escape($_REQUEST['text']); $user_id = $context['user']['id']; if ($db->query ("SELECT id FROM note WHERE user_id='$user_id'")) { $db->query ("UPDATE note SET text='$text' WHERE user_id='$user_id'"); } else { $db->query ("INSERT INTO note (user_id, text) VALUES ('$user_id', '$text')"); } } break; } ?>