maketank/Froxlor
2
0
Fork 0
Code Pull Requests Releases Activity

fix forgotten ->escape in customer_ftp

Browse Source 
Signed-off-by: Michael Kaufmann (d00p) <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann (d00p)
2013-11-17 10:51:28 +01:00
parent 50b9eec6c1
commit cf4865828c
2 changed files with 7 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
customer_ftp.php
View File

@@ -119,11 +119,12 @@ if ($page == 'overview') {
);
Database::pexecute($stmt, array("customerid" => $userinfo['customerid'], "id" => $id));
$stmt = Database::prepare("UPDATE `" . TABLE_FTP_GROUPS . "`
SET `members`=REPLACE(`members`,'," . $db->escape($result['username']) . "','')
WHERE `customerid`='" . (int)$userinfo['customerid'] . "'"
);
Database::pexecute($stmt, array("username" => $result['username'], "customerid" => $userinfo['customerid']));
$stmt = Database::prepare("
UPDATE `" . TABLE_FTP_GROUPS . "` SET
`members` = REPLACE(`members`, :username,'')
WHERE `customerid` = :customerid
");
Database::pexecute($stmt, array("username" => ",".$result['username'], "customerid" => $userinfo['customerid']));
$log->logAction(USR_ACTION, LOG_INFO, "deleted ftp-account '" . $result['username'] . "'");
@@ -140,7 +141,7 @@ if ($page == 'overview') {
);
Database::pexecute($stmt, array("customerid" => $userinfo['customerid']));
redirectTo($filename, Array('page' => $page, 's' => $s));
redirectTo($filename, array('page' => $page, 's' => $s));
} else {
ask_yesno_withcheckbox('ftp_reallydelete', 'admin_customer_alsoremoveftphomedir', $filename, array('id' => $id, 'page' => $page, 'action' => $action), $result['username']);
}