Reply to thread

Message

<blockquote data-quote="Logic" data-source="post: 173875" data-attributes="member: 12691">Thanks to my friend, he helped me secure the delnews2.php. Replace your hk/delnews2.html with the below code:&nbsp;[CODE]&lt;!doctype html&gt;&lt;html lang=&quot;en&quot;&gt;&nbsp;&lt;head&gt;&nbsp; &lt;meta charset=&quot;utf-8&quot;&gt;&nbsp; &lt;title&gt;Adminity - Delete News&lt;/title&gt;&nbsp; &lt;link rel=&quot;shortcut icon&quot; href=&quot;{url}/app/tpl/skins/{skin}/hk/favicon.gif&quot;&gt;&nbsp; &lt;!---CSS Files--&gt;&nbsp; &lt;link rel=&quot;stylesheet&quot; href=&quot;{url}/app/tpl/skins/{skin}/hk/css/master.css&quot;&gt;&nbsp; &lt;!---jQuery Files--&gt;&nbsp; &lt;script src=&quot;{url}/app/tpl/skins/{skin}/hk/js/jquery-1.7.1.min.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;script src=&quot;{url}/app/tpl/skins/{skin}/hk/js/jquery-ui-1.8.17.min.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;script src=&quot;{url}/app/tpl/skins/{skin}/hk/js/styler.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;script src=&quot;{url}/app/tpl/skins/{skin}/hk/js/jquery.tipTip.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;script src=&quot;{url}/app/tpl/skins/{skin}/hk/js/colorpicker.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;script src=&quot;{url}/app/tpl/skins/{skin}/hk/js/sticky.full.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;script src=&quot;{url}/app/tpl/skins/{skin}/hk/js/global.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;!---Fonts--&gt;&nbsp; &lt;link href='http://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700' rel='stylesheet' type='text/css'&gt;&nbsp; &lt;!--[if lt IE 9]&gt;&nbsp; &lt;script src=&quot;http://html5shiv.googlecode.com/svn/trunk/html5.js&quot;&gt;&lt;/script&gt;&nbsp; &lt;![endif]--&gt;&lt;/head&gt;&lt;body&gt;&nbsp;&nbsp; &lt;!--- HEADER --&gt;&nbsp;&nbsp; &lt;?php include_once('inc/header.html'); ?&gt;&nbsp;&nbsp; &lt;!--- CONTENT AREA --&gt;&nbsp;&nbsp; &lt;center&gt;&nbsp; &nbsp; &nbsp; &lt;div id=&quot;content_container&quot;&gt;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &lt;div id=&quot;content&quot;&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;!-- insert the page content here --&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &lt;br /&gt;&nbsp; &nbsp; &nbsp; &nbsp; &lt;?php&nbsp;&nbsp; &nbsp; include_once 'databaseconfig.php';&nbsp;&nbsp; &nbsp; if ( isset( $_POST['id'] ) )&nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; // clean your input&nbsp; &nbsp; &nbsp; &nbsp; $news_id = mysql_real_escape_string($_POST['id']);&nbsp; &nbsp; &nbsp; &nbsp; $query = mysql_query(&quot;SELECT `id` FROM `cms_news` WHERE `id` = '&quot; . $news_id . &quot;'&quot;);&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; // check if the news id even exists&nbsp; &nbsp; &nbsp; &nbsp; if ( mysql_num_rows( $query ) &gt; 0 )&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; mysql_query(&quot;DELETE FROM `cms_news` WHERE `id` = '&quot; . $news_id . &quot;'&quot;);&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;News article deleted&quot;;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; else&nbsp; &nbsp; &nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; echo &quot;News article doesn't exist.&quot;;&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp;&nbsp; &nbsp; }&nbsp; &nbsp; else&nbsp; &nbsp; {&nbsp;&nbsp; &nbsp; &nbsp; &nbsp; echo &quot;Missing news article ID.&quot;;&nbsp;&nbsp; &nbsp; }?&gt;&nbsp;&lt;/center&gt;&lt;?php include_once('inc/footer.html'); ?&gt;[/CODE]&nbsp;UPDATE: Here's the entire HK I secured all the &quot;delete&quot; pages.&nbsp;Download: <a href="https://mega.co.nz/#!2Zww2Lja!G0L8YhyWvRraz_VePRQnmA5UfbRvOBvt_jogrwCHln0" target="_blank">https://mega.co.nz/#!2Zww2Lja!G0L8YhyWvRraz_VePRQnmA5UfbRvOBvt_jogrwCHln0</a>&nbsp;Code snippet above.</blockquote>

[QUOTE="Logic, post: 173875, member: 12691"] Thanks to my friend, he helped me secure the delnews2.php. Replace your hk/delnews2.html with the below code: [CODE] <!doctype html> <html lang="en"> <head> <meta charset="utf-8"> <title>Adminity - Delete News</title> <link rel="shortcut icon" href="{url}/app/tpl/skins/{skin}/hk/favicon.gif">  <link rel="stylesheet" href="{url}/app/tpl/skins/{skin}/hk/css/master.css">  <script src="{url}/app/tpl/skins/{skin}/hk/js/jquery-1.7.1.min.js"></script> <script src="{url}/app/tpl/skins/{skin}/hk/js/jquery-ui-1.8.17.min.js"></script> <script src="{url}/app/tpl/skins/{skin}/hk/js/styler.js"></script> <script src="{url}/app/tpl/skins/{skin}/hk/js/jquery.tipTip.js"></script> <script src="{url}/app/tpl/skins/{skin}/hk/js/colorpicker.js"></script> <script src="{url}/app/tpl/skins/{skin}/hk/js/sticky.full.js"></script> <script src="{url}/app/tpl/skins/{skin}/hk/js/global.js"></script>  <link href='http://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700' rel='stylesheet' type='text/css'>  </head> <body>  <?php include_once('inc/header.html'); ?>  <center> <div id="content_container"> <div id="content">  <?php include_once 'databaseconfig.php'; if ( isset( $_POST['id'] ) ) { // clean your input $news_id = mysql_real_escape_string($_POST['id']); $query = mysql_query("SELECT `id` FROM `cms_news` WHERE `id` = '" . $news_id . "'"); // check if the news id even exists if ( mysql_num_rows( $query ) > 0 ) { mysql_query("DELETE FROM `cms_news` WHERE `id` = '" . $news_id . "'"); echo "News article deleted"; } else { echo "News article doesn't exist."; } } else { echo "Missing news article ID."; } ?> </center> <?php include_once('inc/footer.html'); ?> [/CODE] UPDATE: Here's the entire HK I secured all the "delete" pages. Download: [url]https://mega.co.nz/#!2Zww2Lja!G0L8YhyWvRraz_VePRQnmA5UfbRvOBvt_jogrwCHln0[/url] Code snippet above. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members