$v) { if (is_array($v)) { $array[$k] = add_magic_quotes($v); } else { $array[$k] = addslashes($v); } } return $array; } if (!get_magic_quotes_gpc()) { $_GET = add_magic_quotes($_GET); $_POST = add_magic_quotes($_POST); $_COOKIE = add_magic_quotes($_COOKIE); } $wpvarstoreset = array('action','standalone','cat'); for ($i=0; $iquery("INSERT INTO $tablecategories (cat_id, cat_name, category_nicename, category_description, category_parent) VALUES (DEFAULT, '$cat_name', '$category_nicename', '$category_description', '$cat')"); header('Location: categories.php?message=1#addcat'); break; case 'Delete': $standalone = 1; require_once('admin-header.php'); check_admin_referer(); $cat_id = intval($_GET["cat_id"]); $cat_name = get_catname($cat_id); $cat_name = addslashes($cat_name); $category = $wpdb->get_row("SELECT * FROM $tablecategories WHERE cat_id = '$cat_id'"); $cat_parent = $category->category_parent; if (1 == $cat_id) die(sprintf(_LANG_C_DEFAULT_CAT, $cat_name)); if ($user_level < 3) die (_LANG_P_CHEATING_ERROR); $wpdb->query("DELETE FROM $tablecategories WHERE cat_id = '$cat_id'"); $wpdb->query("UPDATE $tablecategories SET category_parent = '$cat_parent' WHERE category_parent = '$cat_id'"); $wpdb->query("UPDATE $tablepost2cat SET category_id='1' WHERE category_id='$cat_id'"); header('Location: categories.php?message=2'); break; case 'edit': require_once ('admin-header.php'); $cat_id = intval($_GET['cat_id']); $category = $wpdb->get_row("SELECT * FROM $tablecategories WHERE cat_id = '$cat_id'"); $cat_name = stripslashes($category->cat_name); ?>

escape(stripslashes($_POST['cat_name'])); $cat_id = (int) $_POST['cat_id']; $category_nicename = sanitize_title($cat_name); $category_description = $wpdb->escape(stripslashes($_POST['category_description'])); $wpdb->query("UPDATE $tablecategories SET cat_name = '$cat_name', category_nicename = '$category_nicename', category_description = '$category_description', category_parent = '$cat' WHERE cat_id = '$cat_id'"); header('Location: categories.php?message=3'); break; default: $standalone = 0; require_once ('admin-header.php'); if ($user_level < 3) { die(sprintf(_LANG_C_RIGHT_EDITCAT, get_settings('admin_email'))); } $messages[1] = _LANG_C_MESS_ADD; $messages[2] = _LANG_C_MESS_DELE; $messages[3] = _LANG_C_MESS_UP; ?>

ID