Index: trunk/admin/config/addtheme_templates.php =================================================================== diff -u -r375 -r384 --- trunk/admin/config/addtheme_templates.php (.../addtheme_templates.php) (revision 375) +++ trunk/admin/config/addtheme_templates.php (.../addtheme_templates.php) (revision 384) @@ -108,7 +108,7 @@ $objEditItems->EnablePaging = FALSE; //Multiedit init -$en = (int)$_GET["en"]; +$en = (int)GetVar('en'); $objEditItems->Query_Item("SELECT * FROM ".$objEditItems->SourceTable); $itemcount=$objEditItems->NumItems(); @@ -226,23 +226,17 @@ $sql = "SELECT t.*,t.Description as Description, ELT(t.FileType+1,'".admin_language("la_Text_BuiltIn")."','".admin_language("la_Text_Custom")."') as Type "; $sql .= "FROM ".GetTablePrefix()."ThemeFiles as t WHERE t.ThemeId=".$c->Get("ThemeId")." "; -if(strlen($where)) - $sql .= "AND ".$where." "; -if(strlen($order)) - $sql .= "ORDER BY ".$order." "; + +if( strlen($where) ) $sql .= ' AND '.$where.' '; +if( strlen($order) ) $sql .= 'ORDER BY '.$order.' '; $limit = ' '.$objListView->GetLimitSQL();; $sql .= $limit; $c->VerifyTemplates($where,$order,$limit); // slow down process -if(isset($_GET["lpn"])) - $objSession->SetVariable("Page_Template",$_GET["lpn"]); +if( GetVar('lpn') !== false ) $objSession->SetVariable("Page_Template",$_GET["lpn"]); - - - - $objThemeFiles->Query_Item($sql); $ThemeDir = strtolower($c->Get("Name")).$pathchar;