setframestate.php

一个页面界面的邮件程序

<?php
require_once("../inc/constants.inc.php");
require_once("../inc/properties.inc.php");
require_once("../inc/tools.inc.php");
require_once("../inc/db.inc.php");

if (!isset($_SESSION['user'])) {
	die();
}

if (isset($_POST['key']))
	$param = $_POST;
else if (isset($_GET['key']))
	$param = $_GET;
else
	die("Attribute 'key' not found ! Can't set frame state");

$key = prepSqlValue($param['key']);
$state = $param['state'];

if($key) {
	$sql = null;
	if ($state == "closed")
		$sql = "INSERT INTO `closed_frame` (`iduser`, `key`) VALUES ('". $_SESSION['user'] ."', $key)";
	else if ($state == "open")
		$sql = "DELETE FROM `closed_frame` WHERE `iduser` ='". $_SESSION['user'] ."' AND CONVERT(`key` USING utf8) = $key";
	
	if ($sql) {
		$result = mysql_query($sql) or die("Error in SQL : " . $sql);
		echo "OK: " . $sql;
	} else {
		echo "No action";
	}		
}
?>