$userdata['user_id'] is empty

Posted: Sat Feb 19, 2005 11:41 pm

First of all, I'd like to apologize my post because I don't know this forum is the appropriate place.

I ported WebLog MOD developed by phpbb2 stand-alone.
The funny thing (actually not funny, series) is that $userdata['user_id'] is empty in phpnuke 7.6 with ChatServ's security patch.
On the other hand, I ported it to phpnuke 76. with no security patches. It works perfectly.

My qeustion is,... how can I get the $userdata['user_id'] in Forums/index.php ? Please HELP ME~~~

Site Admin Joined: Aug 17, 2003 Posts: 12383

Same as I PM'd you:

Basically you can populate that variable like this:

Code:

$user = base64_decode($user);
$cookie = explode(":", $user);
$sql = "SELECT user_id FROM ".$user_prefix."_users WHERE username='$cookie[1]'";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$userdata['user_id'] = $row['user_id'];

Posted: Sun Feb 20, 2005 12:43 am

Thank you evader.
Your suggestion and code are what I thought. I was looking for another way to get that while you were posting.

Yes, your code works.
I reached a conclusion that there is no way to get $userdata array except populating from DB user field, in my security patched cases.

Thank you so much for quick replying.
I will post the whole Blog MOD package which lets all nukecops vistiors use it.

Posted: Wed May 18, 2005 9:19 am

Evaders99 wrote:

Same as I PM'd you:

Basically you can populate that variable like this:

Code:

$user = base64_decode($user);
$cookie = explode(":", $user);
$sql = "SELECT user_id FROM ".$user_prefix."_users WHERE username='$cookie[1]'";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$userdata['user_id'] = $row['user_id'];

It's bad solution.
Partially it's a bit of unsecurity here, but anyway, no sense to duplicate functions of php-nuke API.
Partially it's wrong because you'll never know which format $user variable will happend up to the this moment.
use instead
global $user;
$userdata=getusrinfo($user);

Posted: Wed May 18, 2005 11:52 am

using global variables are much more worse.
That issuse was already settle down 1.5 months ago.

Posted: Wed May 18, 2005 12:20 pm

Xyberian wrote:

using global variables are much more worse.
That issuse was already settle down 1.5 months ago.

Can't understand why you post it Question