From cc7a82756b4f4d7ab18e928527c37489adbaf564 Mon Sep 17 00:00:00 2001 From: Marius Cramer <m.cramer@pixcept.de> Date: Tue, 07 Apr 2015 14:10:50 -0400 Subject: [PATCH] - rewrite of sql queries to new form --- interface/web/mailuser/index.php | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/interface/web/mailuser/index.php b/interface/web/mailuser/index.php index 73505ae..b7748ac 100644 --- a/interface/web/mailuser/index.php +++ b/interface/web/mailuser/index.php @@ -17,8 +17,8 @@ include $lng_file; $app->tpl->setVar($wb); -$sql = "SELECT * FROM mail_user WHERE mailuser_id = ".$app->functions->intval($_SESSION['s']['user']['mailuser_id']); -$rec = $app->db->queryOneRecord($sql); +$sql = "SELECT * FROM mail_user WHERE mailuser_id = ?"; +$rec = $app->db->queryOneRecord($sql, $_SESSION['s']['user']['mailuser_id']); if($rec['quota'] == 0) { $rec['quota'] = $wb['unlimited_txt']; @@ -30,8 +30,8 @@ $app->tpl->setVar($rec); -$sql2 = "SELECT * FROM server WHERE server_id = ".$app->functions->intval($rec['server_id']); -$rec2 = $app->db->queryOneRecord($sql2); +$sql2 = "SELECT * FROM server WHERE server_id = ?"; +$rec2 = $app->db->queryOneRecord($sql2, $rec['server_id']); $app->tpl->setVar($rec2); -- Gitblit v1.9.1