Хранилища Subversion ant

<?php

include "./sign-valid.php";

$mode = abs(intval($_POST["mode"]));

$go = "./admin.php";

switch ($mode) {

    case '0':

	    break;

    case '1':

	    // Добавление нового дистрибутива

	    $distname = mysql_real_escape_string($_POST["distName"]);

	    $disttype = abs(intval($_POST["distType"]));

	    $res =& $db->query("INSERT INTO distribution SET distname='$distname', disttype='$disttype'");

	    break;

    case '2':

	    // Правка существующего дистрибутива

	    $distname = mysql_real_escape_string($_POST["distName"]);

	    $disttype = abs(intval($_POST["distType"]));

	    $distID = abs(intval($_POST["distID"]));

	    $res =& $db->query("UPDATE distribution SET distname='$distname', disttype='$disttype' WHERE dist_id='$distID'");

	    break;

    case '3':

	    // Удаление существующего дистрибутива

	    $distID = abs(intval($_POST["distID"]));

	    $res =& $db->query("DELETE FROM distribution WHERE dist_id='$distID'");

	    $res =& $db->query("DELETE FROM sect2dist WHERE dist_id='$distID'");

	    break;

    case '4':

	    // Добавление новой версии дистрибутива

	    $versname = mysql_real_escape_string($_POST["versNam"]);

	    $versnumb = mysql_real_escape_string($_POST["versNum"]);

	    $verscode = mysql_real_escape_string($_POST["versCN"]);

	    $distname = abs(intval($_POST["distName"]));

	    $res =& $db->query("INSERT INTO version SET dist_id='$distname', vname='$versname', version='$versnumb', vcodename='$verscode'");

	    break;

    case '5':

	    // Правка имеющейся версии дистрибутива

	    $versname = mysql_real_escape_string($_POST["versNam"]);

	    $versnumb = mysql_real_escape_string($_POST["versNum"]);

	    $verscode = mysql_real_escape_string($_POST["versCN"]);

	    $distname = abs(intval($_POST["distName"]));

	    $versID   = abs(intval($_POST["versID"]));

	    $res =& $db->query("UPDATE version SET dist_id='$distname', vname='$versname', version='$versnumb', vcodename='$verscode' WHERE version_id='$versID'");

	    break;

    case '6':

	    // Удаление существующей версии дистрибутива

	    $versID = abs(intval($_POST["versID"]));

	    $res =& $db->query("DELETE FROM version WHERE version_id='$versID'");

	    $res =& $db->query("DELETE FROM ver2rep WHERE ver_id='$versID'");

	    break;

    case '7':

            // Добавление нового репозитория

            $versID  = abs(intval($_POST["vers"]));

            $repname = mysql_real_escape_string($_POST["repName"]);

            $repinfo = mysql_real_escape_string($_POST["repInfo"]);

            $reptype = abs(intval($_POST["repType"]));

            $res =& $db->query("INSERT INTO repository SET repname='$repname', repdescribe='$repinfo', reptype='$reptype'");

            $res =& $db->query("SELECT rep_id FROM repository ORDER BY rep_id DESC LIMIT 1");

            $res->fetchInto($rep, DB_FETCHMODE_ASSOC);

            $rep_id = $rep["rep_id"];

            $res =& $db->query("INSERT INTO ver2rep SET ver_id='$versID', rep_id='$rep_id'");

            for ($i=0;$i<count($_POST["sect"]);$i++) {

                $res =& $db->query("INSERT INTO sect2rep SET sect_id='".$_POST["sect"][$i]."', rep_id='$rep_id'");

            }

            break;

    case '8':

	    // Правка репозитория

	    $repID	= abs(intval($_POST["rep"]));

	    $repname	= mysql_real_escape_string($_POST["repName"]);

            $repinfo = mysql_real_escape_string($_POST["repInfo"]);

            $reptype = abs(intval($_POST["repType"]));

            $res =& $db->query("UPDATE repository SET repname='$repname', repdescribe='$repinfo', reptype='$reptype' WHERE rep_id='$repID'");

            $res =& $db->query("DELETE FROM sect2rep WHERE rep_id='$repID'");

            for ($i=0;$i<count($_POST["sect"]);$i++) {

                $res =& $db->query("INSERT INTO sect2rep SET sect_id='".$_POST["sect"][$i]."', rep_id='$repID'");

            }

	    break;

    case '9':

	    // Удаление репозитория

	    $repID	= abs(intval($_POST["rep"]));

	    $res =& $db->query("DELETE FROM repository WHERE rep_id='$repID'");

	    $res =& $db->query("DELETE FROM sect2rep WHERE rep_id='$repID'");

	    $res =& $db->query("DELETE FROM ver2rep WHERE rep_id='$repID'");

	    break;

    case '10':

	    // Создание секции

	    $sectname	= mysql_real_escape_string($_POST["sectName"]);

	    $sectinfo	= mysql_real_escape_string($_POST["sectInfo"]);

	    $req =& $db->query("INSERT INTO section SET sectname='$sectname', sectinfo='$sectinfo'");

	    $req =& $db->query("SELECT sect_id FROM section ORDER BY sect_id DESC LIMIT 1");

	    $req->fetchInto($sect, DB_FETCHMODE_ASSOC);

	    for($i=0;$i<count($_POST["dist"]);$i++) {

		$req =& $db->query("INSERT INTO sect2dist SET dist_id='".$_POST["dist"][$i]."', sect_id='".$sect["sect_id"]."'");

	    }

	    break;

    case '11':

	    // Правка секции

	    $sectID	= abs(intval($_POST["sectID"]));

	    $sectname	= mysql_real_escape_string($_POST["sectName"]);

	    $sectinfo	= mysql_real_escape_string($_POST["sectInfo"]);

	    $req =& $db->query("UPDATE section SET sectname='$sectname', sectinfo='$sectinfo' WHERE sect_id='$sectID'");

	    $req =& $db->query("DELETE FROM sect2dist WHERE sect_id='$sectID'");

	    for($i=0;$i<count($_POST["dist"]);$i++) {

		$req =& $db->query("INSERT INTO sect2dist SET dist_id='".$_POST["dist"][$i]."', sect_id='".$sectID."'");

	    }

	    break;

    case '12':

	    // Удаление секции

	    $sectID	= abs(intval($_POST["sectID"]));

	    $req =& $db->query("DELETE FROM section WHERE sect_id='$sectID'");

	    $req =& $db->query("DELETE FROM sect2dist WHERE sect_id='$sectID'");

	    $req =& $db->query("DELETE FROM sect2rep WHERE sect_id='$sectID'");

	    break;

}

header("Location: $go\n\n");

?>