2 include_once $gfplugins.'webcalendar/www/includes/init.php';
7 $error = translate("You are not authorized");
11 while ( list ( $key, $value ) = each ( $HTTP_POST_VARS ) ) {
12 $setting = substr ( $key, 6 );
15 // validate key name. should start with "admin_" and not include
16 // any unusual characters that might cause SQL injection
17 if ( ! preg_match ( '/admin_[A-Za-z0-9_]+$/', $key ) ) {
18 die_miserable_death ( 'Invalid admin setting name "' .
21 if ( strlen ( $setting ) > 0 ) {
22 $sql = "DELETE FROM webcal_config WHERE cal_setting = '$setting'";
23 if ( ! dbi_query ( $sql ) ) {
24 $error = translate("Error") . ": " . dbi_error () .
25 "<br /><br /><span style=\"font-weight:bold;\">SQL:</span> $sql";
28 if ( strlen ( $value ) > 0 ) {
29 $sql = "INSERT INTO webcal_config " .
30 "( cal_setting, cal_value ) VALUES " .
31 "( '$setting', '$value' )";
32 if ( ! dbi_query ( $sql ) ) {
33 $error = translate("Error") . ": " . dbi_error () .
34 "<br /><br /><span style=\"font-weight:bold;\">SQL:</span> $sql";
42 if ( empty ( $error ) ) {
43 if ( empty ( $ovrd ) )
44 do_redirect ( "admin.php" );
46 do_redirect ( "admin.php?ovrd=$ovrd" );
52 <h2><?php etranslate("Error")?></h2>
54 <?php etranslate("The following error occurred")?>:
59 <?php print_trailer(); ?>