$value) { $_POST[$key] = $database->escape($value); } $did = (int) $_POST['did']; $name = $_POST['villagename']; $session = (int) $_POST['admid']; $sql = mysqli_query($GLOBALS["link"], "SELECT * FROM ".TB_PREFIX."users WHERE id = ".$session.""); $access = mysqli_fetch_array($sql); $sessionaccess = $access['access']; if($sessionaccess != 9) die("

Access Denied: You are not Admin!

"); $sql = "UPDATE ".TB_PREFIX."vdata SET name = '$name' WHERE wref = $did"; mysqli_query($GLOBALS["link"], $sql); header("Location: ../../../Admin/admin.php?p=village&did=".$did."&name=".$nameorig.""); ?>