public function save_record_structure() { header('Content-type: application/json'); $eqApp = new Apps(); if (empty($_POST['record_name']) || empty($_POST['record_dbname'])) { $arrResult = array('response' => 'emptyfields'); } else { if (in_array($_POST['record_dbname'], $eqApp->reservedSqlWords())) { $arrResult = array('response' => 'sqlerror'); } else { $checkColumn_q = 'SHOW COLUMNS FROM `cms_content` LIKE "' . $_POST['record_dbname'] . '"'; $checkColumn_r = mysql_query($checkColumn_q); $exists = mysql_num_rows($checkColumn_r); if ($exists == 0) { $addColumn_q = 'ALTER TABLE `cms_content` ADD COLUMN ' . $_POST['record_dbname'] . ' LONGTEXT'; $addColumn_r = mysql_query($addColumn_q); } $checkDouble_q = 'SELECT * FROM cms_records WHERE fieldsetid = "' . $_POST["fid"] . '" AND db_name = "' . $_POST["record_dbname"] . '" AND id <> "' . $_POST["rid"] . '"'; $checkDouble_r = mysql_query($checkDouble_q); if (mysql_num_rows($checkDouble_r) > 0) { $arrResult = array('response' => 'matchingfields'); } else { $saveF_q = 'UPDATE cms_records SET name = "' . $_POST['record_name'] . '", type = "' . $_POST['record_type'] . '", db_name = "' . $_POST['record_dbname'] . '", helper = "' . $_POST['record_helper'] . '", options= "' . $_POST['record_options'] . '", fkey = "' . $_POST['record_fkey'] . '", photoresize = "' . $_POST['record_photoresize'] . '", custom_url = "' . $_POST['record_customurl'] . '" WHERE id = "' . $_POST['rid'] . '"'; $saveF_r = mysql_query($saveF_q) or die(mysql_error()); $arrResult = array('response' => 'success'); } } } echo json_encode($arrResult); exit; }