comparison: www/includes/db_recipes.php
www/includes/db_recipes.php
- changeset 166
- 635033a29c48
- parent 156
- 35860890224c
- child 168
- ce92dc75cb09
equal
deleted
inserted
replaced
| 165:5970c8377b89 | 166:635033a29c48 |
|---|---|
| 24 if (isset($_POST['update'])) { | 24 if (isset($_POST['update'])) { |
| 25 // UPDATE COMMAND | 25 // UPDATE COMMAND |
| 26 $sql = "UPDATE `recipes` SET "; | 26 $sql = "UPDATE `recipes` SET "; |
| 27 } | 27 } |
| 28 // Basic settings | 28 // Basic settings |
| 29 $sql .= "st_name='" . mysqli_real_escape_string($connect, $_POST['st_name']); | 29 if (isset($_POST['uuid'])) { |
| 30 $sql .= "uuid='" . $_POST['uuid']; | |
| 31 } else { | |
| 32 $uuid = str_replace("\n", "", file_get_contents('/proc/sys/kernel/random/uuid')); | |
| 33 $sql .= "uuid='" . $uuid; | |
| 34 } | |
| 35 $sql .= "', st_name='" . mysqli_real_escape_string($connect, $_POST['st_name']); | |
| 30 $sql .= "', st_letter='" . mysqli_real_escape_string($connect, $_POST['st_letter']); | 36 $sql .= "', st_letter='" . mysqli_real_escape_string($connect, $_POST['st_letter']); |
| 31 $sql .= "', st_guide='" . mysqli_real_escape_string($connect, $_POST['st_guide']); | 37 $sql .= "', st_guide='" . mysqli_real_escape_string($connect, $_POST['st_guide']); |
| 32 $sql .= "', st_type='" . mysqli_real_escape_string($connect, $_POST['st_type']); | 38 $sql .= "', st_type='" . mysqli_real_escape_string($connect, $_POST['st_type']); |
| 33 $sql .= "', st_category='" . mysqli_real_escape_string($connect, $_POST['st_category']); | 39 $sql .= "', st_category='" . mysqli_real_escape_string($connect, $_POST['st_category']); |
| 34 $sql .= "', st_category_number='" . $_POST['st_category_number']; | 40 $sql .= "', st_category_number='" . $_POST['st_category_number']; |
