Get User Id in Media Gallery

[hazem_aliraqi]

Get User Id in Media Gallery



the next page like page 2

PHP Code:

media.php?do=main&type=2&userid=$userid&page=2 


the mod in this thread


https://vborg.vbsupport.ru/showthrea...hreadid=319444


the query in media.php

PHP Code:

if ($type == 2 && $userid > 0)
    {
    $pagenav = construct_page_nav($pagenumber, $perpage, $records, 'media.php?' . $vbulletin->session->vars['sessionurl'] . 'do=main&type=2&userid=$userid');
        $items = $vbulletin->db->query_read("
                                SELECT *
                                FROM `" . TABLE_PREFIX . "mediagallery_items`
                                WHERE userid=$userid AND approved=1 AND hidden=0
                                ORDER BY postdate DESC
                                LIMIT " . ($limitlower-1) . ", $perpage");    
    } 


where is the problem ?

[Dave]

You mean that $userid is literally displayed in the URL?
It's because the variable is not being escaped in the construct_page_nav function.

This should work:

PHP Code:

$pagenav = construct_page_nav($pagenumber, $perpage, $records, 'media.php?' . $vbulletin->session->vars['sessionurl'] . 'do=main&type=2&userid=' . $userid);
// 


[squidsk]

You are seeing that because you've got that part of the string in single quotes, if you put it in double quotes you would get the id showing correctly.

[hazem_aliraqi]

Originally Posted by Dave

You mean that $userid is literally displayed in the URL?
It's because the variable is not being escaped in the construct_page_nav function.

This should work:

PHP Code:

$pagenav = construct_page_nav($pagenumber, $perpage, $records, 'media.php?' . $vbulletin->session->vars['sessionurl'] . 'do=main&type=2&userid=' . $userid);
// 


It works successfully

thank you Dave