Changing header + security

webchatdeny.php

@@ -1,24 +1,5 @@
 <?php
-/*
-============================================================================== 
-	Dokeos - elearning and course management software
-	
-	Copyright (c) 2004 Dokeos SPRL
-	Copyright (c) Denes Nagy
-	
-	For a full list of contributors, see "credits.txt".
-	The full license can be read in "license.txt".
-	
-	This program is free software; you can redistribute it and/or
-	modify it under the terms of the GNU General Public License
-	as published by the Free Software Foundation; either version 2
-	of the License, or (at your option) any later version.
-	
-	See the GNU General Public License for more details.
-	
-	Contact: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium, info@dokeos.com
-============================================================================== 
-*/
+/* For licensing terms, see /dokeos_license.txt */
 
 /**
  * @todo can't this be moved to a different file so that we can delete this file? 
@@ -39,6 +20,7 @@ include_once('./main/inc/global.inc.php');
 // table definitions
 $track_user_table = Database::get_main_table(TABLE_MAIN_USER);
 if (isset($_user['user_id']) && $_user['user_id']!='') {
+	$_user['user_id'] = intval($_user['user_id']); 
 	$sql="update $track_user_table set chatcall_user_id = '', chatcall_date = '', chatcall_text='DENIED' where (user_id = ".$_user['user_id'].")";
 	$result=api_sql_query($sql,__FILE__,__LINE__);
 }

whoisonline.php

@@ -1,24 +1,5 @@
 <?php // $Id: whoisonline.php 21549 2009-06-21 14:02:37Z iflorespaz $
-/*
-==============================================================================
-	Dokeos - elearning and course management software
-
-	Copyright (c) 2004-2008 Dokeos SPRL
-	Copyright (c) various contributors
-
-	For a full list of contributors, see "credits.txt".
-	The full license can be read in "license.txt".
-
-	This program is free software; you can redistribute it and/or
-	modify it under the terms of the GNU General Public License
-	as published by the Free Software Foundation; either version 2
-	of the License, or (at your option) any later version.
-
-	See the GNU General Public License for more details.
-
-	Contact: Dokeos, rue du Corbeau, 108, B-1030 Brussels, Belgium, info@dokeos.com
-==============================================================================
-*/
+/* For licensing terms, see /dokeos_license.txt */
 
 /**
 ==============================================================================

whoisonlinesession.php

@@ -1,5 +1,5 @@
 <?php
-// Dokeos Header here
+/* For licensing terms, see /dokeos_license.txt */
 
 /**
  * @todo variables are sometimes in cammelcase, or even worse a mixture of CammelCase and udnerscoring: $a_userList
@@ -49,6 +49,7 @@ Display::display_header(get_lang('UserOnlineListSession'));
 <?php
 	$sessionIsCoach = array();
 	if (isset($_user['user_id']) && $_user['user_id']!='') {
+		$_user['user_id'] = intval($_user['user_id']);
 		$result = api_sql_query("SELECT DISTINCT id, 
 										name, 
 										date_start,