From 48377ec823b0d30ff320682c40c97183d1e4f345 Mon Sep 17 00:00:00 2001
From: Aaron van Geffen <aaron@aaronweb.net>
Date: Thu, 18 Sep 2025 11:07:55 +0200
Subject: [PATCH] Update stray queries to PDO-style parameters

---
 models/Asset.php          |  6 +++---
 models/AssetIterator.php  |  2 +-
 models/Authentication.php | 12 ++++++------
 models/Email.php          |  2 +-
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/models/Asset.php b/models/Asset.php
index c125b4e..2e5a110 100644
--- a/models/Asset.php
+++ b/models/Asset.php
@@ -438,9 +438,9 @@ class Asset
 			$this->slug = $this->subdir . '/' . $this->title;
 			Registry::get('db')->query('
 				UPDATE assets
-				SET subdir = {string:subdir},
-					slug = {string:slug}
-				WHERE id_asset = {int:id_asset}',
+				SET subdir = :subdir,
+					slug = :slug
+				WHERE id_asset = :id_asset',
 				[
 					'id_asset' => $this->id_asset,
 					'subdir' => $this->subdir,
diff --git a/models/AssetIterator.php b/models/AssetIterator.php
index 9088719..740631c 100644
--- a/models/AssetIterator.php
+++ b/models/AssetIterator.php
@@ -98,7 +98,7 @@ class AssetIterator implements Iterator
 		if (isset($options['id_user_uploaded']))
 		{
 			$params['id_user_uploaded'] = $options['id_user_uploaded'];
-			$where[] = 'id_user_uploaded = {int:id_user_uploaded}';
+			$where[] = 'id_user_uploaded = :id_user_uploaded';
 		}
 		if (isset($options['id_tag']))
 		{
diff --git a/models/Authentication.php b/models/Authentication.php
index 98b3fb0..53ddddb 100644
--- a/models/Authentication.php
+++ b/models/Authentication.php
@@ -40,7 +40,7 @@ class Authentication
 		$key = Registry::get('db')->queryValue('
 			SELECT reset_key
 			FROM users
-			WHERE id_user = {int:id}',
+			WHERE id_user = :id',
 			[
 				'id' => $id_user,
 			]);
@@ -65,7 +65,7 @@ class Authentication
 			UPDATE users
 			SET reset_key = NULL,
 				reset_blocked_until = NULL
-			WHERE id_user = {int:id_user}',
+			WHERE id_user = :id_user',
 			['id_user' => $id_user]);
 	}
 
@@ -74,7 +74,7 @@ class Authentication
 		$resetTime = Registry::get('db')->queryValue('
 			SELECT reset_blocked_until
 			FROM users
-			WHERE id_user = {int:id_user}',
+			WHERE id_user = :id_user',
 			['id_user' => $id_user]);
 
 		return max(0, $resetTime - time());
@@ -117,7 +117,7 @@ class Authentication
 			UPDATE users
 			SET reset_key = {string:key},
 				reset_blocked_until = UNIX_TIMESTAMP() + ' . static::DEFAULT_RESET_TIMEOUT . '
-			WHERE id_user = {int:id}',
+			WHERE id_user = :id',
 			[
 				'id' => $id_user,
 				'key' => self::newActivationKey(),
@@ -151,8 +151,8 @@ class Authentication
 
 		$success = Registry::get('db')->query('
 			UPDATE users
-			SET reset_blocked_until = {int:new_time_out}
-			WHERE id_user = {int:id_user}',
+			SET reset_blocked_until = :new_time_out
+			WHERE id_user = :id_user',
 			[
 				'id_user' => $id_user,
 				'new_time_out' => time() + $newResetTimeOut,
diff --git a/models/Email.php b/models/Email.php
index 5ff0d4e..61ab4b5 100644
--- a/models/Email.php
+++ b/models/Email.php
@@ -69,7 +69,7 @@ class Email
 		$row = Registry::get('db')->queryAssoc('
 			SELECT first_name, surname, emailaddress, reset_key
 			FROM users
-			WHERE id_user = {int:id_user}',
+			WHERE id_user = :id_user',
 			[
 				'id_user' => $id_user,
 			]);