Add files via upload

html/ban/ban.php

@@ -39,22 +39,53 @@
  
 	    $url = mysqli_real_escape_string($link, $_POST['url']);
 		$delete = mysqli_real_escape_string($link, $_POST['delete']);
-
+		
+		$result = mysqli_query($link,"SELECT id, shard FROM windex WHERE url = '".$url."'");
+		if ($result === false)  
+		{
+		  $error = 'Error: ' . mysqli_error($link);  
+		  include 'error.html.php';  
+		  exit(); 
+		}
+		while($row = mysqli_fetch_array($result))
+		{
+			$idArray[] = $row['id'];
+			$shardArray[] = $row['shard'];
+		}
+		
+		$id = $idArray[0];
+		$shard = $shardArray[0];	
+		
 		if($delete == 'on')
 		{
-			$sql = "DELETE FROM windex WHERE url = '".$url."'";
+			$sql = "DELETE FROM ws$shard WHERE id = $id AND url = '".$url."'";
 		}
 		else
 		{
-			$sql = "UPDATE windex SET enable = 0 WHERE url = '".$url."'";
+			$sql = "UPDATE ws$shard SET enable = 0 WHERE id = $id AND url = '".$url."'";
 		}
 
 		if (!mysqli_query($link, $sql))   
 		{
-		  $error = 'Error fetching index: ' . mysqli_error($link);  
+		  $error = 'Error: ' . mysqli_error($link);  
 		  include 'error.html.php';  
 		  exit(); 
+		}		
+		
+		if($delete == 'on')
+		{
+			$sql = "DELETE FROM windex WHERE id = $id AND url = '".$url."'";
+		}
+		else
+		{
+			$sql = "UPDATE windex SET enable = 0 WHERE id = $id AND url = '".$url."'";
 		}
+		if (!mysqli_query($link, $sql))   
+		{
+		  $error = 'Error: ' . mysqli_error($link);  
+		  include 'error.html.php';  
+		  exit(); 
+		}		
 
 	    $output = 'No errors '.  $url;