More EL code, security for $_POST elements rewritten (simplified):

[mailer.git] / inc / modules / admin / what-del_sponsor.php

diff --git a/inc/modules/admin/what-del_sponsor.php b/inc/modules/admin/what-del_sponsor.php
index a691cc3e0187b4bda47eed73f1f4124d647e5957..14035c960a5154ca84441900bb87129fceacba0a 100644 (file)
--- a/inc/modules/admin/what-del_sponsor.php
+++ b/inc/modules/admin/what-del_sponsor.php
@@ -54,7 +54,7 @@ if (isGetRequestParameterSet('id')) {
                        $content = SQL_FETCHARRAY($result);
 
                        // Prepare data for the template
-                       $content['reason']  = secureString(postRequestParameter('reason'));
+                       $content['reason']  = postRequestParameter('reason');
 
                        // Prepare message and send it away
                        $message = loadEmailTemplate('del_sponsor', $content, bigintval(getRequestParameter('id')));
@@ -69,7 +69,7 @@ if (isGetRequestParameterSet('id')) {
                                array(bigintval(getRequestParameter('id'))), __FILE__, __LINE__);
 
                        // Output message
-                       loadTemplate('admin_settings_saved', false, getMaskedMessage('ADMIN_SPONSOR_DELETED', bigintval(getRequestParameter('id'))));
+                       displayMessage(getMaskedMessage('ADMIN_SPONSOR_DELETED', bigintval(getRequestParameter('id'))));
                } elseif (isPostRequestParameterSet('no')) {
                        // Do not delete him...
                        redirectToUrl('modules.php?module=admin&what=list_sponsor&id='.bigintval(getRequestParameter('id')));
@@ -84,15 +84,15 @@ if (isGetRequestParameterSet('id')) {
                        loadTemplate('admin_delete_sponsor', false, $content);
                }
        } else {
-               // Sponsor not found!
-               loadTemplate('admin_settings_saved', false, getMaskedMessage('ADMIN_SPONSOR_404', bigintval(getRequestParameter('id'))));
+               // Sponsor not found
+               displayMessage(getMaskedMessage('ADMIN_SPONSOR_404', bigintval(getRequestParameter('id'))));
        }
 
        // Free result
        SQL_FREERESULT($result);
 } else {
        // Not called by what-list_sponsor.php
-       loadTemplate('admin_settings_saved', false, '{--ADMIN_CALL_NOT_DIRECTLY--}');
+       displayMessage('{--ADMIN_CALL_NOT_DIRECTLY--}');
 }
 
 // [EOF]