Prefix all GPC variables according to our coding standard
This commit is contained in:
@@ -12,25 +12,25 @@ require(BASE."include/mail.php");
|
||||
|
||||
$aClean = array(); //array of filtered user input
|
||||
|
||||
$aClean['appId'] = makeSafe($_REQUEST['appId']);
|
||||
$aClean['submit'] = makeSafe($_REQUEST['submit']);
|
||||
$aClean['iAppId'] = makeSafe($_REQUEST['iAppId']);
|
||||
$aClean['sSubmit'] = makeSafe($_REQUEST['sSubmit']);
|
||||
|
||||
if(!is_numeric($aClean['appId']))
|
||||
if(!is_numeric($aClean['iAppId']))
|
||||
{
|
||||
util_show_error_page("Wrong ID");
|
||||
exit;
|
||||
}
|
||||
|
||||
if(!($_SESSION['current']->hasPriv("admin") || $_SESSION['current']->isSuperMaintainer($aClean['appId'])))
|
||||
if(!($_SESSION['current']->hasPriv("admin") || $_SESSION['current']->isSuperMaintainer($aClean['iAppId'])))
|
||||
{
|
||||
util_show_error_page("Insufficient Privileges!");
|
||||
exit;
|
||||
}
|
||||
|
||||
if(!empty($aClean['submit']))
|
||||
if(!empty($aClean['sSubmit']))
|
||||
{
|
||||
process_app_version_changes(false);
|
||||
redirect(apidb_fullurl("appview.php?appId={$aClean['appId']}"));
|
||||
redirect(apidb_fullurl("appview.php?iAppId={$aClean['iAppId']}"));
|
||||
}
|
||||
else
|
||||
// Show the form for editing the Application Family
|
||||
@@ -38,7 +38,7 @@ else
|
||||
$family = new TableVE("edit");
|
||||
|
||||
|
||||
$oApp = new Application($aClean['appId']);
|
||||
$oApp = new Application($aClean['iAppId']);
|
||||
|
||||
if(!$oApp)
|
||||
{
|
||||
@@ -54,7 +54,7 @@ else
|
||||
$oApp->OutputEditor("");
|
||||
|
||||
echo '<table border=0 cellpadding=6 cellspacing=0 width="100%">', "\n";
|
||||
echo '<tr><td colspan=2 align=center><input type="submit" name=submit value="Update Database"></td></tr>',"\n";
|
||||
echo '<tr><td colspan=2 align=center><input type="submit" name=sSubmit value="Update Database"></td></tr>',"\n";
|
||||
echo '</table>', "\n";
|
||||
echo "</form>";
|
||||
|
||||
@@ -62,7 +62,7 @@ else
|
||||
|
||||
// url edit form
|
||||
echo '<form enctype="multipart/form-data" action="editAppFamily.php" method="post">',"\n";
|
||||
echo '<input type=hidden name="appId" value='.$oApp->iAppId.'>';
|
||||
echo '<input type=hidden name="iAppId" value='.$oApp->iAppId.'>';
|
||||
echo html_frame_start("Edit URL","90%","",0);
|
||||
echo '<table border=0 cellpadding=6 cellspacing=0 width="100%">',"\n";
|
||||
|
||||
@@ -95,18 +95,18 @@ else
|
||||
echo '<td class=color1><b>URL</b></td></tr>',"\n";
|
||||
}
|
||||
echo "</td></tr>\n";
|
||||
echo "<input type=hidden name='rows' value='$i'>";
|
||||
echo "<input type=hidden name='iRows' value='$i'>";
|
||||
|
||||
echo '<tr><td class=color1>New</td><td class=color1><input size=45% type="text" name="url_desc"></td>',"\n";
|
||||
echo '<td class=color1><input size=45% name="url" type="text"></td></tr>',"\n";
|
||||
echo '<tr><td class=color1>New</td><td class=color1><input size=45% type="text" name="sUrlDesc"></td>',"\n";
|
||||
echo '<td class=color1><input size=45% name="sUrl" type="text"></td></tr>',"\n";
|
||||
|
||||
echo '<tr><td colspan=3 align=center class=color3><input type="submit" name=submit value="Update URL"></td></tr>',"\n";
|
||||
echo '<tr><td colspan=3 align=center class=color3><input type="submit" name=sSubmit value="Update URL"></td></tr>',"\n";
|
||||
|
||||
echo '</table>',"\n";
|
||||
echo html_frame_end();
|
||||
echo "</form>";
|
||||
|
||||
echo html_back_link(1,BASE."appview.php?appId=$oApp->iAppId");
|
||||
echo html_back_link(1,BASE."appview.php?iAppId=$oApp->iAppId");
|
||||
}
|
||||
|
||||
apidb_footer();
|
||||
|
||||
Reference in New Issue
Block a user