user_id`)

26 // FROM `users`

27 // WHERE `user_id` = $user_id

16 ob_start("callback");

17

18 if(isset($_GET['id']))

19 {

20 // mysql connect

23 mysql_select_db($dbname) or die(mysql_error());

24

25 $id = $_GET['id'];

26

27 $result = mysql_query("SELECT * FROM db WHERE id='$id'");

40 $row=mysql_fetch_array($result);

41

42 $mobile = $_GET['txtweb-mobile'];

43 // fetch the Unique identifier to decrypt

44 $togetui = mysql_query("SELECT * FROM users WHERE mobile='$mobile'");

4 mysql_select_db("wheelshare") or die(mysql_error());

5

6 $uid = $_GET['id'];

7

8 /*Order of data items in Ride.java

25 $sql2 = "select * from ridedata as r left outer join passengerdata as p on r.id = p.rideid where r.complete = 'Yes' and (r.ownerid = '$uid' or p.userid = '$uid')";

26 /*

27 $result1 = mysql_query($sql);

28 while($row = mysql_fetch_array($result1)){

29 $rideDate = $row['rideDate'];

41 //$sql2 = "select * from ridedata where fromlocation like '$fromLocation'";

42

43 $result2 = mysql_query($sql2);

44 while($row2 = mysql_fetch_array($result2)){

45 $res_rideId = $row2['id'];

15

16 if (isstaff()!="YES")

17 $limit=" and CLIENTCODE=\"".strtoupper($_GET['clientcode']).'"';

18

19 $limit1=' and DATE(wo.DUEDATE)<DATE(NOW())';

29 }

30

31 switch ($_GET['type'])

32 {

33 case "labtest" :

67 $query3=$query.$limit.$limit3." order by wo.DUEDATE, wo.WORKPERFORMEDBY, wo.TYPE";

68 $query4=$query.$limit.$limit4." order by wo.DUEDATE, wo.WORKPERFORMEDBY, wo.TYPE";

69 $result1=mysql_query($query1);

70 $result2=mysql_query($query2);

71 $result3=mysql_query($query3);

72 $result4=mysql_query($query4);

48 $where=" WHERE 1";

49

50 if(isset( $_GET['item'])) $item = $_GET['item']; else $item ="";

51 if(isset( $_GET['make'])) $make = $_GET['make']; else $make ="";

52 if(isset( $_GET['keyword'])) $keyword = $_GET['keyword']; else $keyword ="";

53 if(isset( $_GET['category'])) $category = $_GET['category']; else $category ="";

70

71 $sql_count_str=$sql_search;

72 $sql_count = @mysql_query($sql_count_str);

73 $this->total_num_row= @mysql_num_rows($sql_count);

74

83

84 //echo $sql_search;

85 if( !$sql = @mysql_query($sql_search) ){

86 require_once BASE_CLASS . 'class-log.php';

87 LogReport::write('Unable to load car maker list due a query error at ' . __FILE__ . ':' . __LINE__);

3 include('includes/myfunction.php');

4 include('../../includes/conn.php');

5 if ((!isset($_GET['empno']) || trim($_GET['empno']) == ''))

6 { header("location:../../index.php"); }

7 $empno=$_GET['empno'];

69 <?php

70 $yqq = $admin . " where level=".md5."('level1') and empno != '".$empno."'";

71 $yq=mysql_query($yqq);

72 $num_row=mysql_num_rows($yq);

73 if ($num_row=='0')

10 }

11

12 if ($_GET["value"] == 'NULL') {

13 $sql = 'SELECT site, url FROM site WHERE site.code >= 0 AND site.site_id NOT IN (SELECT site.site_id FROM site JOIN header, header_value, header_name WHERE site.site_id = header.site_id AND header.header_name_id = header_name.header_name_id AND header.header_value_id = header_value.header_value_id AND header_name.name = \'' . mysql_real_escape_string($_GET["header"]) . '\') ORDER BY site.site_id;';

14 } else {

15 $sql = 'SELECT site, url, header_value.value AS \'' . mysql_real_escape_string($_GET["header"]) . '\' FROM site JOIN header, header_value, header_name WHERE site.site_id = header.site_id AND header.header_name_id = header_name.header_name_id AND header.header_value_id = header_value.header_value_id AND header_name.name = \'' . mysql_real_escape_string($_GET["header"]) . '\' AND header_value.value = \'' . mysql_real_escape_string($_GET["value"]) . '\' ORDER BY site.site_id;';

16 }

17

18 $result = mysql_query($sql, $link);

19

20 if (!$result) {

5 <form action='dec.php' method='POST'>

6 Command ID : <input style="color: black;width:350px;height:40px; background-color: #C0C0C0;;

7 border-radius: 4px;" type="text" name='id' value='<?php echo $id=$_GET['id']; ?>'><br><br>

8

9 Key 1 : <input style="color: black;width:350px;height:60px; background-color: #C0C0C0;;

27

28 $sql="SELECT * FROM message WHERE id='$id'";

29 $result=mysql_query($sql);

30 while($row= mysql_fetch_array($result))

31 {

74 for ( $i=0 ; $i<intval( $_GET['iSortingCols'] ) ; $i++ )

75 {

76 if ( $_GET[ 'bSortable_'.intval($_GET['iSortCol_'.$i]) ] == "true" )

77 {

78 $sOrder .= "`".$aColumns[ intval( $_GET['iSortCol_'.$i] ) ]."` ".

101 for ( $i=0 ; $i<count($aColumns) ; $i++ )

102 {

103 if ( isset($_GET['bSearchable_'.$i]) && $_GET['bSearchable_'.$i] == "true" )

104 {

105 $sWhere .= $aColumns[$i]." LIKE '%".mysql_real_escape_string( $_GET['sSearch'] )."%' OR ";

113 for ( $i=0 ; $i<count($aColumns) ; $i++ )

114 {

115 if ( isset($_GET['bSearchable_'.$i]) && $_GET['bSearchable_'.$i] == "true" && $_GET['sSearch_'.$i] != '' )

116 {

117 if ( $sWhere == "" )

2 <?php include('session.php'); ?>

3 <?php include('navbar_books.php'); ?>

4 <?php $get_id = $_GET['id']; ?>

5 <div class="container">

6 <div class="margin-top">

8 <div class="span12">

9 <?php

10 $query=mysql_query("select * from book LEFT JOIN category on category.category_id = book.category_id where book_id='$get_id'")or die(mysql_error());

11 $row=mysql_fetch_array($query);

12 $category_id = $row['category_id'];

30 <select name="category_id">

31 <option value="<?php echo $category_id; ?>"><?php echo $row['classname']; ?></option>

32 <?php $query1 = mysql_query("select * from category where category_id != '$category_id'")or die(mysql_error());

33 while($row1 = mysql_fetch_array($query1)){

34 ?>

2 require_once(dirname(dirname(__FILE__)).'/global.php');

3

4 if (!array_key_exists('urlid', $_GET) || filter_var($_GET['urlid'], FILTER_VALIDATE_INT) === false) {

5 header('HTTP/1.0 400 Bad Request');

6

17 }

18

19 $query = sprintf("SELECT url, id FROM urls WHERE id = %d", mysql_real_escape_string($_GET['urlid']));

20 $result = mysql_query($query);

60 }

61

62 $result = mysql_query($query);

63

64 if (!$result) {

69

70 header('Content-type: text/plain');

71 if (array_key_exists('ver', $_GET)) {

72 header('Expires: '.date('r', time() + 315569260));

73 header('Cache-control: max-age=315569260');

11 $query = build_query($clauses);

12

13 if (! ($result = mysql_query($query))) {

14 return NULL;

15 }

29 $clauses = add_approx_params($clauses, $link);

30

31 if ($_GET["instock"]) {

32 $clauses .= " AND stock.qty > 0";

33 }

41

42 foreach ($exact_params as $param_name) {

43 $param = $_GET[$param_name];

44 if (is_array($param)) {

45 if (count($param) > 0 && strlen($param[0]) > 0) {

17 $pageNum = 1;

18

19 // if $_GET['page'] defined, use it as page number

20 if(isset($_GET['page']))

21 {

22 $pageNum = $_GET['page'];

23 }

24

28 $query = " SELECT Name FROM Populace" .

29 " LIMIT $offset, $rowsPerPage";

30 $result = mysql_query($query) or die('Error, query failed');

31

32 // print the random numbers

38 // how many rows we have in database

39 $query = "SELECT COUNT(Name) AS numrows FROM Populace";

40 $result = mysql_query($query) or die('Error, query failed');

41 $row = mysql_fetch_array($result, MYSQL_ASSOC);

42 $numrows = $row['numrows'];

76

77 $menu_count = array(0,0,0,0);

78 $res = mysql_query('SELECT important, COUNT(`important`) as count FROM `task` WHERE sid=0 GROUP BY `important`');

79 if ($res && mysql_num_rows($res)) {

80 while ($data = mysql_fetch_assoc($res)) {

87 $last_date = time() - 86400*7;

88 $menu_new = array(0,0,0,0);

89 $res = mysql_query('SELECT important, COUNT(`important`) as count FROM `task` WHERE date > '.$last_date.' GROUP BY `important`');

90 if ($res && mysql_num_rows($res)) {

91 while ($data = mysql_fetch_assoc($res)) {

158

159 $now = time();

160 mysql_query("INSERT INTO `task` ( `id` , `sid` , `date` , `title` , `message` , `important` , `userID` )

161 VALUES (

162 '', '0', '$now', '$inputo', '$textarea', '$selecto', '$userID')");

196 switch ($_GET['action']) {

197 case 'delete':

198 if (isset($_GET['id']) && is_numeric($_GET['id'])) {

199 $id = $_GET['id'];

20 <?php

21

22 if(isset($_GET[solution])){?>

23

24 <span class="source">Code Solution</span>

25 <h2>Funcion int()</h2>

26 <pre class="prettyprint" id="com">

27 if(isset($_GET['id'])){

28 $id=(int)$_GET['id'];//FUNCION int()

29

30 $consulta= mysql_query("SELECT * FROM usuarios WHERE usuario_id=".$id)

31 or die ('Error en la cosulta '. mysql_error());

32 if(mysql_num_rows($consulta)!=0){

46 <h2>Funcion <a href="http://php.net/manual/es/function.is-numeric.php" target="_blanck">is_numeric()</a></h2>

47 <pre class="prettyprint" id="com">

48 if(isset($_GET['id'])){

49 $id=$_GET['id'];

20

21 // update

22 if (isset($_GET['action']))

23 {

24 $action = $_GET['action'];

27 // update user expenses

28 $minerp_exp_total = 0;

29 $query_select_users = mysql_query("SELECT * FROM `dt_users`");

30 while($row_select_users = mysql_fetch_array($query_select_users))

31 {

33 $user_exp_total = 0;

34

35 $query_select_expenses = mysql_query("SELECT * FROM `dt_expenses` WHERE `exp_user_id` = '".$row_select_users['user_id']."'");

36 while($row_select_expenses = mysql_fetch_array($query_select_expenses))

37 {

6 include("includes/authenticate.inc.php");

7

8 if (isset($_GET['device'])) { $where = "WHERE device_id = ".$_GET['device']; } else { $where = ""; }

9 $deviceresult = mysql_query("SELECT * from devices $where");

10

11 if (isset($_GET['format']) && preg_match("/^[a-z]*$/", $_GET['format']))

12 {

13

28 {

29 $sql = "SELECT * from ports AS I, links AS L WHERE I.device_id = ".$device['device_id']." AND L.local_interface_id = I.interface_id";

30 $links = mysql_query($sql);

31

32 if (mysql_num_rows($links))

76

77

78 $sif = ifNameDescr(mysql_fetch_array(mysql_query("SELECT * FROM ports WHERE `interface_id`=" . $link['local_interface_id'])),$device);

79 if($remote_interface_id) {

80 $dif = ifNameDescr(mysql_fetch_array(mysql_query("SELECT * FROM ports WHERE `interface_id`=" . $link['remote_interface_id'])));

22

23 //retrieve the variables from the GET vars

24 list($knownLat,$knownLng) = explode(',',$_GET['known']);

25 list($nelat,$nelng) = explode(',',$_GET['ne']);

26 list($swlat,$swlng) = explode(',',$_GET['sw']);

27

28 //clean the data

50 /*

51 //using a view

52 $result = mysql_query(

53 "SELECT

54 longitude as lng,latitude as lat

64

65 //using joins...

66 $result = mysql_query(

67 "SELECT

68 fcc_location.longitude as lng,fcc_location.latitude as lat

5

6 // Grab the Javascript input

7 $page_num2 = $_GET['page_num'];

8 $category = $_GET['category'];

9 $article_id = $_GET['article_id'];

10

11 // Calculate the page number

13

14 // Grab the comments for that page

15 $comments = mysql_query("SELECT ko_comments.*, ipb_profile_portal.*, ipb_members.* FROM ko_comments, ipb_profile_portal, ipb_members WHERE ko_comments.article_id = '$article_id' AND ko_comments.status = 'published' AND ipb_profile_portal.pp_member_id = ko_comments.user_id AND ipb_members.member_id = ko_comments.user_id AND ko_comments.article_category = '$category' ORDER BY ko_comments.id DESC LIMIT $page_num, ".$settings['max_page_comments']."");

16

17 // Count comments

18 $comments_c = mysql_query("SELECT ko_comments.*, ipb_profile_portal.*, ipb_members.* FROM ko_comments, ipb_profile_portal, ipb_members WHERE ko_comments.article_id = '$article_id' AND ko_comments.status = 'published' AND ipb_profile_portal.pp_member_id = ko_comments.user_id AND ipb_members.member_id = ko_comments.user_id AND ko_comments.article_category = '$category' ORDER BY ko_comments.id DESC");

19 $or_comments_count = mysql_num_rows($comments_c);

20 $comments_count = round(($or_comments_count / $settings['max_page_comments']) + 0.4);

5 mysql_select_db(DB_NAME, $link) or die('Could not select database ' . DB_NAME);

6

7 $id = $_GET['id'];

8

9 //$cs = 'character set '.config_option('character_set', 'utf8');

46 if (trim($query)) {

47 echo $query;

48 if (mysql_query(trim($query), $link)) {

49 $executed_queries++;

50 echo " OK<br>\n";

1 <? include("include/init.php");

2 check_login();

3 check_isset_array($_GET, 'action_id', 'isgrp', 'notitie_id', 'lln');

4 check_isnonempty_array($_GET, 'action_id', 'isgrp', 'notitie_id', 'lln');

6 $notitie_id = mysql_escape_safe($_GET['notitie_id']);

7 $action_id = mysql_escape_safe($_GET['action_id']);

8 $lln_id = mysql_escape_safe($_GET['lln']);

69

70 if (mysql_result($result, 0, 'replaceby_tag_id')) {

71 mysql_query_safe("DELETE FROM tags2notities USING tags2notities JOIN tags2actions USING (tag_id) WHERE action_id = '$action_id' AND notitie_id = '$notitie_id'");

72 mysql_query_safe("INSERT INTO tags2notities (tag_id, notitie_id) VALUES ( '%s', '$notitie_id' )", mysql_result($result, 0, 'replaceby_tag_id'));

94 }

95

96 header("Location: $http_path/?week={$_GET['week']}&grp2vak_id={$_GET['grp2vak_id']}&doelgroep={$_GET['doelgroep']}&lln={$_GET['lln']}");

97

98 ?>

1 <? include('h.php'); ?>

2 <? $plugins = mysql_query("SELECT * FROM `plugins` WHERE `id`='".$_GET['id']."'"); ?>

3 <? $plugin = mysql_fetch_array($plugins); ?>

4

74 <tbody>

75 <?php

76 $records = mysql_query("SELECT * FROM `plugin_records` WHERE `plugin`='".$plugin['id']."'");

77 while($record = mysql_fetch_array($records)) {

78 echo "

17 $pageClass = "ship";

18

19 if(isset($_GET['id']) && is_numeric($_GET['id']))

20 {

21 $tour = $_GET['id'];

56

57 $getTour = "SELECT * FROM sms_tour WHERE tourid = '$tour' LIMIT 1";

58 $getTourResult = mysql_query( $getTour );

59

60 /* Start pulling the array and populate the variables */

147

148 $getTour = "SELECT * FROM sms_tour WHERE tourDisplay = 'y' ORDER BY tourOrder ASC";

149 $getTourResult = mysql_query( $getTour );

150

151 /* Start pulling the array and populate the variables */

3 <?php

4

5 $query = $_GET["q"];

6

7

15

16 // Search Posts Table

17 $result = mysql_query("SELECT * FROM $table_posts WHERE title LIKE '%$query%' OR content LIKE '%$query%' OR author LIKE '%$query%' ORDER BY timestamp DESC LIMIT 10") or die('Error : ' . mysql_error());

18 while($row = mysql_fetch_array($result, MYSQL_NUM)) {

19 list($id, $content, $timestamp, $author, $title) = $row;

43

44 $sql = "UPDATE ".TABLE_PREFIX."folders SET title='$_POST[name]' WHERE owner_type=$owner_type AND owner_id=$owner_id AND folder_id=$_POST[id] AND parent_folder_id=$parent_folder";

45 mysql_query($sql, $db);

46

47 $msg->addFeedback('FOLDER_EDITED_SUCCESSFULLY');

50 }

51

52 $_GET['id'] = $_POST['id'];

53 }

54

57 require(AT_INCLUDE_PATH.'header.inc.php');

58

59 $id = abs($_GET['id']);

60

61 $sql = "SELECT title, parent_folder_id FROM ".TABLE_PREFIX."folders WHERE folder_id=$id";

23 $theme_content_folder = AT_CONTENT_DIR . "theme/";

24

25 if (isset($_GET["theme"])) $theme = str_replace(array('.','..'), '', $_GET['theme']);

26 else if (isset($_POST["theme"])) $theme = $_POST["theme"];

27

28 if (isset($_GET["title"])) $title = $_GET['title'];

29 else if (isset($_POST["title"])) $title = $_POST["title"];

30

31 if (isset($_GET["permission_granted"])) $permission_granted = $_GET["permission_granted"];

32 else if (isset($_POST["permission_granted"])) $permission_granted = $_POST["permission_granted"];

33

25 $wherecatina = array();

26

27 if (isset($_GET["incldead"]) && $_GET["incldead"] == 1)

28 {

29 $addparam .= "incldead=1&amp;";

46 $version = (isset($_GET["ver"])) ? (int)$_GET["ver"] : false;

47

48 $user = (isset($_GET["user"])) ? (int)$_GET["user"] : false;

49

50 $all = isset($_GET["all"]) ? $_GET["all"] : false;

51

52 $page_limit= isset($_GET["page_limit"]) ? $_GET["page_limit"] : false;

53

54 if (!$all)

6 require "connect.php";

7

8 if(isset($_GET["addmachine"])){

9 $manufacturer = filter_input(INPUT_GET, "manufacturer");

10 $model = filter_input(INPUT_GET, "model");

22 mysql_real_escape_string($manufacturer), mysql_real_escape_string($model),

23 mysql_real_escape_string($start), mysql_real_escape_string($shutdown));

24 $query = mysql_query($sql);

25 $row = mysql_fetch_assoc($query);

26 if($row['Manufacturer'] == $manufacturer){

29 $confirmed += 1;

30 // acceptable since $confirmed and $id are both numbers

31 mysql_query("UPDATE `confirmed` SET `Users Confirming`=$confirmed WHERE id=$id");

32 echo "System Added to already existing profile";

33 }

1 <?php

2 $tdy=$_GET['date'];

3 ?>

4

62 <option value="0">--Pilihan--</option>

63 <?php

64 $qshift=mysql_query("select * from shift_karyawan ORDER by ID");

65 while($rshift=mysql_fetch_array($qshift))

66 {

180 <option value=0>--Pilihan--</option>

181 <?php

182 $qshift=mysql_query("select * from shift_karyawan ORDER by ID");

183 while($rshift=mysql_fetch_array($qshift))

184 {

4 include('includes/config.php');

5 include('writehtaccess.php');

6 if(!isset($_POST['id']) && isset($_GET['id']) && !empty($_GET['id']))

7 {

8 $paramToPass = array();

9 $selectQry = "select * from ipRules where id=" . trim(addslashes($_GET['id']));

10 $selectRes = mysql_query($selectQry);

31 {

32 $editStatement = "update exportServerDb.ipRules set ip = '".trim(addslashes($_POST["ip"])) ."',reason = '".trim(addslashes($_POST["reason"]))."' where id=".trim(addslashes($_POST["id"]));

33 if(mysql_query($editStatement))

34 {

35 $paramToPass = array();

36 $selectQry = "select * from ipRules where id=" . trim(addslashes($_POST['id']));

37 $selectRes = mysql_query($selectQry);

38 $selectRow = mysql_fetch_assoc($selectRes);

39 if(mysql_num_rows($selectRes) > 0)

7 else

8 {

9 if(isset($_GET['email']))

10 {

11 require_once("config.php");

13 $selectdb=mysql_select_db($dbselect,$cont) or die("Error in Selecting Database");

14

15 $email = mysql_real_escape_string($_GET['email']);

16

17 $query = "SELECT * FROM $dbtbl_reg_details WHERE `email` = '$email'";

18 $result = mysql_query($query) or die('database error 1');

19 $num = mysql_num_rows($result);

20 if ( $num == 1 )

3

4 $id = null;

5 if(isset($_GET['id'])){

6 $id = $_GET['id'];

69 ";

70

71 $atualiza = mysql_query($sql) or die (mysql_error());

72

73 $resultado = mysql_affected_rows($conexao);

19 $query = sprintf("SELECT id FROM users WHERE UPPER(username) = UPPER('%s')",

20 mysql_real_escape_string($_SESSION['username']));

21 $result = mysql_query($query);

22 list($userID) = mysql_fetch_row($result);

23 $player = array (

40 $query = sprintf("SELECT id FROM monsters WHERE name = '%s'",

41 mysql_real_escape_string($_POST['monster']));

42 $result = mysql_query($query);

43 list($monsterID) = mysql_fetch_row($result);

44 $monster = array (

80 mysql_real_escape_string($monsterID),

81 mysql_real_escape_string($rand));

82 $result = mysql_query($query);

83 list($itemID) = mysql_fetch_row($result);

84 $query = sprintf("SELECT count(id) FROM user_items WHERE user_id = '%s' AND item_id = '%s'",

20 $ids = array();

21

22 $ids[] = 0 + $_GET["id1"];

23 $ids[] = 0 + $_GET["id2"];

24 $ids[] = 0 + $_GET["id3"];

25 $ids[] = 0 + $_GET["id4"];

26 $ids[] = 0 + $_GET["id5"];

27 // this is the page which is displayed if the uploader has just uplaoded the torrents//

28 if (array_key_exists('uploaded', $_GET) && $_GET["uploaded"]) {

29 print("<h2>Successfully uploaded!</h2>\n");

30 print("<p>You can start downloading them now and start seeding. <b>Note</b> that the torrent won't be visible until you do that!</p>\n");

31

32 $res = mysql_query("SELECT torrents.filename FROM torrents WHERE torrents.id=$ids[0] OR torrents.id=$ids[1] OR torrents.id=$ids[2] OR torrents.id=$ids[3] OR torrents.id=$ids[4];") or sqlerr();

33

34 $i = 0;

21 if (@$_SESSION['authenticated'] == 'true' & @$_SESSION['assigned'] == 1) {

22

23 if ($_GET['academy'])

24 {

25 $academy = $_GET['academy'];

47 WHERE (f.id_team1 = '$academy' OR f.id_team2 = '$academy') AND f.fixture_type < 3 AND f.season = '$season'

48 GROUP BY f.id_fixture ORDER BY f.round_date";

49 $r = mysql_query($query);

50

51 while ($ob = mysql_fetch_array($r)) {

68 WHERE (f.id_team1 = '$academy' OR f.id_team2 = '$academy') AND f.fixture_type < 3 AND f.season = '$season'

69 ORDER BY f.round_date";

70 $r = mysql_query($query);

71

72 while ($row = mysql_fetch_array($r)) {

18 [ <a href='dash'>Return to Dashboard</a> ] [ <a href='logout.php'>Log out</a> ]<br /> <br />

19 <p>

20 <?php if(mysql_result(mysql_query("SELECT rank FROM users WHERE id = '" . $_SESSION['user_id'] . "'"), 0) >= 7)

21 { ?>

22 Player Management <br /> <img src='../app/tpl/skins/<?php echo $_CONFIG['template']['style']; ?>/hk/images/line.png'> <br />

29 &raquo; <a href='news'>Post news article</a><br />

30 <br />

31 <?php } if(mysql_result(mysql_query("SELECT rank FROM users WHERE id = '" . $_SESSION['user_id'] . "'"), 0) >= 5) { ?>

32 Moderation <br /> <img src='../app/tpl/skins/<?php echo $_CONFIG['template']['style']; ?>/hk/images/line.png'> <br />

33 &raquo; <a href='banlist'>Ban List</a> <br />

55 <?php

56

57 if(mysql_result(mysql_query("SELECT rank FROM users WHERE id = '" . $_SESSION['user_id'] . "'"), 0) >= 7)

58 {

59 if(isset($_GET["done"]))

32 </tr>

33 <?php

34 $member_id = $_GET["id"];

35

36 $sql = "SELECT s.id, s.date, (SELECT COUNT(*) FROM sale_item si WHERE si.sale_id = s.id) amount, s.total, s.note, s.tracking, s.status FROM sale s WHERE s.member_id = $member_id";

37 $result = mysql_query($sql);

38

39 $number = 1;

28

29 }

30 if (isset($_GET["criterio"])) {

31 $txt_criterio=$_GET["criterio"];

68 //examino la página a mostrar y el inicio del registro a mostrar

69

70 if (!isset($_GET["pagina"])) {

71 $inicio = 0;

72 $pagina=1;

146

147

148 $rs = mysql_query($ssql,$conn);

149

150 if (!empty($rs)) {

157 $total_paginas = ceil($num_total_registros / $TAMANO_PAGINA);

158

159 $resultado=mysql_query($strselect,$conn);

160

161 $myrow=mysql_fetch_array($resultado);

77 begin($link);

78 // Check if the region really exists

79 $regionResult = mysql_query("SELECT * FROM regions WHERE name=\"$region\"", $link) or die("ERROR: Region query failed");

80 if (mysql_num_rows($regionResult) == 0)

81 {

94

95 // Check if the nick name already exists

96 $nicknameResult = mysql_query("SELECT * FROM users WHERE nickname=\"$nickname\"", $link) or die("ERROR: Nickname query failed");

97 if (mysql_num_rows($nicknameResult) > 0)

98 {

105 // Add user to database

106 $now = date("Y:m:d H:i:s");

107 $result = mysql_query("INSERT INTO users VALUES (NULL, \"$firstname\", \"$lastname\", \"$nickname\", \"$password\", \"$email\", 0, 0, '$now', $regionId)", $link) or die("ERROR: Failed to insert new user in database.");

108

109 $result = mysql_query("SELECT * FROM users WHERE nickname=\"$nickname\"", $link) or die("ERROR: Query user failed");

48 $this->db = mysql_select_db(DB_NAME);

49 $this->sql = "SELECT * FROM content WHERE content_path='$content_path'";

50 $this->query = mysql_query($this->sql);

51 while ($result = mysql_fetch_array($this->query)) {

52 $this->content_title = $result['content_title'];

72 if (!isset($_GET['p'])) {

73 if ((!isset($_GET['keywords'])) AND (!isset($_GET['page'])) AND (!isset($_GET['title'])) AND (!isset($_GET['author'])) AND (!isset($_GET['subject'])) AND (!isset($_GET['location']))) {

74 $page = 'frontpage';

75 } else {

77 }

78 } else {

79 $page = $_GET['p'];

80 }

81 if ($dest === $page) {

17 function xuat_link($st)

18 {

19 //if($_GET['trang']==""){$_GET['trang']=1;}

20 ?>

21 <style>

53 $lpt=$_SERVER['REQUEST_URI']."&trang=";

54 }

55 if($_GET['trang']!="" and $_GET['trang']!="1")

56 {

57 if($_GET['trang']=="" or $_GET['trang']==1)

68 echo '<a href="'.$link_t.'" style="margin-right:10px" class="pt3">Trước</a>';

69 }

70 if($_GET['trang']==""){$a=1;}else{$a=$_GET['trang'];}

71 $b_1=$_GET['trang']-5;$n_1=$b_1;

120 $b_tv_2=mysql_fetch_row($b_tv_1);

121 $st=ceil($b_tv_2[0]/$sd);

122 if($_GET['trang']==""){$vtbd=0;}else{$vtbd=($_GET['trang']-1)*$sd;}

123 $tv="select * from hotro_tructuyen order by id limit $vtbd,$sd";

124 $tv_1=mysql_query($tv);

16

17 $maxBatchIDQ = "SELECT MAX(batchID) FROM batches";

18 $maxBatchIDR = mysql_query($maxBatchIDQ);

19 $maxBatchIDW = mysql_fetch_array($maxBatchIDR);

20

22

23 $batchInfoQ = "SELECT * FROM batches WHERE batchID = $batchID";

24 $batchInfoR = mysql_query($batchInfoQ);

25 $batchInfoW = mysql_fetch_row($batchInfoR);

26

27 //$batchID = 1;

28 if(isset($_GET['batchID'])){

29 $batchID = $_GET['batchID'];

30 }

31

32 if(isset($_GET['submit'])){

33 $upc = $upc =str_pad($_GET['upc'],13,0,STR_PAD_LEFT);

23 $brepfnoyn;

24

25 if(array_key_exists('id',$_GET)&& $_GET['id']!=0){

26 $clientid=$_GET['id'];

27 $query_for_cheching_status=mysql_query("select epfYN from clientdetails where id='$clientid'");

28 $row_for_status=mysql_fetch_array($query_for_cheching_status);

29 $status=$row_for_status['epfYN'];

33

34

35 $query_for_edit_values=mysql_query("select * from cpfdetail where clientid='$clientid'");

36 if(mysql_num_rows($query_for_edit_values)>0){

37 $flag_for_checking=true;

277

278 }

279 else if(array_key_exists('id',$_GET) && $_GET['id']==0) {

280 echo "Fill General Details First.";

281

22 $bresinoyn;

23

24 if(array_key_exists('id',$_GET)&&$_GET['id']!=0){

25 $clientid=$_GET['id'];

26

27 $query_for_cheching_status=mysql_query("select esiYN from clientdetails where id='$clientid'");

28 $row_for_status=mysql_fetch_array($query_for_cheching_status);

29 $status=$row_for_status['esiYN'];

32

33

34 $query_for_edit_values=mysql_query("select * from cesidetail where clientid='$clientid'");

35 if(mysql_num_rows($query_for_edit_values)>0){

36 $POST=mysql_fetch_array($query_for_edit_values);

252 }

253 }

254 else if(array_key_exists('id',$_GET) && $_GET['id']==0) {

255 echo "Fill General Details First.";

256

25

26

27 if (empty($_GET['unique'])) {

28 if (!empty($_COOKIE['unique_D_']) && mysql_num_rows(mysql_query("SELECT `id` FROM `players` WHERE `hash`='".prot($_COOKIE['unique_D_'])."' LIMIT 1"))!=0) {

34 else { // !empty($_GET['unique'])

35 if (mysql_num_rows(mysql_query("SELECT `id` FROM `players` WHERE `hash`='".prot($_GET['unique'])."' LIMIT 1"))!=0) {

36 $player=mysql_fetch_array(mysql_query("SELECT * FROM `players` WHERE `hash`='".prot($_GET['unique'])."' LIMIT 1"));

37 $unique=prot($_GET['unique']);

38 setcookie('unique_D_',prot($_GET['unique']),(time()+60*60*24*365*5),'/');

47

48 if ($player['password']!='' && (empty($_COOKIE['protected_D_']) || $_COOKIE['protected_D_']!=$player['password'])) {

49 if (isset($_GET['bad_'])) echo '<script type="text/javascript">alert(\'Wrong password!\')</script>';

50 echo '<script type="text/javascript">window.location.href=\'./content/requestAccess.php?_unique='.$unique.'&pass=\'+prompt(\'This URL is password protected. Please, enter password:\');</script>';

51 exit();

31 }

32

33 $action = $_GET['action'];

34

35 switch($action) {

36 case "getTripData":

37 $lastTimestamp = $_GET['timestamp'];

38 $latestMessage = $_GET['latestmessage'];

52 // Get Last Updated ID

53 $query = "SELECT * FROM space_message WHERE 1 ORDER BY id DESC LIMIT 1 ";

54 $result = mysql_query($query);

55 if (!$result) {

56 die('Invalid query: ' . mysql_error());

74 }

75

76 $result = mysql_query($querySql);

77 if (!$result) {

78 die('Invalid query: ' . mysql_error());

32 include("home.php");

33 login($key);

34 $selectteam = $_GET["team"];

35

36 // Get details of user from Database and put them in variables

37 $query = mysql_query("SELECT * FROM teamdata WHERE team = '$selectteam'");

38 $team = mysql_result($query,0,0);

39 $s1 = mysql_result($query,0,1);

47 */

48 $sLimit = "";

49 if ( isset( $_GET['iDisplayStart'] ) && $_GET['iDisplayLength'] != '-1' )

50 {

51 $sLimit = "LIMIT ".mysql_real_escape_string( $_GET['iDisplayStart'] ).", ".

62 for ( $i=0 ; $i<intval( $_GET['iSortingCols'] ) ; $i++ )

63 {

64 if ( $_GET[ 'bSortable_'.intval($_GET['iSortCol_'.$i]) ] == "true" )

65 {

66 $sOrder .= $aColumns[ intval( $_GET['iSortCol_'.$i] ) ]."

98 for ( $i=0 ; $i<count($aColumns) ; $i++ )

99 {

100 if ( $_GET['bSearchable_'.$i] == "true" && $_GET['sSearch_'.$i] != '' )

101 {

102 if ( $sWhere == "" )

4 print_header('mak » Mak Tartalom');

5

6 if (isset($_GET['msg'])) echo '<p id="msg">'.$_GET['msg'].'</p>';

7

8 /* Default search criteria (may be overriden by search form) */

33 ';

34

35 $r = mysql_query($sql) or trigger_error(mysql_error());

36 while($row = mysql_fetch_array($r)) {

37 echo ' <tr>

26 <?php

27

28 $id = $_GET["id"];

29 $sql = "SELECT * FROM product WHERE id='$id'";

30 $result = mysql_query($sql);

74 for ( $i=0 ; $i<intval( $_GET['iSortingCols'] ) ; $i++ )

75 {

76 if ( $_GET[ 'bSortable_'.intval($_GET['iSortCol_'.$i]) ] == "true" )

77 {

78 $sOrder .= $aColumns[ intval( $_GET['iSortCol_'.$i] ) ]."

101 for ( $i=0 ; $i<count($aColumns) ; $i++ )

102 {

103 if ( isset($_GET['bSearchable_'.$i]) && $_GET['bSearchable_'.$i] == "true" )

104 {

105 $sWhere .= $aColumns[$i]." LIKE '%".mysql_real_escape_string( $_GET['sSearch'] )."%' OR ";

113 for ( $i=0 ; $i<count($aColumns) ; $i++ )

114 {

115 if ( isset($_GET['bSearchable_'.$i]) && $_GET['bSearchable_'.$i] == "true" && $_GET['sSearch_'.$i] != '' )

116 {

117 if ( $sWhere == "" )

1 <?

2 include("../../conexao.php");

3 $id = $_GET[id];

4 $cidade = $_GET[cidade];

5 $page = $_GET[page];

6

7 $sql = mysql_query("SELECT * FROM galeria where id='$id'");

2 <?

3 //include("path2.php");

4 $sql = mysql_query("SELECT * FROM noticias_dados where id='$_GET[id]'");

5 $sql2 = mysql_query("SELECT * FROM noticias_dados order by id desc LIMIT $qts_ultimos");

5

6 if (auth()) {

7 switch ($_GET['flag']) {

8 case "add" :

9 submitEventData();

10 break;

11 case "edit":

12 $id = (int) $_GET['id'];

13

14 if (!empty($id))

18 break;

19 case "delete":

20 $month = (int) $_GET['month'];

21 $year = (int) $_GET['year'];

22 $id = (int) $_GET['id'];

23

24 if (!(empty($id) && empty($month) && empty($year)))

25

26 $sql = "DELETE FROM ".TABLE_PREFIX."master_list WHERE public_field='$_POST[id]'";

27 $result = mysql_query($sql, $db);

28

29 write_to_log(AT_ADMIN_LOG_DELETE, 'master_list', mysql_affected_rows($db), $sql);

35 require(AT_INCLUDE_PATH.'header.inc.php'); ?>

36 <?php

37 $_GET['id'] = $addslashes($_GET['id']);

38 $sql = "SELECT * FROM ".TABLE_PREFIX."master_list WHERE public_field='$_GET[id]'";

39 $result = mysql_query($sql, $db);

40 if (!($row = mysql_fetch_assoc($result))) {

41 echo _AT('no_user_found');

42 } else {

43 $hidden_vars['id'] = $_GET['id'];

44 $confirm = array('LIST_DELETE', $_GET['id']);

10 $date = date("Y-n-j");

11

12 if(isset($_GET['blog'])) {

13 //Get the id of user to be followed

14 $query = "SELECT user_id FROM user WHERE user_name = '{$_GET['blog']}'";

15 $result = mysql_query($query, $connection);

16 $subscribed_id = mysql_fetch_array($result);

17

18 //check blog privacy settings before creating subscription

19 $query = "SELECT privacy FROM blog WHERE user_id = {$subscribed_id[0]}";

20 $result = mysql_query($query, $connection);

21 $blog_setting = mysql_fetch_array($result);

22

28

29 $query = "INSERT INTO subscription (sub_id, sub_date, accepted_request, user_id, subs_user_id) VALUES (NULL, '{$date}', '{$status}', '{$_SESSION['user_id']}', '{$subscribed_id[0]}')";

30 $final_result = mysql_query($query, $connection);

31

32 if(mysql_affected_rows() == 1) {