ZIP/X2/adm.back/mail_update.php



<title>ZIP/X2/adm.back/mail_update.php</title>


<div class="header">ZIP/X2/adm.back/mail_update.php</div>
<pre>&lt;?php
$sub_menu = &quot;200300&quot;;
require_once &#039;./_common.php&#039;;

if ($w == &#039;u&#039; || $w == &#039;d&#039;) {
    check_demo();
}

auth_check_menu($auth, $sub_menu, &#039;w&#039;);

check_admin_token();

$ma_id = isset($_POST[&#039;ma_id&#039;]) ? (int) $_POST[&#039;ma_id&#039;] : 0;
$ma_subject = isset($_POST[&#039;ma_subject&#039;]) ? strip_tags(clean_xss_attributes($_POST[&#039;ma_subject&#039;])) : &#039;&#039;;
$ma_content = isset($_POST[&#039;ma_content&#039;]) ? $_POST[&#039;ma_content&#039;] : &#039;&#039;;

if ($w == &#039;&#039;) {
    $sql = &quot; insert {$g5[&#039;mail_table&#039;]}
                set ma_subject = &#039;{$ma_subject}&#039;,
                     ma_content = &#039;{$ma_content}&#039;,
                     ma_time = &#039;&quot; . G5_TIME_YMDHIS . &quot;&#039;,
                     ma_ip = &#039;{$_SERVER[&#039;REMOTE_ADDR&#039;]}&#039; &quot;;
    sql_query($sql);

    $ma_id = sql_insert_id();
    run_event(&#039;admin_mail_created&#039;, $ma_id);

} elseif ($w == &#039;u&#039;) {
    $sql = &quot; update {$g5[&#039;mail_table&#039;]}
                set ma_subject = &#039;{$ma_subject}&#039;,
                     ma_content = &#039;{$ma_content}&#039;,
                     ma_time = &#039;&quot; . G5_TIME_YMDHIS . &quot;&#039;,
                     ma_ip = &#039;{$_SERVER[&#039;REMOTE_ADDR&#039;]}&#039;
                where ma_id = &#039;{$ma_id}&#039; &quot;;
    sql_query($sql);
    run_event(&#039;admin_mail_updated&#039;, $ma_id);

} elseif ($w == &#039;d&#039;) {
    $sql = &quot; delete from {$g5[&#039;mail_table&#039;]} where ma_id = &#039;{$ma_id}&#039; &quot;;
    sql_query($sql);
    run_event(&#039;admin_mail_deleted&#039;, $ma_id);
}

goto_url(&#039;./mail_list.php&#039;);
</pre>