Improved register_globals and fixed a bug

pull/1/head
root 16 years ago
parent 0ab49890e1
commit 3af9ad348e

@ -16,7 +16,7 @@
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
*/ ?>
<?
if ($_SESSION['profile']['admin'] != 1 || intval($_REQUEST['userid']) < 1) {
if ($_SESSION['profile']['admin'] != 1 || !array_key_exists('userid',$_REQUEST) || intval($_REQUEST['userid']) < 1) {
$user_id = intval($_SESSION['profile']['id']);
?>
<table align="center" valign="middle" border="0" cellspacing="0" cellpadding="0" class="wrapper">
@ -82,7 +82,7 @@
<table align="center" valign="middle" border="0" cellspacing="0" cellpadding="0" class="wrapper">
<tr>
<?
if ($_SESSION['profile']['admin'] == 1 && intval($_REQUEST['userid']) > 0) {
if ($_SESSION['profile']['admin'] == 1 && array_key_exists('userid',$_REQUEST) && intval($_REQUEST['userid']) > 0) {
?>
<tr><td colspan="3" class="DataTD"><a href="account.php?id=43&amp;userid=<?=$user_id ?>">back</a></td></tr>
<? } else {
@ -90,7 +90,7 @@
' WHERE `u`.`id` = \''.(int)intval($_SESSION['profile']['id']).'\' AND `n`.`to` = `u`.`id` AND `expire` < now() '.
' GROUP BY `u`.id, `u`.`assurer`';
$res = mysql_query($query);
if (!res) {
if (!$res) {
print '<td colspan="3" class="DataTD">'._('Internal Error').'</td>'."\n";
} else {
$row = mysql_fetch_array($res, MYSQL_NUM);

Loading…
Cancel
Save