Threaded Mode | Linear Mode

***Coruja*** · 10-01-2015 07:40 AM

ACCOUNT UPDATE is used only to move your temporary accounts from sphereacct.scp to permanently create it sphereaccu.scp. So you can remove this ACCOUNT UPDATE since you're not using these files anymore

also for security reasons you must always use ' ' on values and " " around the SQL function. This can prevent some SQL exploits like ppl trying to hack your SQL command to add more fields, etc

Code:

[FUNCTION f_account_register]

DB.QUERY "SELECT * FROM register WHERE activ='0'"

IF (<DB.ROW.NUMROWS>)

  FOR 0 <eval <DB.ROW.NUMROWS>-1>

    ACCOUNT ADD <DB.ROW.<LOCAL._FOR>.0> <DB.ROW.<LOCAL._FOR>.1>

    DB.EXECUTE "UPDATE register SET activ='1' WHERE login='<DB.ROW.<LOCAL._FOR>.0>' LIMIT 1"

  ENDFOR

ENDIF

Threaded Mode \| Linear Mode Registration
Author	Message