View file plugins/rules/new.php

<?php
require( '../../sys/inc/core.php' );
if ( isset( $user ) && $user['level'] < 3 )
    header( "Location: /" );
$set['title'] = 'Добавление записи';
include_once '../../sys/inc/thead.php';
aut();
title();
if ( isset( $_GET['post'] ) ) {
    if ( isset( $_POST['title'] ) ) {
        $title = esc( $_POST['title'], 1 );
        $msg   = esc( $_POST['msg'], 1 );
        $pos   = db::count("SELECT MAX(`pos`) FROM `rules`") + 1;
        if ( !isset( $err ) ) {
            db::query("INSERT INTO `rules` (`time`, `msg`, `title`, `id_user`, `pos`) values('$time', '$msg', '$title', '$user[id]', '$pos')");
            db::query("OPTIMIZE TABLE `rules`");
            $_SESSION['message'] = 'Пункт успешно добавлен';
            header( "Location: index.php?" );
            exit;
        }
    }
    err();
    echo '<form method="post" action=""new.php?post">';
    echo 'Название (ссылка):<br /><input name="title" size="16" maxlength="32" value="" type="text" /><br />';
    echo '<input value="Добавить" type="submit" />';
    echo '</form>';
}
if ( isset( $_GET['msg'] ) ) {
    if ( isset( $_POST['msg'] ) ) {
        $msg = esc( $_POST['msg'], 1 );
        $pos = db::count("SELECT MAX(`pos`) FROM `rules`") + 1;
        if ( !isset( $err ) ) {
            db::query("INSERT INTO `rules` (`time`, `msg`, `title`, `id_user`, `pos`) values('$time', '$msg', '$title', '$user[id]', '$pos')");
            db::query("OPTIMIZE TABLE `rules`");
            $_SESSION['message'] = 'Текст успешно добавлен';
            header( "Location: index.php?" );
            exit;
        }
    }
    err();
    echo '<form method="post" action="new.php?msg">';
    echo 'Текст:<br /><textarea name="msg" ></textarea><br />';
    echo '<input value="Добавить" type="submit" />';
    echo '</form>';
}
if ( isset( $_GET['url'] ) ) {
    if ( isset( $_POST['url'] ) && isset( $_POST['name_url'] ) ) {
        $url      = esc( $_POST['url'], 1 );
        $name_url = esc( $_POST['name_url'], 1 );
        $pos      = db::count("SELECT MAX(`pos`) FROM `rules`") + 1;
        if ( !isset( $err ) ) {
            db::query("INSERT INTO `rules` (`time`, `id_user`, `url`, `name_url`, `pos`) values('$time', '$user[id]', '$url', '$name_url', '$pos')");
            db::query("OPTIMIZE TABLE `rules`");
            $_SESSION['message'] = 'Ссылка успешно добавлена';
            header( "Location: index.php?" );
            exit;
        }
    }
    err();
    echo '<form method="post" action="new.php?url">';
    echo 'Название ссылки:<br /><input name="name_url" size="16" value="" type="text" /><br />';
    echo 'Адрес ссылки:<br /><input name="url" size="16" value="/" type="text" /><br />';
    echo '<input value="Добавить" type="submit" />';
    echo '</form>';
}
echo '<div class="foot"><img src="/style/icons/str2.gif" alt="*"/> <a href="index.php">Информация</a></div>';
include_once '../../sys/inc/tfoot.php';
?>