FilterText($_POST['songId']); $widgetid = $input->FilterText($_POST['widgetId']); $data = new home_sql; $widgetrow = $db->fetch_row($db->query("SELECT id,location,ownerid FROM ".PREFIX."homes WHERE ".PREFIX."homes.id = '".$widgetid."' LIMIT 1")); $widgetrow[1] = str_replace('-','',$widgetrow[1]); if($widgetrow[1] == "0" || $widgetrow[1] == "2"){ $type = "user"; }else{ $type = "group"; $ownerid = $widgetrow[1]; $mrow = $db->fetch_row($data->select15($user->id,$ownerid)); } if(($type == "user" && $ownerid == $user->id) || ($type == "group" && $mrow[2] > 1)){ $db->query("UPDATE ".PREFIX."homes SET variable = '".$id."' WHERE id = '".$widgetid."' LIMIT 1"); } ?>