Improving display_user_link_work function

main/work/work.lib.php

@@ -223,13 +223,13 @@ function display_studentsdelete_form()
 function display_user_link_work($user_id, $name='')
 {
 	global $_otherusers;
-
-	if ($user_id<>0) {
-
+	$user_id = intval($user_id);
+	
+	if ($user_id <> 0) {
 		$table_user = Database::get_main_table(TABLE_MAIN_USER);
-		$sql="SELECT * FROM $table_user WHERE user_id='".Database::escape_string($user_id)."'";
-		$result=Database::query($sql);
-		$row=Database::fetch_array($result);
+		$sql	= "SELECT user_id, firstname, lastname FROM $table_user WHERE user_id='".Database::escape_string($user_id)."'";
+		$result	= Database::query($sql);
+		$row	= Database::fetch_array($result);
 		if ($name=='') {
 			return "<a href=\"../user/userInfo.php?cidReq=".api_get_course_id()."&gradebook=$gradebook&origin=&uInfo=".$row['user_id']."\">".api_get_person_name($row['firstname'], $row['lastname'])."</a>";
 		} else {