Bravo List - TSSE v5.6 DECODED (NULLED BY Nightcrawler)

Quote:

Originally Posted by Tony (Post 16835)

bet nobody has noticed yet that the donation system isnt working and if you try and put 10.00 it will return 1 in there donated amount and total donated lol

To say somebody uses there hard earned cash to buy this script its a complete JOKE .

ive got this currently running to see what the whole fuss was about and there has been more stupid things pop up that are showing how much money people are wasting to buy this crap tbh ..

im not going to post every bug ive found simply because xam views this forum and only views it to get a great amount of bug reports so sorry xam stop adding so much crap to the source and start fixing the old stuff first ;)

here u go in admin/edituser,php search...

Code:

if ((isset ($_POST['donated']) AND $donated = $_POST['donated'] != $userdata['donated'])) 

    { 

      if ((isset ($_POST['update_funds_d']) AND $_POST['update_funds_d'] == 'yes')) 

      {$added = sqlesc (get_date_time ()); 

        (sql_query ('' . 'INSERT INTO funds (cash, user, added) VALUES (' . $donated . ', ' . $userid . ', ' . $added . ')') OR sqlerr (__FILE__, 505)); 

      }

replace...

Code:

if ((isset ($_POST['donated']) AND $donated = $_POST['donated'] != $userdata['donated'])) 

    { 

      if ((isset ($_POST['update_funds_d']) AND $_POST['update_funds_d'] == 'yes')) 

      {

        $donated= sqlesc ($_POST['donated']); 

        $added = sqlesc (get_date_time ()); 

        (sql_query ('' . 'INSERT INTO funds (cash, user, added) VALUES (' . $donated . ', ' . $userid . ', ' . $added . ')') OR sqlerr (__FILE__, 505)); 

      }

search...

Code:

if ((isset ($_POST['total_donated']) AND $total_donated = $_POST['total_donated'] != $userdata['total_donated'])) 

    { 

      $tu[] = '' . 'total_donated = ' . $total_donated; 

    }

replace...

Code:

if ((isset ($_POST['total_donated']) AND $total_donated = $_POST['total_donated'] != $userdata['total_donated'])) 

    { $total_donated=sqlesc ($_POST[total_donated']); 

      $tu[] = '' . 'total_donated = ' . $total_donated; 

    }