관리자: 변수 상수 제외 홑따옴표
This commit is contained in:
@ -12,7 +12,7 @@ check_token();
|
||||
if ($w == '')
|
||||
{
|
||||
$sql = " insert {$g4['mail_table']}
|
||||
set ma_id = '{$_POST[ma_id]}',
|
||||
set ma_id = '{$_POST['ma_id']}',
|
||||
ma_subject = '{$_POST['ma_subject']}',
|
||||
ma_content = '{$_POST['ma_content']}',
|
||||
ma_time = '{$g4['time_ymdhis']}',
|
||||
@ -26,12 +26,12 @@ else if ($w == 'u')
|
||||
ma_content = '{$_POST['ma_content']}',
|
||||
ma_time = '{$g4['time_ymdhis']}',
|
||||
ma_ip = '{$_SERVER['REMOTE_ADDR']}'
|
||||
where ma_id = '{$_POST[ma_id]}' ";
|
||||
where ma_id = '{$_POST['ma_id']}' ";
|
||||
sql_query($sql);
|
||||
}
|
||||
else if ($w == 'd')
|
||||
{
|
||||
$sql = " delete from {$g4['mail_table']} where ma_id = '{$_POST[ma_id]}' ";
|
||||
$sql = " delete from {$g4['mail_table']} where ma_id = '{$_POST['ma_id']}' ";
|
||||
sql_query($sql);
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user