Mini Shell Moded By TiGER HeX

//var/www/50mmla/admin/artistAdd.php

<?
include_once('../includes/static/configure.php');
include_once('../includes/static/util.php');
include_once('../includes/static/dbcon.php');
include_once('../includes/static/gdimg.php');
include_once('../includes/static/sessions.php');
include_once('includes/static/util.php');
include_once('includes/appTop.php');
$page_id = str_replace(".php","",basename($_SERVER['PHP_SELF']));
if(!has_permission($page_id)){
   die("You don't have permission to view this page!");
}
$html="";
$uid = 0;
if(isset($_SESSION['admin_id'])){
   $uid = $_SESSION['admin_id'];
}elseif(isset($_SESSION['editor_id'])){
   $uid = $_SESSION['editor_id'];
}
if( isset($_REQUEST['addArtist'])){
	$sql = "INSERT INTO 50mm_artists (artist_name,location,description,user_id,approved,entry_time) VALUES ('".$_REQUEST['artistName']."','".$_REQUEST['location']."','".$_REQUEST['description']."','$uid',1,NOW())";
	if( !($result = $db->sql_query($sql)) ){
	   $sql_error = $db->sql_error();
	   die($sql_error['message']);
	}
	$html = "<div class=\"hilite\">operation successful</div>";
}

include_once('includes/header.php');
?>
<script>
divs = new Array('artistName');
</script>
<form action="<?echo $_SERVER['PHP_SELF']?>" method="POST" enctype="multipart/form-data" onSubmit="return validateForm(this,divs,'error');">
Artist:<span id="errartistName" class="error" style="visibility:hidden;"> *</span><br>
<input class="field" name="artistName" style="width:250px;"><br>
Location:<br>
<input class="field" name="location" style="width:250px;"><br>
Description:<br>
<textarea class="body" name="description" style="width:300px;height:300px;"></textarea><br>
<input name="addArtist" type="submit" class="button" value="Add Artist">
<div id="error" class="error" style="visibility:hidden;">Please correct the fields marked by *</div>
</form>
<?echo $html;?>
<br>
<?
include_once('includes/footer.php');
include_once('includes/appBottom.php');
?>