Unnessarry addslashes() and SQL_ESCAPE() removed, some added, some bigintval() added

[mailer.git] / inc / modules / admin / what-payments.php

diff --git a/inc/modules/admin/what-payments.php b/inc/modules/admin/what-payments.php
index 9e002454169a6932c2a5939c645c417c1210bb14..b78d8b9465996193b526358887fa7ab19d31109f 100644 (file)
--- a/inc/modules/admin/what-payments.php
+++ b/inc/modules/admin/what-payments.php
@@ -32,13 +32,12 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN()))
-{
+if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
 }
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+ADD_DESCR("admin", __FILE__);
 
 if (empty($_GET['do'])) unset($_GET['do']);
 if (((empty($_POST['t_wait'])) || (empty($_POST['payment']))) && (!empty($_GET['do'])) && ($_GET['do'] == "add"))
@@ -52,7 +51,7 @@ if (isset($_POST['ok']))
        switch ($_GET['do'])
        {
        case "add":
-               $SQL[] = "INSERT INTO "._MYSQL_PREFIX."_payments (time, payment, mail_title, price) VALUES ('".$_POST['t_wait']."', '".$_POST['payment']."', '".$_POST['title']."', '".$_POST['price']."')";
+               $SQL[] = "INSERT INTO "._MYSQL_PREFIX."_payments (time, payment, mail_title, price) VALUES ('".$_POST['t_wait']."','".$_POST['payment']."','".$_POST['title']."','".$_POST['price']."')";
                $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_payments WHERE time='%s' LIMIT 1",
                 array($_POST['t_wait']), __FILE__, __LINE__);
                if (SQL_NUMROWS($result) == 1)
@@ -64,14 +63,14 @@ if (isset($_POST['ok']))
                break;
 
        case "edit":
-               foreach ($_POST['time'] as $id=>$value)
+               foreach ($_POST['time'] as $id => $value)
                {
                        $SQL[] = "UPDATE "._MYSQL_PREFIX."_payments SET time='".$value."', payment='".$_POST['pay'][$id]."', price='".$_POST['price'][$id]."', mail_title='".$_POST['title'][$id]."' WHERE id='".$id."' LIMIT 1";
                }
                break;
 
        case "del":
-               foreach ($_POST['id'] as $id=>$value)
+               foreach ($_POST['id'] as $id => $value)
                {
                        $SQL[] = "DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_payments WHERE id='".$id."' LIMIT 1";
                }
@@ -110,7 +109,7 @@ if (isset($_POST['ok']))
 {
        // Delete entries here
        $SW = 2; $OUT = "";
-       foreach ($_POST['sel'] as $id=>$value)
+       foreach ($_POST['sel'] as $id => $value)
        {
                $result = SQL_QUERY_ESC("SELECT time, mail_title FROM "._MYSQL_PREFIX."_payments WHERE id=%s LIMIT 1",
                 array(bigintval($id)), __FILE__, __LINE__);
@@ -138,7 +137,7 @@ if (isset($_POST['ok']))
 {
        // Edit entries
        $SW = 2; $OUT = "";
-       foreach ($_POST['sel'] as $id=>$value)
+       foreach ($_POST['sel'] as $id => $value)
        {
                $result = SQL_QUERY_ESC("SELECT time, payment, mail_title, price FROM "._MYSQL_PREFIX."_payments WHERE id=%s LIMIT 1",
                 array(bigintval($id)), __FILE__, __LINE__);
@@ -166,11 +165,11 @@ if (isset($_POST['ok']))
 }
  else
 {
-       // Referral levels
+       // Referal levels
        $result = SQL_QUERY("SELECT id, time, payment, mail_title, price FROM "._MYSQL_PREFIX."_payments ORDER BY time", __FILE__, __LINE__);
        if (SQL_NUMROWS($result) > 0)
        {
-               // Make referral levels editable and deletable
+               // Make referal levels editable and deletable
                $SW = 2; $OUT = "";
 
                // List already existing categories for editing
@@ -202,7 +201,7 @@ if (isset($_POST['ok']))
                LOAD_TEMPLATE("admin_list_payments");
        }
 
-       // Form for adding new referral levels
+       // Form for adding new referal levels
        LOAD_TEMPLATE("admin_add_payment");
 }