diff --git a/includes/account.php b/includes/account.php index f56375a..3645383 100644 --- a/includes/account.php +++ b/includes/account.php @@ -2624,21 +2624,21 @@ if($oldid == 50 && $process != "") { $_REQUEST['userid'] = intval($_REQUEST['userid']); - $res = mysql_query("select * from `users` where `id`='".$_REQUEST['userid']."'"); + $res = mysql_query("select * from `users` where `id`='".intval($_REQUEST['userid'])."'"); if(mysql_num_rows($res) > 0) { $query = "update `domaincerts`,`domains` SET `domaincerts`.`revoked`='1970-01-01 10:00:01' - WHERE `domaincerts`.`domid` = `domains`.`id` AND `domains`.`memid`='".$_REQUEST['userid']."'"; + WHERE `domaincerts`.`domid` = `domains`.`id` AND `domains`.`memid`='".intval($_REQUEST['userid'])."'"; mysql_query($query); - $query = "update `domains` SET `deleted`=NOW() WHERE `domains`.`memid`='".$_REQUEST['userid']."'"; + $query = "update `domains` SET `deleted`=NOW() WHERE `domains`.`memid`='".intval($_REQUEST['userid'])."'"; mysql_query($query); - $query = "update `emailcerts` SET `revoked`='1970-01-01 10:00:01' WHERE `memid`='".$_REQUEST['userid']."'"; + $query = "update `emailcerts` SET `revoked`='1970-01-01 10:00:01' WHERE `memid`='".intval($_REQUEST['userid'])."'"; mysql_query($query); - $query = "update `email` SET `deleted`=NOW() WHERE `memid`='".$_REQUEST['userid']."'"; + $query = "update `email` SET `deleted`=NOW() WHERE `memid`='".intval($_REQUEST['userid'])."'"; mysql_query($query); - $query = "delete from `org` WHERE `memid`='".$_REQUEST['userid']."'"; + $query = "delete from `org` WHERE `memid`='".intval($_REQUEST['userid'])."'"; mysql_query($query); - $query = "update `users` SET `deleted`=NOW() WHERE `id`='".$_REQUEST['userid']."'"; + $query = "update `users` SET `deleted`=NOW() WHERE `id`='".intval($_REQUEST['userid'])."'"; mysql_query($query); } }