X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-config_cats.php;h=5bda6c5df8fd3929021bb2b36ef1c478b30a6d4f;hb=d016e24dd4686f613a17733b96bc28fac936a4ac;hp=ecd7de4b83332bc340651c4b7467ae63ef261afd;hpb=6032b7018b83778f1592383238f4e0d28f718622;p=mailer.git

diff --git a/inc/modules/admin/what-config_cats.php b/inc/modules/admin/what-config_cats.php
index ecd7de4b83..5bda6c5df8 100644
--- a/inc/modules/admin/what-config_cats.php
+++ b/inc/modules/admin/what-config_cats.php
@@ -33,29 +33,29 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN())) {
+if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
 	$INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
 	require($INC);
 }
 
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+ADD_DESCR("admin", __FILE__);
 
 // Init variable to avoid a notice
 $CATS = "";
 
 if (isset($_POST['add'])) {
 	// Add a new category
-	$result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_cats WHERE cat='%s' LIMIT 1",
-	 array(addslashes($_POST['catname'])), __FILE__, __LINE__);
+	$result = SQL_QUERY_ESC("SELECT id FROM `{!_MYSQL_PREFIX!}_cats` WHERE cat='%s' LIMIT 1",
+		array($_POST['catname']), __FILE__, __LINE__);
 	if (SQL_NUMROWS($result) == 0) {
 		// Category does not exists, we simply add it...
-		$result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_cats (cat, visible, sort) VALUES ('%s', '%s', '%s')",
-		 array(addslashes($_POST['catname']), $_POST['visible'], bigintval($_POST['parent'] + 1)), __FILE__, __LINE__);
-		$content = "<SPAN class=\"admin_done\">".CATEGORY_ADDED."</SPAN>";
+		SQL_QUERY_ESC("INSERT INTO `{!_MYSQL_PREFIX!}_cats` (cat, visible, sort) VALUES ('%s','%s','%s')",
+			array($_POST['catname'], $_POST['visible'], bigintval($_POST['parent'] + 1)), __FILE__, __LINE__);
+		$content = CATEGORY_ADDED;
 	} else {
 		// Category does already exists
-		$content = "<SPAN class=\"admin_failed\">".CATEGORY_ALREADY_EXISTS."</SPAN>";
+		$content = "<span class=\"admin_failed\">".CATEGORY_ALREADY_EXISTS."</span>";
 	}
 
 	// Free memory
@@ -66,7 +66,7 @@ if (isset($_POST['add'])) {
 } elseif ((isset($_POST['ok'])) && (isset($_POST['id'])) && (is_array($_POST['id']))) {
 	// Change or delete categories...
 	$TEXT = "";
-	foreach ($_POST['id'] as $id=>$cat) {
+	foreach ($_POST['id'] as $id => $cat) {
 		// Secure ID
 		$id = bigintval($id);
 
@@ -75,16 +75,16 @@ if (isset($_POST['add'])) {
 			switch ($_GET['do'])
 			{
 			case "edit": // Change categories
-				$result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_cats SET cat='%s', visible='%s', sort=%s WHERE id=%s LIMIT 1",
-				 array($cat, $_POST['vis'][$id], $_POST['sort'][$id], $id), __FILE__, __LINE__);
+				SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_cats` SET cat='%s', `visible`='%s', sort=%s WHERE id=%s LIMIT 1",
+					array($cat, $_POST['vis'][$id], $_POST['sort'][$id], $id), __FILE__, __LINE__);
 				$TEXT = CATEGORIES_SAVED;
 				break;
 
 			case "del": // Delete categories
-				$result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_cats WHERE id=%s LIMIT 1",
-				 array($id), __FILE__, __LINE__);
-				$result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_cats WHERE cat_id=%s",
-				 array($id), __FILE__, __LINE__);
+				SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_cats` WHERE id=%s LIMIT 1",
+					array($id), __FILE__, __LINE__);
+				SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!_MYSQL_PREFIX!}_user_cats` WHERE cat_id=%s",
+					array($id), __FILE__, __LINE__);
 				$TEXT = CATEGORIES_DELETED;
 				break;
 			}
@@ -98,16 +98,13 @@ if (isset($_POST['add'])) {
 		// Display message
 		LOAD_TEMPLATE("admin_settings_saved", false, $TEXT);
 	}
-}
- elseif ((isset($_POST['del'])) && ((SELECTION_COUNT($_POST['sel']) > 0) || (isset($_POST['sel'][0]))))
-{
+} elseif ((isset($_POST['del'])) && ((SELECTION_COUNT($_POST['sel']) > 0) || (isset($_POST['sel'][0])))) {
 	// Delete categories
 	$SW = 2; $OUT = "";
-	foreach ($_POST['sel'] as $id=>$value)
-	{
+	foreach ($_POST['sel'] as $id => $value) {
 		// Load data of category
-		$result = SQL_QUERY_ESC("SELECT cat FROM "._MYSQL_PREFIX."_cats WHERE id=%s LIMIT 1",
-		 array(bigintval($id)), __FILE__, __LINE__);
+		$result = SQL_QUERY_ESC("SELECT cat FROM `{!_MYSQL_PREFIX!}_cats` WHERE id=%s LIMIT 1",
+			array(bigintval($id)), __FILE__, __LINE__);
 		list($cat) = SQL_FETCHROW($result);
 		SQL_FREERESULT($result);
 
@@ -129,10 +126,10 @@ if (isset($_POST['add'])) {
 } elseif ((isset($_POST['edit'])) && ((SELECTION_COUNT($_POST['sel']) > 0) || (isset($_POST['sel'][0])))) {
 	// Edit categories
 	$SW = 2; $OUT = "";
-	foreach ($_POST['sel'] as $id=>$value)
+	foreach ($_POST['sel'] as $id => $value)
 	{
 		// Load data from the category
-		$result = SQL_QUERY_ESC("SELECT cat, visible, sort FROM "._MYSQL_PREFIX."_cats WHERE id=%s LIMIT 1",
+		$result = SQL_QUERY_ESC("SELECT cat, visible, sort FROM `{!_MYSQL_PREFIX!}_cats` WHERE id=%s LIMIT 1",
 		 array(bigintval($id)), __FILE__, __LINE__);
 		list($cat, $vis, $sort) = SQL_FETCHROW($result);
 		SQL_FREERESULT($result);
@@ -158,7 +155,7 @@ if (isset($_POST['add'])) {
  else
 {
 	// Load all categories
-	$result = SQL_QUERY("SELECT id, cat, visible, sort FROM "._MYSQL_PREFIX."_cats ORDER BY sort", __FILE__, __LINE__);
+	$result = SQL_QUERY("SELECT id, cat, visible, sort FROM `{!_MYSQL_PREFIX!}_cats` ORDER BY `sort`", __FILE__, __LINE__);
 	if (SQL_NUMROWS($result) > 0)
 	{
 		// List already existing categories for editing
@@ -176,7 +173,7 @@ if (isset($_POST['add'])) {
 
 			// Put cat descriptions into variable for the selection box
 			if (strlen($cat) > 20) $cat = substr($cat, 0, 17)."...";
-			$CATS .= "      <OPTION value=\"".$sort."\">".$cat."</OPTION>\n";
+			$CATS .= "      <option value=\"".$sort."\">".$cat."</option>\n";
 
 			// Load row template and switch color
 			$OUT .= LOAD_TEMPLATE("admin_config_cats_row", true, $content);