All database names are now 'back-ticked' and constant _MYSQL_PREFIX is wrapped. Partl...

[mailer.git] / inc / modules / admin / what-refbanner.php

diff --git a/inc/modules/admin/what-refbanner.php b/inc/modules/admin/what-refbanner.php
index 3d7e88f021f6d954ad27c53bf2cbaca98694f7df..d9a27694f23dc92b498567cb4bd787eff9d2f220 100644 (file)
--- a/inc/modules/admin/what-refbanner.php
+++ b/inc/modules/admin/what-refbanner.php
@@ -38,17 +38,20 @@ if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
 }
 
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+ADD_DESCR("admin", __FILE__);
 
+// Init variable
 $SEL = 0;
-if ((empty($_POST['url'])) || (empty($_POST['alternate'])))
-{
+
+// Some sanity-check
+if ((empty($_POST['url'])) || (empty($_POST['alternate']))) {
        unset($_POST['ok']);
 }
+
+// Check selection count
 if (!empty($_POST['sel'])) $SEL = SELECTION_COUNT($_POST['sel']);
 
-if (isset($_POST['ok']))
-{
+if (isset($_POST['ok'])) {
        // Fix older calls from add-new-banner-form
        if (empty($_GET['mode'])) $_GET['mode'] = "add";
        $SQL = "";
@@ -56,52 +59,43 @@ if (isset($_POST['ok']))
        {
        case "add":
                // Check if banner is already added
-               $result = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_refbanner WHERE url='%s' LIMIT 1",
-                array($_POST['url']), __FILE__, __LINE__);
-               if (SQL_NUMROWS($result) == 0)
-               {
+               $result = SQL_QUERY_ESC("SELECT id FROM `{!MYSQL_PREFIX!}_refbanner` WHERE url='%s' LIMIT 1",
+                       array($_POST['url']), __FILE__, __LINE__);
+               if (SQL_NUMROWS($result) == 0) {
                        // Add banner
-                       $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_refbanner (url, alternate, visible)
+                       SQL_QUERY_ESC("INSERT INTO `{!MYSQL_PREFIX!}_refbanner` (url, alternate, visible)
 VALUES ('%s','%s','%s')",
- array($_POST['url'], $_POST['alternate'], $_POST['visible']), __FILE__, __LINE__);
-               }
-                else
-               {
+                               array($_POST['url'], $_POST['alternate'], $_POST['visible']), __FILE__, __LINE__);
+               } else {
                        // Free memory
                        SQL_FREERESULT($result);
                }
                break;
 
        case "edit": // Update banner
-               foreach ($_POST['sel'] as $id => $sel)
-               {
+               foreach ($_POST['sel'] as $id => $sel) {
                        // Secure ID
                        $id = bigintval($id);
 
                        // Update entry
-                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_refbanner SET url='%s', alternate='%s', visible='%s' WHERE id=%s LIMIT 1",
-                        array($_POST['url'][$id], $_POST['alternate'][$id], $_POST['visible'], $id), __FILE__, __LINE__);
+                       SQL_QUERY_ESC("UPDATE `{!MYSQL_PREFIX!}_refbanner` SET url='%s', alternate='%s', visible='%s' WHERE id=%s LIMIT 1",
+                               array($_POST['url'][$id], $_POST['alternate'][$id], $_POST['visible'], $id), __FILE__, __LINE__);
                }
                break;
        }
-       if (SQL_AFFECTEDROWS() == 1)
-       {
-               $content = "<SPAN class=\"admin_done\">".SETTINGS_SAVED."</SPAN>";
-       }
-        else
-       {
-               $content = "<SPAN class=\"admin_failed\">".SETTINGS_NOT_SAVED."</SPAN>";
+
+       if (SQL_AFFECTEDROWS() == 1) {
+               $content = SETTINGS_SAVED;
+       } else {
+               $content = "<span class=\"admin_failed\">".SETTINGS_NOT_SAVED."</span>";
        }
        LOAD_TEMPLATE("admin_settings_saved", false, $content);
-}
- elseif (($SEL > 0) && (isset($_POST['edit'])))
-{
+} elseif (($SEL > 0) && (isset($_POST['edit']))) {
        // Edit banner
        $SW = ""; $OUT = "";
-       foreach ($_POST['sel'] as $id => $sel)
-       {
+       foreach ($_POST['sel'] as $id => $sel) {
                // Load data
-               $result = SQL_QUERY_ESC("SELECT url, alternate, visible FROM "._MYSQL_PREFIX."_refbanner WHERE id=%s LIMIT 1",
+               $result = SQL_QUERY_ESC("SELECT url, alternate, visible FROM `{!MYSQL_PREFIX!}_refbanner` WHERE id=%s LIMIT 1",
                 array(bigintval($id)), __FILE__, __LINE__);
                list($url, $alt, $vis) = SQL_FETCHROW($result);
                SQL_FREERESULT($result);
@@ -123,21 +117,18 @@ VALUES ('%s','%s','%s')",
 
        // Load main template
        LOAD_TEMPLATE("admin_refbanner_edit");
-}
- else
-{
+} else {
        if (($SEL > 0) && (isset($_POST['del'])))
        {
                // Delete banner
-               foreach ($_POST['sel'] as $id => $sel)
-               {
-                       $result = SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_refbanner WHERE id=%s LIMIT 1",
-                        array(bigintval($id)), __FILE__, __LINE__);
+               foreach ($_POST['sel'] as $id => $sel) {
+                       SQL_QUERY_ESC("DELETE LOW_PRIORITY FROM `{!MYSQL_PREFIX!}_refbanner` WHERE id=%s LIMIT 1",
+                               array(bigintval($id)), __FILE__, __LINE__);
                }
        }
 
        // Referal levels
-       $result = SQL_QUERY("SELECT id, url, alternate, visible, counter, clicks FROM "._MYSQL_PREFIX."_refbanner ORDER BY url", __FILE__, __LINE__);
+       $result = SQL_QUERY("SELECT id, url, alternate, visible, counter, clicks FROM `{!MYSQL_PREFIX!}_refbanner` ORDER BY url", __FILE__, __LINE__);
        if (SQL_NUMROWS($result) > 0)
        {
                // Make referal banner editable and deletable