mt-admin Commit - 104fb88d66f8

0 unresolved 0 Resolved

0 General 0 Inline

manage-twitter-presets.php ¶ +1 -1

              	}
              }
-             $statuses = $mtdb->getAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
+             $statuses = $dbConnection->fetchAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
              adminhead('Manage Twitter Presets');
              adminmenu();

post-scratchpad.php ¶ +1 -1

              check_nonce('new-scratchpad');
-             $mtdb->query( sprintf( 'INSERT INTO scratchpad (contributor, message) VALUES (%d, "%s")', (int)$currentuser->id, mysqli_real_escape_string($mtdb->link, $_REQUEST['message'])) );
+             $dbConnection->executeUpdate('INSERT INTO scratchpad (contributor, message) VALUES (?, ?)', array($currentuser->id, $_REQUEST['message']));
              adminlog("User posted to scratchpad.", MTS_SCRATCH, MTA_INSERT);
              _redirect( ADMIN_PATH . '/index.php' );

post-twitter.php ¶ +4 -6

              	if( strlen($_REQUEST['message']) ) $postmessage = trim($_REQUEST['message']);
              	#string replacement macros
-             	$next_strip_id = $mtdb->getOne( 'SELECT MAX(id) FROM strip' );
+             	$next_strip_id = $dbConnection->fetchColumn('SELECT MAX(id) FROM strip');
              	$next_strip_id += 1;
              	$postmessage = str_replace("#nextcomic", $next_strip_id, $postmessage);
              	if('' == $postmessage) _redirect( ADMIN_PATH . '/post-twitter.php?tweet=missing');
              	$username = sanitize_username($_REQUEST['twitter_user']);
-             	$postasuser = $mtdb->getOne( sprintf('SELECT username FROM twitter_user WHERE username="%s"', mysqli_real_escape_string($mtdb->link, $username)));
+             	$postasuser = $dbConnection->fetchColumn('SELECT username FROM twitter_user WHERE username = ?', array($username));
              	if( in_array('twitter', $_REQUEST['service']) )
              		$rc = twitterpost( numeric_entities(utfentities($postmessage)), $postasuser );
              	$error.='Oops~  Looks like you forgot to enter a message.';
-             $statuses = $mtdb->getAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
-             $twitter_users = $mtdb->getAll('SELECT id, username, oauth_token, oauth_token_secret, oauth_access_token FROM twitter_user ORDER BY username');
+             $statuses = $dbConnection->fetchAll('SELECT id, position, message FROM twitter_status ORDER BY position, id');
+             $twitter_users = $dbConnection->fetchAll('SELECT id, username, oauth_token, oauth_token_secret, oauth_access_token FROM twitter_user ORDER BY username');
              adminhead('Update Twitter');
              adminmenu();
              </form>
              <script type="text/javascript">
-             <!--
              	function copyPreset() {
              		var preset = document.statusform.stdmessage;
              		var status = document.statusform.message
              		var charactersremaining = document.getElementById('charactersremaining');
              		charactersremaining.innerHTML = 140 - status.value.length
              	}
-             -->
              </script>
              <?php /*?>

rss-adminlog.php ¶ +1 -1

              $count = isset($_REQUEST['count']) && ctype_digit($_REQUEST['count']) ? $_REQUEST['count'] : 25;
-             $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, c.name AS cname, c.email AS cmail, s.name AS section, action, level, message FROM admin_log l JOIN admin_section s ON l.section = s.id LEFT JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT $count");
+             $entries = $dbConnection->fetchAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, c.name AS cname, c.email AS cmail, s.name AS section, action, level, message FROM admin_log l JOIN admin_section s ON l.section = s.id JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT ?", array($count), array(PDO::PARAM_INT));
              header("Content-Type: application/rss+xml;charset=utf-8");

rss-scratchpad.php ¶ +1 -1

              $count = isset($_REQUEST['count']) && ctype_digit($_REQUEST['count']) ? $_REQUEST['count'] : 25;
-             $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(s.published) AS pubdate, c.name AS cname, c.email AS cmail, message FROM scratchpad s JOIN contributor c ON s.contributor = c.id ORDER BY s.published DESC LIMIT $count");
+             $entries = $dbConnection->fetchAll('SELECT UNIX_TIMESTAMP(s.published) AS pubdate, c.name AS cname, c.email AS cmail, message FROM scratchpad s JOIN contributor c ON s.contributor = c.id ORDER BY published DESC LIMIT ?', array($count), array(PDO::PARAM_INT));
              header("Content-Type: application/rss+xml;charset=utf-8");

rss-striplog.php ¶ +1 -1

              $count = isset($_REQUEST['count']) && ctype_digit($_REQUEST['count']) ? $_REQUEST['count'] : 25;
-             $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, s.name AS section, action, message FROM admin_log l JOIN admin_section s ON l.section = s.id WHERE s.name = 'strip' ORDER BY l.logdate DESC LIMIT $count");
+             $entries = $dbConnection->fetchAll('SELECT UNIX_TIMESTAMP(l.logdate) AS logdate, s.name AS section, action, message FROM admin_log l JOIN admin_section s ON l.section = s.id WHERE s.name = \'strip\' ORDER BY l.logdate DESC LIMIT ?', array($count), array(PDO::PARAM_INT));
              header("Content-Type: application/rss+xml;charset=utf-8");

twitter-scheduled.php ¶ +4 -9

              //	First, the quick hack way. May become neccessary to parallelize later.
-             $tweets = $mtdb->getAll("SELECT username, password, text, status, twitter_post.id AS id
-             	FROM twitter_post JOIN twitter_user
-             		ON twitter_post.user = twitter_user.id
-             	WHERE twitter_post.status = 'scheduled'
-             		AND time >= NOW()
-             		AND time < TIMESTAMPADD(" . RUN_INTERVAL . ", NOW())
-             ");
+             $tweets = $dbConnection->fetchAll('SELECT username, password, text, status, tp.id AS id FROM twitter_post tp JOIN twitter_user tu ON tp.user = tu.id ' .
+             	'WHERE tp.status = \'scheduled\' AND time >= NOW() AND time < TIMESTAMPADD(?, NOW())', array(RUN_INTERVAL));
              //	Check if we actually have any tweets. If not, bail.
              if(count($tweets) === 0)
              foreach($tweets as $t)
              {
              	//	Lock the tweet
-             	$mtdb->query("UPDATE twitter_post SET status = 'locked' WHERE id = ".(int)$t->id." AND status = 'scheduled'", false);
+             	$dbConnection->executeUpdate('UPDATE twitter_post SET status = \'locked\' WHERE id = ? AND status = \'scheduled\'', array($t->id));
              	if(twitterpost($t->text, $t->username, $t->password))
              	{
              	}
              	//	Unlock tweet, update db.
-             	$mtdb->query("UPDATE twitter_post SET status = '".mysqli_real_escape_string($mtdb->link, $t->status)."' WHERE status = 'locked' AND id = ".(int)$t->id, false);
+             	$dbConnection->executeUpdate('UPDATE twitter_post SET status = ? WHERE status = \'locked\' AND id = ?', array($t->status, $t->id));
              }
              ?>

user-edit.php ¶ +2 -2

              		copy(RANTIMG.'default', RANTIMG.$username.'.png');
-             		$mtdb->query( 'INSERT INTO contributor (name, default_image) VALUES ("' . mysqli_real_escape_string($mtdb->link, $username) . '", "'.$username.'.png")' );
+             		$dbConnection->executeUpdate('INSERT INTO contributor (name, default_image) VALUES (?, ?)', array($username, $username . '.png'));
              		$user = get_userdatabylogin( $username );
              		$userid = $user->id;
              		$info.='<p>User Account Created</p>';
              			$error.='<p>New passwords do not match.</p>';
              		} else {
              			/* password change */
-             			if( ! $mtdb->getOne( 'SELECT id FROM contributor WHERE id = "' . (int)$user->id . '" AND (password = SHA1("' . mysqli_real_escape_string($mtdb->link, $_POST['password_old']) . '") OR password = "")' )) {
+             			if( ! $dbConnection->fetchColumn('SELECT id FROM contributor WHERE id = ? AND (password = SHA1(?) OR password = "")', array((int)$user->id, $_POST['password_old']))) {
              				$error.='<p>Specified password is incorrect.</p>';
              			} else {
              				/* Password match */

users.php ¶ +2 -2

              adminmenu();
              ?>
              <h2>User Administration</h2>
-             <p>Make changes to accounts for contributers to the website.</p>
+             <p>Make changes to accounts for contributors to the website.</p>
              <?php
-             $users = $mtdb->getAll("SELECT id,name,email,nameplate FROM contributor");
+             $users = $dbConnection->fetchAll('SELECT id, name, email, nameplate FROM contributor');
              ?>

view-adminlog.php ¶ +4 -3

              if( isset($_GET['page'] )) $page = (int) $_GET['page'];
              $perpage = 15;
-             $start = ($page-1) * $perpage;
+             $start = ($page - 1) * $perpage;
-             $total = ceil( $mtdb->getOne("SELECT COUNT(*) FROM admin_log") / $perpage );
-             $entries = $mtdb->getAll("SELECT UNIX_TIMESTAMP(l.logdate) AS logstamp, l.logdate AS logdate, c.name AS cname, c.email AS cmail, s.name AS section, action, level, message FROM admin_log l JOIN admin_section s ON l.section = s.id LEFT JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT $start,$perpage");
+             $total = ceil( $dbConnection->fetchColumn('SELECT COUNT(*) FROM admin_log') / $perpage );
+             $entries = $dbConnection->fetchAll('SELECT UNIX_TIMESTAMP(l.logdate) AS logstamp, l.logdate AS logdate, c.name AS cname, s.name AS section, action, level, message ' .
+             	'FROM admin_log l JOIN admin_section s ON l.section = s.id JOIN contributor c ON l.contributor = c.id ORDER BY l.logdate DESC LIMIT ?, ?', array($start, $perpage), array(PDO::PARAM_INT, PDO::PARAM_INT));
              pagination( $page, $total );

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings