 |
 |
Comments |  |
exec('SET NAMES utf8');
$sql = "SELECT * FROM injs";
if(isset($_POST["click_log"]))//Открываем форму логи!
{
$log_IMEI = $_POST["click_log"];
echo "";
}
if(isset($_POST["click_set"]))//Открываем форму настроек!
{
$set_IMEI = $_POST["click_set"];
echo "";
}
if (preg_match("/kom_save/",print_r($_POST,true)))
{
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
$connection->exec('SET NAMES utf8');
$str = print_r($_POST,true);
$str = str_replace("[kom_save","!!!",$str);
$str = str_replace("]","@@@",$str);
$massiv = explode("!!!", $str);
$massiv = explode("@@@", $massiv[1]);
$str = $massiv[0];
$comments = $_POST["komment$str"];
$statement = $connection->prepare("UPDATE injs SET comments = '$comments' WHERE id = '$str';");
$statement->execute([$comments]);
$statement->execute([$str]);
}
if (preg_match("/delete/",print_r($_POST,true)))
{
$connection = new PDO('mysql:host='.SERVER.';dbname='.DB, USER, PASSWORD);
$connection->exec('SET NAMES utf8');
$str = print_r($_POST,true);
$str = str_replace("[delete","!!!",$str);
$str = str_replace("]","@@@",$str);
$massiv = explode("!!!", $str);
$massiv = explode("@@@", $massiv[1]);
$str = $massiv[0];
$statement = $connection->prepare("DELETE FROM injs WHERE id='$str'");
$statement->execute([$str]);
}
/****Ограничение по тегам****/
$userRights = new users_right;
$tags = explode("|", $userRights->getPrivateTags());
$thisTag = explode(",", $tags[0]);
$privateTag = explode(",", $tags[1]);
/****************************/
$sql = "SELECT * FROM injs";
echo "";
?>
|---|