$engine = mysql_real_escape_string($_POST['engine']); if ($engine != 'flash' && $engine != 'javascript') { $engine = 'javascript'; } // Get extra flags $row = db_query_one("SELECT td.extra_flags FROM {$xerte_toolkits_site->database_table_prefix}templatedetails td WHERE td.template_id = ?", array($template_id)); $extra_flags = explode(";", $row['extra_flags']); $found = false; for ($i = 0; $i < count($extra_flags); $i++) { $parameter = explode("=", $extra_flags[$i]); if ($parameter[0] == 'engine') { $extra_flags[$i] = "engine=" . $engine; $found = true; break; } } if (!$found) { $extra_flags[] = "engine=" . $engine; } $db_entry = join(";", $extra_flags); $query = "update " . $xerte_toolkits_site->database_table_prefix . "templatedetails SET extra_flags =\"" . str_replace(" ", "_", mysql_real_escape_string($db_entry)) . "\" WHERE template_id =\"" . $template_id . "\""; if (mysql_query($query)) { if ($_REQUEST['page'] == 'properties') { properties_display($xerte_toolkits_site, $template_id, true, "engine"); } else { publish_display($template_id); } } else { } mysql_close($database_id); }
<?php /** * * publish template, shows the publish options * * @author Patrick Lockley * @version 1.0 * @copyright Copyright (c) 2008,2009 University of Nottingham * @package */ require_once "../../../config.php"; _load_language_file("/website_code/php/properties/publish.inc"); include "../template_status.php"; include "../screen_size_library.php"; include "../url_library.php"; include "../user_library.php"; include "properties_library.php"; if (is_numeric($_POST['template_id'])) { $tutorial_id = mysql_real_escape_string($_POST['template_id']); publish_display($tutorial_id); }