Here is the code I am looking at. I believe it is one of these that needs to have something added to it. Just not 100% sure what or where. I'm thinking the first query is for the Search box at the top of my admin page and the 2nd query is the one that i need to change and the 3rd query is just for the database.
Jason
CODE
if($_REQUEST['prod_search']!="")
{
$product_query = tep_db_query("select pd.products_name, p.products_id, p.products_price, p.products_quantity, p.products_model, p.products_weight, p.products_cost from " . TABLE_PRODUCTS . " p, " . TABLE_PRODUCTS_DESCRIPTION . " pd where p.products_id = pd.products_id and pd.language_id = '" . (int)$languages_id . "' and pd.products_name like '".$_REQUEST['prod_search']."%'");
}
else
{
$product_query = tep_db_query("select pd.products_name, p.products_id, p.products_price, p.products_quantity, p.products_model, p.products_weight, p.products_cost from " . TABLE_PRODUCTS . " p, " . TABLE_PRODUCTS_DESCRIPTION . " pd where p.products_id = pd.products_id and pd.language_id = '" . (int)$languages_id . "'");
}
if($_REQUEST['update']=="update")
{
while($product1 = tep_db_fetch_array($product_query))
{
$str=tep_db_query("update products set products_price='".$_REQUEST['price_'.$product1['products_id']]."',products_weight='".$_REQUEST['weight_'.$product1['products_id']]."', products_quantity='".$_REQUEST['qty_'.$product1['products_id']]."', products_cost='".$_REQUEST['cost_'.$product1['products_id']]."' where products_id='".$product1[products_id]."'");
}
header("location:product_list.php?Update=Success&prod_search=".$_REQUEST['prod_search']);
}
?>