diff options
| author | cookie <cookie@29ba0400-6e00-0410-a75a-ca02368028f8> | 2007-12-29 17:35:39 +0000 |
|---|---|---|
| committer | cookie <cookie@29ba0400-6e00-0410-a75a-ca02368028f8> | 2007-12-29 17:35:39 +0000 |
| commit | f58879ba0d276b61261258345e82b520f6674107 (patch) | |
| tree | b3bd41c311d5d574114f917d9cb387f77223daa0 /www-ssl/admin/UserPicture.php | |
| parent | 4ef096e8439bda25ca165e8a1a363040d7e8063d (diff) | |
bugfix und security
git-svn-id: svn://svn.cccv.de/engel-system@265 29ba0400-6e00-0410-a75a-ca02368028f8
Diffstat (limited to 'www-ssl/admin/UserPicture.php')
| -rwxr-xr-x | www-ssl/admin/UserPicture.php | 26 |
1 files changed, 13 insertions, 13 deletions
diff --git a/www-ssl/admin/UserPicture.php b/www-ssl/admin/UserPicture.php index 1aa74360..7871338b 100755 --- a/www-ssl/admin/UserPicture.php +++ b/www-ssl/admin/UserPicture.php @@ -12,7 +12,7 @@ if( IsSet($_GET["action"]) ) switch ($_GET["action"]) { case 'FormUpload': - echo "Hier kannst Du ein Foto hochladen für:"; + echo "Hier kannst Du ein Foto hochladen för:"; echo "<form action=\"./UserPicture.php?action=sendPicture\" method=\"post\" enctype=\"multipart/form-data\">\n"; echo "\t<select name=\"UID\">\n"; $usql="SELECT * FROM `User` ORDER BY `Nick`"; @@ -76,13 +76,13 @@ if( IsSet($_GET["action"]) ) echo "Fehlerhafter Aufruf"; break; case 'del': - echo "Wollen Sie das Bild von '". UID2Nick( $_GET["UID"]). "' wirklich löschen? ". + echo "Wollen Sie das Bild von '". UID2Nick( $_GET["UID"]). "' wirklich löschen? ". "<a href=\"./UserPicture.php?action=delYes&UID=". $_GET["UID"]. "\">Yes</a>"; break; case 'delYes': if (IsSet($_GET["UID"])) { - echo "Bild von '". UID2Nick( $_GET["UID"]). "' wurde gelöscht:<br>"; + echo "Bild von '". UID2Nick( $_GET["UID"]). "' wurde gelöscht:<br>"; $SQL = "DELETE FROM `UserPicture` WHERE `UID`='". $_GET["UID"]. "' LIMIT 1"; } else @@ -121,24 +121,24 @@ echo "<tr class=\"contenttopic\">\n"; echo "\t<td>User</td>\n"; echo "\t<td>Bild</td>\n"; echo "\t<td>Status</td>\n"; -echo "\t<td>Löschen</td>\n"; +echo "\t<td>Löschen</td>\n"; echo "</tr>"; for( $t = 0; $t < mysql_num_rows($Erg); $t++ ) { - $UID = mysql_result($Erg, $t, "UID"); + $UIDs = mysql_result($Erg, $t, "UID"); echo "\t<tr class=\"content\">\n"; echo "\t\t<td>". UID2Nick(mysql_result($Erg, $t, "UID")). "</td>\n"; - echo "\t\t<td>". displayPictur( $UID, 0). "</td>\n"; + echo "\t\t<td>". displayPictur( $UIDs, 0). "</td>\n"; - if( GetPicturShow( $UID) == "Y") - echo "\t\t<td><a href=\"./UserPicture.php?action=SetN&UID=$UID\">sperren</a></td>\n"; - elseif( GetPicturShow( $UID) == "N") - echo "\t\t<td><a href=\"./UserPicture.php?action=SetY&UID=$UID\">freigeben</a></td>\n"; + if( GetPicturShow( $UIDs) == "Y") + echo "\t\t<td><a href=\"./UserPicture.php?action=SetN&UID=$UIDs\">sperren</a></td>\n"; + elseif( GetPicturShow( $UIDs) == "N") + echo "\t\t<td><a href=\"./UserPicture.php?action=SetY&UID=$UIDs\">freigeben</a></td>\n"; else - echo "\t\t<td>ERROR: show='". GetPicturShow( $UID). "'</td>\n"; - echo "\t\t<td><a href=\"./UserPicture.php?action=del&UID=$UID\">del</a></td>\n"; + echo "\t\t<td>ERROR: show='". GetPicturShow( $UIDs). "'</td>\n"; + echo "\t\t<td><a href=\"./UserPicture.php?action=del&UID=$UIDs\">del</a></td>\n"; echo "\t</tr>\n"; } // ende Auflistung Raeume echo "</table>"; @@ -146,4 +146,4 @@ echo "</table>"; echo "<br><a href=\"./UserPicture.php?action=FormUpload\">picture upload</a>\n"; include ("./inc/footer.php"); -?> +?>
\ No newline at end of file |