Add a missing WHERE UserName = '$login' in the UPDATE statement in lib/sql/change_inf...

Eddie Bindt <eddieb@users.sourceforge.net>

diff --git a/Changelog b/Changelog
index c71fb2c7a207fd7dc9c0cea001c69b91c49715e4..0466b32e29a2b6443c34b8977bb75303d653416e 100644 (file)
--- a/Changelog
+++ b/Changelog
@@ -56,6 +56,8 @@ Ver 1.59:
 * Change use of AcctStartTime with AcctStopTime in failed_logins.php3 to match that in user_admin
 * Fix a bug with failed logins in user_admin.
 * Add the failed logins page in the buttons page
+* Add a missing WHERE UserName = '$login' in the UPDATE statement in lib/sql/change_info.php3. Patch by
+  Eddie Bindt <eddieb@users.sourceforge.net>
 Ver 1.55:
 * Update the FAQ about missing attributes from the user/group edit pages and add a few comments
   in the configuration files

diff --git a/lib/sql/change_info.php3 b/lib/sql/change_info.php3
index 4f913e7ff0cbdc50e31c5f09ac01d5288fa0d258..b00ca6fb1aff96a0d9566c9c4d9bebb7c3d040e5 100644 (file)
--- a/lib/sql/change_info.php3
+++ b/lib/sql/change_info.php3
@@ -27,7 +27,7 @@ if ($link){
                                $res = @da_sql_query($link,$config,
                                "UPDATE $config[sql_user_info_table] SET Name = '$Fcn',Mail = '$Fmail',
                                Department = '$Fou', HomePhone = '$Fhomephone', WorkPhone = '$Ftelephonenumber',
-                               Mobile = '$Fmobile';");
+                               Mobile = '$Fmobile' WHERE UserName = '$login';");
                                if (!$res || !@da_sql_affected_rows($link,$res,$config)){
                                        echo "<b>Could not update user information in user info table: " . da_sql_error($link,$config) . "</b><br>\n";
                                        $fail = 1;