Файл: users/diary/inc/delete.php
Строк: 17
<?
if(isset($_POST['delete_ok']) && $_POST['mdp']==md5($user['pass']))
{
mysql_query("DELETE FROM `diary` WHERE `id` = '$diary[id]'");
mysql_query("DELETE FROM `diary_poll` WHERE `id_diary` = '$diary[id]'");
mysql_query("DELETE FROM `diary_rating` WHERE `id_diary` = '$diary[id]'");
mysql_query("DELETE FROM `diary_komm` WHERE `id_diary` = '$diary[id]'");
mysql_query("DELETE FROM `diary_pollen` WHERE `id_diary` = '$diary[id]'");
header("Location:/users/diary/user/$user[id]");
exit;
}
echo "<form action='' method='post' class='d2'>n";
echo "Подтвердите удаление записи:<br/>n";
echo "<input type='submit' name='delete_ok' value='Удалить'> <a href='/users/diary/$diary[id]/read'>Отмена</a>n";
echo "<input type='hidden' name='mdp' value='".md5($user['pass'])."'/>n
</form>n";
echo "<div class='d1'><img src='/users/diary/users/diary/back.png'/> <a href='/users/diary/$diary[id]/read'>Назад</a></div>";
require_once ("../../core/cuctema/foot.php");
exit;
?>