Tons of rewrites (SQL queries), surfbar nearly finished (working: surfing with static...

[mailer.git] / inc / modules / guest / what-login.php

diff --git a/inc/modules/guest/what-login.php b/inc/modules/guest/what-login.php
index 62450c81b6b2a728bc45617ef4ca97928feb88fa..70652bf9813180ade71ce8055f1d77676a4aee0e 100644 (file)
--- a/inc/modules/guest/what-login.php
+++ b/inc/modules/guest/what-login.php
@@ -98,7 +98,7 @@ if (IS_LOGGED_IN()) {
                if (!empty($UID2)) $UID = $UID2;
        } else {
                // Direct userid entered
-               $result = SQL_QUERY_ESC("SELECT userid, password, last_online".$LAST." FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
+               $result = SQL_QUERY_ESC("SELECT userid, password, last_online".$LAST." FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s AND status='CONFIRMED' LIMIT 1",
                 array(bigintval($UID), $hash), __FILE__, __LINE__);
                list($dmy, $password, $online, $login) = SQL_FETCHROW($result);
        }
@@ -122,7 +122,7 @@ if (IS_LOGGED_IN()) {
                                $hash = generateHash($_POST['password']);
 
                                // ... and update database
-                               $result_update = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET password='%s' WHERE userid=%d AND status='CONFIRMED' LIMIT 1",
+                               $result_update = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET password='%s' WHERE userid=%s AND status='CONFIRMED' LIMIT 1",
                                 array($hash, $UID), __FILE__, __LINE__);
 
                                // No login bonus by default
@@ -157,7 +157,7 @@ if (IS_LOGGED_IN()) {
                                               && set_session("lifetime", $l   , $life, COOKIE_PATH));
 
                                        // Update global array
-                                       $GLOBALS['userid'] = $UID;
+                                       $GLOBALS['userid'] = bigintval($UID);
                                } else {
                                        // Check for login data
                                        $login = IS_LOGGED_IN();
@@ -165,7 +165,7 @@ if (IS_LOGGED_IN()) {
 
                                if ($login) {
                                        // Update database records
-                                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET total_logins=total_logins+1".$ADD." WHERE userid=%d LIMIT 1",
+                                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET total_logins=total_logins+1".$ADD." WHERE userid=%s LIMIT 1",
                                         array(bigintval($UID)), __FILE__, __LINE__);
                                        if (SQL_AFFECTEDROWS($link) == 1) {
                                                // Procedure to checking for login data
@@ -194,7 +194,7 @@ if (IS_LOGGED_IN()) {
                }
        } else {
                // Other account status?
-               $result = SQL_QUERY_ESC("SELECT status FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d LIMIT 1",
+               $result = SQL_QUERY_ESC("SELECT status FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
                 array(bigintval($UID)), __FILE__, __LINE__);
                if (SQL_NUMROWS($result) == 1)
                {
@@ -244,7 +244,7 @@ if (IS_LOGGED_IN()) {
         else
        {
                // Direct userid entered
-               $result = SQL_QUERY_ESC("SELECT userid, status FROM "._MYSQL_PREFIX."_user_data WHERE userid=%d OR email='%s' LIMIT 1",
+               $result = SQL_QUERY_ESC("SELECT userid, status FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s OR email='%s' LIMIT 1",
                 array(bigintval($UID), $_POST['email']), __FILE__, __LINE__);
        }
        if (SQL_NUMROWS($result) == 1)
@@ -256,7 +256,7 @@ if (IS_LOGGED_IN()) {
                {
                        // Ooppps, this was missing! ;-) We should update the database...
                        $NEW_PASS = GEN_PASS();
-                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET password='%s' WHERE userid=%d LIMIT 1",
+                       $result = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET password='%s' WHERE userid=%s LIMIT 1",
                         array(generateHash($NEW_PASS), bigintval($UID)), __FILE__, __LINE__);
 
                        // Prepare data and message for email