Просмотр файла orazdel.php

<?php
include 'inc/db.php';
include 'inc/1.php';
if (!$_GET['id'])header("Location: /obmen.php");
$id=intval($_GET['id']);
$a=mysql_fetch_assoc(mysql_query("SELECT `razdel` FROM `obmen_t` WHERE `id` = '$id' ORDER BY `id` DESC"));
if ($a['razdel']!=0)header("Location: /obmen.php");
$a=mysql_query("SELECT * FROM `obmen_t` WHERE `razdel` = '$id'");
if ($_GET['edit'] && ($user['admin']==1)){
if (!$_POST['eok']){
$n=mysql_query("SELECT * FROM `obmen_t` WHERE `id` = '$id'");
$e=mysql_fetch_assoc($n);
echo "<form action='?edit=1&id=$id' method='POST'>Имя:<br><input type='text' name='ename' value='".htmlspecialchars($e['name'])."'><br>Описание:<br><textarea name='emsg'>".htmlspecialchars($e['opis'])."</textarea><br><input type='submit' name='eok' value='Изменить'></form>";
include_once 'inc/foot.php';
exit;
}
elseif ($_POST['eok'] && $_POST['ename'])
{
$name=mysql_escape_string($_POST['ename']);
$msg=mysql_escape_string($_POST['emsg']);
mysql_query("UPDATE `obmen_t` SET `name` = '$name', `opis` = '$msg' WHERE `id` = '$id'");
echo "<div class='msg'>Изменено</div>";
}
}
if (mysql_num_rows($a)==0)echo("Раздел пустой<br>");
$b=1;
while ($f=mysql_fetch_assoc($a)){
$o=($b%2);
$count=mysql_num_rows(mysql_query("SELECT * FROM `obmen` WHERE `razdel` = '$f[id]'"));
echo "<div class='p$o'><img src='icon/podforum.gif'> <a href='orf.php?id=$f[id]'>".htmlspecialchars($f['name'])."</a> ($count)<br>".htmlspecialchars($f['opis'])."</div>";
$b++;
$count=0;
}
if ($user['admin']==1)msg("<a href='onewr.php?id=$id'>Новый подраздел</a> | <a href='?edit=1&id=$id'>Изменить текущий</a>");
include_once 'inc/foot.php';
?>