Fix users being able to bypass email verification (#3569)

* Fix users being able to bypass email verification

* Remove comment

* Use single quotes

core/classes/Core/Validate.php

@@ -299,7 +299,7 @@ public static function check(array $source, array $items = []): Validate
                         break;
 
                     case self::IS_ACTIVE:
-                        $check = $validator->_db->get('users', [$item, $value]);
+                        $check = $validator->_db->query('SELECT * FROM nl2_users WHERE username = ? OR email = ?', [$value, $value]);
                         if (!$check->count()) {
                             break;
                         }