Код:
<?php
/**
* @author taneca
* @copyright 2009
*/
if($csuser == 'taneca')
{
$sql = "SELECT * FROM `music` WHERE ok='0' ORDER BY `id` DESC";
$result = mysql_query($sql) or die (mysql_error());
while($row = mysql_fetch_assoc($result))
{
echo '<form method=post action=page/admin-music/index.php>
<font color="green">'.$row[name].'</font><br><br>
Преслушай сега:<br/>
<object type="application/x-shockwave-flash" data="page/play/player.swf?mp3='.$row[play].'" width="200" height="20">
<param name="movie" value="page/play/player.swf?mp3='.$row[link].'">
</object><br><font color="blue">Моля изчакайте да зареди !</font><br><br>
Качена от: <a href="index.php?p=profile&username='.$row[author].'"><font color="red">'.$row[author].'</a></font><br><br>
Директен линк към песента:<br>
<input name="play" size="50" maxlength="100" value="'.$row[play].'" type="input"><br><br>
<img src="images/world_go.png"> <a href="'.$row[link].'" target="_blank"><font color="red">ИЗТЕГЛИ!</a></font>
</b>
<br><br><input type=submit name=odobri value=Удобри !><br></form>
';
}
$id = trim(htmlspecialchars(addslashes($_POST['id'])));
if($_POST['odobri'])
{
$sqla = "UPDATE `music` SET ok='1' WHERE id='$id'";
$rezultat = mysql_query($sqla) or die (mysql_error());
echo "Вие удобрихте песента: <b>$row[name]</b>!";
}
}
else
{
echo "Нямаш достъп до тази страница!";
}
?>