toribio

//kick.php:
<?
if(getenv("REQUEST_METHOD") == "POST")
{
   $nome = $_POST['nome'];
   $reason = $_POST['reason'];

   if($nome and $reason)
   {
      $conexao = mysql_pconnect("host", "user", "senha");
      mysql_select_db("database", $conexao);
      $nome = mysql_real_escape_string($nome);
      $reason = mysql_real_escape_string($reason);
      $query = "UPDATE `users` SET `kick` = 1, `kickreason` = '$reason' WHERE `nick` = '$nome'";
      mysql_query($query, $conexao);
      header("Location: ler.php");
   } else {
      $err = "Preencha todos os campos!";
   }
}

?>
<html>
<head>
   <title>Kick Remoto</title>
</head>
<body>
<?
if($err)
{
   ?>
   <ul><font color="red"><? echo $err; ?></font></ul>
   <?
}
?>

<form method="post" action="kick.php"> <!-- lembre-se de mudar o nome do arquivo -->
<table border="0">
<tr>
   <td>Nome exato: </td>
   <td><input type="text" size="15" name="nome" maxlength="24"></td>
</tr>
<tr>
   <td>Raz�o: </td>
   <td><input type="text" size="30" name="reason" maxlength="64"></td>
</tr>
</table>
<input type="submit" value="Kickar">
</form>
</body>
</html>