Changeset 1801 for trunk/site/admin/adminwizard.php

Timestamp:

09/07/10 19:27:32 (21 months ago)

Author:

paparazzia

Message:

fix #373 (refix for admin notices)

Files:

• trunk/site/admin/adminwizard.php (modified) (5 diffs)

trunk/site/admin/adminwizard.php

@@ -131 +131 @@
         case "unlock_boat":
             $query = "UPDATE users " ;
-            if ( quote_smart($_REQUEST['lock']) ) {
+            if ( get_cgi_var('lock') ) {
                 $querysgo = "SELECT coastpenalty FROM races WHERE idraces = ".$race;
                 $resgo = wrapper_mysql_db_query_writer($querysgo) or die("Query [$query] failed \n");
                 $row = mysql_fetch_assoc($resgo);
                 $coastpenalty = $row['coastpenalty'];
-                if ( intval(quote_smart($_REQUEST['coastpenalty'])) != $coastpenalty ) {
-                    $coastpenalty = intval(quote_smart($_REQUEST['coastpenalty']));
+                if ( intval(get_cgi_var('coastpenalty')) != $coastpenalty ) {
+                    $coastpenalty = intval(get_cgi_var('coastpenalty'));
                 }
                 $reltime = time() + $coastpenalty;
@@ -152 +152 @@
             break;
         case "maj_nextwp":
-             $nwp=quote_smart($_REQUEST['nwp']);
+             $nwp = get_cgi_var('nwp');
        $query = "update users set nextwaypoint= " .  $nwp . 
                "     where idusers = " .  $boat . 
@@ -163 +163 @@
        break;
         case "maj_position":
-             $longitude=quote_smart($_REQUEST['targetlong']);
-             $latitude=quote_smart($_REQUEST['targetlat']);
+             $longitude = get_cgi_var('targetlong');
+             $latitude  = get_cgi_var('targetlat');
        $query = "insert into positions (time, `long`, `lat`, idusers, race) " . 
                              "values   (" . 
@@ -178 +178 @@
        break;
         case "reset_pass":
-            $newpass=quote_smart($_REQUEST['newpass']);
+            $newpass = get_cgi_var('newpass');
             $query = "update users set password= '" .  $newpass . "'" .
                      "     where idusers = " .  $boat . 
@@ -187 +187 @@
             break;
         case "reset_username":
-            $newusern=quote_smart($_REQUEST['newusern']);
+            $newusern = get_cgi_var('newusern');
             $query = "update users set username= '" .  addslashes($newusern) . "'" .
                      "     where idusers = " .  $boat .