Browse Source

Fix setting mailbox_limit to default if not send
Fix check if user exists before updating

ohartl 9 years ago
parent
commit
99da350eaf
1 changed files with 12 additions and 2 deletions
  1. 12 2
      include/php/pages/admin/edituser.php

+ 12 - 2
include/php/pages/admin/edituser.php

@@ -28,12 +28,22 @@
 			}
 			}
 
 
 			$id = $db->escape_string($_POST['id']);
 			$id = $db->escape_string($_POST['id']);
-			
+
+			$sql = "SELECT `".DBC_USERS_ID."` FROM `".DBT_USERS."` WHERE `".DBC_USERS_ID."` = '$id' LIMIT 1;";
+			if(!$resultExists = $db->query($sql)){
+				dbError($db->error);
+			}
+
+			if($resultExists->num_rows !== 1){
+				// User does not exist, redirect to overview
+				redirect("admin/listusers/");
+			}
+
 			if(defined('DBC_USERS_MAILBOXLIMIT')){
 			if(defined('DBC_USERS_MAILBOXLIMIT')){
+				$mailbox_limit = $db->escape_string($_POST['mailbox_limit']);
 				if($mailbox_limit == ""){
 				if($mailbox_limit == ""){
 					$mailbox_limit = $mailbox_limit_default;
 					$mailbox_limit = $mailbox_limit_default;
 				}
 				}
-				$mailbox_limit = $db->escape_string($_POST['mailbox_limit']);
 
 
 				$sql = "UPDATE `".DBT_USERS."` SET `".DBC_USERS_MAILBOXLIMIT."` = '$mailbox_limit' WHERE `".DBC_USERS_ID."` = '$id';";
 				$sql = "UPDATE `".DBT_USERS."` SET `".DBC_USERS_MAILBOXLIMIT."` = '$mailbox_limit' WHERE `".DBC_USERS_ID."` = '$id';";
 				if(!$result = $db->query($sql)){
 				if(!$result = $db->query($sql)){