Changeset 767 for trunk/Modules

Timestamp:

Jan 27, 2014, 10:42:38 PM (11 years ago)

Author:

chronos

Message:

• Fixed: Allow ThreadId in forum and client version in game version only as number.

Location:

trunk/Modules

Files:

• ClientVersion/ClientVersion.php (modified) (1 diff)
• Forum/Forum.php (modified) (7 diffs)

trunk/Modules/ClientVersion/ClientVersion.php

@@ -42 +42 @@
         {
      $YesNo = array('Ne', 'Ano');
-     $DbResult = $this->System->Database->query('SELECT * FROM ClientVersion WHERE Id='.$_GET['id']);
+     $DbResult = $this->System->Database->query('SELECT * FROM ClientVersion WHERE Id='.($_GET['id']*1));
      if($DbResult->num_rows > 0)
      {

trunk/Modules/Forum/Forum.php

@@ -70 +70 @@
         }
   
-  function Edit() {
+  function Edit() 
+  {
     $Output = '';
 
@@ -142 +143 @@
                 $Output .= $PageList['Output'];
                 $Output .= '<div class="shoutbox">';
-                $DbResult = $this->System->Database->query('SELECT * FROM `ForumThread`  WHERE 1 ORDER BY `ID` DESC '.$PageList['SQLLimit']);
+                $DbResult = $this->System->Database->query('SELECT * FROM `ForumThread` WHERE 1 ORDER BY `ID` DESC '.$PageList['SQLLimit']);
                 while($Line = $DbResult->fetch_assoc())
                         $Output .= '<div><span style="float:right;"><strong>'.$Line['UserName'].'</strong> - ('.HumanDate($Line['Date']).')</span> <a href="?Thread='.$Line['ID'].'">'.str_replace("\n", '',$Line['Text']).'</a> </div>';
@@ -165 +166 @@
                 } else $SearchQuery = '';                       
 
-                $DbResult = $this->System->Database->query('SELECT * FROM `ForumThread` WHERE ID='.$_GET['Thread'].' LIMIT 1');
+                $DbResult = $this->System->Database->query('SELECT * FROM `ForumThread` WHERE ID='.($_GET['Thread']*1).' LIMIT 1');
+                if($DbResult->num_rows > 0)
+                {
                 $Thread = $DbResult->fetch_assoc();
     $Output .= '<h3>'.$Thread['Text'].'</h3>';
 
-        $DbResult = $this->System->Database->query('SELECT COUNT(*) FROM `ForumText` WHERE `Thread` = '.$_GET['Thread'].' '.$SearchQuery);
+        $DbResult = $this->System->Database->query('SELECT COUNT(*) FROM `ForumText` WHERE `Thread` = '.($_GET['Thread']*1).' '.$SearchQuery);
                 $DbRow = $DbResult->fetch_row();
                 $PageList = GetPageList($DbRow[0]);     
@@ -176 +179 @@
                 $Output .= '<div class="shoutbox">';
                 $DbResult = $this->System->Database->query('SELECT * FROM `ForumText`  WHERE `Thread` = '.
-                  $_GET['Thread'].' '.$SearchQuery.' ORDER BY `ID` DESC '.$PageList['SQLLimit']);
+                  ($_GET['Thread']*1).' '.$SearchQuery.' ORDER BY `ID` DESC '.$PageList['SQLLimit']);
                 while($Line = $DbResult->fetch_assoc()) {
                         if ($this->System->User->Id == $Line['User'])
@@ -185 +188 @@
     }
                 $Output .= '</div>'.$PageList['Output'];
+                } else $Output .= ShowMessage(T('Item not found'), MESSAGE_CRITICAL);
                 return($Output);
         }
@@ -230 +234 @@
                 $Output = '';
                 if($this->System->User->Licence(LICENCE_USER))
+                {
+                $DbResult = $this->System->Database->query('SELECT * FROM `ForumThread` WHERE ID='.($_GET['Thread']*1).' LIMIT 1');
+                if($DbResult->num_rows > 0)
                 {
                         if(array_key_exists('text', $_POST))
@@ -263 +270 @@
                         } else $Output .= ShowMessage('Nezadán text pro novou zprávu.', MESSAGE_CRITICAL);                              
                         $Output .= '<br/>';
+                } else $Output .= ShowMessage(T('Item not found'), MESSAGE_CRITICAL);
                 } else $Output .= ShowMessage('Pro vkládaní zpráv musíte byt registrováni.', MESSAGE_CRITICAL);
                 return($Output);