Mini Shell Moded By TiGER HeX

/mnt/volume_sfo2_01/50mmla/admin/artistEdit.php

<?
include_once('../includes/static/configure.php');
include_once('../includes/static/util.php');
include_once('../includes/static/dbcon.php');
include_once('../includes/static/gdimg.php');
include_once('../includes/static/sessions.php');
include_once('includes/static/util.php');
include_once('includes/appTop.php');
$page_id = str_replace(".php","",basename($_SERVER['PHP_SELF']));
if(!has_permission($page_id)){
   die("You don't have permission to view this page!");
}
$html = "";
$artist_id = 0;
if(isset($_REQUEST['artistId'])){
   $artist_id = $_REQUEST['artistId'];
}
if( isset($_REQUEST['updateArtist'])){
	$sql = "UPDATE 50mm_artists SET artist_name = '".$_REQUEST['artistName']."',location='".$_REQUEST['location']."',description = '".$_REQUEST['description']."' WHERE artist_id='$artist_id'";
	if( !($result = $db->sql_query($sql)) ){
	   $sql_error = $db->sql_error();
	   die($sql_error['message']);
	}
	$html = "<div class=\"hilite\">operation successful</div>";
}

include_once('includes/header.php');

$sql = "SELECT * FROM 50mm_artists WHERE artist_id = '$artist_id'";
if( !($result = $db->sql_query($sql)) ){
   $sql_error = $db->sql_error();
   die($sql_error['message']);
}
$row = $db->sql_fetchrow($result);
?>
<script>
divs = new Array('artistName');
</script>
<form action="<?echo $_SERVER['PHP_SELF']?>" method="POST" enctype="multipart/form-data" onSubmit="return validateForm(this,divs,'error');">
Date Added: <?echo $row['entry_time']?><br>
Artist:<span id="errartistName" class="error" style="visibility:hidden;"> *</span><br>
<input class="field" name="artistName" style="width:250px;" value="<?echo $row['artist_name']?>"><br>
Location:<br>
<input class="field" name="location" style="width:250px;" value="<?echo $row['location']?>"><br>
Description:<br>
<textarea class="body" name="description" style="width:300px;height:300px;"><?echo $row['description']?></textarea><br>
<input name="updateArtist" type="submit" class="button" value="Update Artist">
<input name="artistId" value="<?echo $artist_id?>" type="hidden">
<div id="error" class="error" style="visibility:hidden;">Please correct the fields marked by *</div>
</form>
<?echo $html;?>
<br>
<?
include_once('includes/footer.php');
include_once('includes/appBottom.php');
?>