Rev 12 | Only display areas with differences | Regard whitespace | Details | Blame | Last modification | View Log | RSS feed
Rev 12 | Rev 14 | ||
---|---|---|---|
1 | <?php |
1 | <?php |
2 | 2 | ||
3 | if (!defined('IBLEGAL')) die('Kann nicht ohne Personal WebBase ausgeführt werden.'); |
3 | if (!defined('WBLEGAL')) die('Kann nicht ohne Personal WebBase ausgeführt werden.'); |
4 | 4 | ||
5 | if ($aktion == 'edit') |
5 | if ($aktion == 'edit') |
6 | { |
6 | { |
7 | $res = db_query("SELECT `user` FROM `".$mysql_zugangsdaten['praefix']."ordner` WHERE `id` = '".db_escape($folder)."'"); |
7 | $res = db_query("SELECT `user` FROM `".$mysql_zugangsdaten['praefix']."ordner` WHERE `id` = '".db_escape($folder)."'"); |
8 | $row = db_fetch($res); |
8 | $row = db_fetch($res); |
9 | if ($row['user'] != $benutzer['id']) |
9 | if ($row['user'] != $benutzer['id']) |
10 | $folder = 0; |
10 | $folder = 0; |
11 | 11 | ||
12 | db_query("UPDATE `".$mysql_zugangsdaten['praefix']."phpmyadmin` SET `folder` = '".db_escape($folder)."', `server` = '".db_escape($fserver)."', `username` = '".db_escape($fusername)."', `passwort` = '".db_escape($fpasswort)."', `onlydb` = '".db_escape($fonlydb)."' WHERE `id` = '".db_escape($id)."' AND `user` = '".$benutzer['id']."'"); |
12 | db_query("UPDATE `".$mysql_zugangsdaten['praefix']."phpmyadmin` SET `folder` = '".db_escape($folder)."', `server` = '".db_escape($fserver)."', `username` = '".db_escape($fusername)."', `passwort` = '".db_escape($fpasswort)."', `onlydb` = '".db_escape($fonlydb)."' WHERE `id` = '".db_escape($id)."' AND `user` = '".$benutzer['id']."'"); |
13 | if ($danach == 'A') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul)); |
13 | if ($danach == 'A') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul)); |
14 | if ($danach == 'B') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&danach='.urlencode($danach)); |
14 | if ($danach == 'B') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&danach='.urlencode($danach)); |
15 | if ($danach == 'C') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&folder='.urlencode($folder).'&danach='.urlencode($danach)); |
15 | if ($danach == 'C') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&folder='.urlencode($folder).'&danach='.urlencode($danach)); |
16 | } |
16 | } |
17 | 17 | ||
18 | if ($aktion == 'new') |
18 | if ($aktion == 'new') |
19 | { |
19 | { |
20 | $res = db_query("SELECT `user` FROM `".$mysql_zugangsdaten['praefix']."ordner` WHERE `id` = '".db_escape($folder)."'"); |
20 | $res = db_query("SELECT `user` FROM `".$mysql_zugangsdaten['praefix']."ordner` WHERE `id` = '".db_escape($folder)."'"); |
21 | $row = db_fetch($res); |
21 | $row = db_fetch($res); |
22 | if ($row['user'] != $benutzer['id']) |
22 | if ($row['user'] != $benutzer['id']) |
23 | $folder = 0; |
23 | $folder = 0; |
24 | 24 | ||
25 | db_query("INSERT INTO `".$mysql_zugangsdaten['praefix']."phpmyadmin` (`folder`, `server`, `username`, `passwort`, `onlydb`, `user`) VALUES ('".db_escape($folder)."', '".db_escape($fserver)."', '".db_escape($fusername)."', '".db_escape($fpasswort)."', '".db_escape($fonlydb)."', '".$benutzer['id']."')"); |
25 | db_query("INSERT INTO `".$mysql_zugangsdaten['praefix']."phpmyadmin` (`folder`, `server`, `username`, `passwort`, `onlydb`, `user`) VALUES ('".db_escape($folder)."', '".db_escape($fserver)."', '".db_escape($fusername)."', '".db_escape($fpasswort)."', '".db_escape($fonlydb)."', '".$benutzer['id']."')"); |
26 | if ($danach == 'A') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul)); |
26 | if ($danach == 'A') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul)); |
27 | if ($danach == 'B') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&danach='.urlencode($danach)); |
27 | if ($danach == 'B') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&danach='.urlencode($danach)); |
28 | if ($danach == 'C') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&folder='.urlencode($folder).'&danach='.urlencode($danach)); |
28 | if ($danach == 'C') if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=edit&modul='.urlencode($modul).'&aktion=new&folder='.urlencode($folder).'&danach='.urlencode($danach)); |
29 | } |
29 | } |
30 | 30 | ||
31 | if ($aktion == 'delete') |
31 | if ($aktion == 'delete') |
32 | { |
32 | { |
33 | db_query("DELETE FROM `".$mysql_zugangsdaten['praefix']."phpmyadmin` WHERE `id` = '".db_escape($id)."' AND `user` = '".$benutzer['id']."'"); |
33 | db_query("DELETE FROM `".$mysql_zugangsdaten['praefix']."phpmyadmin` WHERE `id` = '".db_escape($id)."' AND `user` = '".$benutzer['id']."'"); |
34 | if (db_affected_rows() > 0) |
34 | if (db_affected_rows() > 0) |
35 | db_query("OPTIMIZE TABLE `".$mysql_zugangsdaten['praefix']."phpmyadmin`"); |
35 | db_query("OPTIMIZE TABLE `".$mysql_zugangsdaten['praefix']."phpmyadmin`"); |
36 | 36 | ||
37 | if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul)); |
37 | if (!headers_sent()) header('location: '.$_SERVER['PHP_SELF'].'?seite=inhalt&modul='.urlencode($modul)); |
38 | } |
38 | } |
39 | 39 | ||
40 | ?> |
40 | ?> |
41 | 41 |