From 9a3ad8883403949a59e8935497a548ec536f1d40 Mon Sep 17 00:00:00 2001
From: Igor Scheller <igor.scheller@igorshp.de>
Date: Sat, 21 Jan 2017 13:58:53 +0100
Subject: Changed from mysqli to PDO, some refactorings, faster sql queries

---
 includes/pages/user_settings.php | 28 ++++++++++++++++++++--------
 1 file changed, 20 insertions(+), 8 deletions(-)

(limited to 'includes/pages/user_settings.php')

diff --git a/includes/pages/user_settings.php b/includes/pages/user_settings.php
index b848ff5f..5d4ba368 100644
--- a/includes/pages/user_settings.php
+++ b/includes/pages/user_settings.php
@@ -1,5 +1,7 @@
 <?php
 
+use Engelsystem\Database\DB;
+
 /**
  * @return string
  */
@@ -131,11 +133,16 @@ function user_settings_theme($user_source, $themes)
     }
 
     if ($valid) {
-        sql_query("
+        DB::update('
             UPDATE `User`
-            SET `color`='" . sql_escape($user_source['color']) . "'
-            WHERE `UID`='" . sql_escape($user_source['UID']) . "'
-        ");
+            SET `color`=?
+            WHERE `UID`=?
+            ',
+            [
+                $user_source['color'],
+                $user_source['UID'],
+            ]
+        );
 
         success(_('Theme changed.'));
         redirect(page_link_to('user_settings'));
@@ -162,11 +169,16 @@ function user_settings_locale($user_source, $locales)
     }
 
     if ($valid) {
-        sql_query("
+        DB::update('
             UPDATE `User`
-            SET `Sprache`='" . sql_escape($user_source['Sprache']) . "'
-            WHERE `UID`='" . sql_escape($user_source['UID']) . "'
-        ");
+            SET `Sprache`=?
+            WHERE `UID`=?
+        ',
+            [
+                $user_source['Sprache'],
+                $user_source['UID'],
+            ]
+        );
         $_SESSION['locale'] = $user_source['Sprache'];
 
         success('Language changed.');
-- 
cgit v1.3.1