Viewing File: /home/cienp/public_html/portal/sql_recs.php

<?
    $dt_atua = date("Y-m-d");
    echo ".";

    switch ($_POST[opc]){
        case "ins":

            require "$this->include_dir/conecta.php";

            $s_de_recs = protecao($_POST[de_recs]);
            $s_de_desc = protecao($_POST[de_desc]);

            $sql  = "INSERT INTO ".$pref_tabl."recs ";
            $sql .= "(de_recs, de_desc, dt_cads, id_cads) ";
            $sql .= "VALUES ('$s_de_recs', '$s_de_desc', '$dt_atua', $linhau[id_user])";
            #echo $sql;
            $res  = mysqli_query($conn, $sql);
            
            if ($res) {
                $onde = "index1.php?pg=ins_recs&certo=S";
            } else
                $onde = "index1.php?pg=ins_recs&certo=N";

        break;

        case "alt":

            $erros = 0;

            require "$this->include_dir/conecta.php";

            if ($erros == 0) {

                $s_de_recs = protecao($_POST[de_recs]);
                $s_de_desc = protecao($_POST[de_desc]);
                $s_fl_atvo = protecao($_POST[fl_atvo]);
                $s_id_recs = protecao($_POST[id_recs],'inteiro');

                $sql  = "UPDATE ".$pref_tabl."recs ";
                $sql .= "SET de_recs = '$s_de_recs', ";
                $sql .= "de_desc = '$s_de_desc', ";
                $sql .= "id_cads = '$linhau[id_user]', ";
                $sql .= "dt_cads = '$dt_atua', ";
                $sql .= "fl_atvo = '$s_fl_atvo' ";
                $sql .= "WHERE id_recs = $s_id_recs ";
                $sql .= "LIMIT 1";
                $res  = mysqli_query($conn, $sql);

                if ($res) {
                    $onde = "index1.php?pg=alt_recs&certo=S";
                } else
                    $onde = "index1.php?pg=alt_recs&certo=N";
            }

        break;
        
    }
?>
<form name="retorna" method="post" action="">
    <input type="hidden" name="id_recs" id="id_recs" value="<?=$_POST[id_recs]?>">
    <input type="hidden" name="v_de_recs" id="v_de_recs" value="<?=$_POST[v_de_recs]?>">
    <input type="hidden" name="v_fl_atvo" id="v_fl_atvo" value="<?=$_POST[v_fl_atvo]?>">
    <input name="passa" type="hidden" id="passa" value="yes">
</form>
<?
echo "<SCRIPT LANGUAGE=javascript> \n";
echo "document.retorna.action = '$onde'; \n";
echo "document.retorna.submit(); \n";
echo "</script>";
?>