Revize e0a5de99

Re #7580 úpravy motivačních hlášek

old/html/multidic/app/webroot/administration.php

@@ -5 +5 @@
 
 if (!kontrola_pristupu(2)) {
   //echo "odhlas";
-  Header("Location: index_to_admin.php?hlaska=Byl jste automaticky odhlášen&n=$ses_nick");
+  Header("Location: /multidic");
 }
 
 
@@ -156 +156 @@
    
   // pr($_);
    
-  switch($nav_id) {
+  switch($_REQUEST['nav_id']) {
     case("add_user") :
       require_once($cesta."add_user.php");
     break;

old/html/multidic/app/webroot/administration/edit_report.php

@@ -3 +3 @@
 
 $vypis_edit = true;
 
-if (!Empty($action) && $action == "edit_report") {
+if (!Empty($_POST)) {
 
   
-    update_report($czech, $english, $ratio);
+    update_report($_POST['czech'], $_POST['english'], $_POST['ratio']);
     $vypis_edit = false;
   
 }
 if($vypis_edit){
 
-  $Record      = get_report($ratio);
-  $czech       = $Record[1];
-  $english     = $Record[2];
+    $ratio = $_REQUEST['ratio'];
+    $Record      = get_report($_REQUEST['ratio']);
+    $czech       = $Record['czech'];
+    $english     = $Record['english'];
 
 ?>
 <table>

old/html/multidic/app/webroot/administration/report.php

@@ -5 +5 @@
  *  Pomocna funkce, vraci do tabulky zformatovane slovo
  *
  *  @param $Record polozka slovniku nactena z db
- *  @return do tabulky zformatovany zaznam
+ *  @return string tabulky zformatovany zaznam
  */
- 
-function get_row_of_table($Record, $od = 1, $do = 3) {
-  $navrat .= "<tr class=\"akt\">\n     ";
-  $navrat .= '<td>'.$Record[0].'</td>'.
-             '<td><a href="?nav_id=edit_report&ratio='.$Record[0].'">edit</a></td>';
-  for($j=$od;$j<$do;$j++) {
-    $navrat .= "<td class=\"akt\">";
-    $navrat .= "$Record[$j]";
-    $navrat .= "&nbsp;</td>\n";
-  }
-  $navrat .= "</tr> \n  ";
-  return $navrat;
-}
 
+function get_row_of_table($record)
+{
+    $navrat = '<tr class="akt">';
+    $navrat .= "<td>$record[0]</td>";
+    $navrat .= "<td><a href='?nav_id=edit_report&ratio=$record[0]'>edit</a></td>";
+
+    for ($i = 1; $i < 3; $i++)
+    {
+        $navrat .= "<td>$record[$i]</td>";
+    }
+
+    $navrat .= "</tr>";
+
+    return $navrat;
+}
 
 function get_pocet_reportu() {
   require_once("./classes/db.php");
@@ -48 +50 @@
 function print_table_of_reports($order = "ratio", $od = 0, $limit = 30) {
   require_once("./classes/db.php");
   $spojeni = new DB_Sql();
-  $dotaz = "SELECT * FROM report ORDER BY \"$order\" OFFSET $od LIMIT $limit";
-  $radky = $spojeni->query($dotaz);
+  $dotaz = "SELECT * FROM report ORDER BY $order LIMIT $limit OFFSET $od ";
+  $query = $spojeni->query($dotaz);
   $navrat = "<h3 class=\"nadpis2\">Výpis zpráv</h3>";
   $navrat .= "<table><form action=\"\" method=\"post\">";
   $navrat .= get_header_of_table();
-  while ($spojeni->next_record()) {
-    $navrat .= get_row_of_table($spojeni->Record, 1, 3);
+
+  $radky = $query->fetch_all();
+  foreach ($radky as $radka) {
+    $navrat .= get_row_of_table($radka);
   }
   $navrat .= get_foot_of_table();
   $navrat .= '';
@@ -65 +69 @@
 function update_report($czech, $english, $ratio) {
   require_once("./classes/db.php");
   $spojeni = new DB_Sql();
-  $dotaz = "UPDATE report SET czech = '".pg_escape_string($czech)."',
-                            english = '".pg_escape_string($english)."'
-                            WHERE \"ratio\" = $ratio";
+  $dotaz = "UPDATE report SET czech = '" . $spojeni->escape_string($czech) . "',
+                            english = '" . $spojeni->escape_string($english) . "'
+                            WHERE ratio = $ratio";
   $spojeni->query($dotaz);
   if ($spojeni->connection->errno != 0) {
     print_hlasku("Zprávu se nepodařilo upravit.");
@@ -82 +86 @@
 function get_report($ratio) {
   require_once("./classes/db.php");
   $spojeni = new DB_Sql();
-  $dotaz = "SELECT * FROM report WHERE \"ratio\" LIKE '$ratio'";
+  $dotaz = "SELECT * FROM report WHERE ratio LIKE '$ratio'";
   $radky = $spojeni->query($dotaz);
-
-  $spojeni->next_record();
   
-  return $spojeni->Record;
+  return mysqli_fetch_assoc($radky);
 }