if (!empty($ident)) { $sql = sprintf("UPDATE ...$this->ins_string($ident, "int"), $_SESSION['user_id']);
That's taken from ext_user_profile.php.
Could it be that $ident is even used to identify the user like: using the id from the profile table to find the users_id? 1. How is the user identified while using update_user_profile.php? 2. How is the id identified while using it by a user that this user cant view an other record?
« Last Edit: May 17, 2007, 02:25:41 AM by tomz »
Moderator Community Supporter?
Jedai Sword Master
Gender:
Posts: 6440
39464 credits Members referred : 374
if (!empty($ident)) { $sql = sprintf("UPDATE ...$this->ins_string($ident, "int"), $_SESSION['user_id']);
That's taken from ext_user_profile.php.
Could it be that $ident is even used to identify the user like: using the id from the profile table to find the users_id? 1. How is the user identified while using update_user_profile.php? 2. How is the id identified while using it by a user that this user cant view an other record?
to use the profile extension the user ID need to set first.