removing warning messages and not working rss

[mirrors/Kyberia-bloodline.git] / wwwroot / inc / eventz / display.inc

diff --git a/wwwroot/inc/eventz/display.inc b/wwwroot/inc/eventz/display.inc
index 8b4a883957cc667348a93ff4aa3080279cd864d5..8518cdf7f242db6c7e260a9f894849a7710c10c7 100644 (file)
--- a/wwwroot/inc/eventz/display.inc
+++ b/wwwroot/inc/eventz/display.inc
@@ -3,9 +3,10 @@ function display() {
        global $node,$db,$error,$referer_id,$smarty,$permissions,$template_id;
        global $timer_start;
        if (!$referer_id) $referer_id=1;
+       $content='';
 
        $node_id=$node['node_id'];
-       $user_id=$_SESSION['user_id'];
+       $user_id=(empty($_SESSION['user_id'])) ? "" : $_SESSION['user_id'];
 
 if ($permissions['r']) {
 
@@ -226,13 +227,13 @@ if (!empty($_POST['template_event'])) {
        $descendant_count=$node['node_descendant_count'];
 
         if (isset($_POST['listing_amount']) && is_numeric($_POST['listing_amount'])) { 
-               $listing_amount=mysql_real_escape_string($_POST['listing_amount']);
+               $listing_amount=db_escape_string($_POST['listing_amount']);
        }elseif (!empty($_SESSION['listing_amount'])) $listing_amount=$_SESSION['listing_amount'];
         else $listing_amount=DEFAULT_LISTING_AMOUNT;
        $smarty->assign('listing_amount',$listing_amount);
 
        if (isset($_POST['listing_order']) && $_POST['listing_order']) {
-               $listing_order=mysql_real_escape_string($_POST['listing_order']);
+               $listing_order=db_escape_string($_POST['listing_order']);
        } elseif (!empty($_SESSION['listing_order'])) $listing_order=$_SESSION['listing_order'];
        else $listing_order=DEFAULT_LISTING_ORDER;
        $smarty->assign('listing_order',$listing_order);
@@ -265,7 +266,6 @@ if (!empty($_POST['template_event'])) {
        $_POST['offset']=$offset; // XXX sqli?
        $smarty->assign('offset',$offset);
 
-
 if ($node['external_link']=='header://svg' && !is_numeric($template_id)) {
        header("Content-Type: image/svg+xml");
 }