Файл: users/diary/inc/desc.php
Строк: 26
<?
only_reg('/?act=avtorize');
$set['title']='Дневники - Редактирование описания';
require_once ("../../core/cuctema/head.php");
title();
aut();
if(isset($_POST['msg']) && $_POST['mdp']==md5($user['pass']))
{
$msg=$_POST['msg'];
if(strlen2($msg)>$max_size_desc)$err_desc=1;
else
{
mysql_query("UPDATE `user` SET `diary_desc` = '".my_esc($msg)."' WHERE `id` = '$user[id]'");
header("Location:/users/diary/user/$user[id]");
}
}
echo "<div class='d2'>";
echo "<form method='post' action=''>n";
if(isset($err_desc))echo "<div class='hide'>n";
echo "<span style='color:grey'>Описание ($max_size_desc символов)<br/>n
<textarea name='msg'>".output_title($user['diary_desc'])."</textarea><br/>n";
if(isset($err_desc))echo "Описание слишком длинное<br/></div>n";
echo "<input type='submit' name='save' value='Сохранить'>n";
echo "<input type='hidden' name='mdp' value='".md5($user['pass'])."'/>n
</form></div>n";
echo "<div class='d1'>n
<img src='/users/diary/users/diary/back.png'/> <a href='/users/diary/user/$user[id]'>Назад</a><br/>n
</div>n";
require_once ("../../core/cuctema/foot.php");
exit;
?>