|
@@ -346,15 +346,15 @@ else
|
|
|
$tbl_blogs_tasks_rel_user = Database :: get_course_table(TABLE_BLOGS_TASKS_REL_USER);
|
|
|
|
|
|
$sql = "
|
|
|
- SELECT COUNT(*) as `number`
|
|
|
+ SELECT COUNT(*) as number
|
|
|
FROM ".$tbl_blogs_tasks_rel_user."
|
|
|
WHERE
|
|
|
- `blog_id` = ".$blog_id." AND
|
|
|
- `user_id` = ".api_get_user_id()." AND
|
|
|
- `task_id` = ".$task_id;
|
|
|
+ blog_id = ".$blog_id." AND
|
|
|
+ user_id = ".api_get_user_id()." AND
|
|
|
+ task_id = ".$task_id;
|
|
|
|
|
|
$result = api_sql_query($sql, __LINE__, __FILE__);
|
|
|
- $row = mysql_fetch_array($result, MYSQL_ASSOC);
|
|
|
+ $row = Database::fetch_array($result);
|
|
|
|
|
|
if ($row['number'] == 1)
|
|
|
$user_task = true;
|
|
@@ -373,13 +373,13 @@ switch ($current_page)
|
|
|
}
|
|
|
break;
|
|
|
case 'view_post' :
|
|
|
- Blog :: display_post($blog_id, mysql_real_escape_string((int)$_GET['post_id']));
|
|
|
+ Blog :: display_post($blog_id, Database::escape_string((int)$_GET['post_id']));
|
|
|
break;
|
|
|
case 'edit_post' :
|
|
|
$task_id = (isset ($_GET['task_id']) && is_numeric($_GET['task_id'])) ? $_GET['task_id'] : 0;
|
|
|
|
|
|
if (api_is_allowed('BLOG_'.$blog_id, 'article_edit', $task_id))
|
|
|
- Blog :: display_form_edit_post($blog_id, mysql_real_escape_string((int)$_GET['post_id']));
|
|
|
+ Blog :: display_form_edit_post($blog_id, Database::escape_string((int)$_GET['post_id']));
|
|
|
else
|
|
|
api_not_allowed();
|
|
|
|
|
@@ -411,11 +411,11 @@ switch ($current_page)
|
|
|
}
|
|
|
if ($_GET['do'] == 'edit')
|
|
|
{
|
|
|
- Blog :: display_edit_task_form($blog_id, mysql_real_escape_string($_GET['task_id']));
|
|
|
+ Blog :: display_edit_task_form($blog_id, Database::escape_string($_GET['task_id']));
|
|
|
}
|
|
|
if ($_GET['do'] == 'edit_assignment')
|
|
|
{
|
|
|
- Blog :: display_edit_assigned_task_form($blog_id, mysql_real_escape_string((int)$_GET['assignment_id']));
|
|
|
+ Blog :: display_edit_assigned_task_form($blog_id, Database::escape_string((int)$_GET['assignment_id']));
|
|
|
}
|
|
|
Blog :: display_task_list($blog_id);
|
|
|
echo '<br /><br />';
|
|
@@ -434,19 +434,19 @@ switch ($current_page)
|
|
|
break;
|
|
|
case 'execute_task' :
|
|
|
if (isset ($_GET['post_id']))
|
|
|
- Blog :: display_post($blog_id, mysql_real_escape_string((int)$_GET['post_id']));
|
|
|
+ Blog :: display_post($blog_id, Database::escape_string((int)$_GET['post_id']));
|
|
|
else
|
|
|
- Blog :: display_select_task_post($blog_id, mysql_real_escape_string((int)$_GET['task_id']));
|
|
|
+ Blog :: display_select_task_post($blog_id, Database::escape_string((int)$_GET['task_id']));
|
|
|
|
|
|
break;
|
|
|
case 'view_search_result' :
|
|
|
- Blog :: display_search_results($blog_id, mysql_real_escape_string($_GET['q']));
|
|
|
+ Blog :: display_search_results($blog_id, Database::escape_string($_GET['q']));
|
|
|
break;
|
|
|
case '' :
|
|
|
default :
|
|
|
if (isset ($_GET['filter']) && !empty ($_GET['filter']))
|
|
|
{
|
|
|
- Blog :: display_day_results($blog_id, mysql_real_escape_string($_GET['filter']));
|
|
|
+ Blog :: display_day_results($blog_id, Database::escape_string($_GET['filter']));
|
|
|
}
|
|
|
else
|
|
|
{
|
|
@@ -461,4 +461,4 @@ switch ($current_page)
|
|
|
<?php
|
|
|
// Display the footer
|
|
|
Display::display_footer();
|
|
|
-?>
|
|
|
+?>
|