All database names are now 'back-ticked' and constant _MYSQL_PREFIX is wrapped. Partl...

[mailer.git] / inc / modules / admin / what-list_cats.php

diff --git a/inc/modules/admin/what-list_cats.php b/inc/modules/admin/what-list_cats.php
index 096f1423fec677fb030b24f4794cf425ba3b534e..6575e661635e68506c98c1d335ea7e5bb927d43a 100644 (file)
--- a/inc/modules/admin/what-list_cats.php
+++ b/inc/modules/admin/what-list_cats.php
@@ -43,7 +43,7 @@ ADD_DESCR("admin", __FILE__);
 
 if (!empty($_GET['u_id'])) {
        // Check if the user already exists
-       $result = SQL_QUERY_ESC("SELECT surname, family, email FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1",
+       $result = SQL_QUERY_ESC("SELECT surname, family, email FROM `{!MYSQL_PREFIX!}_user_data` WHERE userid=%s LIMIT 1",
         array(bigintval($_GET['u_id'])), __FILE__, __LINE__);
        if (SQL_NUMROWS($result) == 1) {
                // Loads surname, family's name and the email address
@@ -57,19 +57,19 @@ if (!empty($_GET['u_id'])) {
                define('__EMAIL'       , "<a href=\"".CREATE_EMAIL_LINK($email, "user_data")."\">".$sname." ".$fname."</a>");
 
                // Ok, list categories of this user
-               $result_cats = SQL_QUERY("SELECT id, cat FROM "._MYSQL_PREFIX."_cats ORDER BY sort", __FILE__, __LINE__);
+               $result_cats = SQL_QUERY("SELECT id, cat FROM `{!MYSQL_PREFIX!}_cats` ORDER BY sort", __FILE__, __LINE__);
 
                if (SQL_NUMROWS($result_cats) > 0) {
                        // List categories
                        $cnt = "1"; $SW = 2; $OUT = "";
                        while (list($cid, $cat) = SQL_FETCHROW($result_cats)) {
                                // Check user's selection
-                               $result_user = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_cats WHERE userid=%s AND cat_id=%s LIMIT 1",
+                               $result_user = SQL_QUERY_ESC("SELECT id FROM `{!MYSQL_PREFIX!}_user_cats` WHERE userid=%s AND cat_id=%s LIMIT 1",
                                 array(bigintval($_GET['u_id']), bigintval($cid)), __FILE__, __LINE__);
 
                                // Set selection
-                               $SELECTED = "<FONT color=\"red\">".NO."</div>";
-                               if (SQL_NUMROWS($result_user) == 1) $SELECTED = "<FONT color=\"green\">".YES."</div>";
+                               $SELECTED = "<font color=\"red\">{!NO!}</div>";
+                               if (SQL_NUMROWS($result_user) == 1) $SELECTED = "<font color=\"green\">{!YES!}</div>";
 
                                // Prepare array for the row template
                                $content = array(