$name created"); redirect(); } if (isset($_POST['edit_canned_response'])) { validateCSRFToken(); $canned_response_id = intval($_POST['canned_response_id']); $name = escapeSql($_POST['name']); $body = mysqli_real_escape_string($mysqli, $_POST['body']); $category_id = intval($_POST['category']); mysqli_query($mysqli, "UPDATE canned_responses SET canned_response_name = '$name', canned_response_body = '$body', canned_response_category_id = $category_id WHERE canned_response_id = $canned_response_id"); logAudit("Canned Response", "Edit", "$session_name edited canned response $name", 0, $canned_response_id); flashAlert("Canned Response $name edited"); redirect(); } if (isset($_GET['delete_canned_response'])) { validateCSRFToken(); $canned_response_id = intval($_GET['delete_canned_response']); $name = escapeSql(getFieldById('canned_responses', $canned_response_id, 'canned_response_name')); mysqli_query($mysqli, "DELETE FROM canned_responses WHERE canned_response_id = $canned_response_id"); logAudit("Canned Response", "Delete", "$session_name deleted canned response $name", 0, $canned_response_id); flashAlert("Canned Response $name deleted", 'error'); redirect(); }