- fixed sql problems

Marius Cramer

2015-05-25 8ae1387d225034725a0ead1bcbd2756d4d053f43

 interface/lib/classes/validate_ftpuser.inc.php

@@ -36,7 +36,10 @@
   function ftp_dir($field_name, $field_value, $validator) {
      global $app;

      if($app->tform->primary_id == 0) {
      $primary_id = (isset($app->tform->primary_id) && $app->tform->primary_id > 0)?$app->tform->primary_id:$app->remoting_lib->primary_id;
      $primary_id = $app->functions->intval($primary_id);
		
      if($primary_id == 0 && !isset($app->remoting_lib->dataRecord['parent_domain_id'])) {
         $errmsg = $validator['errmsg'];
         if(isset($app->tform->wordbook[$errmsg])) {
            return $app->tform->wordbook[$errmsg]."<br>\r\n";
@@ -45,18 +48,25 @@
         }
      }


      $ftp_data = $app->db->queryOneRecord("SELECT parent_domain_id FROM ftp_user WHERE ftp_user_id = '".$app->db->quote($app->tform->primary_id)."'");
      if(!is_array($ftp_data) || $ftp_data["parent_domain_id"] < 1) {
         $errmsg = $validator['errmsg'];
         if(isset($app->tform->wordbook[$errmsg])) {
            return $app->tform->wordbook[$errmsg]."<br>\r\n";
      if($primary_id > 0) {
         //* get parent_domain_id from website
         $ftp_data = $app->db->queryOneRecord("SELECT parent_domain_id FROM ftp_user WHERE ftp_user_id = ?", $primary_id);
         if(!is_array($ftp_data) || $ftp_data["parent_domain_id"] < 1) {
            $errmsg = $validator['errmsg'];
            if(isset($app->tform->wordbook[$errmsg])) {
               return $app->tform->wordbook[$errmsg]."<br>\r\n";
            } else {
               return $errmsg."<br>\r\n";
            }
         } else {
            return $errmsg."<br>\r\n";
            $parent_domain_id = $ftp_data["parent_domain_id"];
         }
      } else {
         //* get parent_domain_id from dataRecord when we have a insert operation trough remote API
         $parent_domain_id = $app->functions->intval($app->remoting_lib->dataRecord['parent_domain_id']);
      }

      $domain_data = $app->db->queryOneRecord("SELECT domain_id, document_root FROM web_domain WHERE domain_id = '".$app->db->quote($ftp_data["parent_domain_id"])."'");
      $domain_data = $app->db->queryOneRecord("SELECT domain_id, document_root FROM web_domain WHERE domain_id = ?", $parent_domain_id);
      if(!is_array($domain_data) || $domain_data["domain_id"] < 1) {
         $errmsg = $validator['errmsg'];
         if(isset($app->tform->wordbook[$errmsg])) {