SQL in login welcome screen fixed

diff --git a/inc/libs/user_functions.php b/inc/libs/user_functions.php
index ec3958a6455f70468f6ed8815f4b6fe713056254..45198007823541cd841a0add808b69f6fd34733a 100644 (file)
--- a/inc/libs/user_functions.php
+++ b/inc/libs/user_functions.php
@@ -325,7 +325,7 @@ function USER_DO_LOGIN ($uid, $passwd) {
                                if ((GET_EXT_VERSION('bonus') >= '0.2.2') && ($probe >= getConfig('login_timeout'))) {
                                        // Add login bonus to user's account
                                        $add = sprintf(", `login_bonus`=`login_bonus`+%s",
                                if ((GET_EXT_VERSION('bonus') >= '0.2.2') && ($probe >= getConfig('login_timeout'))) {
                                        // Add login bonus to user's account
                                        $add = sprintf(", `login_bonus`=`login_bonus`+%s",

-                                       (float)getConfig('login_bonus')
+                                               (float)getConfig('login_bonus')

                                        );
                                        $GLOBALS['bonus_payed'] = true;
 
                                        );
                                        $GLOBALS['bonus_payed'] = true;
 


@@ -343,7 +343,7 @@ function USER_DO_LOGIN ($uid, $passwd) {
                                // Try to set session data (which shall normally always work!)
                                if ((setSession('userid', $uid )) && (setSession('u_hash', $content['hash']))) {
                                        // Update database records
                                // Try to set session data (which shall normally always work!)
                                if ((setSession('userid', $uid )) && (setSession('u_hash', $content['hash']))) {
                                        // Update database records

-                                       SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `total_logins`=`total_logins +1" . $add . " WHERE `userid`=%s LIMIT 1",
+                                       SQL_QUERY_ESC("UPDATE `{!_MYSQL_PREFIX!}_user_data` SET `total_logins`=`total_logins`+1" . $add . " WHERE `userid`=%s LIMIT 1",

                                                array($uid), __FUNCTION__, __LINE__);
                                        if (SQL_AFFECTEDROWS() == 1) {
                                                // Procedure to checking for login data
                                                array($uid), __FUNCTION__, __LINE__);
                                        if (SQL_AFFECTEDROWS() == 1) {
                                                // Procedure to checking for login data