// Preamble
$pageName = "Delete News";
$need = 'auth';
require "parts/preamble.php"; // Load most of document
if (!$userInfo['u_admin']) // no access from non-admin
bailout ('
You don\'t have access to this page. Bug an admin to delete a news post.
');
need ('sql');
function convertToHTML ($string)
{
$table = array_flip (get_html_translation_table (HTML_ENTITIES));
return strtr ($string, $table);
}
function convertFromHTML ($string)
{
$table = get_html_translation_table (HTML_ENTITIES);
return strtr ($string, $table);
}
function newsEntry ($array)
{
need ('date');
return
''
.' ' . $array[n_id] . ' | '
.' ' . dateFromSQLDateTime ($array[n_date]) . ' | '
.' ' . $array[n_user] . ' | '
.' ' . substr (convertFromHTML (stripSlashes ($array[n_news])), 0, 50) . '… | '
.'
';
}
$newsID = $_REQUEST['newsID'];
if ($conn = mysql_pconnect (sqlHost, sqlRWUser, sqlRWPass)) {
if ($newsID) {
$query = "DELETE FROM news_main WHERE n_id='$newsID'";
if ($result = mysql_db_query (sqlDB, $query, $conn)) {
if ($numRows = mysql_affected_rows ($conn)) {
echo "News entry $newsID has been deleted successfully.";
} else {
echo '
There was an error in your input. If you don\'t know what it is, I\'m not going to tell you.';
}
}
}
?>
Delete News
$query = 'SELECT n_id, n_date, n_user, n_news FROM news_main'
.' ORDER BY n_date DESC';
if ($result = mysql_db_query (sqlDB, $query, $conn)) {
if ($numRows = mysql_num_rows ($result)) {?>
ID |
Date |
User |
Text |
for ($i = 0; $i < $numRows; $i++) {
$news[$i] = mysql_fetch_assoc ($result);
echo newsEntry ($news[$i]);
}
} else {
echo 'No matching news entries.
';
}
} else {
echo 'Somebody screwed up, and MySQL said "' . mysql_error() . '". Bug a project admin or somethin\' eh?
';
}
?>
} else {
echo 'Couldn\'t connect to the SQL server with the password you gave. ("You suck, butthead.")
';
}
?>