| Server IP : 210.245.233.93 / Your IP : 216.73.216.226 Web Server : Apache/2.2.15 (CentOS) System : Linux webserver2.onesolution.com.hk 2.6.32-754.35.1.el6.x86_64 #1 SMP Sat Nov 7 12:42:14 UTC 2020 x86_64 User : apache ( 48) PHP Version : 5.3.3 Disable Function : exec, shell_exec, system, passthru, popen, proc_open, pcntl_exec MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/(Del)discoverylearning.com.hk/webadmin/ |
Upload File : |
<?php require("configure.php");
$GCardParenten = htmlspecialchars($_POST["GCardParenten"],ENT_QUOTES);
$GCardStudenten = htmlspecialchars($_POST["GCardStudenten"],ENT_QUOTES);
$GCardDescen = preg_replace("/'/","\'",$_POST["GCardDescen"]);
$GCardParenttc = htmlspecialchars($_POST["GCardParenttc"],ENT_QUOTES);
$GCardStudenttc = htmlspecialchars($_POST["GCardStudenttc"],ENT_QUOTES);
$GCardDesctc = preg_replace("/'/","\'",$_POST["GCardDesctc"]);
$GCardParentsc = htmlspecialchars($_POST["GCardParentsc"],ENT_QUOTES);
$GCardStudentsc = htmlspecialchars($_POST["GCardStudentsc"],ENT_QUOTES);
$GCardDescsc = preg_replace("/'/","\'",$_POST["GCardDescsc"]);
$GCardSort = $_POST["GCardSort"];
//print_r($_POST);
$sql = "select max(GCardId) as maxid ";
$sql .= "from GCard ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$GCardId = $row{maxid}+1;
if ($GCardSort == '' || $GCardSort == '0') {
$sql = "select max(GCardSort) as maxid ";
$sql .= "from GCard ";
$result=mysql_query($sql);
$row = mysql_fetch_array($result,MYSQL_ASSOC);
$GCardSort = $row{maxid}+1;
}
if( mysql_num_rows(mysql_query("SELECT GCardId FROM GCard WHERE GCardSort=$GCardSort ")) > 0){
mysql_query("UPDATE GCard SET GCardSort= GCardSort+1 WHERE GCardSort >=$GCardSort ");
}
$sql = "insert into GCard (GCardId, GCardParenten, GCardStudenten, GCardDescen, GCardParenttc, GCardStudenttc, GCardDesctc, GCardParentsc, GCardStudentsc, GCardDescsc, GCardSort) values ('$GCardId', '$GCardParenten', '$GCardStudenten', '$GCardDescen', '$GCardParenttc', '$GCardStudenttc', '$GCardDesctc', '$GCardParentsc', '$GCardStudentsc', '$GCardDescsc', '$GCardSort')";
mysql_query($sql);
if( mysql_errno() > 0 ){
echo 'Greeting Card Add Error:<br />'. mysql_error() .'<br />SQL: '. $sql;
exit;
}
mysql_close($dbh);
header("Location: gcard_index.php?msg=Add Successful");
?>