$kset->next();
$user_k=$kset->getString('user_k');
+ // XXX hard coded
$senat_id = 876611;
$K_id = 1961061;
$comms = getCommanders($K_id);
foreach ($k as $id) {
+ // prevent sqli
+ $k = intval($k);
+ if ($k == 0) { continue; }
+
+
if ($user_k) {
$isSenat = hasAncestor(getAncestors($id), $senat_id);
if ($isSenat && !($isComm || $isSOwner)){