Gazelle/sections/reportsv2/ajax_update_comment.php

25 lines
556 B
PHP
Raw Normal View History

2011-03-28 14:21:28 +00:00
<?
// perform the back end of updating a report comment
authorize();
if(!check_perms('admin_reports')){
error(403);
}
if(empty($_POST['reportid']) || !is_number($_POST['reportid'])) {
echo 'HAX ATTEMPT!'.$_GET['reportid'];
die();
}
$ReportID = $_POST['reportid'];
$Message = db_string($_POST['comment']);
//Message can be blank!
$DB->query("SELECT ModComment FROM reportsv2 WHERE ID=".$ReportID);
list($ModComment) = $DB->next_record();
if(isset($ModComment)) {
$DB->query("Update reportsv2 SET ModComment='".$Message."' WHERE ID=".$ReportID);
}