source: Administrace/AddSection.php

<?php
  include '../includes/Global.php';
  
    TestLicence('2');

  if (array_key_exists('Mode', $_GET)) {
    $Mode = $_GET['Mode'];
  } else {
    $Mode = '';
  }
    
  If ($Mode == '') { // formuláø pøidání sekce 
    $sql = "SELECT max(ID) FROM section";
    $ID = $db->SQLCommand($sql);
    $Line = mysql_fetch_row($ID);
    $ID = $Line[0]+1;
?>
  <h4>Pøidání sekce</h4>
  <form enctype="multipart/form-data" action="AddSection.php?Mode=AddSection" method="post">
  <table border="0">
    <tr><td>Název:</td><td><input type="text" name="Name"></td></tr>
    <tr><td>Adresa:</td><td><input type="text" value="/Section.php?Section=<?php echo $ID; ?>" name="Address"></td></tr>
    <tr><td>Popis: </td><td><input name="Description" type="Text"></td></tr>
    <tr><td>Uživatel: </td><td><b><?php echo $_SESSION['User']; ?></b></td></tr>
    <tr><td>Zobrazit od: </td><td><select name="ShowDay">
<?php
  for ($i=1; $i<32; ++$i) {
        echo '<option value="'.$i.'">'.$i.'</option>';
  }
?>
    </select></td></tr>
    <tr><td>Zobrazit do: </td><td>TODO</td></tr>
    <tr><td><input type="submit" value="Odeslat"></td></tr>
  </table>
  </form>

<?php
  }

  if ($Mode == 'AddSection') {  //pøidání sekce
    $Name = mysql_escape_string($_POST['Name']);
    $UserID = mysql_escape_string($_SESSION['ID']);
    $Address = mysql_escape_string($_POST['Address']);
    $Description = mysql_escape_string($_POST['Description']);
    echo('Jméno: '.$Name.'<br>');
    echo('Uživatel: '.$_SESSION['User'].'<br>');
    echo('Address: '.$Address.'<br>');
    echo('Popis: '.$Description.'<br>');
    
    $sql = "SELECT max(ID) FROM section";
    $ID = $db->SQLCommand($sql);
    $Line = mysql_fetch_row($ID);
    $ID = $Line[0]+1;
    $sql = "INSERT section VALUE('$ID','$Name','$Description','$Address',now(),now(),now(),'$UserID')";
      $db->SQLCommand($sql);
      echo 'Sekce '.$Name.' byla uložena';
      WriteLog('Sekce byla uložena: '.$Name.' ID: '.$ID.' Popis: '.$Description.' User: '.$UserID,'4');
  }

 /* if ($AdminLevel < 4) { //level 4
    echo $NotLicence;
    include '../includes/FormLogin.php';    
    ShowFooter();
    die();
  } */


  If ($Mode == '') { // formuláø smazání sekce 
    TestLicence('4');

    $sql = "SELECT max(ID) FROM section";
    $ID = $db->SQLCommand($sql);
    $Line = mysql_fetch_row($ID);
    $ID = $Line[0]+1;
?>
  <h4>Smazání sekce</h4>
  <form enctype="multipart/form-data" action="AddSection.php?Mode=DelSection" method="post">
  <table border="0">
    <tr><td>Section:</td><td>
<?php
    $sql = "SELECT * FROM section";
    $ID = $db->SQLCommand($sql);
    echo '<select name="Section" size="10">';
    while($Line = mysql_fetch_array($ID)) {
        echo '<option value="',$Line['ID'],'">',$Line['Name'],' (',$Line['ID'],')</option>';
   //   echo $Line['Description'];
    } // konec while
    echo '</select>';
    
?>    
    </td></tr>
    <tr><td><input type="submit" value="Smazat"></td></tr>
  </table>
  </form>

<?php
  }

  if ($Mode == 'DelSection') {  //pøidání sekce
    TestLicence('4');

    $Section = mysql_escape_string($_POST['Section']);
    echo('Smazání Sekce: '.$Section.'<br>');
    
    $sql = "DELETE FROM section WHERE ID = '$Section'";
      $db->SQLCommand($sql);
      echo 'Sekce byla Smazána';
      WriteLog('Sekce byla smazána: ID: '.$Section,'2');
  }
  
  ShowFooter()
?>