| @@ 34-39 (lines=6) @@ | ||
| 31 | if (formtoken::validateToken($_POST)) { |
|
| 32 | if ($_SESSION['permissions']['edit']['gangs']) { |
|
| 33 | switch ($_POST["editType"]) { |
|
| 34 | case "edit_members": |
|
| 35 | $gMem = clean($_POST["gMem"], 'string'); |
|
| 36 | $sql = "UPDATE `gangs` SET `members`='" . $gMem . "' WHERE `gangs`.`id` = '" . $gID . "'"; |
|
| 37 | $result_of_query = $db_link->query($sql); |
|
| 38 | message($lang['updated']); |
|
| 39 | break; |
|
| 40 | ||
| 41 | case "del_gang": |
|
| 42 | $sql = "DELETE FROM `gangs` WHERE `gangs`.`id` = '" . $gID . "'"; |
|
| @@ 7-12 (lines=6) @@ | ||
| 4 | if (isset($_POST["editType"])) { |
|
| 5 | if ($_SESSION['permissions']['edit']['houses']) { |
|
| 6 | switch ($_POST["editType"]) { |
|
| 7 | case "house_inv": |
|
| 8 | $hInv = $_POST["hInv"]; |
|
| 9 | $sql = "UPDATE `houses` SET `inventory`='" . $hInv . "' WHERE `houses`.`id` = '" . $hID . "'"; |
|
| 10 | $db_link->query($sql); |
|
| 11 | message($lang['house'] . ' ' . $lang['updated']); |
|
| 12 | break; |
|
| 13 | ||
| 14 | case "house_cont": |
|
| 15 | $hCont = $_POST["hCont"]; |
|
| @@ 14-19 (lines=6) @@ | ||
| 11 | message($lang['house'] . ' ' . $lang['updated']); |
|
| 12 | break; |
|
| 13 | ||
| 14 | case "house_cont": |
|
| 15 | $hCont = $_POST["hCont"]; |
|
| 16 | $sql = "UPDATE `houses` SET `containers`='" . $hCont . "' WHERE `houses`.`id` = '" . $hID . "'"; |
|
| 17 | $db_link->query($sql); |
|
| 18 | message($lang['house'] . ' ' . $lang['updated']); |
|
| 19 | break; |
|
| 20 | ||
| 21 | case "house_del": |
|
| 22 | $sql = "DELETE FROM `houses` WHERE `houses`.`id` = '" . $hID . "'"; |
|