<?php
session_start();
include ("check.php");
?>
<html>
<head>
<title>BadBlue</title>
<link rel="stylesheet" type="text/css" href="../style.css">
</head>
<body>
<b>Adicionar Categoria</b>
<br><form name="adcat" action="add_cat.php" method="post">
Nome: <input type="text" name="name" size="30" maxlength="50">
<br><br>
Descrição: <input type="text" name="descricao" size="30" maxlength="150">
<br><br>
<input type="submit" value="Adicionar Categoria">
</form>
</body>
</html>
<?php
session_start();
include ("check.php");
include ("../db.php");
$name = $_POST['name'];
$name = stripslashes($name);
$des = $_POST['description'];
$des = stripslashes($des);
if (!$name) {
echo "<html><head><script>alert('You did not enter a category name!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if (!$des) {
echo "<html><head><script>alert('You did not enter a category description!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
$sql_cat_check = mysql_query("SELECT name FROM categories WHERE name='$name'") or die (mysql_error());
$cat_check = mysql_num_rows($sql_cat_check);
if ($cat_check == 1) {
echo "<html><head><script>alert('Category name is already in use!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
else {
$sql = mysql_query("INSERT INTO categories (name, description) VALUES('$name', '$des')");
echo "<script>alert('Category $name added!')</script>";
include ("addcat.php");
}
mysql_close();
?>
<?php
session_start();
include ("check.php");
function catch($pvar) {
$x = stripslashes($_POST[$pvar]);
$x = str_replace("'",''',$x);
$x = str_replace("\"",'"',$x);
return $x;
}
$name = catch(name);
$cat = catch(category);
$author = catch(author);
$version = catch(version);
$short = catch(short_description);
$long = catch(long_description);
$screen = catch(screenshot);
$file = catch(download);
if (!$name) {
echo "<html><head><script>alert('You did not enter a name!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if (!$cat) {
echo "<html><head><script>alert('You did not select a category!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if (!$author) {
echo "<html><head><script>alert('You did not enter an author!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if (!$short) {
echo "<html><head><script>alert('You did not enter a short description!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if (!$long) {
echo "<html><head><script>alert('You did not enter a long description!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if (!$file) {
echo "<html><head><script>alert('You did not enter a file download URL!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if ($file == "http://") {
echo "<html><head><script>alert('You did not enter a file download URL!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
if (!$version) { $version = "Not Available"; }
if (!$screen) { $screen = "na"; }
if ($screen == "http://") { $screen = "na"; }
$date = date("d/m/y");
include ("../db.php");
$sql_name_check = mysql_query("SELECT name FROM downloads WHERE name='$name'") or die (mysql_error());
$name_check = mysql_num_rows($sql_name_check);
if ($name_check == 1) {
echo "<html><head><script>alert('File name is already in use!')</script></head><body onload=javascript:history.go(-1)> </body></html>";
exit();
}
else {
mysql_query("INSERT INTO downloads (cat, name, author, version, short_description, long_description, url_screenshot, url_download, date) VALUES('$cat', '$name', '$author', '$version', '$short', '$long', '$screen', '$file', '$date')") or die (mysql_error());
echo "<script>alert('File $name added!')</script>";
include ("addfile.php");
}
?>