svn commit: r313 - trunk/mapbender/http/php/mod_wfsLayerObj_conf.php

[uli at osgeo.org]

Author: uli
Date: 2006-05-16 12:17:03+0000
New Revision: 313

Modified:
   trunk/mapbender/http/php/mod_wfsLayerObj_conf.php

Log:
db_prep_query included

Modified: trunk/mapbender/http/php/mod_wfsLayerObj_conf.php
Url: https://mapbender.osgeo.org/source/browse/mapbender/trunk/mapbender/http/php/mod_wfsLayerObj_conf.php?view=diff&rev=313&p1=trunk/mapbender/http/php/mod_wfsLayerObj_conf.php&p2=trunk/mapbender/http/php/mod_wfsLayerObj_conf.php&r1=312&r2=313
==============================================================================
--- trunk/mapbender/http/php/mod_wfsLayerObj_conf.php	(original)
+++ trunk/mapbender/http/php/mod_wfsLayerObj_conf.php	2006-05-16 12:17:03+0000
@@ -64,18 +64,21 @@
 <form method='POST' onsubmit='return validate()'>
 
 <?php
-if(isset($_REQUEST["save"])){
-        
-        $sql = "UPDATE gui_layer SET gui_layer_wfs_featuretype = '".$_REQUEST["wfs_conf"]."' ";
-        $sql .= "WHERE fkey_gui_id='".$_REQUEST["gui"]."' AND fkey_layer_id=".$_REQUEST["layer"];
-        $res = db_query($sql);
+if(isset($_REQUEST["save"])){        
+        $sql = "UPDATE gui_layer SET gui_layer_wfs_featuretype = $1 ";
+        $sql .= "WHERE fkey_gui_id = $2 AND fkey_layer_id = $3";
+        $v = array($_REQUEST["wfs_conf"],$_REQUEST["gui"],$_REQUEST["layer"]);
+		$t = array('s','s','i');
+		$res = db_prep_query($sql,$v,$t);
         echo "layer is connected with wfs_conf: ".$_REQUEST["wfs_conf"];
 }
 else if(isset($_REQUEST["del"])){
         
         $sql = "UPDATE gui_layer SET gui_layer_wfs_featuretype = '' ";
-        $sql .= "WHERE fkey_gui_id='".$_REQUEST["gui"]."' AND fkey_layer_id=".$_REQUEST["layer"];
-        $res = db_query($sql);
+        $sql .= "WHERE fkey_gui_id = $1 AND fkey_layer_id = $2";
+        $v = array($_REQUEST["gui"],$_REQUEST["layer"]);
+		$t = array('s','i');
+		$res = db_prep_query($sql,$v,$t);
         echo "layer connection removed";
 }
 echo "<input type='hidden' name='gui' value='".$_REQUEST["gui"]."'>";
@@ -100,18 +103,6 @@
 
 echo "<br><input type='submit' name='save' value='save'><br>";
 echo "<input name='del' type='submit' value='delete'>";
-/* save wfs_conf properties */
-
-
-
-/* end save wfs_conf properties */
-
-
-
-
-
-
-/* end configure elements */
 ?>
 </form>
 </body>
\ No newline at end of file