0){ $data['productId'] = $db->mySQLSafe($_POST['productId']); $data['name'] = $db->mySQLSafe($_POST['name']); $data['email'] = $db->mySQLSafe($_POST['email']); $data['title'] = $db->mySQLSafe($_POST['title']); $data['review'] = $db->mySQLSafe($_POST['review']); if(isset($_POST['rating_val'])){ $data['rating'] = $db->mySQLSafe($_POST['rating_val']); } $data['approved'] = $db->mySQLSafe($_POST['approved']); $update = $db->update($glob['dbprefix']."CubeCart_reviews",$data,"id=".$_POST['edit']); if($update==TRUE){ $msg = "

".$lang['admin']['reviews_update_success']."

"; } else { $msg = "

".$lang['admin']['reviews_update_fail']."

"; } } if($_GET['delete']>0){ $where = "id=".$db->mySQLSafe($_GET["delete"]); $delete = $db->delete($glob['dbprefix']."CubeCart_reviews", $where); if($delete==TRUE){ $msg = "

".sprintf($lang['admin']['reviews_deleted'],$_GET['delete'])."

"; } } if (is_numeric($_GET['approved']) && $_GET['id']>0){ $where = "id=".$db->mySQLSafe($_GET['id']); $record['approved'] = $db->mySQLSafe($_GET['approved']); $update = $db->update($glob['dbprefix']."CubeCart_reviews", $record, $where); if($_GET['approved']==1){ $msg = "

".sprintf($lang['admin']['reviews_update_published'],$_GET['id'])."

"; } else { $msg = "

".sprintf($lang['admin']['reviews_update_unpublished'],$_GET['id'])."

"; } } if($_GET['edit']>0) { $query = "SELECT ".$glob['dbprefix']."CubeCart_inventory.name as `prodName`, `id`, `approved`, ".$glob['dbprefix']."CubeCart_reviews.productId, `type`, `rating`, ".$glob['dbprefix']."CubeCart_reviews.name, `email`, `title`, `review`, `ip`, `time` FROM ".$glob['dbprefix']."CubeCart_reviews INNER JOIN ".$glob['dbprefix']."CubeCart_inventory ON ".$glob['dbprefix']."CubeCart_reviews.productId = ".$glob['dbprefix']."CubeCart_inventory.productId WHERE `id`=".$db->mySQLSafe($_GET['edit']); } else { // get comments / reviews if(isset($_GET['column']) && isset($_GET['direction'])) { $orderBy = $_GET['column']." ".$_GET['direction']; } else { $orderBy = "time DESC"; } if(isset($_GET['productId']) && $_GET['productId']>0) { $whereExtra = "WHERE ".$glob['dbprefix']."CubeCart_reviews.productId = ".$_GET['productId']; } elseif(isset($_GET['searchStr']) && !empty($_GET['searchStr'])) { $whereExtra = "WHERE `review` LIKE '%".$_GET['searchStr']."%' OR `title` LIKE '%".$_GET['searchStr']."%'"; } $query = "SELECT ".$glob['dbprefix']."CubeCart_inventory.name as `prodName`, `id`, `approved`, ".$glob['dbprefix']."CubeCart_reviews.productId, `type`, `rating`, ".$glob['dbprefix']."CubeCart_reviews.name, `email`, `title`, `review`, `ip`, `time`,".$glob['dbprefix']."CubeCart_reviews.productId FROM ".$glob['dbprefix']."CubeCart_reviews INNER JOIN ".$glob['dbprefix']."CubeCart_inventory ON ".$glob['dbprefix']."CubeCart_reviews.productId = ".$glob['dbprefix']."CubeCart_inventory.productId ".$whereExtra." ORDER BY ".$orderBy; } if(isset($_GET['page'])){ $page = $_GET['page']; } else { $page = 0; } // query database $reviewsPerPage = 20; $results = $db->select($query, $reviewsPerPage, $page); $numrows = $db->numrows($query); $pagination = paginate($numrows, $reviewsPerPage, $page, "page"); if($results==FALSE){ $msg = "

".$lang['admin']['reviews_no_reviews']."

"; } require($glob['adminFolder'].CC_DS."includes".CC_DS."header.inc.php"); if(isset($msg)){ echo msg($msg); } ?>


\n"; ?> \n"; } ?>
 

\n"; } } ?> | |

""

href="javascript:decision('','&approved=0&id=');" class="txtRed"> href="javascript:decision('','&approved=1&id=');" class="txtGreen"> / href="?_g=reviews/index&edit=" class="txtLink"> / href="javascript:decision('','?_g=reviews/index&delete=');" class="txtLink"> | |