X-Git-Url: https://git.mxchange.org/?p=mailer.git;a=blobdiff_plain;f=inc%2Fmodules%2Fadmin%2Fwhat-admin_add.php;h=8c2bc8fc26619abd63ff70717cf81ea14aecf05a;hp=ca79dcea05f50333fed4c835b6034c619caf14b3;hb=56156f6c4392510cdbe0eb4f2ccefc23b43e2672;hpb=aa106991e88b0dab33bf2a2d2409638e26a4c656 diff --git a/inc/modules/admin/what-admin_add.php b/inc/modules/admin/what-admin_add.php index ca79dcea05..8c2bc8fc26 100644 --- a/inc/modules/admin/what-admin_add.php +++ b/inc/modules/admin/what-admin_add.php @@ -51,7 +51,7 @@ if (!isset($_POST['ok'])) $menus = array(); $titles = array(); $below = array(); // Get all available main menus - $result = SQL_QUERY("SELECT action, title, sort FROM "._MYSQL_PREFIX."_admin_menu WHERE (what='' OR what IS NULL) ORDER BY sort", __FILE__, __LINE__); + $result = SQL_QUERY("SELECT action, title, sort FROM `"._MYSQL_PREFIX."_admin_menu` WHERE (what='' OR what IS NULL) ORDER BY sort", __FILE__, __LINE__); if (SQL_NUMROWS($result) > 0) { // Read menu structure @@ -89,7 +89,7 @@ if (!isset($_POST['ok'])) // Load sub menus :) foreach ($menus as $key_main => $value_main) { - $result = SQL_QUERY_ESC("SELECT what, title, sort FROM "._MYSQL_PREFIX."_admin_menu WHERE action='%s' AND what != '' AND what IS NOT NULL ORDER BY sort", + $result = SQL_QUERY_ESC("SELECT what, title, sort FROM `"._MYSQL_PREFIX."_admin_menu` WHERE action='%s' AND what != '' AND what IS NOT NULL ORDER BY sort", array($value_main), __FILE__, __LINE__); if (SQL_NUMROWS($result) > 0) { @@ -131,15 +131,15 @@ if (!isset($_POST['ok'])) } } } - $OUT = " + \n"; foreach ($below as $key => $m) { if (is_array($m)) { foreach ($m as $key2 => $m2) { - $OUT .= " \n"; + $OUT .= "\n"; } } else { - $OUT .= " \n"; + $OUT .= " \n"; } } - $OUT .= ""; + $OUT .= ""; define('__BELOW_SELECTION' , $OUT); define('__WHAT_SELECTION' , ADMIN_MAKE_MENU_SELECTION("admin", "what", "name")); @@ -170,12 +170,12 @@ if (!isset($_POST['ok'])) if (!empty($_POST['menu'])) { // Add sub menu - $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_admin_menu (`action`,`what`,`title`,`descr`,`sort`) VALUES ('%s','%s','%s','%s','%s')", + SQL_QUERY_ESC("INSERT INTO `"._MYSQL_PREFIX."_admin_menu` (`action`,`what`,`title`,`descr`,`sort`) VALUES ('%s','%s','%s','%s','%s')", array( $_POST['menu'], $_POST['name'], $_POST['title'], - addslashes($_POST['descr']), + $_POST['descr'], bigintval($_POST['sort']), ), __FILE__, __LINE__ ); @@ -184,11 +184,11 @@ if (!isset($_POST['ok'])) else { // Add main menu - $result = SQL_QUERY_ESC("INSERT INTO "._MYSQL_PREFIX."_admin_menu (action, title, descr, sort) VALUES ('%s','%s','%s','%s')", + SQL_QUERY_ESC("INSERT INTO `"._MYSQL_PREFIX."_admin_menu` (action, title, descr, sort) VALUES ('%s','%s','%s','%s')", array( $_POST['name'], $_POST['title'], - addslashes($_POST['descr']), + $_POST['descr'], bigintval($_POST['sort']), ), __FILE__, __LINE__ );