- don't set password via remoting if field is empty

Marius Cramer

2015-08-06 37b29231e47a0c4458dc1c15d98588f16f07e1e2

 interface/web/help/form/support_message.tform.php

@@ -46,7 +46,7 @@
if(isset($_GET['reply']))
{
   $sm_msg_id = preg_replace("/[^0-9]/", "", $_GET['reply']);
   $res = $app->db->queryOneRecord("SELECT sender_id, subject FROM support_message WHERE support_message_id=$sm_msg_id");
   $res = $app->db->queryOneRecord("SELECT sender_id, subject FROM support_message WHERE support_message_id=?", $sm_msg_id);
   if($res['sender_id'])
   {
      $sm_default_recipient_id = $res['sender_id'];