bug 1136: added intval for $_REQUEST['userid']