Should be escaped

Forum mods show up in staffpm system
This commit is contained in:
What.CD 2011-06-19 08:00:06 +00:00
parent ebf22b6955
commit fae2de3d34
6 changed files with 5 additions and 7 deletions

View File

@ -27,7 +27,7 @@
<strong>Send to: </strong>
<select name="level">
<option value="0" selected="selected">First Line Support</option>
<option value="700">Staff</option>
<option value="650">Staff</option>
</select>
<input type="submit" value="Send message" />

View File

@ -11,7 +11,7 @@
if ($Level == 0) {
// FLS conversation, assign to staff (moderator)
$DB->query("UPDATE staff_pm_conversations SET Level=700 WHERE ID=$ConvID");
$DB->query("UPDATE staff_pm_conversations SET Level=650 WHERE ID=$ConvID");
header('Location: staffpm.php');

View File

@ -41,7 +41,7 @@
<strong>Send to: </strong>
<select name="level">
<option value="0" selected="selected">First Line Support</option>
<option value="700">Staff</option>
<option value="650">Staff</option>
</select>
<input type="submit" value="Send message" />
</form>

View File

@ -149,7 +149,7 @@
// Staff classes
foreach ($ClassLevels as $Class) {
// Create one <option> for each staff user class
if ($Class['Level'] >= 700) {
if ($Class['Level'] >= 650) {
$Selected = (!$AssignedToUser && ($Level == $Class['Level'])) ? ' selected="selected"' : '';
?>
<option value="class_<?=$Class['Level']?>"<?=$Selected?>><?=$Class['Name']?></option>

View File

@ -144,7 +144,6 @@
die();
}
// User was not deleted. Perform other stuff.
$UpdateSet = array();

View File

@ -585,7 +585,7 @@ function check_paranoia_here($Setting) {
<?
foreach($RecentSnatches as $RS) { ?>
<td>
<a href="torrents.php?id=<?=$RS['ID']?>" title="<?=$RS['Artist']?><?=$RS['Name']?>"><img src="<?=$RS['WikiImage']?>" alt="<?=$RS['Artist']?><?=$RS['Name']?>" width="107" /></a>
<a href="torrents.php?id=<?=$RS['ID']?>" title="<?=display_str($RS['Artist'])?><?=display_str($RS['Name'])?>"><img src="<?=$RS['WikiImage']?>" alt="<?=display_str($RS['Artist'])?><?=display_str($RS['Name'])?>" width="107" /></a>
</td>
<? } ?>
</tr>
@ -813,7 +813,6 @@ function check_paranoia_here($Setting) {
</tr>
<?
}
if (check_perms('users_edit_titles')) {
?>
<tr>