Account Delete fixed

content/konto/userprofil.php

@@ -14,8 +14,8 @@ if (!isset($mailstatus)) $mailstatus = "";
 if (!isset($delchange)) $delchange = "";
 
 if ($_POST['acc_del'] == 'Jetzt löschen!' && $_POST['del_passwort']) {
-    $schnittstelle = mysql_fetch_array(db_query("SELECT `passwort` FROM " . $db_prefix . "_kontodaten LIMIT 1")) or die("Userinfo");
-    if ($schnittstelle['passwort'] != md5($_GET['del_passwort'])) {
+    $schnittstelle = mysql_fetch_array(db_query("SELECT `passwort` FROM " . $db_prefix . "_kontodaten WHERE uid=" .$_SESSION['uid']. " LIMIT 1")) or die("Userinfo");
+    if ($schnittstelle['passwort'] != md5($_POST['del_passwort'])) {
         echo 'Passwort falsch';
     } else {
         $sperrzeit = time() + (86400 * 30);