Пример #1
0
 function handle()
 {
     if (isset($_POST['action'])) {
         $login = $_POST['user'];
         $pass = $_POST['pass'];
         //echo $login;
         //echo $pass;
         //echo $login;
         //echo $pass;
         $query = "SELECT * FROM `at_admin` WHERE `user`='{$login}' AND `pass`='{$pass}'";
         if (Main::$con === FALSE) {
             Main::openConnection();
         }
         //echo $query;
         $result = mysql_query($query) or die('Query Failed' . mysql_error());
         if ($result) {
             if (mysql_num_rows($result) > 0) {
                 if (!isset($_SESSION)) {
                     session_start();
                 }
                 $_SESSION['admin'] = $login;
                 //echo $login;
                 //echo "LOGGED IN";
                 //exit();
                 echo header("Location: " . Settings::SITEURL . "admin/");
                 exit;
             } else {
                 $this->loggedIn = FALSE;
             }
         }
     } else {
         $this->loggedIn = 'FALSE';
     }
 }
Пример #2
0
 function __construct()
 {
     if (Main::$con == FALSE) {
         Main::openConnection();
     }
     $this->doInstall();
 }
Пример #3
0
 function __construct($data, $table, $cond)
 {
     if (Main::$con == FALSE) {
         Main::openConnection();
         $this->newCon = TRUE;
     }
     $data = Main::escape($data);
     $query = Main::generateQuery('UPDATE', $data, $table, $cond);
     mysql_query($query) or Main::throwException('Internal Error Occured', 0, 'Query Failed' . mysql_error());
     //Main::displaySuccess('DataBase Updated Successfully');
 }
Пример #4
0
 function getDetailsContains($table, $data = '*', $cond)
 {
     if (Main::$con == FALSE) {
         Main::openConnection();
         $this->newCon = TRUE;
     }
     $data = Main::escape($data);
     $query = "SELECT ";
     if (is_array($data)) {
         $i = 0;
         foreach ($data as $value) {
             if ($i < 1) {
                 $query .= "`{$value}`";
             } else {
                 $query .= ",`{$value}`";
             }
             $i++;
         }
     } else {
         if ($query == '*') {
             $query .= '*';
         } else {
             $query .= "`{$data}`";
         }
     }
     $query .= " FROM `{$table}`";
     $query .= " WHERE ";
     $i = 0;
     foreach ($cond as $key => $value) {
         if ($i < 1) {
             $query .= "`{$key}` LIKE '%{$value}%'";
         } else {
             $query .= "AND `{$key}` LIKE '%{$value}%'";
         }
         $i++;
     }
     $result = mysql_query($query) or die('Query Failed' . mysql_error());
     if (mysql_num_rows($result) > 0) {
         while ($row = mysql_fetch_assoc($result)) {
             $data[] = $row;
         }
         return $data;
     } else {
         return array();
     }
 }