Code review.

Till Brehm

2013-11-19 604c0c24ba44720e052b536abb1ae992eb0ee292

 interface/web/help/support_message_edit.php

@@ -33,7 +33,7 @@

      //* Get recipient email address
      if($this->dataRecord['recipient_id'] > 1){
         $sql = "SELECT client.email FROM sys_user, client WHERE sys_user.userid = ".$this->dataRecord['recipient_id']." AND sys_user.client_id = client.client_id";
         $sql = "SELECT client.email FROM sys_user, client WHERE sys_user.userid = ".$app->functions->intval($this->dataRecord['recipient_id'])." AND sys_user.client_id = client.client_id";
         $client = $app->db->queryOneRecord($sql);
         $recipient_email = $client['email'];
      } else {
@@ -44,7 +44,7 @@

      //* Get sender email address
      if($this->dataRecord['sender_id'] > 1){
         $sql = "SELECT client.email FROM sys_user, client WHERE sys_user.userid = ".$this->dataRecord['sender_id']." AND sys_user.client_id = client.client_id";
         $sql = "SELECT client.email FROM sys_user, client WHERE sys_user.userid = ".$app->functions->intval($this->dataRecord['sender_id'])." AND sys_user.client_id = client.client_id";
         $client = $app->db->queryOneRecord($sql);
         $sender_email = $client['email'];
      } else {
@@ -113,7 +113,7 @@
      global $app, $conf;

      if($_SESSION['s']['user']['typ'] == 'admin') {
         $app->db->query("UPDATE support_message SET sys_userid = ".$this->dataRecord['recipient_id']." WHERE support_message_id = ".$this->id);
         $app->db->query("UPDATE support_message SET sys_userid = ".$app->functions->intval($this->dataRecord['recipient_id'])." WHERE support_message_id = ".$this->id);
      }

   }