//require_once("administrator/includes/injection.php"); require_once "includes/trackXML.php"; $prod = new Product(); //$cate = new Category(); $dsk = new DiskType(); $trck = new TrackXML(); $disktype = array(); //$categories = array(); $product = array(); $tracklist = array(); //$categories = $cate->getCategories(); $disktype = $dsk->getAll(); if (isset($_GET['pid']) && is_numeric($_GET['pid'])) { $id = sqlInjection($_GET['pid']); $product = $prod->getProductById($id); $tracklist = $trck->xml2Array($product['tracklist']); } else { echo "<meta http-equiv='refresh' content='0;url=index.php'>"; } ?> <div class="width"> <div class="box"> <div id="vmMainPage"> <div class="clear indent"> <?php if (count($product) > 0) { ?> <table> <tr> <td valign="top">