40 lines
1011 B
PHP
40 lines
1011 B
PHP
<?
|
|
$sub_menu = '200300';
|
|
include_once('./_common.php');
|
|
|
|
if ($w == "u" || $w == "d")
|
|
check_demo();
|
|
|
|
auth_check($auth[$sub_menu], 'w');
|
|
|
|
check_token();
|
|
|
|
if ($w == '')
|
|
{
|
|
$sql = ' insert $g4[mail_table]
|
|
set ma_id = "$_POST[ma_id]",
|
|
ma_subject = "$_POST[ma_subject]",
|
|
ma_content = "$_POST[ma_content]",
|
|
ma_time = "$g4[time_ymdhis]",
|
|
ma_ip = "$_SERVER[REMOTE_ADDR]" ';
|
|
sql_query($sql);
|
|
}
|
|
else if ($w == 'u')
|
|
{
|
|
$sql = ' update $g4[mail_table]
|
|
set ma_subject = "$_POST[ma_subject]",
|
|
ma_content = "$_POST[ma_content]",
|
|
ma_time = "$g4[time_ymdhis]",
|
|
ma_ip = "$_SERVER[REMOTE_ADDR]"
|
|
where ma_id = "$_POST[ma_id]" ';
|
|
sql_query($sql);
|
|
}
|
|
else if ($w == 'd')
|
|
{
|
|
$sql = ' delete from $g4[mail_table] where ma_id = "$_POST[ma_id]" ';
|
|
sql_query($sql);
|
|
}
|
|
|
|
goto_url('./mail_list.php');
|
|
?>
|