Correct the syntax and make it more efficient.

core/default_settings/default_setting_edit.php

@@ -100,9 +100,9 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
 					$prep_statement = $db->prepare(check_sql($sql));
 					$prep_statement->execute();
 					$result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
-					$var_action = "add"
-					foreach ($result as &$row) {
-						$var_action = "update"
+					$var_action = "add";
+					foreach ($result as $row) {
+						$var_action = "update";
 					}
 					unset ($prep_statement);
 
@@ -111,16 +111,14 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
 						$sql = "update from v_vars ";
 						$sql = "set var_value = '".$default_setting_value."' ";
 						$sql .= "where var_name = 'timezone' ";
-						$prep_statement = $db->prepare(check_sql($sql));
-						$prep_statement->execute();
+						$db->query($sql);
 						unset($sql);
 					}
 					else {
 						$sql = "insert into v_vars ";
 						$sql .= "(var_uuid, var_name, var_value, var_cat, var_enabled) ";
 						$sql .= "values ('".uuid()."', 'timezone', '$default_setting_value', 'Defaults', 'true'); ";
-						$prep_statement = $db->prepare(check_sql($sql));
-						$prep_statement->execute();
+						$db->query($sql);
 						unset($sql);
 					}
 			}