exec("INSERT INTO `$dbname`.`csrf_token` (`token`,`timestamp`,`sessionid`) VALUES ('$csrf_token','".time()."','".session_id()."')") === false) { $err_msg = print_r($mysqlcon->errorInfo(), true); $err_lvl = 3; } if (($db_csrf = $mysqlcon->query("SELECT * FROM `$dbname`.`csrf_token` WHERE `sessionid`='".session_id()."'")->fetchALL(PDO::FETCH_UNIQUE|PDO::FETCH_ASSOC)) === false) { $err_msg = print_r($mysqlcon->errorInfo(), true); $err_lvl = 3; } $assign_groups_active = 0; if (isset($_POST['update']) && isset($db_csrf[$_POST['csrf_token']])) { $assign_groups_limit = $_POST['assign_groups_limit']; $assign_groups_groupids = $_POST['assign_groups_groupids']; if (isset($_POST['assign_groups_active'])) $assign_groups_active = 1; if ($mysqlcon->exec("UPDATE `$dbname`.`addons_config` SET `value` = CASE `param` WHEN 'assign_groups_active' THEN '$assign_groups_active' WHEN 'assign_groups_limit' THEN '$assign_groups_limit' WHEN 'assign_groups_groupids' THEN '$assign_groups_groupids' END WHERE `param` IN ('assign_groups_active','assign_groups_groupids','assign_groups_limit')") === false) { $err_msg = print_r($mysqlcon->errorInfo(), true); $err_lvl = 3; } else { $err_msg = $lang['wisvsuc']; $err_lvl = NULL; } $addons_config['assign_groups_groupids']['value'] = $_POST['assign_groups_groupids']; $addons_config['assign_groups_limit']['value'] = $_POST['assign_groups_limit']; $addons_config['assign_groups_active']['value'] = $assign_groups_active; } elseif(isset($_POST['update'])) { echo '

',$lang['errcsrf'],'

'; rem_session_ts3($rspathhex); exit; } ?>