summaryrefslogtreecommitdiff
path: root/includes/pages/admin_faq.php
diff options
context:
space:
mode:
Diffstat (limited to 'includes/pages/admin_faq.php')
-rw-r--r--includes/pages/admin_faq.php47
1 files changed, 15 insertions, 32 deletions
diff --git a/includes/pages/admin_faq.php b/includes/pages/admin_faq.php
index b8ba1a64..2cd75955 100644
--- a/includes/pages/admin_faq.php
+++ b/includes/pages/admin_faq.php
@@ -4,14 +4,7 @@ function admin_faq() {
$faqs_html = "";
$faqs = sql_select("SELECT * FROM `FAQ`");
foreach ($faqs as $faq) {
- $faqs_html .= sprintf(
- '<tr><td> <dl><dt>%s</dt><dd>%s</dd></dl> </td>'
- . '<td> <dl><dt>%s</dt><dd>%s</dd></dl> </td>'
- . '<td><a href="%s&action=edit&id=%s">Edit</a></td></tr>',
- $faq['Frage_de'], $faq['Antwort_de'],
- $faq['Frage_en'], $faq['Antwort_en'],
- page_link_to('admin_faq'), $faq['FID']
- );
+ $faqs_html .= sprintf('<tr><td> <dl><dt>%s</dt><dd>%s</dd></dl> </td>' . '<td> <dl><dt>%s</dt><dd>%s</dd></dl> </td>' . '<td><a href="%s&action=edit&id=%s">Edit</a></td></tr>', $faq['Frage_de'], $faq['Antwort_de'], $faq['Frage_en'], $faq['Antwort_en'], page_link_to('admin_faq'), $faq['FID']);
}
return template_render('../templates/admin_faq.html', array (
'link' => page_link_to("admin_faq"),
@@ -20,17 +13,12 @@ function admin_faq() {
} else {
switch ($_REQUEST['action']) {
case 'create' :
- $frage = strip_request_item_nl('frage');
- $antwort = strip_request_item_nl('antwort');
+ $frage = strip_request_item_nl('frage');
+ $antwort = strip_request_item_nl('antwort');
$question = strip_request_item_nl('question');
- $answer = strip_request_item_nl('answer');
+ $answer = strip_request_item_nl('answer');
- sql_query("INSERT INTO `FAQ` SET `Frage_de`='" . sql_escape($frage)
- . "', `Frage_en`='" . sql_escape($question)
- . "', `Antwort_de`='" . sql_escape($antwort)
- . "', `Antwort_en`='" . sql_escape($answer)
- . "'"
- );
+ sql_query("INSERT INTO `FAQ` SET `Frage_de`='" . sql_escape($frage) . "', `Frage_en`='" . sql_escape($question) . "', `Antwort_de`='" . sql_escape($antwort) . "', `Antwort_en`='" . sql_escape($answer) . "'");
header("Location: " . page_link_to("admin_faq"));
break;
@@ -39,34 +27,29 @@ function admin_faq() {
if (isset ($_REQUEST['id']) && preg_match("/^[0-9]{1,11}$/", $_REQUEST['id']))
$id = $_REQUEST['id'];
else
- return error("Incomplete call, missing FAQ ID.");
+ return error("Incomplete call, missing FAQ ID.", true);
$faq = sql_select("SELECT * FROM `FAQ` WHERE `FID`=" . sql_escape($id) . " LIMIT 1");
if (count($faq) > 0) {
list ($faq) = $faq;
- $frage = strip_request_item_nl('frage');
- $antwort = strip_request_item_nl('antwort');
+ $frage = strip_request_item_nl('frage');
+ $antwort = strip_request_item_nl('antwort');
$question = strip_request_item_nl('question');
- $answer = strip_request_item_nl('answer');
+ $answer = strip_request_item_nl('answer');
- sql_query("UPDATE `FAQ` SET `Frage_de`='" . sql_escape($frage)
- . "', `Frage_en`='" . sql_escape($question)
- . "', `Antwort_de`='" . sql_escape($antwort)
- . "', `Antwort_en`='" . sql_escape($answer)
- . "' WHERE `FID`=" . sql_escape($id) . " LIMIT 1"
- );
+ sql_query("UPDATE `FAQ` SET `Frage_de`='" . sql_escape($frage) . "', `Frage_en`='" . sql_escape($question) . "', `Antwort_de`='" . sql_escape($antwort) . "', `Antwort_en`='" . sql_escape($answer) . "' WHERE `FID`=" . sql_escape($id) . " LIMIT 1");
header("Location: " . page_link_to("admin_faq"));
} else
- return error("No FAQ found.");
+ return error("No FAQ found.", true);
break;
case 'edit' :
if (isset ($_REQUEST['id']) && preg_match("/^[0-9]{1,11}$/", $_REQUEST['id']))
$id = $_REQUEST['id'];
else
- return error("Incomplete call, missing FAQ ID.");
+ return error("Incomplete call, missing FAQ ID.", true);
$faq = sql_select("SELECT * FROM `FAQ` WHERE `FID`=" . sql_escape($id) . " LIMIT 1");
if (count($faq) > 0) {
@@ -81,14 +64,14 @@ function admin_faq() {
'answer' => $faq['Antwort_en']
));
} else
- return error("No FAQ found.");
+ return error("No FAQ found.", true);
break;
case 'delete' :
if (isset ($_REQUEST['id']) && preg_match("/^[0-9]{1,11}$/", $_REQUEST['id']))
$id = $_REQUEST['id'];
else
- return error("Incomplete call, missing FAQ ID.");
+ return error("Incomplete call, missing FAQ ID.", true);
$faq = sql_select("SELECT * FROM `FAQ` WHERE `FID`=" . sql_escape($id) . " LIMIT 1");
if (count($faq) > 0) {
@@ -97,7 +80,7 @@ function admin_faq() {
sql_query("DELETE FROM `FAQ` WHERE `FID`=" . sql_escape($id) . " LIMIT 1");
header("Location: " . page_link_to("admin_faq"));
} else
- return error("No FAQ found.");
+ return error("No FAQ found.", true);
break;
}
}