More SQL rewrites, TODO: Put all table and column names in backticks (`)

[mailer.git] / mailid.php

diff --git a/mailid.php b/mailid.php
index fe2c59e7ab54ee16c4c52073eacb77fa80a43c6a..b1baa9f2f07978bfcef61f48de1f0107f02b2ed6 100644 (file)
--- a/mailid.php
+++ b/mailid.php
@@ -118,7 +118,7 @@ if (isBooleanConstantAndTrue('mxchange_installed')) {
                                $EXTRA_TITLE = COMPILE_CODE($EXTRA_TITLE);
 
                                // Is the user's ID unlocked?
-                               $result = SQL_QUERY_ESC("SELECT status, gender, surname, family FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
+                               $result = SQL_QUERY_ESC("SELECT status, gender, surname, family FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1",
                                 array($url_uid), __FILE__, __LINE__);
                                if (SQL_NUMROWS($result) == 1) {
                                        list($status, $gender, $sname, $fname) = SQL_FETCHROW($result);