Added sql handling (for restricted browses from statistics.php script)

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/trunk/unstable@750 b72ed6b6-b9f8-46b5-92b4-906544132732
LimeSurvey · Oct 26, 2003 · 3ac739b · 3ac739b
1 parent 6b3422f
commit 3ac739b
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/admin/listcolumn.php b/admin/listcolumn.php
@@ -40,6 +40,8 @@
 if (!isset($sid)) {$sid=returnglobal('sid');}
 if (!isset($column)) {$column=returnglobal('column');}
 if (!isset($order)) {$order=returnglobal('order');}
+if (!isset($sql)) {$sql=returnglobal('sql');}
+
 if (!$sid)
 	{
 	//NOSID
@@ -52,6 +54,12 @@
 	}
 
 $query = "SELECT id, $column FROM {$dbprefix}survey_$sid WHERE $column != ''";
+
+if ($sql && $sql != "NULL")
+	{
+	$query .= " AND ".urldecode($sql);
+	}
+
 if ($order == "alpha")
 	{
 	$query .= " ORDER BY $column";
@@ -60,9 +68,9 @@
 $result=mysql_query($query) or die("Error with query: ".$query."<br />".mysql_error());
 echo "<html><body topmargin='0' leftmargin='0' bgcolor='black'>\n";
 echo "<table width='98%' align='center' border='1' bordercolor='#111111' cellspacing='0' bgcolor='white'>\n";
-echo "<tr><td bgcolor='black' valign='top'><input type='image' src='./images/downarrow.gif' align='left' onclick=\"window.open('listcolumn.php?sid=$sid&column=$column&order=id', '_top')\"></td>\n";
+echo "<tr><td bgcolor='black' valign='top'><input type='image' src='./images/DownArrow.gif' align='left' onclick=\"window.open('listcolumn.php?sid=$sid&column=$column&order=id', '_top')\"></td>\n";
 echo "<td bgcolor='black' valign='top'><input type='image' align='right' src='./images/close.gif' onclick='window.close()'>";
-echo "<input type='image' src='./images/downarrow.gif' align='left' onclick=\"window.open('listcolumn.php?sid=$sid&column=$column&order=alpha', '_top')\">";
+echo "<input type='image' src='./images/DownArrow.gif' align='left' onclick=\"window.open('listcolumn.php?sid=$sid&column=$column&order=alpha', '_top')\">";
 echo "</td></tr>\n";
 while ($row=mysql_fetch_array($result))
 	{