dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update dialplan_outbound_add.php 

Use a parameterized query for the domain_uuid.
This commit is contained in:
FusionPBX 2020-10-28 22:02:54 -06:00 committed by GitHub
parent 24ae553d14
commit 8528f38c51
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
app/dialplan_outbound/dialplan_outbound_add.php
View File

@ -729,12 +729,13 @@
$sql = "select * from v_gateways "; $sql = "select * from v_gateways ";
$sql .= "where enabled = 'true' "; $sql .= "where enabled = 'true' ";
if (permission_exists('outbound_route_any_gateway')) { if (permission_exists('outbound_route_any_gateway')) {
$sql .= "order by domain_uuid = '$domain_uuid' DESC, gateway "; $sql .= "order by domain_uuid = :domain_uuid DESC, gateway ";
} }
else { else {
$sql .= "and domain_uuid = :domain_uuid "; $sql .= "and domain_uuid = :domain_uuid ";
$parameters['domain_uuid'] = $domain_uuid;
} }
$parameters['domain_uuid'] = $domain_uuid;
$database = new database; $database = new database;
$gateways = $database->select($sql, $parameters, 'all'); $gateways = $database->select($sql, $parameters, 'all');
unset($sql, $parameters); unset($sql, $parameters);