[NTLDR]

Originally posted by appalcore.org

PHP Code:

if ($voted = $DB_site->query_first("SELECT * FROM prijsvraag WHERE userid=$bbuserid")) { 


You should use $bbuserinfo[userid] and not $bbuserid to be safe, if the user disables cookies then they can submit the form as many times as they want. Also if using $bbuserid a check should be done to see if its set, otherwise your get DB errors if it isn't.