PDA

View Full Version : [fixed] admin/user.php - adding user disregards 'nosessionhash' setting

tubedogg
Sun 23rd Jun '02, 8:00am
The big insert query on line 169 doesn't insert the "nosessionhash" column value, so when you manually add a user that setting is set to No, no matter what you set it at when adding the user.
Paul
Mon 24th Jun '02, 2:59pm
Nevermind... fix? ;)
Scott MacVicar
Wed 26th Jun '02, 9:46am
$DB_site->query("INSERT INTO user (userid,usergroupid,username,password,email,stylei d,parentemail,coppauser,homepage,icq,aim,yahoo,sig nature,adminemail,showemail,invisible,usertitle,cu stomtitle,joindate,cookieuser,daysprune,lastvisit, lastactivity,lastpost,posts,timezoneoffset,emailno tification,receivepm,emailonpm,ipaddress,pmpopup,o ptions,birthday) VALUES (NULL,'$usergroupid','".addslashes(htmlspecialchars($ausername))."','".addslashes(md5($apassword))."','".addslashes(htmlspecialchars($email))."','$userstyleid','".addslashes(htmlspecialchars($parentemail))."','$coppauser','".addslashes(htmlspecialchars($homepage))."','".addslashes(htmlspecialchars($icq))."','".addslashes(htmlspecialchars($aim))."','".addslashes(htmlspecialchars($yahoo))."','".addslashes($signature)."','$adminemail','$showemail','$invisible','".addslashes($usertitle)."','$customtitle',$joindate,'$cookieuser','$dayspru ne',$lastvisit,$lastactivity,$lastpost,'$posts','$ timezoneoffset','$emailnotification','$receivepm', '$emailonpm','".addslashes($aipaddress)."','$pmpopup','$options','$birthday')");

becomes

$DB_site->query("INSERT INTO user (userid,usergroupid,username,password,email,stylei d,parentemail,coppauser,homepage,icq,aim,yahoo,sig nature,adminemail,showemail,invisible,usertitle,cu stomtitle,joindate,cookieuser,nosessionhash,dayspr une,lastvisit,lastactivity,lastpost,posts,timezone offset,emailnotification,receivepm,emailonpm,ipadd ress,pmpopup,options,birthday) VALUES (NULL,'$usergroupid','".addslashes(htmlspecialchars($ausername))."','".addslashes(md5($apassword))."','".addslashes(htmlspecialchars($email))."','$userstyleid','".addslashes(htmlspecialchars($parentemail))."','$coppauser','".addslashes(htmlspecialchars($homepage))."','".addslashes(htmlspecialchars($icq))."','".addslashes(htmlspecialchars($aim))."','".addslashes(htmlspecialchars($yahoo))."','".addslashes($signature)."','$adminemail','$showemail','$invisible','".addslashes($usertitle)."','$customtitle',$joindate,'$cookieuser','$nosessi onhash','$daysprune',$lastvisit,$lastactivity,$las tpost,'$posts','$timezoneoffset','$emailnotificati on','$receivepm','$emailonpm','".addslashes($aipaddress)."','$pmpopup','$options','$birthday')");