Changeset 2087 in ExiteCMS for trunk/edit_profile.php

Timestamp:

12/01/08 12:12:32 (3 years ago)

Author:

WanWizard

Message:

fixed bug in registration when using single quotes in the user fullname when registering
fixed several bugs in user activation

File:

• trunk/edit_profile.php (modified) (2 diffs)

trunk/edit_profile.php

@@ -200 +200 @@
         if ($user_newpassword != "") { $newpass = " user_password=md5(md5('$user_newpassword')), "; } else { $newpass = " "; }
         $result = dbquery("UPDATE ".$db_prefix."users SET user_name='$username', user_fullname='$user_fullname', ".$newpass."user_email='".$_POST['user_email']."', user_bad_email = '0', user_hide_email='$user_hide_email', user_location='$user_location', user_birthdate='$user_birthdate', user_gender='$user_gender', user_aim='$user_aim', user_icq='$user_icq', user_msn='$user_msn', user_yahoo='$user_yahoo', user_web='$user_web', user_forum_fullscreen='$user_forum_fullscreen', user_posts_unread='$user_posts_unread', user_newsletters='$user_newsletters', user_theme='$user_theme', user_offset='$user_offset', ".$set_avatar."user_sig='$user_sig', user_locale='".$_POST['user_locale']."', user_openid_url='$user_openid_url', user_hoteditor=".$user_hoteditor." WHERE user_id='".$this_userdata['user_id']."'");
-        if ($user_theme != $userdata['user_theme']) {
-            if (isset($_SESSION['set_theme'])) unset($_SESSION['set_theme']);
-            if ($variables['is_admin']) {
-                redirect(FUSION_SELF."?status=1&user_id=".$this_userdata['user_id']);
-            } else {
-                redirect(FUSION_SELF."?status=1");
-            }
-        }
         $result = dbquery("SELECT * FROM ".$db_prefix."users WHERE user_id='".$this_userdata['user_id']."'");
         if (dbrows($result) != 0) {
@@ -218 +210 @@
             }
             fallback(FUSION_SELF);
+        }
+        if ($user_theme != $userdata['user_theme']) {
+            if (isset($_SESSION['set_theme'])) unset($_SESSION['set_theme']);
+            if ($variables['is_admin']) {
+                redirect(FUSION_SELF."?status=1&user_id=".$this_userdata['user_id']);
+            } else {
+                redirect(FUSION_SELF."?status=1");
+            }
         }
     } else {