diff --git a/pages/account/43.php b/pages/account/43.php index bc565bb..4fe32bc 100644 --- a/pages/account/43.php +++ b/pages/account/43.php @@ -16,27 +16,27 @@ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA */ ?> 0) - { - $assurance = mysql_escape_string($_REQUEST['assurance']); - mysql_query("delete from `notary` where `id`='$assurance'"); - } + if($_REQUEST['assurance'] > 0) + { + $assurance = mysql_escape_string($_REQUEST['assurance']); + mysql_query("delete from `notary` where `id`='$assurance'"); + } - if(intval($_REQUEST['userid']) <= 0) - { - $emailsearch = $email = mysql_escape_string(stripslashes($_REQUEST['email'])); - if(!strstr($email, "%")) - $emailsearch = "%$email%"; - if(intval($email) > 0) - $emailsearch = ""; + if(intval($_REQUEST['userid']) <= 0) + { + $emailsearch = $email = mysql_escape_string(stripslashes($_REQUEST['email'])); + if(!strstr($email, "%")) + $emailsearch = "%$email%"; + if(intval($email) > 0) + $emailsearch = ""; - $query = "select `users`.`id` as `id`, `email`.`email` as `email` from `users`,`email` - where `users`.`id`=`email`.`memid` and - (`email`.`email` like '$emailsearch' or `email`.`id`='$email' or `users`.`id`='$email') and - `email`.`hash`='' and `email`.`deleted`=0 and `users`.`deleted`=0 - group by `users`.`id` limit 100"; - $res = mysql_query($query); - if(mysql_num_rows($res) > 1) { ?> + $query = "select `users`.`id` as `id`, `email`.`email` as `email` from `users`,`email` + where `users`.`id`=`email`.`memid` and + (`email`.`email` like '$emailsearch' or `email`.`id`='$email' or `users`.`id`='$email') and + `email`.`hash`='' and `email`.`deleted`=0 and `users`.`deleted`=0 + group by `users`.`id` limit 100"; + $res = mysql_query($query); + if(mysql_num_rows($res) > 1) { ?> @@ -46,8 +46,8 @@ + while($row = mysql_fetch_assoc($res)) + { ?> @@ -62,28 +62,28 @@


- 0) - { - $id = intval($_REQUEST['userid']); - $query = "select * from `users` where `id`='$id' and `users`.`deleted`=0"; - $res = mysql_query($query); - if(mysql_num_rows($res) <= 0) - { - echo _("I'm sorry, the user you were looking for seems to have disappeared! Bad things are a foot!"); - } else { - $row = mysql_fetch_assoc($res); - $query = "select sum(`points`) as `points` from `notary` where `to`='".$row['id']."'"; - $dres = mysql_query($query); - $drow = mysql_fetch_assoc($dres); - $alerts = mysql_fetch_assoc(mysql_query("select * from `alerts` where `memid`='".$row['id']."'")); + if(intval($_REQUEST['userid']) > 0) + { + $id = intval($_REQUEST['userid']); + $query = "select * from `users` where `id`='$id' and `users`.`deleted`=0"; + $res = mysql_query($query); + if(mysql_num_rows($res) <= 0) + { + echo _("I'm sorry, the user you were looking for seems to have disappeared! Bad things are a foot!"); + } else { + $row = mysql_fetch_assoc($res); + $query = "select sum(`points`) as `points` from `notary` where `to`='".$row['id']."'"; + $dres = mysql_query($query); + $drow = mysql_fetch_assoc($dres); + $alerts = mysql_fetch_assoc(mysql_query("select * from `alerts` where `memid`='".$row['id']."'")); ?> @@ -104,10 +104,10 @@ + + + + @@ -117,10 +117,10 @@ + + + + + + + + + + + + @@ -202,8 +214,8 @@ @@ -256,17 +268,17 @@
:
- - - -
:: " size="4">
:show
:
:
:

0) { ?> + $query = "select * from `email` where `memid`='".$row['id']."' and `deleted`=0 and `hash`='' + and `email`!='".$row['email']."'"; + $dres = mysql_query($query); + if(mysql_num_rows($dres) > 0) { ?> + $rc = mysql_num_rows($dres); + while($drow = mysql_fetch_assoc($dres)) + { ?> @@ -275,16 +287,16 @@
:

0) { ?> + $query = "select * from `domains` where `memid`='".$row['id']."' and `deleted`=0 and `hash`=''"; + $dres = mysql_query($query); + if(mysql_num_rows($dres) > 0) { ?> + $rc = mysql_num_rows($dres); + while($drow = mysql_fetch_assoc($dres)) + { ?> @@ -306,13 +318,13 @@ @@ -343,13 +355,13 @@
: