Originally Said By: Eric Mittman
The code that you have here looks like it should be selecting the record for the user where the id matches the $_GET['user_id'] value. This is not very secure though as a user could edit the id to be whatever they would like. 
So, how do I fix this?
Originally Said By: Eric Mittman
The better way to do this is to query the user table based on the entered email address, then send the users details to that address they entered. This way a users details will only be sent to the email address on file for that user.
Can this be done in DW and/or WAUE? If so, how? If not, how to fix?
