File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -92,7 +92,7 @@ function onSubmit() {
9292 } // end if user is not admin
9393
9494 // Set the server ID according to the selected destination
95- $ tmp = $ app ->db ->queryOneRecord ("SELECT server_id FROM mail_user WHERE email = ' " .mysql_real_escape_string ($ this ->dataRecord ["destination " ])."' " );
95+ $ tmp = $ app ->db ->queryOneRecord ("SELECT server_id FROM mail_user WHERE email = ' " .$ app -> db -> quote ($ this ->dataRecord ["destination " ])."' " );
9696 $ this ->dataRecord ["server_id " ] = $ tmp ["server_id " ];
9797 unset($ tmp );
9898
@@ -102,7 +102,7 @@ function onSubmit() {
102102 function onAfterInsert () {
103103 global $ app ;
104104
105- $ tmp = $ app ->db ->queryOneRecord ("SELECT sys_groupid FROM mail_user WHERE email = ' " .mysql_real_escape_string ($ this ->dataRecord ["destination " ])."' " );
105+ $ tmp = $ app ->db ->queryOneRecord ("SELECT sys_groupid FROM mail_user WHERE email = ' " .$ app -> db -> quote ($ this ->dataRecord ["destination " ])."' " );
106106 $ app ->db ->query ("update mail_get SET sys_groupid = " .$ tmp ['sys_groupid ' ]." WHERE mailget_id = " .$ this ->id );
107107
108108 }
You can’t perform that action at this time.
0 commit comments