<?php
header("Content-Type: text/html;charset=utf-8");

include_once('config.php');

$link_mysql = mysql_connect($mysql_server, $mysql_user, $mysql_password);
mysql_query("SET NAMES utf8");

if (!$link_mysql) {
    die('Could not connect: ' . mysql_error());
}

$db_selected = mysql_select_db($mysql_database, $link_mysql);
if (!$db_selected) {
    die ('Can\'t use foo : ' . mysql_error());
}

if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

if ($_POST['id']){	

	if ( stripslashes($_POST['type'])=="delete" ) {
		$queryInsert = sprintf("DELETE FROM `taglist` WHERE `id` = %s", stripslashes($_POST['id']));
		$resultInsert = mysql_query($queryInsert);
	}
	
	if (get_magic_quotes_gpc()) {
		$id = stripslashes($_POST['id']);
		$name = stripslashes($_POST['name']);
		$tag = stripslashes($_POST['tag']);
		$color = stripslashes($_POST['color']);
		$type = stripslashes($_POST['type']);
	} else {
		$id = $_POST['id'];
		$name = $_POST['name'];
		$tag = $_POST['tag'];
		$color = $_POST['color'];
		$type = $_POST['type'];
	}
	
	if ( $type=="insert" ) {
		$query1 = sprintf("INSERT INTO `taglist` (`id`, `name`, `tag`, `color`, `systemName`) VALUES (%s, %s, %s, %s, %s)",
						GetSQLValueString($id, "int"),
						GetSQLValueString($name, "text"),
						GetSQLValueString($tag, "text"),
						GetSQLValueString($color, "text"),
						GetSQLValueString($systemNAME, "text"));
		$result1 = mysql_query($query1);
	} else {
		$queryInsert = sprintf("UPDATE taglist SET `name`=%s, `tag`=%s, `color`=%s WHERE `id`=%s",
						GetSQLValueString($name, "text"),
						GetSQLValueString($tag, "text"),
						GetSQLValueString($color, "text"),
						GetSQLValueString($id, "int"));
		$resultInsert = mysql_query($queryInsert);
	}
}
?>