small events cleanup

[mirrors/Kyberia-bloodline.git] / wwwroot / inc / eventz / banlist.inc

diff --git a/wwwroot/inc/eventz/banlist.inc b/wwwroot/inc/eventz/banlist.inc
index 9d4633266150e43ba9a6ddc5faec31e777994473..b806cb1c939b511f460801f88ca621a6ade24995 100644 (file)
--- a/wwwroot/inc/eventz/banlist.inc
+++ b/wwwroot/inc/eventz/banlist.inc
@@ -1,14 +1,14 @@
 <?php
 
        function banlist() {
-               global $db,$error,$node,$logger;
+               global $db,$error,$node;
                $node_id=$node['node_id'];
 
 if ($node['node_permission']!=('owner' || 'master' || 'op')) {
 $error=$error_messages['EVENT_PERMISSION_ERROR'];
 return false;
 }
-               $bans=explode(";",$_POST['bans']);
+               $bans=explode(";",$_POST['bans']); // XXX sqli?
 
                $db->query("update node_access set node_permission='' where node_id=$node_id and node_permission='ban'");
                foreach ($bans as $ban) {
@@ -22,7 +22,7 @@ return false;
                                        $q="insert into node_access set node_permission='ban',node_id=$node_id,user_id=".$set->getString('user_id');
                                        $db->query($q);
                                }
-                               $logger->log('add ban',$node_id,'ok',$ban);
+                               logger::log('add ban',$node_id,'ok',$ban);
                        }
                        else { $error .= "$ban does not exist..."; }
                }