- if (!empty($SQL))
- {
- $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_pool SET
-subject='%s',
-text='%s',
-url='%s'
-WHERE id=%s LIMIT 1",
- array(
- addslashes($_POST['subj']),
- addslashes($_POST['text']),
- addslashes($_POST['url']),
- bigintval($_POST['id']),
-), __FILE__, __LINE__);
- if (SQL_AFFECTEDROWS($link, __FILE__, __LINE__) == 1)
- {
- $content = "<SPAN class=\"admin_done\">".SETTINGS_SAVED."</SPAN>";
- }
- else
- {
- $content = "<SPAN class=\"admin_failed\">".SETTINGS_NOT_SAVED."</SPAN>";
- }
- }
- else
- {
- $content = "<SPAN class=\"admin_failed\">".SETTINGS_NOT_SAVED."</SPAN>";
+ SQL_QUERY_ESC("UPDATE
+ `{?_MYSQL_PREFIX?}_pool`
+SET
+ `subject`='%s',
+ `text`='%s',
+ `url`='%s'
+WHERE
+ `id`=%s
+LIMIT 1",
+ array(
+ postRequestParameter('subject'),
+ postRequestParameter('text'),
+ postRequestParameter('url'),
+ bigintval(postRequestParameter('id')),
+ ), __FILE__, __LINE__);
+
+ if (!SQL_HASZEROAFFECTED()) {
+ $content = '{--SETTINGS_SAVED--}';
+ } else {
+ $content = '<span class="notice">{--SETTINGS_NOT_SAVED--}</span>';