kontakt
/
engelsystem
3
0
Fork 0
Code Issues 12 Pull Requests Projects Releases Wiki Activity

weiter mit den Naesten files

Browse Source 
git-svn-id: svn://svn.cccv.de/engel-system@15 29ba0400-6e00-0410-a75a-ca02368028f8
main
cookie 19 years ago
parent 1b5b81d601
commit fc58547393
2 changed files with 48 additions and 43 deletions
Show Stats Download Patch File Download Diff File

58
admin/EngelType.php
Unescape Escape View File

@ -7,16 +7,17 @@ include ("./inc/funktion_user.php");
function runSQL( $SQL)
{
include( "./inc/db.php");
echo $SQL;
// hier muesste das SQL ausgefuehrt werden...
$Erg = mysql_query($SQL, $con);
if ($Erg == 1) {
echo "&Auml;nderung wurde gesichert...<br>";
return 1;
echo "&Auml;nderung wurde gesichert...<br>";
echo "[$SQL]<br>";
return 1;
} else {
echo "Fehler beim speichern... bitte noch ein mal probieren :)";
echo "<br><br>".mysql_error( $con ). "<br>";
return 0;
echo "Fehler beim speichern... bitte noch ein mal probieren :)";
echo "<br><br>".mysql_error( $con ). "<br>";
echo "[$SQL]<br>";
return 0;
}
}
@ -24,7 +25,7 @@ function runSQL( $SQL)
$Sql = "SELECT * FROM `EngelType`";
$Erg = mysql_query($Sql, $con);
if( !IsSet($action) )
if( !IsSet($_GET["action"]) )
{
echo "Hallo ".$_SESSION['Nick'].
",<br>\nhier hast du die M&ouml;glichkeit, neue Engeltypen f&uuml;r die Schichtpl&auml;ne einzutragen ".
@ -57,11 +58,11 @@ if( !IsSet($action) )
else
{
switch ($action) {
switch ($_GET["action"]) {
case 'new':
echo "Neuen EngelType einrichten: <br>";
echo "<form action=\"./EngelType.php\" method=\"POST\">\n";
echo "<form action=\"./EngelType.php\" method=\"GET\">\n";
echo "<table>\n";
for( $Uj = 1; $Uj < mysql_num_fields($Erg); $Uj++ )
@ -76,9 +77,11 @@ case 'new':
break;
case 'newsave':
$vars = $HTTP_POST_VARS;
$vars = $HTTP_GET_VARS;
$count = count($vars) - 1;
$vars = array_splice($vars, 0, $count);
$Keys="";
$Values="";
foreach($vars as $key => $value){
$Keys .= ", `$key`";
$Values .= ", '$value'";
@ -88,7 +91,7 @@ case 'newsave':
{
SetHeaderGo2Back();
$SQL2 = "SELECT * FROM `EngelType` WHERE `Name`='". $_POST["Name"]. "'";
$SQL2 = "SELECT * FROM `EngelType` WHERE `Name`='". $_GET["Name"]. "'";
$ERG = mysql_query($SQL2, $con);
if( mysql_num_rows($ERG) == 1)
@ -99,7 +102,7 @@ case 'newsave':
break;
case 'change':
if (! IsSet($TID)) {
if (! IsSet($_GET["TID"])) {
echo "Fehlerhafter Aufruf!";
} else {
@ -107,25 +110,25 @@ case 'change':
echo "Hier kannst du eintragen, den EngelType &auml;ndern.";
echo "<form action=\"./EngelType.php\" method=\"POST\">\n";
echo "<form action=\"./EngelType.php\" method=\"GET\">\n";
echo "<table>\n";
$SQL2 = "SELECT * FROM `EngelType` WHERE `TID`='$TID'";
$SQL2 = "SELECT * FROM `EngelType` WHERE `TID`='". $_GET["TID"]. "'";
$ERG = mysql_query($SQL2, $con);
for ($Uj = 1; $Uj < mysql_num_fields($ERG); $Uj++)
{
echo "<tr><td>".mysql_field_name($ERG, $Uj)."</td>".
"<td><input type=\"text\" size=\"40\" name=\"e".mysql_field_name($ERG, $Uj)."\" ".
"value=\"".mysql_result($ERG, 0, $Uj)."\"></td></tr>\n";
echo "<tr><td>". mysql_field_name($ERG, $Uj). "</td>".
"<td><input type=\"text\" size=\"40\" name=\"e". mysql_field_name($ERG, $Uj). "\" ".
"value=\"". mysql_result($ERG, 0, $Uj). "\"></td></tr>\n";
}
echo "</table>\n";
echo "<input type=\"hidden\" name=\"eTID\" value=\"$TID\">\n";
echo "<input type=\"hidden\" name=\"eTID\" value=\"". $_GET["TID"]. "\">\n";
echo "<input type=\"hidden\" name=\"action\" value=\"changesave\">\n";
echo "<input type=\"submit\" value=\"sichern...\">\n";
echo "</form>";
echo "<form action=\"./EngelType.php\" method=\"POST\">\n";
echo "<input type=\"hidden\" name=\"TID\" value=\"$TID\">\n";
echo "<form action=\"./EngelType.php\" method=\"GET\">\n";
echo "<input type=\"hidden\" name=\"TID\" value=\"". $_GET["TID"]. "\">\n";
echo "<input type=\"hidden\" name=\"action\" value=\"delete\">\n";
echo "<input type=\"submit\" value=\"L&ouml;schen...\">";
echo "</form>";
@ -133,32 +136,31 @@ case 'change':
break;
case 'changesave':
$vars = $HTTP_POST_VARS;
$vars = $HTTP_GET_VARS;
$count = count($vars) - 2;
$vars = array_splice($vars, 0, $count);
$keys="";
$sql="";
foreach($vars as $key => $value){
$keys = substr($key,1);
$sql .= ", `".$keys."`='".$value."'";
}
runSQL( "UPDATE `EngelType` SET ". substr($sql, 2). " WHERE `TID`='".$eTID."'");
runSQL( "UPDATE `EngelType` SET ". substr($sql, 2). " WHERE `TID`='". $_GET["eTID"]. "'");
SetHeaderGo2Back();
break;
case 'delete':
if (IsSet($TID))
if (IsSet($_GET["TID"]))
{
runSQL( "DELETE FROM `EngelType` WHERE `TID`='$TID'");
runSQL( "ALTER TABLE `Room` DROP `DEFAULT_EID_$TID`;");
runSQL( "DELETE FROM `EngelType` WHERE `TID`='". $_GET["TID"]. "'");
runSQL( "ALTER TABLE `Room` DROP `DEFAULT_EID_". $_GET["TID"]. "`;");
} else {
echo "Fehlerhafter Aufruf";
}
SetHeaderGo2Back();
break;
}
}
include ("./inc/footer.php");
?>

33
admin/room.php
Unescape Escape View File

@ -8,7 +8,7 @@ include ("./inc/funktion_schichtplan.php");
$Sql = "SELECT * FROM `Room` ORDER BY Number, Name";
$Erg = mysql_query($Sql, $con);
if( !IsSet($action) )
if( !IsSet($_GET["action"]) )
{
echo "Hallo ".$_SESSION['Nick'].
",<br>\nhier hast du die M&ouml;glichkeit, neue R&auml;ume f&uuml;r die Schichtpl&auml;ne einzutragen ".
@ -46,11 +46,11 @@ else
UnSet($SQL);
switch ($action) {
switch ($_GET["action"]) {
case 'new':
echo "Neuen Raum einrichten: <br>";
echo "<form action=\"./room.php\" method=\"POST\">\n";
echo "<form action=\"./room.php\" method=\"GET\">\n";
echo "<table>\n";
for( $Uj = 1; $Uj < mysql_num_fields($Erg); $Uj++ )
@ -72,10 +72,13 @@ case 'new':
break;
case 'newsave':
$vars = $HTTP_POST_VARS;
$vars = $HTTP_GET_VARS;
$count = count($vars) - 1;
$vars = array_splice($vars, 0, $count);
foreach($vars as $key => $value){
$Keys = "";
$Values = "";
foreach($vars as $key => $value)
{
$Keys .= ", `$key`";
$Values .= ", '$value'";
}
@ -95,7 +98,7 @@ case 'newsave':
break;
case 'change':
if (! IsSet($RID)) {
if (! IsSet($_GET["RID"])) {
echo "Fehlerhafter Aufruf!";
} else {
@ -103,10 +106,10 @@ case 'change':
echo "Hier kannst du eintragen, welche und wieviele Engel f&uuml;r den Raum zur Verfügung stehen m&uuml;ssen.";
echo "<form action=\"./room.php\" method=\"POST\">\n";
echo "<form action=\"./room.php\" method=\"GET\">\n";
echo "<table>\n";
$SQL2 = "SELECT * FROM `Room` WHERE `RID`='$RID'";
$SQL2 = "SELECT * FROM `Room` WHERE `RID`='". $_GET["RID"]. "'";
$ERG = mysql_query($SQL2, $con);
for ($Uj = 1; $Uj < mysql_num_fields($ERG); $Uj++)
@ -123,12 +126,12 @@ case 'change':
echo"</td></tr>\n";
}
echo "</table>\n";
echo "<input type=\"hidden\" name=\"eRID\" value=\"$RID\">\n";
echo "<input type=\"hidden\" name=\"eRID\" value=\"". $_GET["RID"]. "\">\n";
echo "<input type=\"hidden\" name=\"action\" value=\"changesave\">\n";
echo "<input type=\"submit\" value=\"sichern...\">\n";
echo "</form>";
echo "<form action=\"./room.php\" method=\"POST\">\n";
echo "<input type=\"hidden\" name=\"RID\" value=\"$RID\">\n";
echo "<form action=\"./room.php\" method=\"GET\">\n";
echo "<input type=\"hidden\" name=\"RID\" value=\"". $_GET["RID"]. "\">\n";
echo "<input type=\"hidden\" name=\"action\" value=\"delete\">\n";
echo "<input type=\"submit\" value=\"L&ouml;schen...\">";
echo "</form>";
@ -137,7 +140,7 @@ case 'change':
case 'changesave':
$sql="";
$vars = $HTTP_POST_VARS;
$vars = $HTTP_GET_VARS;
$count = count($vars) - 2;
$vars = array_splice($vars, 0, $count);
foreach($vars as $key => $value){
@ -145,13 +148,13 @@ case 'changesave':
$sql .= ", `".$keys."`='".$value."' ";
}
$SQL = "UPDATE `Room` SET ". substr($sql, 2). " WHERE `RID`='".$eRID."'";
$SQL = "UPDATE `Room` SET ". substr($sql, 2). " WHERE `RID`='". $_GET["eRID"]. "'";
SetHeaderGo2Back();
break;
case 'delete':
if (IsSet($RID)) {
$SQL="DELETE FROM `Room` WHERE `RID`='$RID'";
if (IsSet($_GET["RID"])) {
$SQL="DELETE FROM `Room` WHERE `RID`='". $_GET["RID"]. "'";
} else {
echo "Fehlerhafter Aufruf";
}

Write Preview
Loading…
Cancel
Save