может вот ? addit.php
<?
include('inc/db_connect.php');
include('inc/html_header.php'); $stat = mysql_fetch_array(mysql_query("select * from players where user='".addslashes($user)."' and pass='".addslashes($pass)."'"));
mysql_query("SET CHARSET cp1251");
if ($stat['admin']==1) {
$sp=mysql_query("SELECT * FROM items WHERE art=1 OR name='attack' ORDER BY tip");
echo"
<body bgcolor=ebedec>
<form action='' method=post>
<TABLE cellspacing=0 cellpadding=3 bordercolor=A5A5A5 bgcolor=e2e0e0 border=1>
<TR><TD align=center width=15><b>#</b></TD><TD><b>Имя</b></TD><TD width=90 align=center><b>Картинка</b></TD></TR>
";
while ($s=mysql_fetch_array($sp)) {
echo"<TR><TD align=center><input type=radio name='addit' value='$s[name]'></TD><TD>$s[title] - [$s[name]]</TD><TD align=center><img src='/i/items/$s[name].gif'></TD></TR>";
}
echo"
<TR><TD colspan=3 align=center><input type=text name=adduser style='width: 300px'></TD></TR>
<TR><TD colspan=3 align=center><input type=submit style='width: 300px'></TD></TR>
</TABLE>
</form>
";
if (!empty($addit) && !empty($adduser)) {
$inf=mysql_fetch_array(mysql_query("SELECT * FROM items where name='".addslashes($addit)."'"));
if ($inf['tip'] == 1 && $inf['slot2'] == "w5") $secondary=1; else $secondary=0;
$infs="$inf[name]|$inf[title]|$inf[price]|0|$secondary|$inf[art]|0|$inf[iznos]";
$min="$inf[min_level]|$inf[min_str]|$inf[min_dex]|$inf[min_ag]|$inf[min_vit]|$inf[min_razum]|$inf[min_rase]";
mysql_query("INSERT INTO `objects` (`user` , `inf` , `min` , `tip`, `br1` , `br2` , `br3` , `br4` , `br5` , `min_d` , `max_d` , `hp` , `energy` , `strength` , `dex` , `agility` , `vitality` , `razum` , `krit` , `unkrit` , `uv` , `unuv`) values ('$adduser','$infs','$min','$inf[tip]','$inf[br1]','$inf[br2]','$inf[br3]','$inf[br4]','$inf[br5]','$inf[min]','$inf[max]','$inf[hp]','$inf[energy]','$inf[strength]','$inf[dex]','$inf[agility]','$inf[vitality]','$inf[razum]','$inf[krit]','$inf[unkrit]','$inf[uv]','$inf[unuv]')");
echo mysql_error();
echo "All Done!"; }
}
?>
