More fixes for surfbar, SQL_QUERY_ESC() now escapes zeros

[mailer.git] / inc / modules / member / what-categories.php

diff --git a/inc/modules/member/what-categories.php b/inc/modules/member/what-categories.php
index 622735c3eea42430e2c50ae0103c7cab93f03999..4f2a8ae2386033a3910bb971b4cfd861ff256534 100644 (file)
--- a/inc/modules/member/what-categories.php
+++ b/inc/modules/member/what-categories.php
@@ -60,7 +60,7 @@ if ($cats > 0)
                $cnt = 0;
                foreach ($_POST['cat'] as $cat=>$joined)
                {
-                       if ($joined == 'N') $cnt++;
+                       if ($joined == "N") $cnt++;
                }
                if (($cats - $cnt) < $_CONFIG['least_cats'])
                {
@@ -76,7 +76,7 @@ if ($cats > 0)
                        {
                                case 'Y':
                                        $sql = "";
-                                       $result_user = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_cats WHERE userid=%d AND cat_id=%d LIMIT 1",
+                                       $result_user = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_cats WHERE userid=%s AND cat_id=%s LIMIT 1",
                                         array($UID, bigintval($cat)), __FILE__, __LINE__);
 
                                        if (SQL_NUMROWS($result_user) == 0)
@@ -91,7 +91,7 @@ if ($cats > 0)
                                        break;
 
                                case 'N':
-                                       $sql = "DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_cats WHERE userid=%d AND cat_id=%d LIMIT 1";
+                                       $sql = "DELETE LOW_PRIORITY FROM "._MYSQL_PREFIX."_user_cats WHERE userid=%s AND cat_id=%s LIMIT 1";
                                        break;
                        }
                        if (!empty($sql))
@@ -121,22 +121,22 @@ if ($cats > 0)
                while (list($id, $cat) = SQL_FETCHROW($result))
                {
                        // Default he has not joined
-                       $JOINED_N = " checked"; $JOINED_Y = "";
+                       $JOINED_N = ' checked'; $JOINED_Y = "";
 
                        // Check category selection
-                       $result_user = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_cats WHERE userid=%d AND cat_id=%d LIMIT 1",
+                       $result_user = SQL_QUERY_ESC("SELECT id FROM "._MYSQL_PREFIX."_user_cats WHERE userid=%s AND cat_id=%s LIMIT 1",
                         array($UID, bigintval($id)), __FILE__, __LINE__);
 
                        // When we found an entry don't read it, just change the JOINED_x variables
                        if (isset($_POST['cat']))
                        {
-                               if ($_POST['cat'][$id] =='Y') { $JOINED_Y = " checked"; $JOINED_N = ""; }
+                               if ($_POST['cat'][$id] =='Y') { $JOINED_Y = ' checked'; $JOINED_N = ""; }
                        }
                         else
                        {
                                if (SQL_NUMROWS($result_user) == 1)
                                {
-                                       $JOINED_Y = " checked"; $JOINED_N = "";
+                                       $JOINED_Y = ' checked'; $JOINED_N = "";
                                }
 
                                // Free memory