call_approved

public function actionCall_approved()
    {
        if ($_POST['validasi']=="menunggu") {
            $SQL="UPDATE tutorial_approved SET status='".$_POST['status']."' WHERE status='".$_POST['validasi']."'";
            $command= Yii::app()->db->createCommand($SQL);
            $n=$command->execute();
        }else{

            $SQL="UPDATE tutorial_approved SET status='".$_POST['status']."' WHERE id='".$_POST['id']."'";
            $command= Yii::app()->db->createCommand($SQL);
            $n=$command->execute();
    }
    }