More fixes, thanks to Piter01

[mailer.git] / inc / modules / admin / what-config_rallye_prices.php

diff --git a/inc/modules/admin/what-config_rallye_prices.php b/inc/modules/admin/what-config_rallye_prices.php
index de11145ca2df8b28b28f356c700dba9794eb9525..1c069121fd262db859c6c138279a461bf67af94a 100644 (file)
--- a/inc/modules/admin/what-config_rallye_prices.php
+++ b/inc/modules/admin/what-config_rallye_prices.php
@@ -32,13 +32,13 @@
  ************************************************************************/
 
 // Some security stuff...
-if ((ereg(basename(__FILE__), $_SERVER['PHP_SELF'])) || (!IS_ADMIN()))
-{
+if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
        $INC = substr(dirname(__FILE__), 0, strpos(dirname(__FILE__), "/inc") + 4) . "/security.php";
        require($INC);
 }
+
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+ADD_DESCR("admin", __FILE__);
 
 if (!empty($_GET['rallye']))
 {
@@ -55,7 +55,7 @@ if (!empty($_GET['rallye']))
                        {
                                // Ok, new price level entered!
                                $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_rallye_prices (rallye_id, price_level, points, info)
-VALUES ('%s', '%s', '%s', '%s')",
+VALUES ('%s','%s','%s','%s')",
  array(
        bigintval($_GET['rallye']),
        bigintval($_POST['level']),
@@ -81,7 +81,7 @@ VALUES ('%s', '%s', '%s', '%s')",
                if ($SEL > 0)
                {
                        // Delete selected entries
-                       foreach ($_POST['sel'] as $id=>$sel)
+                       foreach ($_POST['sel'] as $id => $sel)
                        {
                                $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_rallye_prices WHERE id=%s LIMIT 1",
                                 array(bigintval($id)), __FILE__, __LINE__);
@@ -98,7 +98,7 @@ VALUES ('%s', '%s', '%s', '%s')",
         elseif (isset($_POST['change']))
        {
                // Change entries
-               foreach ($_POST['level'] as $id=>$level)
+               foreach ($_POST['level'] as $id => $level)
                {
                        // Secure ID
                        $id = bigintval($id);
@@ -120,7 +120,7 @@ VALUES ('%s', '%s', '%s', '%s')",
                {
                        // Make selected editable
                        $SW = 2; $OUT = "";
-                       foreach ($_POST['sel'] as $id=>$sel)
+                       foreach ($_POST['sel'] as $id => $sel)
                        {
                                // Load data to selected rallye
                                $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM "._MYSQL_PREFIX."_rallye_prices WHERE id=%s LIMIT 1",
@@ -165,7 +165,7 @@ VALUES ('%s', '%s', '%s', '%s')",
                {
                        // List all prices
                        $SW = 2; $OUT = "";
-                       foreach ($_POST['sel'] as $id=>$sel)
+                       foreach ($_POST['sel'] as $id => $sel)
                        {
                                // Load data to selected rallye
                                $result = SQL_QUERY_ESC("SELECT rallye_id, price_level, points, info FROM "._MYSQL_PREFIX."_rallye_prices WHERE id=%s LIMIT 1",