Mysql formular Variable

PHP-Code:

<!-- TinyMCE -->
  <script type="text/javascript" src="editor/tiny_mce.js"></script>
  <script type="text/javascript">
      tinyMCE.init({
          // General options
          language : "de", // change language here
          mode : "textareas",
          theme : "advanced",
          plugins : "safari,pagebreak,style,layer,table,save,advhr,advimage,advlink,emotions,iespell,inlinepopups,insertdatetime,preview,media,searchreplace,print,contextmenu,paste,directionality,fullscreen,noneditable,visualchars,nonbreaking,xhtmlxtras,template,wordcount",
  
          // Theme options
          theme_advanced_buttons1 : "save,newdocument,|,bold,italic,underline,strikethrough,|,justifyleft,justifycenter,justifyright,justifyfull,styleselect,formatselect,fontselect,fontsizeselect",
          theme_advanced_buttons2 : "cut,copy,paste,pastetext,pasteword,|,search,replace,|,bullist,numlist,|,outdent,indent,blockquote,|,undo,redo,|,link,unlink,anchor,image,cleanup,help,code,|,insertdate,inserttime,preview,|,forecolor,backcolor",
          theme_advanced_buttons3 : "tablecontrols,|,hr,removeformat,visualaid,|,sub,sup,|,charmap,emotions,iespell,media,advhr,|,print,|,ltr,rtl,|,fullscreen",
          theme_advanced_buttons4 : "insertlayer,moveforward,movebackward,absolute,|,styleprops,|,cite,abbr,acronym,del,ins,attribs,|,visualchars,nonbreaking,template,pagebreak",
          theme_advanced_toolbar_location : "top",
          theme_advanced_toolbar_align : "left",
          theme_advanced_statusbar_location : "bottom",
          theme_advanced_resizing : true,
  
          // Example content CSS (should be your site CSS)
          content_css : "css/content.css",
  
          // Drop lists for link/image/media/template dialogs
          template_external_list_url : "lists/template_list.js",
          external_link_list_url : "lists/link_list.js",
          external_image_list_url : "lists/image_list.js",
          media_external_list_url : "lists/media_list.js",
  
          // Replace values for the template plugin
          template_replace_values : {
              username : "Some User",
              staffid : "991234"
          }
      });
  </script>
  <!-- /TinyMCE -->
  <form action="#" method="post">
    <input name="editor" type="hidden" value="1">
    <b><?php echo $l['page_name']; ?></b>
    <br>    
    <input type="text" name="site_title" size="60" value="<?php echo $site_title; ?>">
    <br>
    <p>
      <textarea id="elm1" name="elm1" rows="15" cols="80"><?php echo $editor; ?></textarea>
    </p>
    <input type="button" onClick="window.location.href='?page=<?php echo $page; ?>'" value="<?php echo $l['back']; ?>">
    <?php
    if ($act == "new"){
      ?>
      <input type="submit" name="save" value="<?php echo $l['page_create']; ?>">
      <?php
    }else{
      ?>
      <input type="submit" name="save" value="<?php echo $l['page_save']; ?>">
      <?php
    }
    ?>
  </form>
  <?php
  goto end;
  } else {
  ?>
  <form action="#" method="post">
    <input name="editor" type="hidden" value="0">
    <b><?php echo $l['page_name']; ?></b>
    <br>    
    <input type="text" name="site_title" size="60" value="<?php echo $site_title; ?>">
    <br>
    <p>
      <script language="javascript" type="text/javascript" src="../admin/edit_area/edit_area_full.js"></script>
      <script language="javascript" type="text/javascript">editAreaLoader.init({ id : "file_source", syntax: "php", start_highlight: true }); </script>
      <textarea style="width:100%" rows="15" cols="80" name="elm1" id="file_source"><?php echo $editor; ?></textarea>
    </p>
    <input type="button" onClick="window.location.href='?page=<?php echo $page; ?>'" value="<?php echo $l['back']; ?>">
    <?php
    if ($act == "new"){
      ?>
      <input type="submit" name="save" value="<?php echo $l['page_create']; ?>">
      <?php
    }else{
      ?>
      <input type="submit" name="save" value="<?php echo $l['page_save']; ?>">
      <?php
    }
    ?>
  </form>

PHP-Code:

if (isset($_REQUEST['editor'])) {
      if ($_SESSION['page_not_new'] == 1){
        goto editor_end;
      }
      $editor = htmlspecialchars(htmlentities($_POST['elm1']));
      $site_title = $_POST['site_title'];
      if (($editor)AND($site_title)){
        if(!isset($_GET['php'])) {
            $php = "no";
        } else {
            $php = "yes";
        }
        $editor = str_replace("'", "'", $editor);
        mysql_query("INSERT INTO `".$prefix."page` Set `page_title` = '$site_title', `page_content` = '$editor', `php_code` = '$php'") or die("Fehler beim speichern!<br><br>");      
        ?>
        <table class="menu_site_edit_ok" cellspacing="0" width="100%">
          <tr>
            <td>
              <?php echo $l['page_add_suc']; ?>
            </td>
          </tr>
        </table>
        <br>
        <br>
        <?php
        $_SESSION['page_not_new'] = 1;
        goto editor_end;
      }else{
        ?>
        <table class="menu_error" cellspacing="0" width="100%">
          <tr>
            <td>
              <?php echo $l['complet_all_fields']; ?>
            </td>
          </tr>
        </table>
        <br>
        <br>        
        <?php
      }
    }