All database names are now 'back-ticked' and constant _MYSQL_PREFIX is wrapped. Partl...

[mailer.git] / inc / modules / admin / what-config_points.php

diff --git a/inc/modules/admin/what-config_points.php b/inc/modules/admin/what-config_points.php
index 57a98b110391eaa6f10ca0c88af4608a814811c8..357d1222048eae0738aa16607e9e3f6d1944e133 100644 (file)
--- a/inc/modules/admin/what-config_points.php
+++ b/inc/modules/admin/what-config_points.php
@@ -72,14 +72,14 @@ if (isset($_POST['ok'])) {
        switch ($_GET['sub'])
        {
        case "points":
-               $SQLs[] = "UPDATE `"._MYSQL_PREFIX."_config` SET points_register='".$_POST['points_register']."', points_ref='".$_POST['points_ref']."' WHERE config=0 LIMIT 1";
+               $SQLs[] = "UPDATE `{!MYSQL_PREFIX!}_config` SET points_register='".$_POST['points_register']."', points_ref='".$_POST['points_ref']."' WHERE config=0 LIMIT 1";
                break;
 
        case "ref":
                switch ($_GET['do'])
                {
                case "add":
-                       $SQLs[] = "INSERT INTO "._MYSQL_PREFIX."_refdepths (level, percents) VALUES ('".$_POST['lvl']."','".$_POST['perc']."')";
+                       $SQLs[] = "INSERT INTO `{!MYSQL_PREFIX!}_refdepths` (level, percents) VALUES ('".$_POST['lvl']."','".$_POST['perc']."')";
                        break;
 
                case "edit": // Change entries
@@ -91,7 +91,7 @@ if (isset($_POST['ok'])) {
                                $_POST['perc'][$id] = REVERT_COMMA($_POST['perc'][$id]);
 
                                // Update entry
-                               SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_refdepths SET level='%s', percents='%s' WHERE id=%s LIMIT 1",
+                               SQL_QUERY_ESC("UPDATE `{!MYSQL_PREFIX!}_refdepths` SET level='%s', percents='%s' WHERE id=%s LIMIT 1",
                                        array(bigintval($value), $_POST['perc'][$id], $id), __FILE__, __LINE__);
                        }
                        $message = REF_DEPTHS_SAVED;
@@ -99,7 +99,7 @@ if (isset($_POST['ok'])) {
 
                case "del":
                        foreach ($_POST['id'] as $id => $value) {
-                               SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_refdepths WHERE id=%s LIMIT 1",
+                               SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!MYSQL_PREFIX!}_refdepths` WHERE id=%s LIMIT 1",
                                        array(bigintval($id)), __FILE__, __LINE__);
                        }
                        $message = REF_DEPTHS_DELETED;
@@ -114,7 +114,7 @@ if (isset($_POST['ok'])) {
 
        case "settings":
                $REF = bigintval($_POST['ref_payout']);
-               $SQLs[] = sprintf("UPDATE `"._MYSQL_PREFIX."_config` SET
+               $SQLs[] = sprintf("UPDATE `{!MYSQL_PREFIX!}_config` SET
 allow_direct_pay='%s',
 reg_points_mode='%s',
 ref_payout='%s'
@@ -125,20 +125,20 @@ WHERE config=0 LIMIT 1",
                );
                if ((getConfig('ref_payout') == 0) && ($_POST['ref_payout'] > 0)) {
                        // Update account's ref_payout for "must-confirm"
-                       $SQLs[] = sprintf("UPDATE `"._MYSQL_PREFIX."_user_data` SET ref_payout=(%s - mails_confirmed)
+                       $SQLs[] = sprintf("UPDATE `{!MYSQL_PREFIX!}_user_data` SET ref_payout=(%s - mails_confirmed)
 WHERE mails_confirmed < %s", $REF, $REF);
                } elseif ((getConfig('ref_payout') > 0) && ($_POST['ref_payout'] == 0)) {
                        // Update account's ref_payout for "not-must-confirm"
-                       $SQLs[] = "UPDATE `"._MYSQL_PREFIX."_user_data` SET ref_payout=0 WHERE ref_payout > 0";
-                       $SQLs[] = "UPDATE "._MYSQL_PREFIX."_user_points SET points=points+locked_points WHERE locked_points>0";
-                       $SQLs[] = "UPDATE "._MYSQL_PREFIX."_user_points SET locked_points=0 WHERE locked_points>0";
+                       $SQLs[] = "UPDATE `{!MYSQL_PREFIX!}_user_data` SET ref_payout=0 WHERE ref_payout > 0";
+                       $SQLs[] = "UPDATE `{!MYSQL_PREFIX!}_user_points` SET points=points+locked_points WHERE locked_points>0";
+                       $SQLs[] = "UPDATE `{!MYSQL_PREFIX!}_user_points` SET locked_points=0 WHERE locked_points>0";
                }
                break;
        }
 
        if ((isset($SQLs)) && (is_array($SQLs)) && (!empty($SQLs[0]))) {
                if (strpos($SQLs[0], "INSERT") > -1) {
-                       $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_refdepths WHERE level='%s' LIMIT 1",
+                       $result = SQL_QUERY_ESC("SELECT id FROM `{!MYSQL_PREFIX!}_refdepths` WHERE level='%s' LIMIT 1",
                                array(bigintval($_POST['lvl'])), __FILE__, __LINE__);
                        SQL_FREERESULT($result);
                } // END - if
@@ -197,7 +197,7 @@ WHERE mails_confirmed < %s", $REF, $REF);
                // Delete entries
                $SW = 2; $OUT = "";
                foreach ($_POST['sel'] as $id => $value) {
-                       $result = SQL_QUERY_ESC("SELECT level, percents FROM "._MYSQL_PREFIX."_refdepths WHERE id=%s LIMIT 1",
+                       $result = SQL_QUERY_ESC("SELECT level, percents FROM `{!MYSQL_PREFIX!}_refdepths` WHERE id=%s LIMIT 1",
                                array(bigintval($id)), __FILE__, __LINE__);
                        list($lvl, $perc) = SQL_FETCHROW($result);
                        SQL_FREERESULT($result);
@@ -222,7 +222,7 @@ WHERE mails_confirmed < %s", $REF, $REF);
                // Edit entries
                $SW = 2; $OUT = "";
                foreach ($_POST['sel'] as $id => $value) {
-                       $result = SQL_QUERY_ESC("SELECT level, percents FROM "._MYSQL_PREFIX."_refdepths WHERE id=%s LIMIT 1",
+                       $result = SQL_QUERY_ESC("SELECT level, percents FROM `{!MYSQL_PREFIX!}_refdepths` WHERE id=%s LIMIT 1",
                         array(bigintval($id)), __FILE__, __LINE__);
                        list($lvl, $perc) = SQL_FETCHROW($result);
                        SQL_FREERESULT($result);
@@ -245,7 +245,7 @@ WHERE mails_confirmed < %s", $REF, $REF);
                LOAD_TEMPLATE("admin_points_edit");
        } else {
                // Referal levels
-               $result = SQL_QUERY("SELECT id, level, percents FROM "._MYSQL_PREFIX."_refdepths ORDER BY level", __FILE__, __LINE__);
+               $result = SQL_QUERY("SELECT id, level, percents FROM `{!MYSQL_PREFIX!}_refdepths` ORDER BY level", __FILE__, __LINE__);
                if (SQL_NUMROWS($result) > 0) {
                        // Make referal levels editable and deletable
                        $SW = 2; $OUT = "";