Your IP : 216.73.217.79

Current Path : /var/www/cesa.co.za/Mailer/
Upload File :
Current File : /var/www/cesa.co.za/Mailer/doUpdateSection.php

<?php
	require_once ('includes/globals.php');

	if (isset($_SESSION['database'])) {	
		if (isset($_SESSION['userid'])) {
			$userid = $_SESSION['userid'];
		} else {
			echo "<script>document.location.href='index.php';</script>\n";
		}
		
		$sql = "UPDATE Sections\n" .
			"SET sTitle = '" . str_replace('"', '&quot;', str_replace("'", '&acute;', $_POST['title'])) . "'\n" .
			"where idSection = " . $_POST['updateid'];
		
		//echo $sql;
		$db = $_SESSION['database'];
		if ($db->Execute($sql) === false) {
			die("Could not update newsletter");
		} else {
		?>
		<script language="JavaScript" type="text/javascript">
			//window.close();
			window.location = "manageSections.php?id=<?php echo intval($_POST['sectionid']) ?>";
		</script>
		<?php
		}
	} 
?>
<?php
/*
<%@page import="co.za.vivid.websafe.*, co.za.vivid.saace.mail.builder.*,java.util.Vector"%>
<%
response.setHeader("Cache-Control","no-cache"); //HTTP 1.1
response.setHeader("Pragma","no-cache"); //HTTP 1.0
response.setDateHeader ("Expires", 0); //prevents caching at the proxy server

if (session.getAttribute("UserID") != null) {
	Section sec = new Section();
	sec.setTitle(request.getParameter("title").replaceAll("'","&acute;").replaceAll("\"","&quot;"));
	sec.setId(Integer.parseInt(request.getParameter("marker")));
	sec.updateDB();
%>
<script language="JavaScript" type="text/javascript">
	window.close();
</script>
<%
}
%>
*/
?>