ACC SHELL

<?php
$url = input($_GET['text']);

$q="SELECT nadpis, text FROM stranky WHERE url = '$url'";
@extract( mysql_fetch_assoc( mysql_query($q) ) );

if( isset($_POST['s']) )
{
	$text = wysInput($_POST['text']);
	
	$q="UPDATE stranky SET text = '$text' WHERE url = '$url'";
	mysql_query($q);
	
	die( header("Location: admin.php?text=$url") );
}

$nav = array(
	"text=$url" => $nadpis
);
?>
<?php include 'head.inc.php'; ?>
<form action="<?php echo "admin.php?text=$url"; ?>" method="post" class="form">
<fieldset>
<legend><?php echo $nadpis; ?></legend>
<textarea name="text" cols="78" rows="5" id="text"><?php echo @$text; ?></textarea>
</fieldset>
<p><input type="submit" name="s" value="Uložit" /></p>
</form>
<?php include 'foot.inc.php'; ?>