Version 0.93 released

No don't use this code, it is not sql injection safe....

Arghhh... i forgot... now it is?

[Join us @ facebook]

Yeah, now it looks ok. Thanks for your contribution

[UNTESTED CODE!!!]

UNTESTED CODE!!!

With the prevois Version of my code, Passwords would have been updated to plaintext. That's not what we want. So let's try this:

Code:

<?php

/*
   * Updates a property. Data must be in the form 'property' => 'value'
   * @param array
   * @return bool
   */
  public function updateProperty($properties)
  {
    if(is_array($properties) && count($properties) > 1)
    {
      $i=1;
      $query = "UPDATE `".$this->dbTable."` SET ";

      foreach($properties AS $k => $v)
      {
        if($k == $tbFields['pass'])
        {
          switch(strtolower($this->passMethod))
          {
            case 'sha1':
              $v = sha1($v);
              break;
            case 'md5' :
              $v = md5($v);
              break;
            default:
          }
        }
        $query .= "`".$this->escape($k)."` = '".$this->escape($v)."'".(($i++ < count($properties)) ? ', ' : ' ');
      }

      $query .= "WHERE `".$this->tbFields['userID']."` = '".$this->userID."'";
      return mysql_query($query, $this->dbConn); 
    }
  else
    return false;
  }
?>

[Guest]

[36.301]

Googlebot, Yahoo crawler, Baidu Spider