real_escape_string($_POST['ppc_network_id']); $mysql['user_id'] = $db->real_escape_string($_SESSION['user_id']); $ppc_account_sql = "SELECT * FROM `202_ppc_accounts` WHERE `user_id`='".$mysql['user_id']."' AND `ppc_network_id`='".$mysql['ppc_network_id']."' AND `ppc_account_deleted`='0' ORDER BY `ppc_account_name` ASC"; $ppc_account_result = $db->query($ppc_account_sql) or record_mysql_error($ppc_account_sql); if ($ppc_account_result->num_rows == 0) { echo ' -- '; } else { ?> -- fetch_array(MYSQLI_ASSOC)) { $html['ppc_account_id'] = htmlentities($ppc_account_row['ppc_account_id'], ENT_QUOTES, 'UTF-8'); $html['ppc_account_name'] = htmlentities($ppc_account_row['ppc_account_name'], ENT_QUOTES, 'UTF-8'); if ($_POST['ppc_account_id'] == $ppc_account_row['ppc_account_id']) { $selected = 'selected=""'; } else { $selected = ''; } printf('%s', $selected, $html['ppc_account_id'], $html['ppc_account_name']); } ?>