Security statements update against sql injection attacks.

[fa-stable.git] / admin / db / users_db.inc

diff --git a/admin/db/users_db.inc b/admin/db/users_db.inc
index e9ea2e8ff9f5a0b213b60d3fca7dee5afd59e0ce..ed6d85cebaf5d9fcf8a546ae6df949dba804a041 100644 (file)
--- a/admin/db/users_db.inc
+++ b/admin/db/users_db.inc
@@ -14,10 +14,10 @@ function add_user($user_id, $real_name, $password, $phone, $email, $full_access,
        $language, $profile, $rep_popup, $pos)
 {
        $sql = "INSERT INTO ".TB_PREF."users (user_id, real_name, password"
-               .", phone, email, role_id, language, pos, print_profile, rep_popup)
+               .", phone, email, full_access, language, pos, print_profile, rep_popup)
                VALUES (".db_escape($user_id).", 
                ".db_escape($real_name).", ".db_escape($password) .",".db_escape($phone)
-               .",".db_escape($email).", ".db_escape($role_id).", ".db_escape($language)
+               .",".db_escape($email).", ".db_escape($full_access).", ".db_escape($language)
                .", ".db_escape($pos).",".db_escape($profile).",".db_escape($rep_popup)
                ." )";
 
@@ -42,11 +42,11 @@ function update_user($user_id, $real_name, $phone, $email, $full_access,
        $sql = "UPDATE ".TB_PREF."users SET real_name=".db_escape($real_name).
        ", phone=".db_escape($phone).",
                email=".db_escape($email).",
-               full_access=$full_access,
+               full_access=".db_escape($full_access).",
                language=".db_escape($language).",
                print_profile=".db_escape($profile).",
-               rep_popup=$rep_popup,
-               pos=$pos
+               rep_popup=".db_escape($rep_popup).",
+               pos=".db_escape($pos)."
                WHERE user_id = ".db_escape($user_id);
        db_query($sql, "could not update user for $user_id");
 }
@@ -96,7 +96,7 @@ function get_users()
 
 function get_user($user_id)
 {
-       $sql = "SELECT * FROM ".TB_PREF."users WHERE user_id = '$user_id'";
+       $sql = "SELECT * FROM ".TB_PREF."users WHERE user_id = ".db_escape($user_id);
 
        $result = db_query($sql, "could not get user for $user_id");
 
@@ -107,7 +107,7 @@ function get_user($user_id)
 
 function delete_user($user_id)
 {
-       $sql="DELETE FROM ".TB_PREF."users WHERE user_id='$user_id'";
+       $sql="DELETE FROM ".TB_PREF."users WHERE user_id=".db_escape($user_id);
 
        db_query($sql, "could not delete user $user_id");
 }