Avoid problems with quotes and so on in user records when updating users

diff --git a/admin/user.php b/admin/user.php
index 896370f3292781e84ac715b39256932b3bd89ec7..709576a383aa1de1925af636e0e2857833f608be 100644 (file)
--- a/admin/user.php
+++ b/admin/user.php
@@ -124,11 +124,13 @@
 
                 exit;
             } else if (!$user->deleted) {
-                $user->deleted = "1";
-                $user->username = "$user->email.".time();  // Remember it just in case
-                $user->email = "";               // Clear this field to free it up
-                $user->timemodified = time();
-                if (update_record("user", $user)) {
+                unset($updateuser);
+                $updateuser->id = $user->id;
+                $updateuser->deleted = "1";
+                $updateuser->username = "$user->email.".time();  // Remember it just in case
+                $updateuser->email = "";               // Clear this field to free it up
+                $updateuser->timemodified = time();
+                if (update_record("user", $updateuser)) {
                     unenrol_student($user->id);  // From all courses
                     remove_teacher($user->id);   // From all courses
                     remove_admin($user->id);