function editLanguageForm() { $langID = (int) $_GET['editLanguageID']; $resLang = mysql_query('SELECT `Name`, `Flag` FROM `LocalizationLanguages` WHERE `ID` = ' . $langID); if (mysql_num_rows($resLang) <= 0) { return PopupPageTemplate('Edit Language', messageTemplate('<font color="red">Error: language does not exist.</font>')); } function updateLanguage($langID) { $langID = (int) $langID; $newLanguageName = get_magic_quotes_gpc() ? $_POST['LanguageName'] : addslashes($_POST['LanguageName']); $sNewFlag = htmlspecialchars_adv($_POST['Flag']); if (strlen($newLanguageName) <= 0) { return '<font color="red">Error: language name not specified.</font>'; } mysql_query("UPDATE `LocalizationLanguages` SET `Name`='{$newLanguageName}', `Flag` = '{$sNewFlag}' WHERE `ID` = {$langID}"); if (mysql_affected_rows() > 0) { return 'Language has been successfully updated.'; } return '<font color="red">Error: language could not be updated.</font>'; } if (isset($_POST['UpdateLanguage'])) { return PopupPageTemplate('Edit Language', messageTemplate(updateLanguage($langID))); } $arrLang = mysql_fetch_assoc($resLang); ob_start(); $isLangDefault = getParam('lang_default') == $arrLang['Name']; ?> <form action="<?php echo $_SERVER['PHP_SELF']; ?> ?view=editLanguage&editLanguageID=<?php echo $langID; ?> " method="post"> <table> <tr> <td>Language name:</td> <td><input name="LanguageName" type="text" value="<?php echo htmlspecialchars($arrLang['Name']); ?> " <?php echo getParam('lang_default') == $arrLang['Name'] ? 'disabled' : ''; ?> /></td> </tr> <tr> <td>Flag:</td> <td><?php echo showLangIcons($arrLang['Flag']); ?> </td> </tr> </table> <br /> <center><input type="submit" name="UpdateLanguage" value="Save Changes" /></center> </form> <?php $contents = ob_get_contents(); ob_end_clean(); return PopupPageTemplate('Edit Language', $contents); }
function editLanguageForm() { $langID = (int) $_GET['editLanguageID']; $resLang = db_res('SELECT `Name`, `Flag`, `Title` FROM `LocalizationLanguages` WHERE `ID` = ' . $langID); if (!mysql_num_rows($resLang)) { return PopupPageTemplate('Edit Language', messageTemplate('<font color="red">Error: language does not exist.</font>')); } function updateLanguage($langID) { $langID = (int) $langID; $newLanguageName = process_db_input($_POST['LanguageName']); $sNewFlag = process_db_input($_POST['Flag']); $newLanguageTitle = process_db_input($_POST['LanguageTitle']); if (!strlen($newLanguageName)) { return '<font color="red">Error: language name not specified.</font>'; } $sQuery = "\r\n\t\t\tUPDATE `LocalizationLanguages` SET\r\n\t\t\t\t`Name`='{$newLanguageName}',\r\n\t\t\t\t`Title`='{$newLanguageTitle}',\r\n\t\t\t\t`Flag` = '{$sNewFlag}'\r\n\t\t\tWHERE `ID` = {$langID}"; db_res($sQuery); if (mysql_affected_rows()) { return 'Language has been successfully updated.'; } return '<font color="red">Error: language could not be updated.</font>'; } if (isset($_POST['UpdateLanguage'])) { return PopupPageTemplate('Edit Language', messageTemplate(updateLanguage($langID))); } $arrLang = mysql_fetch_assoc($resLang); ob_start(); $isLangDefault = getParam('lang_default') == $arrLang['Name']; ?> <form action="<?php echo $_SERVER['PHP_SELF']; ?> ?view=editLanguage&editLanguageID=<?php echo $langID; ?> " method="post"> <table> <tr> <td>Language title:</td> <td> <input name="LanguageTitle" type="text" value="<?php echo htmlspecialchars($arrLang['Title']); ?> " /> </td> </tr> <tr> <td>Language code:</td> <td> <input name="LanguageName" type="text" value="<?php echo htmlspecialchars($arrLang['Name']); ?> " <?php echo getParam('lang_default') == $arrLang['Name'] ? 'disabled' : ''; ?> /> </td> </tr> <tr> <td>Flag:</td> <td><?php echo showLangIcons($arrLang['Flag']); ?> </td> </tr> </table> <br /> <center><input type="submit" name="UpdateLanguage" value="Save Changes" /></center> </form> <?php return PopupPageTemplate('Edit Language', ob_get_clean()); }