All database names are now 'back-ticked' and constant _MYSQL_PREFIX is wrapped. Partl...

[mailer.git] / inc / modules / admin / what-stats_mods.php

diff --git a/inc/modules/admin/what-stats_mods.php b/inc/modules/admin/what-stats_mods.php
index 0f160adf3ff439095737084347c717624dd91ad4..9d9fc055063be13c1e9bdb375c7965379edcf23d 100644 (file)
--- a/inc/modules/admin/what-stats_mods.php
+++ b/inc/modules/admin/what-stats_mods.php
@@ -55,7 +55,8 @@ if (($_GET['mod'] == "index") || ($_GET['mod'] == "login"))
        }
 
        // Load module's detail statistic
-       $result = SQL_QUERY("SELECT action, title, counter FROM "._MYSQL_PREFIX."_".$mod."_menu WHERE what != '' ORDER BY counter DESC", __FILE__, __LINE__);
+       $result = SQL_QUERY_ESC("SELECT action, title, counter FROM `{!MYSQL_PREFIX!}_%s_menu` WHERE what != '' AND what IS NOT NULL ORDER BY counter DESC",
+               array($mod), __FILE__, __LINE__);
        $SW = 2; $OUT = "";
        while(list($act, $title, $clicks) = SQL_FETCHROW($result))
        {
@@ -84,7 +85,7 @@ if (($_GET['mod'] == "index") || ($_GET['mod'] == "login"))
  else
 {
        // Load module statics
-       $result = SQL_QUERY("SELECT module, title, clicks FROM "._MYSQL_PREFIX."_mod_reg ORDER BY clicks DESC, module", __FILE__, __LINE__);
+       $result = SQL_QUERY("SELECT module, title, clicks FROM `{!MYSQL_PREFIX!}_mod_reg` ORDER BY clicks DESC, module", __FILE__, __LINE__);
        $SW = 2; $OUT = "";
        while(list($mod, $title, $clicks) = SQL_FETCHROW($result))
        {