require_once("../../common.inc.php");
// page variable name
$page_field = "news";
//
include("config.php");
//check login session
if (empty($_SESSION["smartinfo_sysid"])) {
header("Location: ../error.php");
exit;
}
getpost();
if ($id == "")
{
//check
if ($temp_id == "") {
header("Location: ".$page_address_list);
exit;
}
//insert
$sql = "INSERT INTO `".$page_tbname."` ( `id` )
VALUES (
NULL
);";
$db->query($sql);
$id = $db->insert_id();
//echo $sql."
";
$sql = "UPDATE `attachment` SET
`table_id` = '".$id."', `temp_id` = ''
WHERE `table_name` = '".$page_tbname."' AND `temp_id` = '".$temp_id."'";
$db->query($sql);
}
//update
$sql ="UPDATE `".$page_tbname."` SET
`e_title` = '".escapeit($e_title)."',
`e_content` = '".escapeit($e_content)."',
`sc_title` = '".escapeit($sc_title)."',
`sc_content` = '".escapeit($sc_content)."',
`zh_title` = '".escapeit($zh_title)."',
`zh_content` = '".escapeit($zh_content)."',
`date` = '".escapeit($date)."',
`status` = '".escapeit($display)."',
`maintop` = '".escapeit($maintop)."',
`cate_id` = '".escapeit($cate_id)."'
WHERE `id` = '".$id."'";
//echo $sql."
";
$db->query($sql);
//delete file
if (!empty($delfiles)) {
foreach ($delfiles as $key => $value) {
del_attachment($value, "../../");
}
}
header("Location: ".$page_address_list."?keepSession=1&page=$page");
exit;
?>