Edit links

id	Категория......	Название	Адрес

HTML_TOP &read_input; if ($data{'edit'} eq 'edit') { &save_values; print "

Изменения сохранены!

\n"; &show_page; } else { if ($data{'edit'} eq 'delete') { &delete_record; } else { &show_page; } } sub show_page { my $result = $dbh->prepare("SELECT a.name as cname, b.name as name, b.url as url, a.id as catid, b.id as lid FROM category a, links b WHERE b.category=a.id ORDER by a.name"); $result->execute(); print "\n"; $i = 0; while (my @ln = $result->fetchrow_array()) { $i++; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; } print "

",@ln[4],"

",@ln[0],"

",@ln[1],"

",@ln[2],"

\n"; } sub save_values { if ($data{'id'} == 0) { $linksqry = "INSERT INTO links (name,url,category) values ('".$data{'namelink'}."','".$data{'url'}."',".$data{'category_id'}.")"; } else { $linksqry = "UPDATE links SET name='".$data{'namelink'}."',url='".$data{'url'}."',category=".$data{'category_id'}." where id=".$data{'id'}; } $dbh->do($linksqry); } sub delete_record { if ($data{'id'}== 0) { } else { $delqry = "DELETE FROM links WHERE id = ".$data{'id'}; $dbh->do($delqry); } &show_page; } sub read_input { local ($temp,@pairs,$censored,$mail_to); $censored = "not allowed"; if ($ENV{'REQUEST_METHOD'} eq 'POST') { read(STDIN,$temp,$ENV{'CONTENT_LENGTH'}); } else { $temp=$ENV{'QUERY_STRING'}; } if ($temp ne '') { @pairs=split(/&/,$temp); foreach $item(@pairs) { ($key,$content)=split (/=/,$item,2); # Split into key and value. $content=~tr/+/ /; # Convert plus's to spaces $content=~ s/%(..)/pack("c",hex($1))/ge; # Convert %XX from hex numbers to alphanumeric # get rid of attempts to insert HTML tags if($TagsAllowed !=1){ $content =~ s/<([^ >]|\n).*>//gs; $content =~ s/[\<\>]//gs; } # get rid of attempts to insert illeagl character $content =~ s/[\`\;\*\|\^]/$censored/gs; # get rid of attempts to insert bad tags $content=~s/meta/$censored/gi; $content=~s/refresh/$censored/gi; $content=~s/open/$censored/gi; $content=~s/exec/$censored/gi; $content=~s/passwd/$censored/gi; #for database support $content=~s/:://g; $content=~s/\cM/\n/g; #convert CR to LF $content=~ s/\n\n/

/g; $content=~ s/\n/
/g; if($key =~/email/i) #make sure email address is legal { $mail_to = $content; $mail_to=~/([\w-.]+\@[\w-.]+)/; $content = $1; $EmailAddress = $content; } # Associate key and value $data{$key}=$content; } return 1; } else { return 0; } }