[Parker Clack]

Justin:

If you look over the code it checks to see if you have a userid from a cookie and then compares that to the database and the secret words.

or

if ($bbuserinfo['userid'] == 0 or $permissions['canmodifyprofile'] == 0) {
show_nopermission();

So if the bbuserid is 0 (which it will be if they aren't logged in) then they get the "your aren't logged in " error message.

Then the part that Chen wrote for me:

if ($user) {
$DB_site->query("
UPDATE user SET email = '".addslashes(htmlspecialchars($email))."'
WHERE userid = $bbuserinfo[userid]
");
eval('standarderror("'.gettemplate('redirect_email updated').'");');
} else {
eval('standarderror("'.gettemplate('error_infoinva lid').'");');
}
}

If the bbuserid and the secret word don't match they get the "error_infoinvalid" template error message.

Parker