More fixes for surfbar, SQL_QUERY_ESC() now escapes zeros

[mailer.git] / inc / profile-updte.php

diff --git a/inc/profile-updte.php b/inc/profile-updte.php
index 79aa02feaa89d911f4dec50eabf9455e05cd27b2..565b24cbfcc0224238313f992d319d835989e6f3 100644 (file)
--- a/inc/profile-updte.php
+++ b/inc/profile-updte.php
@@ -39,7 +39,7 @@ if (ereg(basename(__FILE__), $_SERVER['PHP_SELF']))
        require($INC);
 }
 
-if (($_CONFIG['send_prof_update'] == 'Y') && ($_CONFIG['profile_update'] > 0) && ($_CONFIG['resend_profile_update']))
+if (($_CONFIG['send_prof_update'] == "Y") && ($_CONFIG['profile_update'] > 0) && ($_CONFIG['resend_profile_update']))
 {
        // Ok, we shall send update notifications...
        $TIMEOUT  = bigintval(time() - $_CONFIG['profile_update']);
@@ -72,7 +72,7 @@ if (($_CONFIG['send_prof_update'] == 'Y') && ($_CONFIG['profile_update'] > 0) &&
                        SEND_EMAIL($DATA[1], PROFILE_OUTDATED, $msg);
 
                        // Update profile data
-                       $result_update = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET last_profile_sent=UNIX_TIMESTAMP(), notified='Y' WHERE userid=%d LIMIT 1",
+                       $result_update = SQL_QUERY_ESC("UPDATE "._MYSQL_PREFIX."_user_data SET last_profile_sent=UNIX_TIMESTAMP(), notified='Y' WHERE userid=%s LIMIT 1",
                         array(bigintval($DATA[0])), __FILE__, __LINE__);
                }
        }