switch ($action)
{
case "search":
{
$query = addslashes(string_clear(substr($query, 0, 100)));
viewSearch($query);
viewSearchResults($type, $query);
goBack();
break;
}
case "view":
{
$post_id = addslashes(string_clear(substr($post_id, 0, 6)));
$post_id = (int)$post_id;
viewSearch($query);
viewPost($post_id);
viewHeader();
goBack();
break;
}
case "category":
{
$cat_id = addslashes(string_clear(substr($cat_id, 0, 2)));
$cat_id = (int)$cat_id;
viewSearch($query);
listPages($type, $cat_id, $page, $pp);
viewCategory($type, $cat_id, $page, $pp);
listPages($type, $cat_id, $page, $pp);
viewHeader();
goBack();
break;
}
case "add":
{
if ($cat_id && $profession && isset($worktype) && $describ && $c_fio)
{
if ($c_phone || $c_fax || $c_email || $c_url || $c_address)
{
$cat_id = addslashes(string_clear(substr($cat_id, 0, 2)));
$cat_id = (int)$cat_id;
$profession = addslashes(string_clear(substr($profession, 0, 255)));
$language = addslashes(string_clear(substr($language, 0, 255)));
$describ = addslashes(string_clear(substr($describ, 0, 1024)));
$inform = addslashes(string_clear(substr($inform, 0, 1)));
if (isset($city)) $city = addslashes(string_clear(substr($city, 0, 255)));
if (isset($c_fio)) $c_fio = addslashes(string_clear(substr($c_fio, 0, 255)));
if (isset($c_phone)) $c_phone = addslashes(string_clear(substr($c_phone, 0, 100)));
if (isset($c_fax)) $c_fax = addslashes(string_clear(substr($c_fax, 0, 100)));
if (isset($c_email)) $c_email = addslashes(string_clear(substr($c_email, 0, 100)));
if (isset($c_url)) $c_url = addslashes(string_clear(substr($c_url, 0, 200)));
if (isset($c_address)) $c_address = addslashes(string_clear(substr($c_address, 0, 200)));
if (isset($age_from)) $age_from = (int)$age_from;
if (isset($age_to)) $age_to = (int)$age_to;
if (isset($sex)) $sex = (int)$sex;
if (isset($education)) $education = (int)$education;
if (isset($exp)) $exp = (int)$exp;
if (isset($worktime)) $worktime = (int)$worktime;
if (isset($worktype)) $worktype = (int)$worktype;
if (isset($workplace)) $workplace = (int)$workplace;
if (isset($price)) $price = (int)$price;
if (isset($inform)) $inform = (int)$inform;
if (isset($pricetype)) $pricetype = (int)$pricetype;
$err = 0;
if ($c_email)
{
if (!string_isemail($c_email))
{
error("Неверный E-mail");
$err = 1;
}
}
if ($ontespom != "222")
{
error("Ваш комментарий является спамом или у Вас отключен Javascript. Включите Javascript в Вашем браузере и повторите попытку снова.");
$err = 1;
}
if (!$err)
{
$sql = "'',
'" . $type . "',
'" . $cat_id . "',
'" . $profession . "',
'" . $age_from . "',
'" . $age_to . "',
'" . $sex . "',
'" . $education . "',
'" . $exp . "',
'" . $worktime . "',
'" . $worktype . "',
'" . $workplace . "',
'" . $language . "',
'" . $city . "',
'" . $price . "',
'" . $pricetype . "',
'" . $describ . "',
'" . $c_fio . "',
'" . $c_phone . "',
'" . $c_fax . "',
'" . $c_email . "',
'" . $c_url . "',
'" . $c_address . "',
'" . (time() + $lifetime * 86400) . "',
'" . $inform . "'";
// echo $sql;
mysqli_query($handler_job, "INSERT INTO `data` VALUES (" . $sql . ")");
$ff = 1;
startMaillist($type, $cat_id);
print "
";
}
}
else error("Введите контактный адрес.");
}
else if ($cat_id) error("Заполните все обязательные поля формы.");
if (!$ff) include($sr . "/job/template/add_form.tmpl");
goBack();
break;
}
default:
{
viewSearch($query);
viewCategories();
viewHeader();
viewNewest();
viewTopics();
unsubscribe();
break;
}
}
column_footer();
include($sr . "/inc/footer.inc.php");
function viewTopics()
{
global $sr;
?>
| Новые вакансии и резюме на Форум.Астрахань.Ру |
include($sr.'/template/forum_job.php'); ?>
|
}
function viewCategories()
{
?>
}
function viewNewest()
{
?>
}
function viewSearch($query)
{
$query = addslashes(string_clear(substr($query, 0, 100)));
?>
}
function viewHeader()
{
?>
}
function unsubscribe()
{
global $unsubscribe_email, $handler_job;
if ($unsubscribe_email && filter_var($unsubscribe_email, FILTER_VALIDATE_EMAIL))
{
$ue = $unsubscribe_email;
mysqli_query($handler_job, "UPDATE `data` SET inform='0' WHERE c_email='".mysqli_real_escape_string($handler_job, $ue)."'");
$res = "Почтовый адрес $ue успешно удален.";
//$ue = string_clear($ue);
/*
$r = mysql_query("SELECT * FROM `data` WHERE c_email=\"".mysql_real_escape_string($ue)."\"");
$c = mysql_fetch_array($r);
mysql_free_result($r);
print_r($c);
if ($c['id'])
{
if (mysql_query("UPDATE `data` SET inform='0' WHERE c_email='$ue'"))
$res = "Почтовый адрес $ue успешно удален.";
}
else
$res = "Адреса $ue не существует в нашей базе данных.";
*/
}
elseif (!filter_var($unsubscribe_email, FILTER_VALIDATE_EMAIL) && $unsubscribe_email)
$res = "Вы ввели некорректный адрес электронной почты.";
else
$res = "";
print "
| Форма отписки от рассылки новых вакансий и резюме | ";
print "";
print "
" . $res . " ";
print " | ";
}
?> | | |