url_name) return updatepage($page); else return insertpage($page); } function insertpage($page) { global $mtdb; $sql = 'INSERT INTO static_page ( url_name, status, title, body, style ) VALUES (' . ' "' . mysqli_real_escape_string($mtdb->link, $page->url_name) . '", "' . mysqli_real_escape_string($mtdb->link, $page->status) . '", "' . mysqli_real_escape_string( $mtdb->link, trim( $page->title ) ) . '", "' . mysqli_real_escape_string( $mtdb->link, trim( $page->body ) ) . '", "' . mysqli_real_escape_string( $mtdb->link, trim( $page->style ) ) . '")'; adminlog("Page '".$page->url_name."' has been added.", MTS_PAGE, MTA_ADD); return $mtdb->query($sql); } function updatepage($page) { if ( !$page->url_name ) return false; global $mtdb; $sql = 'UPDATE static_page SET url_name = "' . mysqli_real_escape_string($page->url_name) . '", status = "' . mysqli_real_escape_string($mtdb->link, $page->status) . '", title = "' . mysqli_real_escape_string( trim($mtdb->link, $page->title) ) . '", body = "' . mysqli_real_escape_string( trim($mtdb->link, $page->body ) ) . '", style = "' . mysqli_real_escape_string( trim($mtdb->link, $page->style ) ) . '" WHERE url_name = "' . mysqli_real_escape_string($mtdb->link, $page->url_name) . '"'; adminlog("Page '".$page->url_name."' has been updated.", MTS_PAGE, MTA_MODIFY); return $mtdb->query( $sql ); } function deletepage($url_name) { if ( !$url_name ) return false; global $mtdb; adminlog("Page '".$page->url_name."' has been deleted.", MTS_PAGE, MTA_DELETE); return $mtdb->query( 'DELETE FROM static_page WHERE url_name = "' . mysqli_real_escape_string($mtdb->link, $url_name) . '"' ); } function getpage($url_name) { global $mtdb; return $mtdb->getRow( 'SELECT url_name, status, title, body, style FROM static_page WHERE url_name = "'. mysqli_real_escape_string($mtdb->link, $url_name) . '"' ); } ?>