View file wapus top english version/admin/add_recl.php

<?
//=============================
#Version WapuS_ToP_final
#Script By: Black1992
#Email: skyangel15@inbox.lv
#Icq: 414454754
#Url: http://WaPuS.pp.Ru
//=============================
error_reporting(0);
include ("../config.php");
include ("../inc/config.inc.php");
require '../inc/functions.inc.php';
include ("../head.php");
function filtr_text($message){ 
//$message=str_replace("|","",$message); 
$message=str_replace("||","",$message);
$message=str_replace("&","",$message);
$message=str_replace("\"","",$message);
//$message=str_replace(">","",$message);
//$message=str_replace("<","",$message);
$message=htmlspecialchars($message);                  
$message=str_replace("'","",$message);            
$message=str_replace("\"","",$message);  
$message=str_replace("\$","",$message);    
$message=str_replace("$","",$message);          
$message=str_replace("\\","", $message);                            
$message=str_replace("`","", $message);    
$message=str_replace("%","", $message);
$message=stripslashes(trim($message));               
return $message;
}
if (isset($_GET['login'])) 		{$login = $_GET['login']; }	
if (isset($_GET['p'])) 			{$p = $_GET['p']; }


admin_auth();

if(!$AUTH){
 header("Location: index.php");
 echo"<div class=\"rek3\">Пароль неверный! <a href=\"" . $rating_url. "admin/index.php\">$rating_name</a> </div>";
 echo "
<div class=\"news\">
<a href=\"" . $rating_url. "index.php\">$rating_name</a>
<img src=\"./../img/gt.gif\" alt=\"&gt;\" />Реклама
</div>
";
include("./../foot_code.php");
 exit;
}

if(!isset($_GET['p'])){
$title='Ошибка Пароля';
include_once("../head.php");
echo '<div class="rek3">Пароль неверный! <a href=\"" . $rating_url. "admin/index.php\">$rating_name</a><br>
&#171;<a href="index.php?login='.$login.'&amp;p='.$truepass.'">В админку</a></div>';
include_once("../foot_code.php");
exit; }

if (isset($_POST['title'])) 		{$title = $_POST['title']; 	if ($title == '') 					{unset ($title);}	}
if (isset($_POST['link'])) 			{$link = $_POST['link']; if ($link == '') 						{unset ($link);}	}

if (isset($title) && isset($link))
{	 
//Add lesson to DB
$result = mysql_query ("INSERT INTO recl (title, link) VALUES ('$title', '$link')");
if ($result == "true") {echo "<div class=\"rek3\">Реклама успешно добавленна!</div>";}
else {echo "<div class=\"rek3\">Реклама не добавленна!!</div>";}
}	 
else { echo "<div class=\"rek3\">Не все поля заполнены!</div>";}

//Footer
echo "
<div class=\"news\">
<a href=\"" . $rating_url. "index.php\">$rating_name</a>
<img src=\"./../img/gt.gif\" alt=\"&gt;\" />Реклама
</div>
";
include("./../foot_code.php");
?>