0){ $data['productId'] = $db->mySQLSafe($_POST['productId']); $data['name'] = $db->mySQLSafe($_POST['name']); $data['email'] = $db->mySQLSafe($_POST['email']); $data['title'] = $db->mySQLSafe($_POST['title']); $data['review'] = $db->mySQLSafe($_POST['review']); if(isset($_POST['rating_val'])){ $data['rating'] = $db->mySQLSafe($_POST['rating_val']); } $data['approved'] = $db->mySQLSafe($_POST['approved']); $update = $db->update($glob['dbprefix']."CubeCart_reviews",$data,"id=".$_POST['edit']); if($update==TRUE){ $msg = "
".$lang['admin']['reviews_update_success']."
"; } else { $msg = "".$lang['admin']['reviews_update_fail']."
"; } } if($_GET['delete']>0){ $where = "id=".$db->mySQLSafe($_GET["delete"]); $delete = $db->delete($glob['dbprefix']."CubeCart_reviews", $where); if($delete==TRUE){ $msg = "".sprintf($lang['admin']['reviews_deleted'],$_GET['delete'])."
"; } } if (is_numeric($_GET['approved']) && $_GET['id']>0){ $where = "id=".$db->mySQLSafe($_GET['id']); $record['approved'] = $db->mySQLSafe($_GET['approved']); $update = $db->update($glob['dbprefix']."CubeCart_reviews", $record, $where); if($_GET['approved']==1){ $msg = "".sprintf($lang['admin']['reviews_update_published'],$_GET['id'])."
"; } else { $msg = "".sprintf($lang['admin']['reviews_update_unpublished'],$_GET['id'])."
"; } } if($_GET['edit']>0) { $query = "SELECT ".$glob['dbprefix']."CubeCart_inventory.name as `prodName`, `id`, `approved`, ".$glob['dbprefix']."CubeCart_reviews.productId, `type`, `rating`, ".$glob['dbprefix']."CubeCart_reviews.name, `email`, `title`, `review`, `ip`, `time` FROM ".$glob['dbprefix']."CubeCart_reviews INNER JOIN ".$glob['dbprefix']."CubeCart_inventory ON ".$glob['dbprefix']."CubeCart_reviews.productId = ".$glob['dbprefix']."CubeCart_inventory.productId WHERE `id`=".$db->mySQLSafe($_GET['edit']); } else { // get comments / reviews if(isset($_GET['column']) && isset($_GET['direction'])) { $orderBy = $_GET['column']." ".$_GET['direction']; } else { $orderBy = "time DESC"; } if(isset($_GET['productId']) && $_GET['productId']>0) { $whereExtra = "WHERE ".$glob['dbprefix']."CubeCart_reviews.productId = ".$_GET['productId']; } elseif(isset($_GET['searchStr']) && !empty($_GET['searchStr'])) { $whereExtra = "WHERE `review` LIKE '%".$_GET['searchStr']."%' OR `title` LIKE '%".$_GET['searchStr']."%'"; } $query = "SELECT ".$glob['dbprefix']."CubeCart_inventory.name as `prodName`, `id`, `approved`, ".$glob['dbprefix']."CubeCart_reviews.productId, `type`, `rating`, ".$glob['dbprefix']."CubeCart_reviews.name, `email`, `title`, `review`, `ip`, `time`,".$glob['dbprefix']."CubeCart_reviews.productId FROM ".$glob['dbprefix']."CubeCart_reviews INNER JOIN ".$glob['dbprefix']."CubeCart_inventory ON ".$glob['dbprefix']."CubeCart_reviews.productId = ".$glob['dbprefix']."CubeCart_inventory.productId ".$whereExtra." ORDER BY ".$orderBy; } if(isset($_GET['page'])){ $page = $_GET['page']; } else { $page = 0; } // query database $reviewsPerPage = 20; $results = $db->select($query, $reviewsPerPage, $page); $numrows = $db->numrows($query); $pagination = paginate($numrows, $reviewsPerPage, $page, "page"); if($results==FALSE){ $msg = "".$lang['admin']['reviews_no_reviews']."
"; } require($glob['adminFolder'].CC_DS."includes".CC_DS."header.inc.php"); if(isset($msg)){ echo msg($msg); } ?>