X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Flibs%2Fsponsor_functions.php;h=7606738e22c41b0ecc2f6e7eac8abc4ace5d0473;hb=0da4efca52cd97ed8b385d81ae03125698f55e93;hp=630db06a0f31aaeebab04cca1b0c97c9e0459d8a;hpb=64c8349613addc3da2242c5cd6b99d64e3fb5f8e;p=mailer.git

diff --git a/inc/libs/sponsor_functions.php b/inc/libs/sponsor_functions.php
index 630db06a0f..7606738e22 100644
--- a/inc/libs/sponsor_functions.php
+++ b/inc/libs/sponsor_functions.php
@@ -1,7 +1,7 @@
 <?php
 /************************************************************************
- * MXChange v0.2.1                                    Start: 04/23/2005 *
- * ===============                              Last change: 05/18/2008 *
+ * Mailer v0.2.1-FINAL                                Start: 04/23/2005 *
+ * ===================                          Last change: 05/18/2008 *
  *                                                                      *
  * -------------------------------------------------------------------- *
  * File              : sponsor_functions.php                            *
@@ -122,7 +122,7 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
 		// Save sponsor?
 		if ($SAVE === true) {
 			// Default is no force even when a guest want to abuse this force switch
-			if ((empty($postData['force'])) || (!isAdmin())) $postData['force'] = 0;
+			if ((empty($postData['force'])) || (!isAdmin())) $postData['force'] = '0';
 
 			// SQL and message string is empty by default
 			$sql = ''; $message = '';
@@ -142,7 +142,7 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
 				// Generate message
 				$message = getMessageFromIndexedArray(getMessage('ADMIN_SPONSOR_UPDATED'), 'updated', $messageArray);
 				$ret = "updated";
-			} elseif (($ALREADY === false) || (($postData['force'] == '1') && (isAdmin()))) {
+			} elseif (($ALREADY === false) || (($postData['force'] == 1) && (isAdmin()))) {
 				// Add new sponsor, first add more data
 				$DATA['keys'][] = 'sponsor_created'; $DATA['values'][] = time();
 				$DATA['keys'][] = 'status';
@@ -175,10 +175,12 @@ function handlSponsorRequest (&$postData, $update=false, $messageArray=array(),
 				$OUT = '';
 				foreach ($postData as $k => $v) {
 					// Do not add 'force' !
-					if ($k != "force") {
-						$OUT .= "<input type=\"hidden\" name=\"".$k."\" value=\"".stripslashes($v)."\" />\n";
-					}
-				}
+					if ($k != 'force') {
+						$OUT .= "<input type=\"hidden\" name=\"" . secureString($k) . "\" value=\"" . SQL_ESCAPE($v) . "\" />\n";
+					} // END - if
+				} // END - foreach
+
+				// Remember data
 				$content['hidden'] = $OUT;
 				$content['email']  = $postData['email'];