Complete rewrite of and , wrapper functions added, see bug #101

[mailer.git] / inc / modules / admin / what-config_mods.php

diff --git a/inc/modules/admin/what-config_mods.php b/inc/modules/admin/what-config_mods.php
index 2b1c292599a2f1de98680b0afbffb1f7a52c2b4a..e8afadd7f404af305f9e08505dca8119628ea52a 100644 (file)
--- a/inc/modules/admin/what-config_mods.php
+++ b/inc/modules/admin/what-config_mods.php
@@ -41,15 +41,15 @@ if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
 ADD_DESCR("admin", __FILE__);
 
 $SEL = 0;
-if (isset($_POST['edit'])) {
+if (REQUEST_ISSET_POST(('edit'))) {
        // Check if at least one module is selected
-       $SEL = SELECTION_COUNT($_POST['sel']);
+       $SEL = SELECTION_COUNT(REQUEST_POST('sel'));
        if ($SEL > 0) {
                // Output header
                $OUT = ""; $SW = 2;
 
                // Edit selected modules
-               foreach ($_POST['sel'] as $id => $sel) {
+               foreach (REQUEST_POST('sel') as $id => $sel) {
                        // Load module data
                        $result = SQL_QUERY_ESC("SELECT module, title, locked, hidden, admin_only, mem_only FROM `{!_MYSQL_PREFIX!}_mod_reg` WHERE id=%s LIMIT 1",
                                array(bigintval($id)), __FILE__, __LINE__);
@@ -80,18 +80,25 @@ if (isset($_POST['edit'])) {
                LOAD_TEMPLATE("admin_settings_saved", false, getMessage('MODS_NOTHING_SELECTED'));
 
                // Remove maybe confusing data
-               unset($_POST['edit']);
-               unset($_POST['change']);
+               REQUEST_UNSET_POST(('edit'));
+               REQUEST_UNSET_POST(('change'));
        }
-} elseif (isset($_POST['change'])) {
+} elseif (REQUEST_ISSET_POST(('change'))) {
        // Change modules
-       foreach ($_POST['sel'] as $id => $sel) {
+       foreach (REQUEST_POST('sel') as $id => $sel) {
                // Secure ID number
                $id = bigintval($id);
 
                // Update module
                SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_mod_reg` SET `title`='%s', `locked`='%s', hidden='%s', admin_only='%s', mem_only='%s' WHERE id=%s LIMIT 1",
-                       array($_POST['title'][$id], $_POST['locked'][$id], $_POST['hidden'][$id], $_POST['admin'][$id], $_POST['member'][$id], $id),  __FILE__, __LINE__);
+                       array(
+                               REQUEST_POST('title', $id),
+                               REQUEST_POST('locked', $id),
+                               REQUEST_POST('hidden', $id),
+                               REQUEST_POST('admin', $id),
+                               REQUEST_POST('member', $id),
+                               $id
+                       ),  __FILE__, __LINE__);
        }
 
        // Remove cache file if version matches