xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-06-28 00:24:23 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: possibility to edit somebody else's profile

Browse Source
This commit is contained in:
Martin Ambrus
2017-11-25 12:24:51 +01:00
parent 3196ee9242
commit 8c9cbfee82
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Profile.php
+2 -2
View File
@@ -90,9 +90,9 @@ class Profile {
}
private function updateProfile($post) {
global $database;
global $database, $session;
$birthday = $post['jahr'].'-'.$post['monat'].'-'.$post['tag'];
$database->submitProfile($database->RemoveXSS($post['uid']),$database->RemoveXSS($post['mw']),$database->RemoveXSS($post['ort']),$database->RemoveXSS($birthday),$database->RemoveXSS($post['be2']),$database->RemoveXSS($post['be1']));
$database->submitProfile($session->uid,$database->RemoveXSS($post['mw']),$database->RemoveXSS($post['ort']),$database->RemoveXSS($birthday),$database->RemoveXSS($post['be2']),$database->RemoveXSS($post['be1']));
$varray = $database->getProfileVillages($post['uid']);
for($i=0;$i<=count($varray)-1;$i++) {
$k = trim($post['dname'.$i]);