GameRadio/mingle-forum-hacked
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix wrong deletion

Browse Source
This commit is contained in:
Michel Roux 2013-09-01 17:52:01 +02:00
parent 08421e7de5
commit d50be04fe9
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
wpf.class.php
View File

@ -2118,7 +2118,7 @@ class mingleforum{
function remove_post(){ function remove_post(){
global $user_ID, $wpdb; global $user_ID, $wpdb;
$id = (isset($_GET['id']) && is_numeric($_GET['id']))?$_GET['id']:0; $id = (isset($_GET['id']) && is_numeric($_GET['id']))?$_GET['id']:0;
$author = $wpdb->get_var($wpdb->prepare("SELECT author_id, parent_id from {$this->t_posts} where id = %d"), $id); $author = $wpdb->get_row($wpdb->prepare("SELECT author_id, parent_id from {$this->t_posts} where id = %d"), $id);
$del = "fail"; $del = "fail";
if(current_user_can("administrator") || is_super_admin($user_ID)) if(current_user_can("administrator") || is_super_admin($user_ID))
@ -2130,9 +2130,9 @@ class mingleforum{
if($del == "ok"){ if($del == "ok"){
$wpdb->query($wpdb->prepare("DELETE FROM {$this->t_posts} WHERE id = %d", $id)); $wpdb->query($wpdb->prepare("DELETE FROM {$this->t_posts} WHERE id = %d", $id));
$nbmsg = $wpdb->get_var("SELECT COUNT(*) FROM {$this->t_posts} WHERE parent_id = {$author->parent_id}"); $nbmsg = $wpdb->get_var($wpdb->prepare("SELECT COUNT(*) FROM {$this->t_posts} WHERE parent_id = %d", $author->parent_id));
if (!$nbmsg) if (!$nbmsg)
$wpdb->query("DELETE FROM {$this->t_threads} WHERE id = {$author->parent_id}"); $wpdb->query($wpdb->prepare("DELETE FROM {$this->t_threads} WHERE id = %d", $author->parent_id));
$this->o .= "<div class='updated'>".__("Post deleted", "mingleforum")."</div>"; $this->o .= "<div class='updated'>".__("Post deleted", "mingleforum")."</div>";
}else{ }else{
wp_die(__("An unknown error has occured. Please try again.", "mingleforum")); wp_die(__("An unknown error has occured. Please try again.", "mingleforum"));