require_once("../../common.inc.php");
// page variable name
$page_field = "activities";
//
include("config.php");
//check login session
if (empty($_SESSION["smartinfo_sysid"])) {
header("Location: ../error.php");
exit;
}
getpost();
if ($id == "")
{
//check
if ($temp_id == "") {
header("Location: ".$page_address_list);
exit;
}
//insert
$sql = "INSERT INTO `".$page_tbname."` ( `id` )
VALUES (
NULL
);";
$db->query($sql);
$id = $db->insert_id();
//echo $sql."
";
$sql = "UPDATE `attachment` SET
`table_id` = '".$id."', `temp_id` = ''
WHERE `table_name` = '".$page_tbname."' AND `temp_id` = '".$temp_id."'";
$db->query($sql);
}
//update
$sql ="UPDATE `".$page_tbname."` SET
`e_title` = '".escapeit($e_title)."',
`e_act_date` = '".escapeit($e_act_date)."',
`e_act_time` = '".escapeit($e_act_time)."',
`e_act_loc` = '".escapeit($e_act_loc)."',
`e_act_fee` = '".escapeit($e_act_fee)."',
`e_act_intro` = '".escapeit($e_act_intro)."',
`e_act_content` = '".escapeit($e_act_content)."',
`e_act_spec` = '".escapeit($e_act_spec)."',
`e_act_speak` = '".escapeit($e_act_speak)."',
`e_act_intro` = '".escapeit($e_act_intro)."',
`e_act_schedule` = '".escapeit($e_act_schedule)."',
`e_act_ware` = '".escapeit($e_act_ware)."',
`sc_title` = '".escapeit($sc_title)."',
`sc_act_date` = '".escapeit($sc_act_date)."',
`sc_act_time` = '".escapeit($sc_act_time)."',
`sc_act_loc` = '".escapeit($sc_act_loc)."',
`sc_act_fee` = '".escapeit($sc_act_fee)."',
`sc_act_intro` = '".escapeit($sc_act_intro)."',
`sc_act_content` = '".escapeit($sc_act_content)."',
`sc_act_spec` = '".escapeit($sc_act_spec)."',
`sc_act_speak` = '".escapeit($sc_act_speak)."',
`sc_act_intro` = '".escapeit($sc_act_intro)."',
`sc_act_schedule` = '".escapeit($sc_act_schedule)."',
`sc_act_ware` = '".escapeit($sc_act_ware)."',
`zh_title` = '".escapeit($zh_title)."',
`zh_act_date` = '".escapeit($zh_act_date)."',
`zh_act_time` = '".escapeit($zh_act_time)."',
`zh_act_loc` = '".escapeit($zh_act_loc)."',
`zh_act_fee` = '".escapeit($zh_act_fee)."',
`zh_act_intro` = '".escapeit($zh_act_intro)."',
`zh_act_content` = '".escapeit($zh_act_content)."',
`zh_act_spec` = '".escapeit($zh_act_spec)."',
`zh_act_speak` = '".escapeit($zh_act_speak)."',
`zh_act_intro` = '".escapeit($zh_act_intro)."',
`zh_act_schedule` = '".escapeit($zh_act_schedule)."',
`zh_act_ware` = '".escapeit($zh_act_ware)."',
`date` = '".escapeit($date)."',
`status` = '".escapeit($display)."',
`maintop` = '".escapeit($maintop)."',
`cate_id` = '".escapeit($cate_id)."'
WHERE `id` = '".$id."'";
//echo $sql."
";
$db->query($sql);
//delete file
if (!empty($delfiles)) {
foreach ($delfiles as $key => $value) {
del_attachment($value, "../../");
}
}
header("Location: ".$page_address_list."?keepSession=1&page=$page");
exit;
?>