[Marco van Herwaarden]

Looking save now

Just one tip for future coding:

PHP Code:

    $getuser = $DB_site->query('SELECT * from ' . TABLE_PREFIX . 'utt_store_history WHERE userid="' . $userid . '" AND action="Donate" ORDER BY historyid DESC'); 


There is no need to stop the string and insert a variable if you use double-quotes (") around the the string. Also numerical var's in a query don't need to be quoted at all, and if quoting alphanumerical data best to use single quotes ('). So the above line could also be written as:

PHP Code:

    $getuser = $DB_site->query("SELECT * from " . TABLE_PREFIX . "utt_store_history WHERE userid=$userid AND action='Donate' ORDER BY historyid DESC");