support apostrophes, formData, restoresession, and some clean up
[openemr.git] / interface / language / lang_language.php
blob0689d3a9affa4551b3efa56c31cbc06e76835587
1 <?php
2 require_once("language.inc.php");
4 if ($_POST['add']){
5 //validate
6 $pat="^[a-z]{2}\$";
7 if (!check_pattern (strip_escape_custom($_POST['lang_code']),$pat)) {
8 xl ("Code must be two letter lowercase",'e','','<br>');
9 $err='y';
12 $sql="SELECT * FROM lang_languages WHERE lang_code LIKE '%".formData('lang_code')."%' or lang_description LIKE '%".formData('lang_name')."' limit 1" ;
13 $res=SqlQuery($sql);
14 if ( $res ) {
15 xl ("Data Alike is already in database, please change code and/or description",'e','','<br>');
16 $err='y';
18 if ($err=='y'){
19 $val_lang_code=strip_escape_custom($_POST['lang_code']);
20 $val_lang_name=strip_escape_custom($_POST['lang_name']);
21 } else {
22 $sql="INSERT INTO lang_languages SET lang_code='".formData('lang_code')."', lang_description='".formData('lang_name')."'";
23 SqlStatement ($sql);
24 xl('Language definition added','e','','<br>');
30 <TABLE>
31 <FORM name="lang_form" METHOD=POST ACTION="?m=language" onsubmit="return top.restoreSession()">
32 <TR>
33 <TD><?php xl('Language Code','e') ?>:</TD>
34 <TD><INPUT TYPE="text" NAME="lang_code" size="2" maxlength="2" value="<?php echo htmlspecialchars($val_lang_code,ENT_QUOTES); ?>"></TD>
35 </TR>
36 <TR>
37 <TD><?php xl('Language Name','e') ?>:</TD>
38 <TD><INPUT TYPE="text" NAME="lang_name" size="24" value="<?php echo htmlspecialchars($val_lang_name,ENT_QUOTES); ?>"></TD>
39 </TR>
40 <TR>
41 <TD></TD>
42 <TD><INPUT TYPE="submit" name="add" value="<?php xl('Add','e'); ?>"></TD>
43 </TR>
44 </FORM>
45 </TABLE>