diff --git a/html/pages/deluser.inc.php b/html/pages/deluser.inc.php index 1ba4eaed16..c0baf9ce87 100644 --- a/html/pages/deluser.inc.php +++ b/html/pages/deluser.inc.php @@ -13,16 +13,17 @@ if (!Auth::user()->isAdmin()) { if (Auth::get()->canManageUsers()) { if ($vars['action'] == 'del') { - $delete_username = dbFetchCell('SELECT username FROM users WHERE user_id = ?', array($vars['id'])); + $id = (int)$vars['id']; + $delete_username = dbFetchCell('SELECT username FROM users WHERE user_id = ?', [$id]); if ($vars['confirm'] == 'yes') { - if (Auth::get()->deleteUser($vars['id']) >= 0) { + if (Auth::get()->deleteUser($id) >= 0) { print_message('
User "'.$delete_username.'" deleted!'); } else { print_error('Error deleting user "'.$delete_username.'"!'); } } else { - print_error('You have requested deletion of the user "'.$delete_username.'". This action can not be reversed.
Click to confirm'); + print_error('You have requested deletion of the user "'.$delete_username.'". This action can not be reversed.
Click to confirm'); } }