mt-admin Commit - 104fb88d66f8

0 unresolved 0 Resolved

0 General 0 Inline

manage-twitter-presets.php ¶ +1 -1

             	}
             }
-            $statuses = $mtdb->getAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
+            $statuses = $dbConnection->fetchAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
             adminhead('Manage Twitter Presets');
             adminmenu();

post-scratchpad.php ¶ +1 -1

             check_nonce('new-scratchpad');
-            $mtdb->query( sprintf( 'INSERT INTO scratchpad (contributor, message) VALUES (%d, "%s")', (int)$currentuser->id, mysqli_real_escape_string($mtdb->link, $_REQUEST['message'])) );
+            $dbConnection->executeUpdate('INSERT INTO scratchpad (contributor, message) VALUES (?, ?)', array($currentuser->id, $_REQUEST['message']));
             adminlog("User posted to scratchpad.", MTS_SCRATCH, MTA_INSERT);
             _redirect( ADMIN_PATH . '/index.php' );

post-twitter.php ¶ +4 -6

             	if( strlen($_REQUEST['message']) ) $postmessage = trim($_REQUEST['message']);
             	#string replacement macros
-            	$next_strip_id = $mtdb->getOne( 'SELECT MAX(id) FROM strip' );
+            	$next_strip_id = $dbConnection->fetchColumn('SELECT MAX(id) FROM strip');
             	$next_strip_id += 1;
             	$postmessage = str_replace("#nextcomic", $next_strip_id, $postmessage);
             	if('' == $postmessage) _redirect( ADMIN_PATH . '/post-twitter.php?tweet=missing');
             	$username = sanitize_username($_REQUEST['twitter_user']);
-            	$postasuser = $mtdb->getOne( sprintf('SELECT username FROM twitter_user WHERE username="%s"', mysqli_real_escape_string($mtdb->link, $username)));
+            	$postasuser = $dbConnection->fetchColumn('SELECT username FROM twitter_user WHERE username = ?', array($username));
             	if( in_array('twitter', $_REQUEST['service']) )
             		$rc = twitterpost( numeric_entities(utfentities($postmessage)), $postasuser );
             	$error.='Oops~  Looks like you forgot to enter a message.';
-            $statuses = $mtdb->getAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
+            $statuses = $dbConnection->fetchAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
-            $twitter_users = $mtdb->getAll('SELECT id, username, oauth_token, oauth_token_secret, oauth_access_token FROM twitter_user ORDER BY username');
+            $twitter_users = $dbConnection->fetchAll('SELECT id, username, oauth_token, oauth_token_secret, oauth_access_token FROM twitter_user ORDER BY username');
             adminhead('Update Twitter');
             adminmenu();
             </form>
             <script type="text/javascript">
-            <!--
             	function copyPreset() {
             		var preset = document.statusform.stdmessage;
             		var status = document.statusform.message
             		var charactersremaining = document.getElementById('charactersremaining');
             		charactersremaining.innerHTML = 140 - status.value.length
             	}
-            -->
             </script>
             <?php /*?>

rss-adminlog.php ¶ +1 -1

             $count = isset($_REQUEST['count']) && ctype_digit($_REQUEST['count']) ? $_REQUEST['count'] : 25;
-            $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, c.name AS cname, c.email AS cmail, s.name AS section, action, level, message FROM admin_log l JOIN admin_section s ON l.section = s.id LEFT JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT $count");
+            $entries = $dbConnection->fetchAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, c.name AS cname, c.email AS cmail, s.name AS section, action, level, message FROM admin_log l JOIN admin_section s ON l.section = s.id JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT ?", array($count), array(PDO::PARAM_INT));
             header("Content-Type: application/rss+xml;charset=utf-8");

rss-scratchpad.php ¶ +1 -1

             $count = isset($_REQUEST['count']) && ctype_digit($_REQUEST['count']) ? $_REQUEST['count'] : 25;
-            $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(s.published) AS pubdate, c.name AS cname, c.email AS cmail, message FROM scratchpad s JOIN contributor c ON s.contributor = c.id ORDER BY s.published DESC LIMIT $count");
+            $entries = $dbConnection->fetchAll('SELECT UNIX_TIMESTAMP(s.published) AS pubdate, c.name AS cname, c.email AS cmail, message FROM scratchpad s JOIN contributor c ON s.contributor = c.id ORDER BY published DESC LIMIT ?', array($count), array(PDO::PARAM_INT));
             header("Content-Type: application/rss+xml;charset=utf-8");

rss-striplog.php ¶ +1 -1

             $count = isset($_REQUEST['count']) && ctype_digit($_REQUEST['count']) ? $_REQUEST['count'] : 25;
-            $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, s.name AS section, action, message FROM admin_log l JOIN admin_section s ON l.section = s.id WHERE s.name = 'strip' ORDER BY l.logdate DESC LIMIT $count");
+            $entries = $dbConnection->fetchAll('SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, s.name AS section, action, message FROM admin_log l JOIN admin_section s ON l.section = s.id WHERE s.name = \'strip\' ORDER BY l.logdate DESC LIMIT ?', array($count), array(PDO::PARAM_INT));
             header("Content-Type: application/rss+xml;charset=utf-8");

twitter-scheduled.php ¶ +4 -9

             //	First, the quick hack way. May become neccessary to parallelize later.
-            $tweets = $mtdb->getAll("SELECT username, password, text, status, twitter_post.id AS id
+            $tweets = $dbConnection->fetchAll('SELECT username, password, text, status, tp.id AS id FROM twitter_post tp JOIN twitter_user tu ON tp.user = tu.id ' .
-            	FROM twitter_post JOIN twitter_user
+            	'WHERE tp.status = \'scheduled\' AND time >= NOW() AND time < TIMESTAMPADD(?, NOW())', array(RUN_INTERVAL));
-            		ON twitter_post.user = twitter_user.id
-            	WHERE twitter_post.status = 'scheduled'
-            		AND time >= NOW()
-            		AND time < TIMESTAMPADD(" . RUN_INTERVAL . ", NOW())
-            ");
             //	Check if we actually have any tweets. If not, bail.
             if(count($tweets) === 0)
             foreach($tweets as $t)
             {
             	//	Lock the tweet
-            	$mtdb->query("UPDATE twitter_post SET status = 'locked' WHERE id = ".(int)$t->id." AND status = 'scheduled'", false);
+            	$dbConnection->executeUpdate('UPDATE twitter_post SET status = \'locked\' WHERE id = ? AND status = \'scheduled\'', array($t->id));
             	if(twitterpost($t->text, $t->username, $t->password))
             	{
             	}
             	//	Unlock tweet, update db.
-            	$mtdb->query("UPDATE twitter_post SET status = '".mysqli_real_escape_string($mtdb->link, $t->status)."' WHERE status = 'locked' AND id = ".(int)$t->id, false);
+            	$dbConnection->executeUpdate('UPDATE twitter_post SET status = ? WHERE status = \'locked\' AND id = ?', array($t->status, $t->id));
             }
             ?>

user-edit.php ¶ +2 -2

             		copy(RANTIMG.'default', RANTIMG.$username.'.png');
-            		$mtdb->query( 'INSERT INTO contributor (name, default_image) VALUES ("' . mysqli_real_escape_string($mtdb->link, $username) . '", "'.$username.'.png")' );
+            		$dbConnection->executeUpdate('INSERT INTO contributor (name, default_image) VALUES (?, ?)', array($username, $username . '.png'));
             		$user = get_userdatabylogin( $username );
             		$userid = $user->id;
             		$info.='<p>User Account Created</p>';
             			$error.='<p>New passwords do not match.</p>';
             		} else {
             			/* password change */
-            			if( ! $mtdb->getOne( 'SELECT id FROM contributor WHERE id = "' . (int)$user->id . '" AND (password = SHA1("' . mysqli_real_escape_string($mtdb->link, $_POST['password_old']) . '") OR password = "")' )) {
+            			if( ! $dbConnection->fetchColumn('SELECT id FROM contributor WHERE id = ? AND (password = SHA1(?) OR password = "")', array((int)$user->id, $_POST['password_old']))) {
             				$error.='<p>Specified password is incorrect.</p>';
             			} else {
             				/* Password match */

users.php ¶ +2 -2

             adminmenu();
             ?>
             <h2>User Administration</h2>
-            <p>Make changes to accounts for contributers to the website.</p>
+            <p>Make changes to accounts for contributors to the website.</p>
             <?php
-            $users = $mtdb->getAll("SELECT id,name,email,nameplate FROM contributor");
+            $users = $dbConnection->fetchAll('SELECT id, name, email, nameplate FROM contributor');
             ?>

view-adminlog.php ¶ +4 -3

             if( isset($_GET['page'] )) $page = (int) $_GET['page'];
             $perpage = 15;
-            $start = ($page-1) * $perpage;
+            $start = ($page - 1) * $perpage;
-            $total = ceil( $mtdb->getOne("SELECT COUNT(*) FROM admin_log") / $perpage );
+            $total = ceil( $dbConnection->fetchColumn('SELECT COUNT(*) FROM admin_log') / $perpage );
-            $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logstamp, l.logdate AS logdate, c.name AS cname, c.email AS cmail, s.name AS section, action, level, message FROM admin_log l JOIN admin_section s ON l.section = s.id LEFT JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT $start,$perpage");
+            $entries = $dbConnection->fetchAll('SELECT UNIX_TIMESTAMP(l.logdate) AS logstamp, l.logdate AS logdate, c.name AS cname, s.name AS section, action, level, message ' .
+            	'FROM admin_log l JOIN admin_section s ON l.section = s.id JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT ?, ?', array($start, $perpage), array(PDO::PARAM_INT, PDO::PARAM_INT));
             pagination( $page, $total );

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings