Bug fix + PDO

renlok · Sep 17, 2014 · aeae81d · aeae81d
1 parent 884eecb
commit aeae81d
Show file tree

Hide file tree

Showing 9 changed files with 212 additions and 144 deletions.
diff --git a/admin/auctions.php b/admin/auctions.php
@@ -60,7 +60,26 @@
 				  maxpictures = " . $_POST['maxpictures'] . ",
 				  maxuploadsize = " . ($_POST['maxpicturesize'] * 1024) . ",
 				  thumb_show = " . intval($_POST['thumb_show']);
-		$system->check_mysql(mysql_query($query), $query, __LINE__, __FILE__);
+		$params = array();
+		$params[] = array(':proxy_bidding', ynbool($_POST['proxy_bidding']), 'str');
+		$params[] = array(':edit_starttime', $_POST['edit_starttime'], 'int');
+		$params[] = array(':cust_increment', $_POST['cust_increment'], 'int');
+		$params[] = array(':hours_countdown', $_POST['hours_countdown'], 'int');
+		$params[] = array(':ao_hpf_enabled', ynbool($_POST['ao_hpf_enabled']), 'str');
+		$params[] = array(':ao_hi_enabled', ynbool($_POST['ao_hi_enabled']), 'str');
+		$params[] = array(':ao_bi_enabled', ynbool($_POST['ao_bi_enabled']), 'str');
+		$params[] = array(':subtitle', ynbool($_POST['subtitle']), 'str');
+		$params[] = array(':extra_cat', ynbool($_POST['extra_cat']), 'str');
+		$params[] = array(':autorelist', ynbool($_POST['autorelist']), 'str');
+		$params[] = array(':autorelist_max', $_POST['autorelist_max'], 'int');
+		$params[] = array(':ae_status', ynbool($_POST['status']), 'str');
+		$params[] = array(':ae_timebefore', $_POST['timebefore'], 'int');
+		$params[] = array(':ae_extend', $_POST['extend'], 'int');
+		$params[] = array(':picturesgallery', $_POST['picturesgallery'], 'int');
+		$params[] = array(':maxpictures', $_POST['maxpictures'], 'int');
+		$params[] = array(':maxuploadsize', $_POST['maxpicturesize'], 'int');
+		$params[] = array(':thumb_show', $_POST['thumb_show'], 'int');
+		$db->query($query, $params);
 		$ERR = $MSG['5088'];
 	}
 	$system->SETTINGS['edit_starttime'] = $_POST['edit_starttime'];

diff --git a/admin/invoice.php b/admin/invoice.php
@@ -224,6 +224,7 @@
 		'TO_DATE' => ($to_date == 0) ? '' : $to_date,
 		'USER_SEARCH' => (!$searchuser) ? '' : $username,
 		'NO_USER_SEARCH' => (!$searchuser),
+		'HASH' => $_SESSION['WEBID_ADMIN_NUMBER'],
 
 		'PAGNATION' => ($PAGES > 1),
 		'PREV' => ($PAGES > 1 && $PAGE > 1) ? '<a href="' . $system->SETTINGS['siteurl'] . 'admin/invoice.php?PAGE=' . $PREV . $pagenation_link . '"><u>' . $MSG['5119'] . '</u></a>&nbsp;&nbsp;' : '',

diff --git a/docs/changes.txt b/docs/changes.txt
@@ -9,5 +9,6 @@
 - Fixed reserve not met Items being incorrectly marked as sold in the database (Bug #464) (Thanks pani100)
 - Fixed shipping fee not being added to cost of item (Bug #454)
 - Fixed link in pay.php to contact seller (Bug #445) (Thanks pani100)
+- Fixed admin invoices view
 
 for older changes check out http://www.webidsupport.com/wiki/Change_Log