From 0d68e92162476cc6b9e4c17fcfd0ae06bc8538c4 Mon Sep 17 00:00:00 2001
From: Marius Cramer <m.cramer@pixcept.de>
Date: Wed, 05 Feb 2014 03:34:25 -0500
Subject: [PATCH] Fixed: FS#3318 - Check if there is a problem with bcc email addresses in email class
---
interface/lib/classes/db_mysql.inc.php | 13 ++++++++++++-
1 files changed, 12 insertions(+), 1 deletions(-)
diff --git a/interface/lib/classes/db_mysql.inc.php b/interface/lib/classes/db_mysql.inc.php
index 1636cab..c9de1de 100644
--- a/interface/lib/classes/db_mysql.inc.php
+++ b/interface/lib/classes/db_mysql.inc.php
@@ -284,7 +284,7 @@
// Insert the server_id, if the record has a server_id
$server_id = (isset($record_old['server_id']) && $record_old['server_id'] > 0)?$record_old['server_id']:0;
if(isset($record_new['server_id'])) $server_id = $record_new['server_id'];
-
+ $server_id = intval($server_id);
if($diff_num > 0) {
//print_r($diff_num);
@@ -306,6 +306,9 @@
//** Inserts a record and saves the changes into the datalog
public function datalogInsert($tablename, $insert_data, $index_field) {
global $app;
+
+ $tablename = $this->quote($tablename);
+ $index_field = $this->quote($index_field);
if(is_array($insert_data)) {
$key_str = '';
@@ -333,6 +336,10 @@
//** Updates a record and saves the changes into the datalog
public function datalogUpdate($tablename, $update_data, $index_field, $index_value, $force_update = false) {
global $app;
+
+ $tablename = $this->quote($tablename);
+ $index_field = $this->quote($index_field);
+ $index_value = $this->quote($index_value);
$old_rec = $this->queryOneRecord("SELECT * FROM $tablename WHERE $index_field = '$index_value'");
@@ -356,6 +363,10 @@
//** Deletes a record and saves the changes into the datalog
public function datalogDelete($tablename, $index_field, $index_value) {
global $app;
+
+ $tablename = $this->quote($tablename);
+ $index_field = $this->quote($index_field);
+ $index_value = $this->quote($index_value);
$old_rec = $this->queryOneRecord("SELECT * FROM $tablename WHERE $index_field = '$index_value'");
$this->query("DELETE FROM $tablename WHERE $index_field = '$index_value'");
--
Gitblit v1.9.1