<?
/* K-Rate
(C) Rinalds Uzkalns, 2003-2004. All Rights Reserved
http://turn-k.net

Version: 1.00 (22.09.04)
*/
?>
<?

//add new favourite
   if ($en['act'] == 'add') {
        $en['err'] = '';
        $res = sql_query("SELECT * FROM $membtable WHERE m_user='$en[user]'");
        $line = sql_fetch_assoc($res);

    //check errors
        if (sql_num_rows($res) == 0) $en['err'] = _no_user;
        if (strtolower($en['user']) == strtolower($en['m_user'])) $en['err'] = _cant_add_self;
        $res = sql_query("SELECT * FROM $favstable WHERE f_fav='$line[m_id]' AND f_user='$en[m_id]'");
        if (sql_num_rows($res) > 0) $en['err'] = _already_added;

        if ($en['err'] == '') {

                sql_query("INSERT INTO $favstable (f_user,f_fav,f_notes,f_time,f_ip)
                                           VALUES ($en[m_id],$line[m_id],'".sql_escape_string(stripslashes(strip_tags($en['notes'])))."',".time().",'$en[ip]')");

                $en['message'] = _fav_added;

                } else {
                
                $en['message'] = '<font color=red><b>'._fav_error.': '.$en['err'].'</b></font>';

                }
        }

//save favourites
   if ($en['act'] == 'save') {
        if (is_array($_POST['notes']))
                foreach ($_POST['notes'] as $key => $value)
                        sql_query("UPDATE $favstable SET f_notes='".sql_escape_string(stripslashes(strip_tags($value)))."' WHERE f_id=$key AND f_user=$en[m_id]");
   
        if (is_array($_POST['del']))
                foreach ($_POST['del'] as $key => $value)
                    if ($value == 'ON')
                        sql_query("DELETE FROM $favstable WHERE f_id=$key AND f_user=$en[m_id]");

        }

?>