Changeset 206

Timestamp:

Jun 19, 2009, 7:48:46 PM (16 years ago)

Author:

george

Message:

• Přidáno: Kontrola správnosti zadaného id uživatele ve výpise úřekladů uživatele.

File:

• trunk/TranslationList.php (modified) (1 diff)

trunk/TranslationList.php

@@ -245 +245 @@
 if($Action == 'userid') 
 {
-  $ID = $Database->SQLCommand('SELECT user FROM user WHERE id = '.$_GET['user']);
-  $Line = mysql_fetch_row($ID);
-  echo('<a title="Zobrazit texty podle vlastního filtru" href="?group='.$GroupId.'&amp;action=filter">Filtr textů</a> ->
-        <strong>Vypis překladů uživatele '.$Line[0].': </strong><br /><br />');
-  if(array_key_exists('not', $_GET)) 
-          WriteQuests('SELECT *, (SELECT user.user FROM user WHERE user.id = '.$Table.'.user) as User FROM '.$Table.' Where Complete = 0 AND user = '.$_GET['user'], '', 'userid');
-  else 
-          WriteQuests('SELECT *, (SELECT user.user FROM user WHERE user.id = '.$Table.'.user) as User FROM '.$Table.' Where user = '.$_GET['user'], '', 'userid');
+  $ID = $Database->SQLCommand('SELECT user FROM user WHERE id = '.($_GET['user'] * 1));
+  if(mysql_num_rows($ID) > 0)
+  {
+    $Line = mysql_fetch_row($ID);
+    echo('<a title="Zobrazit texty podle vlastního filtru" href="?group='.$GroupId.'&amp;action=filter">Filtr textů</a> -> '.
+      '<strong>Vypis překladů uživatele '.$Line[0].': </strong><br /><br />');
+    if(array_key_exists('not', $_GET)) 
+      WriteQuests('SELECT *, (SELECT user.user FROM user WHERE user.id = '.$Table.'.user) as User FROM '.$Table.' Where Complete = 0 AND user = '.$_GET['user'], '', 'userid');
+    else WriteQuests('SELECT *, (SELECT user.user FROM user WHERE user.id = '.$Table.'.user) as User FROM '.$Table.' Where user = '.$_GET['user'], '', 'userid');
+  } else echo('Nebyl nalezen uživatel se zadaným id');
 } else
 if($Action == 'search')