All database names are now 'back-ticked' and constant _MYSQL_PREFIX is wrapped. Partl...

[mailer.git] / inc / modules / admin / what-payments.php

diff --git a/inc/modules/admin/what-payments.php b/inc/modules/admin/what-payments.php
index f744849d10830b516952b668564b6188b870918c..81cfb28433ca1ee3fb1907e69a9bea3c74556e52 100644 (file)
--- a/inc/modules/admin/what-payments.php
+++ b/inc/modules/admin/what-payments.php
@@ -50,8 +50,8 @@ if (isset($_POST['ok'])) {
        $SQL = array();
        switch ($_GET['do']) {
        case "add":
        $SQL = array();
        switch ($_GET['do']) {
        case "add":

-               $SQLs[] = "INSERT INTO "._MYSQL_PREFIX."_payments (time, payment, mail_title, price) VALUES ('".$_POST['t_wait']."','".$_POST['payment']."','".$_POST['title']."','".$_POST['price']."')";
-               $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_payments WHERE time='%s' LIMIT 1",
+               $SQLs[] = "INSERT INTO `{!MYSQL_PREFIX!}_payments` (time, payment, mail_title, price) VALUES ('".$_POST['t_wait']."','".$_POST['payment']."','".$_POST['title']."','".$_POST['price']."')";
+               $result = SQL_QUERY_ESC("SELECT id FROM `{!MYSQL_PREFIX!}_payments` WHERE time='%s' LIMIT 1",

                 array($_POST['t_wait']), __FILE__, __LINE__);
                if (SQL_NUMROWS($result) == 1) {
                        // Free memory
                 array($_POST['t_wait']), __FILE__, __LINE__);
                if (SQL_NUMROWS($result) == 1) {
                        // Free memory


@@ -62,13 +62,13 @@ if (isset($_POST['ok'])) {
 
        case "edit":
                foreach ($_POST['time'] as $id => $value) {
 
        case "edit":
                foreach ($_POST['time'] as $id => $value) {

-                       $SQLs[] = "UPDATE "._MYSQL_PREFIX."_payments SET time='".$value."', payment='".$_POST['pay'][$id]."', price='".$_POST['price'][$id]."', mail_title='".$_POST['title'][$id]."' WHERE id='".$id."' LIMIT 1";
+                       $SQLs[] = "UPDATE `{!MYSQL_PREFIX!}_payments` SET time='".$value."', payment='".$_POST['pay'][$id]."', price='".$_POST['price'][$id]."', mail_title='".$_POST['title'][$id]."' WHERE id='".$id."' LIMIT 1";

                }
                break;
 
        case "del":
                foreach ($_POST['id'] as $id => $value) {
                }
                break;
 
        case "del":
                foreach ($_POST['id'] as $id => $value) {

-                       $SQLs[] = "DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_payments WHERE id='".$id."' LIMIT 1";
+                       $SQLs[] = "DELETE LOW_PRIORITY FROM `{!MYSQL_PREFIX!}_payments` WHERE id='".$id."' LIMIT 1";

                }
                break;
        }
                }
                break;
        }


@@ -89,7 +89,7 @@ if (isset($_POST['ok'])) {
        // Delete entries here
        $SW = 2; $OUT = "";
        foreach ($_POST['sel'] as $id => $value) {
        // Delete entries here
        $SW = 2; $OUT = "";
        foreach ($_POST['sel'] as $id => $value) {

-               $result = SQL_QUERY_ESC("SELECT time, mail_title FROM "._MYSQL_PREFIX."_payments WHERE id=%s LIMIT 1",
+               $result = SQL_QUERY_ESC("SELECT time, mail_title FROM `{!MYSQL_PREFIX!}_payments` WHERE id=%s LIMIT 1",

                        array(bigintval($id)), __FILE__, __LINE__);
                list($time, $title) = SQL_FETCHROW($result);
                SQL_FREERESULT($result);
                        array(bigintval($id)), __FILE__, __LINE__);
                list($time, $title) = SQL_FETCHROW($result);
                SQL_FREERESULT($result);


@@ -114,7 +114,7 @@ if (isset($_POST['ok'])) {
        // Edit entries
        $SW = 2; $OUT = "";
        foreach ($_POST['sel'] as $id => $value) {
        // Edit entries
        $SW = 2; $OUT = "";
        foreach ($_POST['sel'] as $id => $value) {

-               $result = SQL_QUERY_ESC("SELECT time, payment, mail_title, price FROM "._MYSQL_PREFIX."_payments WHERE id=%s LIMIT 1",
+               $result = SQL_QUERY_ESC("SELECT time, payment, mail_title, price FROM `{!MYSQL_PREFIX!}_payments` WHERE id=%s LIMIT 1",

                 array(bigintval($id)), __FILE__, __LINE__);
                list($time, $pay, $title, $price) = SQL_FETCHROW($result);
                SQL_FREERESULT($result);
                 array(bigintval($id)), __FILE__, __LINE__);
                list($time, $pay, $title, $price) = SQL_FETCHROW($result);
                SQL_FREERESULT($result);


@@ -139,7 +139,7 @@ if (isset($_POST['ok'])) {
        LOAD_TEMPLATE("admin_edit_payments");
 } else {
        // Referal levels
        LOAD_TEMPLATE("admin_edit_payments");
 } else {
        // Referal levels

-       $result = SQL_QUERY("SELECT id, time, payment, mail_title, price FROM "._MYSQL_PREFIX."_payments ORDER BY time", __FILE__, __LINE__);
+       $result = SQL_QUERY("SELECT id, time, payment, mail_title, price FROM `{!MYSQL_PREFIX!}_payments` ORDER BY time", __FILE__, __LINE__);

        if (SQL_NUMROWS($result) > 0) {
                // Make referal levels editable and deletable
                $SW = 2; $OUT = "";
        if (SQL_NUMROWS($result) > 0) {
                // Make referal levels editable and deletable
                $SW = 2; $OUT = "";