|
@@ -105,11 +105,11 @@ if (api_is_allowed_to_edit())
|
|
|
}
|
|
|
if ($_GET['action'] == 'edit')
|
|
|
{
|
|
|
- Blog::display_edit_blog_form(mysql_real_escape_string((int)$_GET['blog_id']));
|
|
|
+ Blog::display_edit_blog_form(Database::escape_string((int)$_GET['blog_id']));
|
|
|
}
|
|
|
|
|
|
echo '<div class="actions">';
|
|
|
- echo "<a href='".api_get_self()."?action=add'>",Display::return_icon('blog_new.gif', get_lang('AddBlog')),"</a>";
|
|
|
+ echo "<a href='".api_get_self()."?".api_get_cidreq()."&action=add'>",Display::return_icon('blog_new.gif'),get_lang('AddBlog')."</a>";
|
|
|
echo '</div>';
|
|
|
echo "<table width=\"100%\" border=\"0\" cellspacing=\"2\" class='data_table'>";
|
|
|
echo "<tr>",
|