Think I found it...the downloadable file for update_account.php.03.txt has a mistake in it.
key part says:
$query_update = "UPDATE user_info SET email = '" . $_POST['email'] . "', city
= '" . $_POST['city'] . "', state = '" . $_POST['state'] . "', hobbies =
'" . implode(", ", $_POST['hobbies']) . "' WHERE username = '" .
$_SESSION['user_logged']. "' AND password = (password('" .
$_SESSION['user_password'] . "';";
The end for the password section should be: "'));";
which you can see in the later queries...
-Mike
|