MINI Sh3ll

<?php
class shortcode {
	private $objdb;

	public function __construct(){

		$this->objdb=new database;
		return true;
	}

    public function getShortcodes($status = '1', $client_id = '') {        

        $sql = "SELECT s.*, concat(u.firstname,' ',u.lastname) client_name, u.company, 
            case s.response_type when 0 then 'DR' when 1 then 'UF' when 2 then 'DRUF' END response_type_text,
            concat(cb.firstname,' ',cb.lastname) createdby_name 
            FROM shortcodes s LEFT JOIN users u ON s.client_id = u.id
            LEFT JOIN users cb ON s.created_by = cb.id
            WHERE s.`status` IN (".$status.") ";

            if($client_id != ""){
                $sql .= " and s.client_id = '".$client_id."'";
            }
            
            $sql .= " ORDER BY s.id DESC;";        
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result;        
    }

    public function getActiveShortcodeByCode($shortcode) {        

        $sql = "SELECT * FROM shortcodes s WHERE s.`status` in (0,1,5) and s.shortcode = '".mysql_escape($this->objdb->connection, $shortcode)."' LIMIT 1";
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result[0];        
    }

    function addShortcode($shcode = '')
    {
        if($shcode == '') return false;

        $sql = "insert into shortcodes(shortcode, description, client_id, startdate, enddate, response_type, response_text, response_url, url_parameters, status, created_by) values(
            '".mysql_escape($this->objdb->connection, $shcode['shortcode'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['description'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['client_id'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['startdate'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['enddate'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['response_type'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['response_text'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['response_url'])."', 
            '".mysql_escape($this->objdb->connection, $shcode['url_parameters'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['status'])."',             
            '".mysql_escape($this->objdb->connection, $shcode['created_by'])."'
        )";
        //print $sql; die;
        $result = $this->objdb->saveRecords($sql);
        return $result;
    } 

    public function getShortcodeById($shortcode_id) {        

        $sql = "SELECT s.*, concat(c.firstname,' ',c.lastname) client_name, c.company, c.address FROM shortcodes s 
        LEFT JOIN users c ON s.client_id = c.id
        WHERE s.`status` in (0,1,5) and s.id = '".mysql_escape($this->objdb->connection, $shortcode_id)."' LIMIT 1";
        
        $result = $this->objdb->get_records($sql);

        if($result == false)
            return false;
        else 
            return $result[0];        
    }

    function updateShortcode($shcode = '')
    {
        if($shcode == '') return false;

        $sql ="update shortcodes set
            response_type = '".mysql_escape($this->objdb->connection, $shcode['response_type'])."', 
            response_text = '".mysql_escape($this->objdb->connection, $shcode['response_text'])."', 
            response_url = '".mysql_escape($this->objdb->connection, $shcode['response_url'])."', 
            url_parameters = '".mysql_escape($this->objdb->connection, $shcode['url_parameters'])."',            
            modified_by = '".mysql_escape($this->objdb->connection, $shcode['modified_by'])."', 
            modified = now() 
            where id = '".$shcode['id']."' ";
        
        $result = $this->objdb->saveRecords($sql);        
    }
    
}
?>