mirror of
https://github.com/OpenXE-org/OpenXE.git
synced 2024-11-15 04:27:14 +01:00
Ticket system bugfix unescaped text in check ticket rule
This commit is contained in:
parent
ce11caac12
commit
00dc3414a2
@ -289,10 +289,10 @@ class TicketImportHelper
|
|||||||
FROM `ticket_regeln` AS `tr`
|
FROM `ticket_regeln` AS `tr`
|
||||||
WHERE
|
WHERE
|
||||||
tr.aktiv = 1
|
tr.aktiv = 1
|
||||||
AND ('".$recipientMail."' LIKE tr.empfaenger_email OR tr.empfaenger_email = '')
|
AND ('".$this->db->real_escape_string($recipientMail)."' LIKE tr.empfaenger_email OR tr.empfaenger_email = '')
|
||||||
AND ('".$senderMail."' LIKE tr.sender_email OR tr.sender_email = '')
|
AND ('".$this->db->real_escape_string($senderMail)."' LIKE tr.sender_email OR tr.sender_email = '')
|
||||||
AND ('".$senderMail."' LIKE tr.name OR tr.name = '')
|
AND ('".$this->db->real_escape_string($senderMail)."' LIKE tr.name OR tr.name = '')
|
||||||
AND ('".$subject."' LIKE tr.betreff OR tr.betreff = '')";
|
AND ('".$this->db->real_escape_string($subject)."' LIKE tr.betreff OR tr.betreff = '')";
|
||||||
|
|
||||||
$this->logger->debug('ticket rule',['sql' => $sql]);
|
$this->logger->debug('ticket rule',['sql' => $sql]);
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user