From 528ac3b8fac377fc10c20c167f42d92a711eb722 Mon Sep 17 00:00:00 2001 From: ftimme <ft@falkotimme.com> Date: Thu, 03 May 2012 10:00:53 -0400 Subject: [PATCH] - Fixed FS#2197. --- interface/web/sites/tools.inc.php | 7 +++---- 1 files changed, 3 insertions(+), 4 deletions(-) diff --git a/interface/web/sites/tools.inc.php b/interface/web/sites/tools.inc.php index 1e87ef9..316abe6 100644 --- a/interface/web/sites/tools.inc.php +++ b/interface/web/sites/tools.inc.php @@ -55,7 +55,6 @@ function getClientName($dataRecord) { global $app, $conf; - if($_SESSION["s"]["user"]["typ"] != 'admin' || $app->auth->has_clients($_SESSION['s']['user']['userid'])) { // Get the group-id of the user $client_group_id = $_SESSION["s"]["user"]["default_group"]; @@ -97,7 +96,7 @@ } } /* get the name of the client */ - $tmp = $app->db->queryOneRecord("SELECT client_id FROM sys_group WHERE groupid = " . $client_group_id); + $tmp = $app->db->queryOneRecord("SELECT client_id FROM sys_group WHERE groupid = " . intval($client_group_id)); $clientID = $tmp['client_id']; if ($clientID == '') $clientID = '0'; return $clientID; @@ -105,9 +104,9 @@ function convertClientName($name){ /** - * only allow 'a'..'z', '_', '-', '0'..'9' + * only allow 'a'..'z', '_', '0'..'9' */ - $allowed = 'abcdefghijklmnopqrstuvwxyz0123456789_-'; + $allowed = 'abcdefghijklmnopqrstuvwxyz0123456789_'; $res = ''; $name = strtolower(trim($name)); for ($i=0; $i < strlen($name); $i++){ -- Gitblit v1.9.1