Hacked By AnonymousFox

<?
include("../lib/session.php"); 
include("../lib/config.php");
include("../lib/connect.php");
include("../lib/function.php");
 $Idexam1=$_POST["Idexam"];
 $Group1=$_POST["Group"];
 $Eduyear=$_POST["Eduyear"];

$sqlcode="select cm_listsubject_Studentyear from cm_listsubject where cm_listsubject_ID='$Group1'";
$querycode=mysql_query($sqlcode);
$rowcode=mysql_fetch_array($querycode);

$sql="select * from evaluateicm_system_student where year='$Eduyear' order by evaluateicm_system_student_ID asc";
$query = mysql_query($sql);
$row=mysql_fetch_array($query);
		for($i=0;$i<count($_POST["addpoint"]);$i++)
		{    
		$array=$_POST["addpoint"][$i];
		$array1=$_POST["UserName"][$i];
		//$sql2 = "update exam_point1 set $item_id = '$array' where ID = '$d'";
		 $sql2 = "insert into cm_mod_detailpoint(cm_mod_detailpoint_Point,cm_mod_detailpoint_Idstudent,cm_mod_detailpoint_ExamID,cm_mod_detailpoint_GroupID,cm_mod_detailpoint_By,cm_mod_detailpoint_Eduyear) values ('$array','$array1','$rowcode[0]','$Group1','$System_Session_User_ID','$Eduyear')";
		$query2=mysql_query($sql2);	
		}
		
header("Location: editpoint.php?Idexam=&Group=$Group1&Eduyear=$Eduyear");
?>