stdhead(T_("FAQ_MANAGEMENT")); begin_frame(); print "<h1 align=\"center\">Add Section</h1>"; print "<form method=\"post\" action=\"faq-actions.php?action=addnewsect\">"; print "<table border=\"0\" class=\"table_table\" cellspacing=\"0\" cellpadding=\"10\" align=\"center\">\n"; print "<tr><td class='table_col1'>Title:</td><td class='table_col1'><input style=\"width: 300px;\" type=\"text\" name=\"title\" value=\"\" /></td></tr>\n"; print "<tr><td class='table_col2'>Status:</td><td class='table_col2'><select name=\"flag\" style=\"width: 110px;\"><option value=\"0\" style=\"color: #ff0000;\">Hidden</option><option value=\"1\" style=\"color: #000000;\" selected=\"selected\">Normal</option></select></td></tr>"; print "<tr><td colspan=\"2\" align=\"center\"><input type=\"submit\" name=\"edit\" value=\"Add\" style=\"width: 60px;\" /></td></tr>\n"; print "</table></form>"; end_frame(); stdfoot(); } elseif ($_GET[action] == "addnewitem" && $_POST[question] != NULL && $_POST[answer] != NULL && is_valid_int($_POST[flag]) && is_valid_int($_POST[categ])) { $question = sqlesc($_POST[question]); $answer = sqlesc($_POST[answer]); $res = SQL_Query_exec("SELECT MAX(`order`) FROM `faq` WHERE `type`='item' AND `categ`='{$_POST['categ']}'"); while ($arr = mysql_fetch_array($res, MYSQL_BOTH)) { $order = $arr[0] + 1; } SQL_Query_exec("INSERT INTO `faq` (`type`, `question`, `answer`, `flag`, `categ`, `order`) VALUES ('item', {$question}, {$answer}, '{$_POST['flag']}', '{$_POST['categ']}', '{$order}')"); header("Refresh: 0; url=faq-manage.php"); } elseif ($_GET[action] == "addnewsect" && $_POST[title] != NULL && is_valid_int($_POST[flag])) { $title = sqlesc($_POST[title]); $res = SQL_Query_exec("SELECT MAX(`order`) FROM `faq` WHERE `type`='categ'"); while ($arr = mysql_fetch_array($res, MYSQL_BOTH)) { $order = $arr[0] + 1; } SQL_Query_exec("INSERT INTO `faq` (`type`, `question`, `answer`, `flag`, `categ`, `order`) VALUES ('categ', {$title}, '', '{$_POST['flag']}', '0', '{$order}')"); header("Refresh: 0; url=faq-manage.php"); } else { header("Refresh: 0; url=faq-manage.php"); }
/** * Check for valid decimal/float, requiring only 1 . and integers on either side of it * * @param float $value * @param bool|false $unsigned * @return bool */ function is_valid_decimal($value = 0.0, $unsigned = false) { if (!is_numeric($value)) { return false; } $parts = explode('.', $value); if (count($parts) > 2) { return false; } return is_valid_int($parts[0], $unsigned) && is_valid_int($parts[1], true); }