Merge branch 'pdo'

useredit.php

@@ -13,26 +13,19 @@ $user_id = sanitize($_GET['user_id']);
 		
 include("header.php");
 
-$query = "SELECT
-	user_name,
-	user_displayname,
-	user_realm
-FROM
-	user
-WHERE
-	user_id=" . $user_id;
-		
-$user = $db->db_select($query);
-		
-$smarty->assign("user_id", $user_id);
-$smarty->assign("user_name", $user[0]['user_name']);
-$smarty->assign("user_displayname", $user[0]['user_displayname']);
+$sql = "SELECT user_id AS id, user_name AS name, user_displayname AS displayname,
+            user_realm AS realm
+        FROM user
+        WHERE user_id=?";
+$sth = $dbh->prepare($sql);
+$sth->execute([$user_id]);
+$smarty->assign("user", $sth->fetch(PDO::FETCH_OBJ));
 
 // auth realms
 $smarty->assign("realm_ids", ['local', 'ldap']);
 $smarty->assign("realm_names", ['Local', 'LDAP']);
-$smarty->assign("realm_selected", $user[0]['user_realm']);
-	
+$smarty->assign("realm_selected", $user->realm);
+
 $smarty->display("useredit.tpl");
 		
 include("footer.php");