From 37b29231e47a0c4458dc1c15d98588f16f07e1e2 Mon Sep 17 00:00:00 2001
From: Marius Cramer <m.cramer@pixcept.de>
Date: Thu, 06 Aug 2015 03:18:44 -0400
Subject: [PATCH] - don't set password via remoting if field is empty

---
 interface/lib/classes/remote.d/domains.inc.php |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/interface/lib/classes/remote.d/domains.inc.php b/interface/lib/classes/remote.d/domains.inc.php
index 9bba710..3383033 100644
--- a/interface/lib/classes/remote.d/domains.inc.php
+++ b/interface/lib/classes/remote.d/domains.inc.php
@@ -86,8 +86,8 @@
 			return false;
 		}
 		$group_id = $app->functions->intval($group_id);
-		$sql = "SELECT domain_id, domain FROM domain WHERE sys_groupid  = $group_id ";
-		$all = $app->db->queryAllRecords($sql);
+		$sql = "SELECT domain_id, domain FROM domain WHERE sys_groupid  = ?";
+		$all = $app->db->queryAllRecords($sql, $group_id);
 		return $all;
 	}
 

--
Gitblit v1.9.1