当前位置:网站首页>PHP security development 13 column module of blog system

PHP security development 13 column module of blog system

2022-06-12 01:46:00 qq_ forty-two million three hundred and seven thousand five hun

establish cate_list.php

<?php
include_once "head.php";
include_once "../common/Page.class.php";

if ($_GET['action'] == 'del'){
    
    $id = filterstr($_GET['id']);
    $conn->query("delete from cate where id='$id'");
    if($conn->affected_rows>0){
    
        redirect(2,'cate_list.php',' Delete successful ');
    }
    else{
    
        redirect(2,'cate_list.php',' Delete failed ');
    }
}
?>
<!doctype html>
<html>

    <!--/sidebar-->
    <div class="main-wrap">

        <div class="crumb-wrap">
            <div class="crumb-list"><i class="icon-font"></i><a href="index.html"> home page </a><span class="crumb-step">&gt;</span><span class="crumb-name"> Work management </span></div>
        </div>

        <div class="result-wrap">
            <form name="myform" id="myform" method="post">
                <div class="result-title">
                    <div class="result-list">
                        <a href="cate_add.php"><i class="icon-font"></i> New column </a>

                    </div>
                </div>
                <div class="result-content">
                    <table class="result-tab" width="100%">
                        <tr>


                            <th>ID</th>
                            <th> Column name </th>



                            <th> operation </th>
                        </tr>
                        <tr>
                            <?php
                            $result = $conn->query("select * from cate");

                            while($row = $result->fetch_assoc()){
    
                            ?>


                            <td><?php echo $row['id'];?></td>
                            <td title="<?php echo $row['class_name']; ?>"><a target="_blank" href="article_edit.php?id=<?php echo $row['id'];?>" title="<?php echo $row['class_name']; ?>"><?php echo $row['class_name']; ?></a>
                            </td>


                            <td>
                                <a class="link-update" href="cate_edit.php?id=<?php echo $row['id'];?>"> modify </a>
                                <a class="link-del" href="javascript:del(<?php echo $row['id'];?>);"> Delete </a>
                            </td>
                        </tr>
                        <?php }?>

                    </table>

                </div>
            </form>
        </div>
    </div>
    <!--/main-->
</div>
<script>
    function del(id){
    
        if(false==confirm(" Are you sure to delete the record ?")) return;
        location.href='?action=del&id='+id;

    }
</script>
</body>
</html>

admin/cate_add.php

<?php
include_once 'init.php';
include "head.php";
header("Content-type: text/html; charset=utf-8");
$title = filterstr($_POST['title']);


//echo $cateid;
//$sql="insert into article (title,content,author,keyword,catid,c_time) value ('$title','$content','$author','$keyword',$cateid,'$c_time')";
//echo $sql;
if($_POST['sub']) {
    
    $conn->query("insert into cate(class_name)value('$title')");

    if ($conn->affected_rows > 0) {
    
        redirect(2, 'cate_list.php', ' Add success ');
    } else {
    
        redirect(2, 'cate_add.php', ' Add failure ');
    }
}
?>

<!doctype html>
<html>

    <!--/sidebar-->
    <div class="main-wrap">

        <div class="crumb-wrap">
            <div class="crumb-list"><i class="icon-font"></i><a href="/jscss/admin/design/"> home page </a><span class="crumb-step">&gt;</span><a class="crumb-name" href="/jscss/admin/design/"> Column management </a><span class="crumb-step">&gt;</span><span> New column </span></div>
        </div>
        <div class="result-wrap">
            <div class="result-content">
                <form action="" method="post" id="myform" name="myform" enctype="multipart/form-data">
                    <table class="insert-tab" width="100%">
                        <tbody><tr>

                        </tr>
                            <tr>
                                <th><i class="require-red">*</i> The column :</th>
                                <td>
                                    <input class="common-text required" id="title" name="title" size="50" value="" type="text">
                                </td>
                            </tr>

                                <th></th>
                                <td>
                                    <input class="btn btn-primary btn6 mr10" value=" Submit " name="sub" type="submit">
                                    <input class="btn btn6" onClick="history.go(-1)" value=" return " type="button">
                                </td>
                            </tr>
                        </tbody></table>
                </form>
            </div>
        </div>

    </div>

    <!--/main-->
</div>

</body>
</html>

cate_editor.php

<?php

include_once "head.php";
header("Content-type: text/html; charset=utf-8");
$id = filterstr($_GET['id']);
//$result = $conn->query("select * from cate where id = '$id'");
//$row =$result->fetch_assoc();
$title = filterstr($_POST['title']);



if($_POST['sub']){
    
    //echo "update article set title = '$title',content='$content',author='$author',keyword='$keyword',c_time=$c_time,catid=$catid where id='$id'";

    $conn->query("update cate set class_name = '$title' where id='$id'");

    if ($conn->affected_rows > 0) {
    
        redirect(2, 'cate_list.php', ' Edit success ');
    } else {
    
        redirect(2, 'cate_edit.php', ' Edit failed ');
    }
}




//$sql="insert into article (title,content,author,keyword,catid,c_time) value ('$title','$content','$author','$keyword',$cateid,'$c_time')";



?>

<!doctype html>
<html>

    <!--/sidebar-->
    <div class="main-wrap">

        <div class="crumb-wrap">
            <div class="crumb-list"><i class="icon-font"></i><a href="/jscss/admin/design/"> home page </a><span class="crumb-step">&gt;</span><a class="crumb-name" href="/jscss/admin/design/"> Work management </a><span class="crumb-step">&gt;</span><span> Editing works </span></div>
        </div>
        <div class="result-wrap">
            <div class="result-content">
                <form action="" method="post" id="myform" name="myform" enctype="multipart/form-data">
                    <table class="insert-tab" width="100%">
                        <tbody><tr>


                        </tr>
                        <tr><?php
                            $row=$conn->query("select * from cate where id = '$id'" );
                            $row  = $row->fetch_assoc();

                            ?>
                            <th><i class="require-red">*</i> The column :</th>
                            <td>
                                <input class="common-text required" id="title" name="title" value="<?php echo $row['class_name']; ?>" size="50"  type="text">
                            </td>
                        </tr>

                        <tr>
                            <th></th>
                            <td>
                                <input class="btn btn-primary btn6 mr10" value=" Submit "  name ="sub" type="submit">
                                <input class="btn btn6" onClick="history.go(-1)" value=" return " type="button">
                            </td>
                        </tr>
                        </tbody></table>
                </form>
            </div>
        </div>

    </div>

    <!--/main-->
</div>

</body>
</html>
原网站

版权声明
本文为[qq_ forty-two million three hundred and seven thousand five hun]所创,转载请带上原文链接,感谢
https://yzsam.com/2022/163/202206120143265270.html