From f4d9265cb44e2e516fa6a2137d7c4bbc923c2746 Mon Sep 17 00:00:00 2001 From: kkalev Date: Mon, 16 Sep 2002 10:31:51 +0000 Subject: [PATCH] Add a missing WHERE UserName = '$login' in the UPDATE statement in lib/sql/change_info.php3. Patch by Eddie Bindt --- Changelog | 2 ++ lib/sql/change_info.php3 | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/Changelog b/Changelog index c71fb2c..0466b32 100644 --- a/Changelog +++ b/Changelog @@ -56,6 +56,8 @@ Ver 1.59: * Change use of AcctStartTime with AcctStopTime in failed_logins.php3 to match that in user_admin * Fix a bug with failed logins in user_admin. * Add the failed logins page in the buttons page +* Add a missing WHERE UserName = '$login' in the UPDATE statement in lib/sql/change_info.php3. Patch by + Eddie Bindt Ver 1.55: * Update the FAQ about missing attributes from the user/group edit pages and add a few comments in the configuration files diff --git a/lib/sql/change_info.php3 b/lib/sql/change_info.php3 index 4f913e7..b00ca6f 100644 --- a/lib/sql/change_info.php3 +++ b/lib/sql/change_info.php3 @@ -27,7 +27,7 @@ if ($link){ $res = @da_sql_query($link,$config, "UPDATE $config[sql_user_info_table] SET Name = '$Fcn',Mail = '$Fmail', Department = '$Fou', HomePhone = '$Fhomephone', WorkPhone = '$Ftelephonenumber', - Mobile = '$Fmobile';"); + Mobile = '$Fmobile' WHERE UserName = '$login';"); if (!$res || !@da_sql_affected_rows($link,$res,$config)){ echo "Could not update user information in user info table: " . da_sql_error($link,$config) . "
\n"; $fail = 1; -- 2.39.5