game/quest_dlg_edit.php

<?php
# Admin Only Area
/*

	<EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
	<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>

*/

const GAME = true;

include('_incl_data/__config.php');
include('_incl_data/class/__db_connect.php');
$u = User::start();


if ($u->info['admin'] <= 0) {
    return;
}

$itm = mysql_fetch_array(
    mysql_query('SELECT * FROM `dungeon_dlg` WHERE `id` = "' . mysql_real_escape_string($_GET['pid']) . '" LIMIT 1')
);
if (isset($itm['id'])) {
    if ($itm['qid'] == 0) {
        if (isset($_POST['newdata'])) {
            mysql_query(
                'UPDATE `dungeon_dlg` SET `text` = "' . mysql_real_escape_string(
                    $_POST['newdata']
                ) . '" WHERE `id` = "' . mysql_real_escape_string($itm['id']) . '" LIMIT 1'
            );
            die('<script>window.close();</script>');
        } elseif (isset($_GET['delete']) && $_GET['delete'] == 'true') {
            //<2F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
            mysql_query(
                'DELETE FROM `dungeon_dlg` WHERE `id` = "' . mysql_real_escape_string($itm['id']) . '" LIMIT 1'
            );
            //<2F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
            mysql_query('DELETE FROM `dungeon_dlg` WHERE `qid` = "' . mysql_real_escape_string($itm['id']) . '"');
            die('<script>window.close();</script>');
        }
        echo '<form method="post" action="?pid=' . $itm['id'] . '"><b><3E><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: ' . $itm['id'] . '</b><br><textarea name="newdata" rows="20" cols="100">' . $itm['text'] . '</textarea><br><input type="submit" value="<22><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"></form><div><a href="?pid=' . ((int)$_GET['pid']) . '&delete=true"><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD></a></div>';
    } else {
        if (isset($_POST['newdata'])) {
            mysql_query(
                'UPDATE `dungeon_dlg` SET `text` = "' . mysql_real_escape_string(
                    $_POST['newdata']
                ) . '",`action` = "' . mysql_real_escape_string(
                    $_POST['newdata2']
                ) . '",`tr` = "' . mysql_real_escape_string(
                    $_POST['newdata3']
                ) . '",`sort` = "' . mysql_real_escape_string(
                    (int)$_POST['newdata4']
                ) . '" WHERE `id` = "' . mysql_real_escape_string($itm['id']) . '" LIMIT 1'
            );
            die('<script>window.close();</script>');
        } elseif (isset($_GET['delete']) && $_GET['delete'] == 'true') {
            //<2F><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
            mysql_query(
                'DELETE FROM `dungeon_dlg` WHERE `id` = "' . mysql_real_escape_string($itm['id']) . '" LIMIT 1'
            );
            die('<script>window.close();</script>');
        }
        echo '<form method="post" action="?pid=' . $itm['id'] . '"><b><3E><><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: ' . $itm['id'] . '</b><br><textarea name="newdata" rows="3" cols="100">' . $itm['text'] . '</textarea><br><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:<textarea name="newdata2" rows="5" cols="100">' . $itm['action'] . '</textarea><br><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>:<textarea name="newdata3" rows="5" cols="100">' . $itm['tr'] . '</textarea><br><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>: <input name="newdata4" type="text" value="' . $itm['sort'] . '"><br><input type="submit" value="<22><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>"></form><div><a href="?pid=' . ((int)$_GET['pid']) . '&delete=true"><3E><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD></a></div>';
    }
} else {
    echo '<27><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> <20><> <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.';
}