Hacked By AnonymousFox

<?
include("../lib/session.php"); 
include("../lib/config.php");
include("../lib/connect.php");
include("../lib/function.php");
$Idexam1=$_POST["Idexam1"];
$Group1=$_POST["Group"];
$Eduyear=$_POST["Eduyear"];

$sql="select * from cm_mod_detailpoint  where cm_mod_detailpoint_ExamID='$Idexam1' and cm_mod_detailpoint_GroupID='$Group1'  and cm_mod_detailpoint_Eduyear='$Eduyear' order by cm_mod_detailpoint_ID asc";
$query = mysql_query($sql);
$row=mysql_fetch_array($query);
		for($i=0;$i<count($_POST["addpoint"]);$i++)
		{    
		$array=$_POST["addpoint"][$i];
		$array1=$_POST["id"][$i];
		//$sql2 = "update exam_point1 set $item_id = '$array' where ID = '$d'";
		 $sql2 = "update cm_mod_detailpoint set cm_mod_detailpoint_Point='$array' where cm_mod_detailpoint_ID='$array1' ";
		$query2=mysql_query($sql2);	
		}
		
header("Location: editpoint.php?Idexam=&Group=$Group1&Eduyear=$Eduyear");
?>