Till Brehm
2016-04-20 86853d4d0fd66c277746e9e0cf07fbecbfbbc362
Fixed #3835 Delete MailBackup not working - Log shows a warning about SQL Injection
1 files modified
2 ■■■ changed files
interface/lib/classes/plugin_backuplist_mail.inc.php 2 ●●● patch | view | raw | blame | history
interface/lib/classes/plugin_backuplist_mail.inc.php
@@ -75,7 +75,7 @@
                if($tmp['number'] == 0) {
                    $message .= $wb['delete_info_txt'];
                    $sql =     "INSERT INTO sys_remoteaction (server_id, tstamp, action_type, action_param, action_state, response) " .
                    "VALUES (?, ?, 'backup_delete_mail, ?, 'pending', '')";
                    "VALUES (?, ?, 'backup_delete_mail', ?, 'pending', '')";
                    $app->db->query($sql, $this->form->dataRecord['server_id'], time(), $backup_id);
                } else {
                    $error .= $wb['delete_pending_txt'];