//require_once("administrator/includes/injection.php");
require_once "includes/trackXML.php";
$prod = new Product();
//$cate = new Category();
$dsk = new DiskType();
$trck = new TrackXML();
$disktype = array();
//$categories = array();
$product = array();
$tracklist = array();
//$categories = $cate->getCategories();
$disktype = $dsk->getAll();
if (isset($_GET['pid']) && is_numeric($_GET['pid'])) {
$id = sqlInjection($_GET['pid']);
$product = $prod->getProductById($id);
$tracklist = $trck->xml2Array($product['tracklist']);
} else {
echo "<meta http-equiv='refresh' content='0;url=index.php'>";
}
?>
<div class="width">
<div class="box">
<div id="vmMainPage">
<div class="clear indent">
<?php
if (count($product) > 0) {
?>
<table>
<tr>
<td valign="top">
