Code:
//check for existing one...if not generate new one
if (!$activate=$DB_site->query_first("SELECT activationid FROM useractivation WHERE userid='$user[userid]' AND type=0")) {
// or generate new one!
// delete old activation id
$DB_site->query("DELETE FROM useractivation WHERE userid='$user[userid]' AND type=0");
// make random number
mt_srand ((double) microtime() * 1000000);
$activate[activationid]=mt_rand(0,100000000);
//save to DB
$DB_site->query("INSERT INTO useractivation VALUES (NULL,'$user[userid]','".time()."','$activate[activationid]',0)");
}
}
$sendmessage=str_replace("\$activateid",$activate[activationid],$sendmessage);
}
$sendmessage=str_replace("\$bburl",$bburl,$sendmessage);
$sendmessage=str_replace("\$bbtitle",$bbtitle,$sendmessage);
if (!$test) {
echo "sending ... \n";
vbmail($user['email'], $subject, $sendmessage, $from);
} else {
echo "testing ... \n";
}
echo "ok<br>\n";
Thats the code that has the INSERT INTO useractivation and yes this is an unhacked email.php from vb2.3.0