query('UPDATE users SET password = \''.bulletin_hash($_POST['newpass1']).'\' WHERE id = '.$b_user['id']) or dash_fatal($db->error); if ($db->affected_rows < 1) dash_fatal('Your password could not be changed.'); } $type = $b_user['type']; if ($_POST['newtype'] == 0) $type = 'EMPLOYEE'; else if ($_POST['newtype'] == 1) $type = 'EMPLOYER'; if ($type != $b_user['type']) { $db->query('UPDATE users SET type = \''.$type.'\' WHERE id = '.$b_user['id']) or dash_fatal($db->error); if ($db->affected_rows < 1) dash_fatal('Your account type could not be changed.'); } if ($_POST['notif'] != $b_user['notify']) { $notif = is_null($_POST['notif']) ? '0' : '1'; $db->query('UPDATE users SET notify = '.$notif.' WHERE id = '.$b_user['id']) or dash_fatal($db->error); } dash_fatal('Account settings successfully updated.', $b_config['base_url'].'dash/settings.php'); } ?>
Adjusting for =htmlentities($b_user['name']);?>