[SirSteve]

This is what the hack says:

// ###################### Start do update #######################
if ($HTTP_POST_VARS['action']=="doupdate") {
// a few lines of code here
}

-------------------------------------------------

This is mine:

// ###################### Start do update #######################
if ($HTTP_POST_VARS['action']=="doupdate") {

$DB_site->query("UPDATE template SET templatesetid=$templatesetid,title='".addslashes(" $title")."',template='".addsla shes("$template")."' WHERE templateid=$templateid");

echo "<p>Done!</p>";
if ($return) {
$action="edit";
} else {
$action="modify";
$expandset=$templatesetid;
}
}

----------------------------------------------------------

This is correct?