Пример #1
0
function addStyle()
{
    $stylesheet = $_REQUEST['styleURL'];
    $user = $_SESSION['valid_user'];
    $name = $_REQUEST['styleName'];
    $query = "INSERT INTO stylesheets(name,creator,url) VALUES ('" . $name . "','" . $user . "','" . $stylesheet . "');";
    //$query = "UPDATE user SET stylesheet='". $stylesheet . "' WHERE username='******'";
    echo $query;
    return insertRow($query);
}
Пример #2
0
function daoUpdateArticle($articleArray)
{
    $articleArray['body'] = makeSafeForDAO($articleArray['body']);
    $articleArray['title'] = makeSafeForDAO($articleArray['title']);
    if ($articleArray['is_draft'] != "NULL") {
        $isdraft = 1;
    } else {
        $isdraft = "NULL";
    }
    $query = "UPDATE articles SET " . "title='" . $articleArray['title'] . "'," . "body='" . $articleArray['body'] . "'," . "category=" . $articleArray['category'] . "," . "date_posted='" . $articleArray['date_posted'] . "'," . "time_posted='" . $articleArray['time_posted'] . "'," . "language=" . $articleArray['language'] . "," . "is_draft=" . $articleArray['is_draft'] . " WHERE articleid = " . $articleArray['articleid'] . ";";
    debug($query);
    $result = insertRow($query);
    if ($result) {
        return 1;
    } else {
        return false;
    }
}
Пример #3
0
function updateTable($inTableNode)
{
    $myAttrList = $inTableNode->attributes();
    $myTableName = $myAttrList["name"];
    $myCmd = $myAttrList["command"];
    echo "\n {$myCmd} table {$myTableName}";
    $myRows = $inTableNode->xpath('Rows/Row');
    $myRowCount = count($myRows);
    if ($myRowCount > 0) {
        foreach ($myRows as $myRow) {
            if ($myCmd == "Delete") {
                deleteRow($myTableName, $inTableNode, $myRow);
            } else {
                if (isRowFound($myTableName, $inTableNode, $myRow)) {
                    updateRow($myTableName, $inTableNode, $myRow);
                } else {
                    insertRow($myTableName, $inTableNode, $myRow);
                }
            }
        }
    }
    echo "\n------------------------------\n";
}
function migrateThreads($phorumTable, $forum_id)
{
    global $phorum_db, $e107_threadTable, $e107_db, $memberIdTable;
    // select parentless messages (= start of a thread)
    $sql2 = "SELECT * ";
    $sql2 .= "FROM `" . $phorumTable . "`";
    $sql2 .= "WHERE `parent` = 0";
    mysql_select_db($phorum_db);
    $thread_list = mysql_query($sql2);
    // convert each message from Phorum to e107
    while ($thread = mysql_fetch_array($thread_list)) {
        // get the body of the message (stored in a different table in phorum)
        $sql3 = "SELECT * ";
        $sql3 .= "FROM `" . $phorumTable . "_bodies` ";
        $sql3 .= "WHERE `id` = " . $thread['id'];
        mysql_select_db($phorum_db);
        $bodies = mysql_query($sql3);
        $msg_body = mysql_fetch_array($bodies);
        // set the thread ownership
        // TODO: create a function for messages migration ?
        // TODO: recursive call ?
        //if($thread['parent'] = 0) {
        //  $msg_parent = 0;
        //} else {
        //  $msg_parent = $thread['thread'];
        //}
        // set the thread moderation status
        if ($thread['approved'] != 'Y') {
            $msg_active = 0;
        } else {
            $msg_active = 1;
        }
        // set the ownership string
        if ($thread['userid'] == 0) {
            // get the ip of the anonymous poster not the host name
            if (isIp($thread['host'])) {
                $ip = $thread['host'];
            } else {
                // try to convert the hostname to ip
                $ip = gethostbyname($thread['host']);
                if (!isIp($ip)) {
                    unset($ip);
                }
            }
            if (isset($ip)) {
                $ip = chr(1) . $ip;
            }
            $msg_owner = "0." . addslashes($thread['author']) . $ip;
        } else {
            $msg_owner = $memberIdTable[$thread['userid']];
        }
        // array to describe how to migrate every data of the thread
        $msg_tab = array('thread_name' => addslashes($thread['subject']), 'thread_thread' => str_replace("[%sig%]", "", addslashes($msg_body['body'])), 'thread_forum_id' => $forum_id, 'thread_parent' => 0, 'thread_datestamp' => unix_date($thread['datestamp']), 'thread_active' => $msg_active, 'thread_user' => $msg_owner);
        // add the message in the e107 forum
        $e107Thread_id = insertRow($msg_tab, $e107_threadTable, $e107_db);
        $log .= "          New thread \"" . stripslashes($thread['subject']) . "\" added with its first message n°" . $thread['id'] . "<br>";
        // TODO: this part of function is the same as above, so we can factorise this part
        // get all messages sons of the current thread
        $log .= "            Get all messages of the thread...<br>";
        $sql3 = "SELECT * ";
        $sql3 .= "FROM `" . $phorumTable . "`";
        $sql3 .= "WHERE `thread` = " . $thread['id'] . " AND `parent` <> 0";
        mysql_select_db($phorum_db);
        $son_list = mysql_query($sql3);
        // convert each message from Phorum to e107
        while ($son = mysql_fetch_array($son_list)) {
            // get the body of the message (stored in a different table in phorum)
            $sql4 = "SELECT * ";
            $sql4 .= "FROM `" . $phorumTable . "_bodies` ";
            $sql4 .= "WHERE `id` = " . $son['id'];
            mysql_select_db($phorum_db);
            $bodies = mysql_query($sql4);
            $son_body = mysql_fetch_array($bodies);
            // set the thread moderation status
            if ($son['approved'] != 'Y') {
                $son_active = 0;
            } else {
                $son_active = 1;
            }
            // set the ownership string
            if ($son['userid'] == 0) {
                // get the ip of the anonymous poster not the host name
                if (isIp($son['host'])) {
                    $ip = $son['host'];
                } else {
                    // try to convert the hostname to ip
                    $ip = gethostbyname($son['host']);
                    if (!isIp($ip)) {
                        unset($ip);
                    }
                }
                if (isset($ip)) {
                    $ip = chr(1) . $ip;
                }
                $msg_owner = "0." . addslashes($son['author']) . $ip;
            } else {
                $msg_owner = $memberIdTable[$son['userid']];
            }
            // array to describe how to migrate every data
            $son_tab = array('thread_name' => addslashes($son['subject']), 'thread_thread' => str_replace("[%sig%]", "", addslashes($son_body['body'])), 'thread_forum_id' => $forum_id, 'thread_parent' => $e107Thread_id, 'thread_datestamp' => unix_date($son['datestamp']), 'thread_active' => $son_active, 'thread_user' => $msg_owner);
            // add the message in the thread
            insertRow($son_tab, $e107_threadTable, $e107_db);
            $log .= "            New son message \"" . stripslashes($son_tab['thread_name']) . "\" added to the thread.<br>";
        }
    }
    return $log;
}
Пример #5
0
function update($query)
{
    //FIXME: this method does not exist in any of the mysql-files, insertRow?
    // same goes for delete() above here. Maybe insertRow should be renamed to insert rather?
    return insertRow($query);
}
 $page_name = isset($_POST['page_name']) ? mysqli_real_escape_string($con, $_POST['page_name']) : '';
 $page_content = isset($_POST['page_content']) ? mysqli_real_escape_string($con, $_POST['page_content']) : '';
 $page_slug = isset($_POST['page_slug']) ? mysqli_real_escape_string($con, $_POST['page_slug']) : '';
 $page_site = isset($_POST['page_site']) ? mysqli_real_escape_string($con, $_POST['page_site']) : 0;
 $page_modified = date('Y-m-d H:i:s');
 $page_author = CUSER;
 $page_slug = prettyslug($page_slug);
 if ($page_name == '' or $page_slug == '') {
     err("Užpildykite visus reikalaujamus laukelius", 'red');
 } elseif (isset($_POST['newpage']) and countData('pages', "page_slug = '{$page_slug}' AND page_site = {$page_site}") > 0) {
     err("Tokia svetainės ir santrumpos kombinacija jau yra", 'red');
 } elseif (isset($_POST['savepage']) and countData('pages', "page_slug = '{$page_slug}' AND page_site = {$page_site} AND page_id != " . $_GET['page']) > 0) {
     err("Tokią svetainės ir santrumpos kombinaciją jau turi kitas puslapis", 'red');
 } else {
     if (isset($_POST['newpage'])) {
         $id = insertRow('pages', 'page_type, page_name, page_content, page_modified, page_author, page_slug, page_site', "0, '{$page_name}', '{$page_content}', '{$page_modified}', {$page_author}, '{$page_slug}', {$page_site}", false);
         if ($id) {
             redirect(0, '?p=' . page() . '&page=' . $id);
         } else {
             err('Puslapis nesukurtas', 'red');
         }
     } elseif (isset($_POST['savepage']) and isset($_GET['page'])) {
         updateFieldWhere('pages', 'page_name', $page_name, 'page_id = ' . $_GET['page']);
         updateFieldWhere('pages', 'page_content', $page_content, 'page_id = ' . $_GET['page']);
         updateFieldWhere('pages', 'page_modified', $page_modified, 'page_id = ' . $_GET['page']);
         updateFieldWhere('pages', 'page_author', $page_author, 'page_id = ' . $_GET['page']);
         updateFieldWhere('pages', 'page_slug', $page_slug, 'page_id = ' . $_GET['page']);
         updateFieldWhere('pages', 'page_site', $page_site, 'page_id = ' . $_GET['page']);
     } else {
     }
 }
 if ($user_person == '' or $user_cat == '' or $user_address == '' or $user_region == '' or $user_city == '' or $user_desc == '' or $user_phone == '' or $user_email == '' and $user_person == 1 or $user_fname == '' and $user_person == 0 or $user_lname == '' and $user_person == 0 or $user_orgname == '' and $user_person == 1 or $user_code1 == '' and $user_person == 1) {
     err("Užpildykite visus reikalaujamus laukelius", 'red');
 } elseif (strlen($user_phone) != 11) {
     err("Netinkamas telefono numerio formatas", 'red');
 } elseif (strlen($user_desc) < 5) {
     err("Aprašymas per trumpas", 'red');
 } elseif ($user_email != '' and countData('users', "user_email = '{$user_email}'") > 0) {
     err("El. paštas {$user_email} jau yra įvestas į registruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_email != '' and countData('users', "user_phone = '{$user_phone}'") > 0) {
     err("Telefonas {$user_phone} jau yra įvestas į registruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_email != '' and countData('needy', "user_email = '{$user_email}'") > 0) {
     err("El. paštas {$user_email} jau yra įvestas į neregistruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_email != '' and countData('needy', "user_phone = '{$user_phone}'") > 0) {
     err("Telefonas {$user_phone} jau yra įvestas į neregistruotų vartotojų duomenų bazę", 'red');
 } else {
     $id = insertRow('needy', 'user_person, user_fname, user_lname, user_orgname, user_code1, user_code2, user_reg, user_cat, user_address, user_region, user_city, user_phone, user_email, user_desc, user_registration_datetime', "'{$user_person}', '{$user_fname}', '{$user_lname}', '{$user_orgname}', '{$user_code1}', '{$user_code2}', '{$user_reg}', '{$user_cat}', '{$user_address}', '{$user_region}', '{$user_city}', '{$user_phone}', '{$user_email}', '{$user_desc}', '" . date('Y-m-d H:i:s') . "'");
     if ($id and isManager()) {
         updateFieldWhere('needy', 'user_parent', CUSER, 'user_id=' . $id);
         updateFieldWhere('needy', 'user_parent_ta', getManagerParent(CUSER), 'user_id=' . $id);
     } elseif ($id and (isAdmin() or isGridManager())) {
         $user_parent = isset($_POST['user_parent']) ? mysqli_real_escape_string($con, $_POST['user_parent']) : 0;
         updateFieldWhere('needy', 'user_parent', $user_parent, 'user_id=' . $id);
         updateFieldWhere('needy', 'user_parent_ta', getManagerParent($user_parent), 'user_id=' . $id);
     }
     if ($id) {
         if ($_FILES and isset($_FILES['user_thumb']) and $_FILES['user_thumb']["tmp_name"] != '') {
             $upfilename = date('YmdHis') . str_replace('.', '_', uniqid('_', true)) . '.' . pathinfo($_FILES["user_thumb"]["name"], PATHINFO_EXTENSION);
             $upDirNative = ROOT_PATH . 'uploads' . DIRECTORY_SEPARATOR . 'needy' . DIRECTORY_SEPARATOR . $id . DIRECTORY_SEPARATO . 'native' . DIRECTORY_SEPARATORR;
             $upDirThumb = ROOT_PATH . 'uploads' . DIRECTORY_SEPARATOR . 'needy' . DIRECTORY_SEPARATOR . $id . DIRECTORY_SEPARATOR . 'thumb' . DIRECTORY_SEPARATORR;
             $upDirNativeUrl = ROOT_URL . 'uploads/needy/' . $id . '/native/';
             $upDirThumbUrl = ROOT_URL . 'uploads/needy/' . $id . '/thumb/';
                    echo '<option value=' . $op[0] . '>' . $op[1] . '</option>';
                }
            }
            ?>
			</select>
			<input type="submit" value="Priskirti" />
		</form><br><br><?php 
        }
    } else {
        updateFieldWhere('cats', 'deleted', $act, 'cat_id = ' . getParam());
        redirect(0, $url = '?p=' . page() . (subpage() ? '&subp=' . subpage() : '') . (psl() ? '&page=' . psl() : ''));
    }
}
if (isset($_POST['addoption'])) {
    if (strlen($_POST['option1']) > 2) {
        insertRow('cats', 'cat_name, cat_type', "'" . $_POST['option1'] . "', " . $catType);
        redirect(0, $url = '?p=' . page() . (subpage() ? '&subp=' . subpage() : '') . (psl() ? '&page=' . psl() : ''));
    } else {
        err('Įveskite kategorijos vardą', 'red');
    }
}
?>
<form action="" method="post">
Įtraukti naują kategoriją: kategorijos vardas <input type="text" name="option1" value="" />
<input type="submit" name="addoption" value="Įtraukti" />
</form>
<?php 
$tablefields = array('cat_id', array('editable' => array('cat_name', 'cat_id', 'fc-verylong', '')), array('action' => array('cat_id', 'salinti', '<i title="Šalinti" class="fa fa-times"></i>', false)), 'null');
$tablehead = array('titles' => array('ID', 'Kategorijos vardas', '', ''), 'columns' => array('right fc-75', 'left', 'left fc-16', ''));
$sortby = false;
$where = 'SELECT * FROM cats WHERE cat_type = ' . $catType . ' ORDER BY cat_id DESC';
Пример #9
0
        //      var_dump("vorher: ".$row['id']." ".utf8_encode($row['name'])." ".utf8_encode($row['address']));
        foreach ($address as $key => $value) {
            if ($key == $anzelem) {
                break;
            }
            $name .= $name == '' ? $value : "," . $value;
        }
        $ort = array_pop($address);
        // letztes Element
        $ort = utf8_encode(addslashes($ort));
        $nam = utf8_encode(addslashes($name));
        //      var_dump("nachher: ".$row['id']." ".$nam." ".$adr." ".$ort);
    } else {
        $nam = utf8_encode(addslashes($row['name']));
        $adr = utf8_encode(addslashes($address[0]));
        $ort = utf8_encode(addslashes($address[1]));
    }
    $mid = $anzahl;
    $lat = $row['lat'];
    $lng = $row['lng'];
    $typ = $row['type'];
    // Row in die DB einfuegen
    insertRow();
    // Protokollausgabe
    echo '<td>' . $mid . '</td><td>' . $nam . '</td><td>' . $adr . '</td><td>' . $ort . '</td>';
    echo '<td>' . $lat . '</td><td>' . $lng . '</td><td>' . $typ . '</td>';
    echo '</tr>';
}
echo '</table>';
echo "Anzahl Rows: " . $anzahl;
mysql_close($connection);
 } elseif (strlen($user_phone) != 11) {
     err("Netinkamas telefono numerio formatas", 'red');
 } elseif ($user_name != '' and countData('users', "user_name = '{$user_name}'") > 0) {
     err("Vartotojas {$user_name} jau yra įvestas į registruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_email != '' and countData('users', "user_email = '{$user_email}'") > 0) {
     err("El. paštas {$user_email} jau yra įvestas į registruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_email != '' and countData('users', "user_phone = '{$user_phone}'") > 0) {
     err("Telefonas {$user_phone} jau yra įvestas į registruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_email != '' and countData('needy', "user_email = '{$user_email}'") > 0) {
     err("El. paštas {$user_email} jau yra įvestas į neregistruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_email != '' and countData('needy', "user_phone = '{$user_phone}'") > 0) {
     err("Telefonas {$user_phone} jau yra įvestas į neregistruotų vartotojų duomenų bazę", 'red');
 } elseif ($user_acctype == 1 and $user_desc == '') {
     err("Neįvestas aprašymas", 'red');
 } else {
     $id = insertRow('users', 'user_name, user_acctype, user_active, user_subscribed, user_password_hash, user_legalstatus, user_person, user_fname, user_lname, user_orgname, user_code1, user_code2, user_reg, user_address, user_region, user_city, user_phone, user_email, user_desc, user_registration_datetime', "'{$user_name}', {$user_acctype}, 1, 1, '{$user_password_hash}', {$user_legalstatus}, '{$user_person}', '{$user_fname}', '{$user_lname}', '{$user_orgname}', '{$user_code1}', '{$user_code2}', '{$user_reg}', '{$user_address}', '{$user_region}', '{$user_city}', '{$user_phone}', '{$user_email}', '{$user_desc}', '" . date('Y-m-d H:i:s') . "'");
     if ($id and isGridManager()) {
         updateFieldWhere('users', 'user_parent', CUSER, 'user_id=' . $id);
     }
     if ($id) {
         myMail($user_email, 'Jūsų vartotojo paskyra sukurta', 'Jūsų pagalbadaiktais.lt ir pagalbadarbais.lt vartotojo paskyra sukurta.<br><br>Paskyros vardas: ' . $user_name . '<br>Slaptažodis: ' . $_POST['user_password_hash']);
         // take care of uploads
         $Core = new Core();
         $result = $Core->uploadFile($id, null, ROOT_URL);
         if (!is_array($result)) {
             $errExpl = $Core->get('uploadFileWriteToFilesystemErrors');
             $uperr = $errExpl[$result];
             $thumb = 0;
         } else {
             $thumb = $result['fileThumb'];
         }
            ?>
			</select>
			<select name="need_subcat"></select>
			<input type="submit" value="Priskirti" />
		</form><br><br><?php 
        }
    } else {
        updateFieldWhere('cats', 'deleted', $act, 'cat_id = ' . getParam());
        redirect(0, $url = '?p=' . page() . (subpage() ? '&subp=' . subpage() : '') . (psl() ? '&page=' . psl() : ''));
    }
}
if (isset($_POST['addoption'])) {
    if (strlen($_POST['option1']) > 2) {
        $cat_level = (isset($_POST['option2']) and $_POST['option2'] > 0) ? 1 : 0;
        $cat_parent = isset($_POST['option2']) ? $_POST['option2'] : 0;
        insertRow('cats', 'cat_name, cat_type, cat_level, cat_parent', "'" . $_POST['option1'] . "', " . $catType . ", {$cat_level}, {$cat_parent}");
        redirect(0, $url = '?p=' . page() . (subpage() ? '&subp=' . subpage() : '') . (psl() ? '&page=' . psl() : ''));
    } else {
        err('Įveskite kategorijos vardą', 'red');
    }
}
?>
<form action="" method="post">
Įtraukti naują kategoriją: kategorijos vardas <input type="text" name="option1" value="" />
Tėvinė kategorija <select name="option2"><option value="0">— Neturi —</option><?php 
foreach (listData('cats', 'cat_type = ' . $catType . ' AND deleted = 0 AND cat_level = 0') as $op) {
    echo '<option value=' . $op[0] . '>' . $op[1] . '</option>';
}
?>
</select>
<input type="submit" name="addoption" value="Įtraukti" />
Пример #12
0
        <title><?php 
echo getenv('app_name');
?>
 - DB Maintenance</title>
        <link rel="icon" type="image/png" href="favicon-32x32.png" sizes="32x32" />
		<link rel="icon" type="image/png" href="favicon-16x16.png" sizes="16x16" />
    </head>
	<body bgcolor="666666">
	
<!-- Handle POST action / Display result or error -->
	<?php 
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
    echo "<table cellpadding=2 width='100%' bgcolor='FFFFFF'><tr><td>\n";
    echo "<font face='arial' color='red'>\n";
    if ($_POST["insert"] == 'Submit') {
        echo insertRow(addslashes($_POST["FortuneText"]));
    } elseif ($_POST["update"] == 'Submit') {
        echo updateRow($_POST["id"], addslashes($_POST["FortuneText"]));
    } elseif ($_POST["delete"] == 'Delete') {
        echo deleteRow($_POST["id"]);
    }
    echo "</font>\n</td></tr></table>";
}
?>
	
	<font face="arial" color="FFFFFF">
		<h1>Devops Fortune Cookie - Database Maintenance </h1>
	</font>
		
	<font face="arial" color="FFFFFF">
		<h2>Current Fortune List</h2> 
Пример #13
0
             if ($cover && copyArt($cover)) {
                 uploadArt(basename($cover));
             } else {
                 echo "No album art found in {$path}.\n";
             }
         } elseif (isset($row['art'])) {
             $cover = $row['art'];
         }
         //	Add db columns
         $parameters['art'] = basename($cover);
         $parameters['listeners'] = $listenerString;
         //	DB record exists, overwrite
         if ($row) {
             updateRow($parameters);
         } else {
             insertRow($parameters);
         }
         //	Save nowplaying info
         $row = $parameters;
     } else {
         if ($firstPass) {
             echo "Song unchanged from previous run. Updating playback only.\n";
         }
         updatePlayback($parameters['playback_time'], $parameters['paused'], $listenerString);
     }
 } else {
     //	Song was playing on last update
     if (isset($row['title']) && strlen($row['title']) || isset($row[0])) {
         deleteRow();
     }
     //	Reset nowplaying info
<script src="/ckeditor/ckeditor.js"></script>
<?php 
if (isset($_POST['newpage']) or isset($_POST['savepage'])) {
    $page_name = isset($_POST['page_name']) ? mysqli_real_escape_string($con, $_POST['page_name']) : '';
    $page_content = isset($_POST['page_content']) ? mysqli_real_escape_string($con, $_POST['page_content']) : '';
    $page_site = isset($_POST['page_site']) ? mysqli_real_escape_string($con, $_POST['page_site']) : 0;
    $page_modified = date('Y-m-d H:i:s');
    $page_published = isset($_POST['page_published']) ? mysqli_real_escape_string($con, $_POST['page_published']) : date('Y-m-d H:i:s');
    $page_author = CUSER;
    if ($page_name == '') {
        err("Užpildykite visus reikalaujamus laukelius", 'red');
    } elseif (strtotime($page_published) === false) {
        err("Netinkamas publikavimo laikas", 'red');
    } else {
        if (isset($_POST['newpage'])) {
            $id = insertRow('pages', 'page_type, page_name, page_content, page_modified, page_published, page_author, page_site', "1, '{$page_name}', '{$page_content}', '{$page_modified}', '{$page_published}', {$page_author}, {$page_site}", false);
            if ($id) {
                redirect(0, '?p=' . page() . '&page=' . $id);
            } else {
                err('Puslapis nesukurtas', 'red');
            }
        } elseif (isset($_POST['savepage']) and isset($_GET['page'])) {
            updateFieldWhere('pages', 'page_name', $page_name, 'page_id = ' . $_GET['page']);
            updateFieldWhere('pages', 'page_content', $page_content, 'page_id = ' . $_GET['page']);
            updateFieldWhere('pages', 'page_modified', $page_modified, 'page_id = ' . $_GET['page']);
            updateFieldWhere('pages', 'page_author', $page_author, 'page_id = ' . $_GET['page']);
            updateFieldWhere('pages', 'page_site', $page_site, 'page_id = ' . $_GET['page']);
            updateFieldWhere('pages', 'page_published', $page_published, 'page_id = ' . $_GET['page']);
        } else {
        }
    }
        $need_needy = isset($_POST['need_needy']) ? mysqli_real_escape_string($con, $_POST['need_needy']) : 0;
        $need_cat = isset($_POST['need_cat']) ? mysqli_real_escape_string($con, $_POST['need_cat']) : 0;
        $need_subcat = isset($_POST['need_subcat']) ? mysqli_real_escape_string($con, $_POST['need_subcat']) : 0;
        $need_name = isset($_POST['need_name']) ? mysqli_real_escape_string($con, $_POST['need_name']) : '';
        $need_desc = isset($_POST['need_desc']) ? mysqli_real_escape_string($con, $_POST['need_desc']) : '';
        $need_expires = isset($_POST['need_expires']) ? mysqli_real_escape_string($con, $_POST['need_expires']) : 0;
        $need_regdate = date('Y-m-d H:i:s');
        $need_author = CUSER;
        if ($need_needy == '' or $need_needy <= 0 or $need_cat == '' or $need_cat <= 0 or $need_cat_type == 4 and $need_subcat == '' or $need_cat_type == 4 and $need_subcat <= 0 or $need_name == '' or $need_desc == '' or $need_expires == '') {
            err("Užpildykite visus reikalaujamus laukelius", 'red');
        } elseif (strtotime($need_expires) === false) {
            err("Netinkamas galiojimo laikas", 'red');
        } elseif (strtotime($need_expires) < strtotime('+1 minute')) {
            err("Šis galiojimo laikas jau praėjo", 'red');
        } else {
            $id = insertRow('needs', 'need_needy, need_cat, need_subcat, need_name, need_desc, need_regdate, need_expires, need_type, need_author', "{$need_needy}, {$need_cat}, {$need_subcat}, '{$need_name}', '{$need_desc}', '{$need_regdate}', '{$need_expires}', {$need_type}, {$need_author}", false);
            if ($id) {
                redirect(0, '?p=' . page() . '&type=' . $need_type . '&subp=' . subpage() . '&need=' . $id);
            } else {
                err('Poreikis nesukurtas', 'red');
            }
        }
    }
    ?>
	<form action="" method="post">
		<label>Stokojantis<span class="reqfield">*</span></label>
		<select name="need_needy"><?php 
    $ops = listData('needy', "deleted = 0 {$parent} ORDER BY user_lname");
    foreach ($ops as $op) {
        echo '<option value=' . $op[0] . '>' . $op['user_lname'] . ' ' . $op['user_fname'] . ' ' . $op['user_orgname'] . '</option>';
    }