JohnCMS 4.х.х (проблемы)

<?php

ini_set('display_errors', 1);
error_reporting(-1);

define('_IN_JOHNCMS', 1);
define('ROOT', $_SERVER['DOCUMENT_ROOT']);

require ROOT .'/incfiles/core.php';
require ROOT .'/incfiles/head.php';

$teams = mysql_fetch_assoc(
mysql_query("
SELECT `id`,`home`, `away` , `status` , `img1` , `img2` , `date`
FROM `games`;"
)
);

switch ($act) {
case 'add':
if ($user_id && $rights >= 7) {
if (isset($_POST['submit'])) {
$home = isset($_POST['home']) ? trim($_POST['home']) : '';
$away = isset($_POST['away']) ? trim($_POST['away']) : '';
$img1 = isset($_POST['img1']) ? trim($_POST['img1']) : '';
$img2 = isset($_POST['img2']) ? trim($_POST['img2']) : '';
$date = isset($_POST['date']) ? trim($_POST['date']) : '';
$sts = isset($_POST['sts']) ? functions::check(mb_substr(trim($_POST['sts']), 0, 2)) : '';

$error = array();
if (empty($home))
$error[] = 'Не введен команда';
if (empty($away))
$error[] = 'Не введен команда!';
if (empty($sts))
$error[] = 'Не введен статус!';
if (empty($img1))
$error[] = 'Не введен изображение команда!';
if (empty($img2))
$error[] = 'Не введен изображение команда!';
if (empty($date))
$error[] = 'Не введен дата!';

echo '<form action="games.php?act=add" method="post"><div class="menu">'.
(isset($error['home']) ? '<span class="red"><small>' . implode('<br />', $error['home']) . '</small></span><br />' : '') .
'<b>Дома:</b> <input type="text" name="home" maxlength="25" value="' . htmlspecialchars($home) . '"' . (isset($error['home']) ? ' style="background-color: #FFCCCC"' : '') . '/><br />' .
(isset($error['away']) ? '<span class="red"><small>' . implode('<br />', $error['away']) . '</small></span><br />' : '') .
'<b>Mehmon:</b> <input type="text" name="away" maxlength="25" value="' . htmlspecialchars($away) . '"' . (isset($error['away']) ? ' style="background-color: #FFCCCC"' : '') . '/><br />' .
(isset($error['sts']) ? '<span class="red"><small>' . $error['sts'] . '</small></span><br />' : '') .
'<select name="sts"' . (isset($error['sts']) ? ' style="background-color: #FFCCCC"' : '') . '>' .
'<option value="1"' . ($sts == '1' ? ' selected="selected"' : '') . '>Ожидается</option>' .
'<option value="2"' . ($sts == '2' ? ' selected="selected"' : '') . '>Завершен</option>' .
'</select>' .
(isset($error['img1']) ? '<span class="red"><small>' . implode('<br />', $error['img1']) . '</small></span><br />' : '') .
'<b>Mezbon jamoa emblemasi:</b> <input type="text" name="home" maxlength="70" value="' . htmlspecialchars($img1) . '"' . (isset($error['img1']) ? ' style="background-color: #FFCCCC"' : '') . '/><br />' .
(isset($error['img2']) ? '<span class="red"><small>' . implode('<br />', $error['img2']) . '</small></span><br />' : '') .
'<b>Mehmon jamoa emblemasi:</b> <input type="text" name="home" maxlength="70" value="' . htmlspecialchars($img2) . '"' . (isset($error['img2']) ? ' style="background-color: #FFCCCC"' : '') . '/><br />' .
(isset($error['img2']) ? '<span class="red"><small>' . implode('<br />', $error['img2']) . '</small></span><br />' : '') .
'<b>Vaqti: (24.08.2017 10:16)</b> <input type="text" name="date" maxlength="11" value="' . htmlspecialchars($date) . '"' . (isset($error['date']) ? ' style="background-color: #FFCCCC"' : '') . '/><br />' .
'<input type="submit" name="submit" value="Добавить"/></div></form>';
if (!$error) {
mysql_query('INSERT INTO `games` SET
`home` = "' . mysql_real_escape_string($home) . '",
`away` = "' . mysql_real_escape_string($away) . '",
`date` = "' . mysql_real_escape_string($date) . '",
`sts` = "' . mysql_real_escape_string($sts) . '",
`img1` = "' . mysql_real_escape_string($img1) . '",
`img2` = "' . mysql_real_escape_string($img2) . '"
');

header('location: ?');
} else {
echo functions::display_error($error, '<a href="games.php">Назад</a>');
}
}
}
break;

case 'edit':
if ($user_id && $rights >= 7) {
if (isset($_POST['submit'])) {
$home = isset($_POST['home']) ? functions::checkin(mb_substr(trim($_POST['home']), 0, 25)) : '';
$away = isset($_POST['away']) ? functions::checkin(mb_substr(trim($_POST['away']), 0, 25)) : '';
$sts = isset($_POST['sts']) ? functions::checkin(mb_substr(trim($_POST['sts']), 0, 1)) : '';
$img1 = isset($_POST['img1']) ? functions::checkin(mb_substr(trim($_POST['img1']), 0, 1)) : '';
$img2 = isset($_POST['img2']) ? functions::checkin(mb_substr(trim($_POST['img2']), 0, 1)) : '';
$date = isset($_POST['date']) ? functions::checkin(mb_substr(trim($_POST['date']), 0, 11)) : '';
if (empty($home))
$error[] = 'Не все поля введены!';
if (!$error) {
mysql_query('UPDATE `games` SET
`home` = "' . mysql_real_escape_string($message) . '",
`away` = "' . mysql_real_escape_string($away) . '",
`date` = "' . mysql_real_escape_string($date) . '",
`sts` = "' . mysql_real_escape_string($sts) . '",
`img1` = "' . mysql_real_escape_string($img1) . '",
`img2` = "' . mysql_real_escape_string($img2) . '"
');

header('location: ?');
} else {
echo functions::display_error($error, '<a href="games.php">Назад</a>');
}
}
}
break;
default:
$req = mysql_query("SELECT `id`, `home`, `sts`, `away`, `img1`, `img2` , `date` FROM `games` ORDER BY `id` DESC LIMIT 5");
$i = 1;
while (($row = mysql_fetch_assoc($req)) !== false) {

echo'<div class="phdr">Матч центр</div>'.
'<div class="menu">'.
'<table>
<tr>
<td>
<img src="'.$row["img1"].'" width="32" height="32"/>
</td>
<td>
'.$row["sts"].'
</td>
<td>
<img src="'.$row["img2"].'" width="32" height="32"/>
</td>
</tr>
<tr>
<td>
'.$row["home"].'
</td>
<td>
'.$row["date"].'
</td>
<td>
'.$row["away"].'
</td>
</tr>
</table>
</div>';
$i;
}
break;
}
require ROOT .'/incfiles/end.php';
?>