From 87ccce18677edcbf5075cd2116c1369a6937a1a5 Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Tue, 18 Oct 2022 13:04:16 -0600
Subject: [PATCH] Fix the sub data insert.

---
 resources/classes/database.php | 41 +++++++++++++++++++---------------
 1 file changed, 23 insertions(+), 18 deletions(-)

diff --git a/resources/classes/database.php b/resources/classes/database.php
index 596da448d8..9c95daf58a 100644
--- a/resources/classes/database.php
+++ b/resources/classes/database.php
@@ -2575,28 +2575,33 @@
 															if (is_array($row)) {
 																foreach ($row as $k => $v) {
 																	if (!is_array($v)) {
-																		if (strlen($v) == 0) {
-																			$sql .= "null, ";
-																		}
-																		elseif ($v === "now()") {
-																			$sql .= "now(), ";
-																		}
-																		elseif ($v === "user_uuid()") {
-																			$sql .= ':'.$k.", ";
-																			$params[$k] = $_SESSION['user_uuid'];
-																		}
-																		elseif ($v === "remote_address()") {
-																			$sql .= ':'.$k.", ";
-																			$params[$k] = $_SERVER['REMOTE_ADDR'];
-																		}
-																		else {
-																			$k = self::sanitize($k);
-																			if ($k != 'insert_user' &&
+																		if ($k != 'insert_user' &&
 																			$k != 'insert_date' &&
 																			$k != 'update_user' && 
 																			$k != 'update_date') {
+																			if (strlen($v) == 0) {
+																				$sql .= "null, ";
+																			}
+																			elseif ($v === "now()") {
+																				$sql .= "now(), ";
+																			}
+																			elseif ($v === "user_uuid()") {
 																				$sql .= ':'.$k.", ";
-																				$params[$k] = trim($v);
+																				$params[$k] = $_SESSION['user_uuid'];
+																			}
+																			elseif ($v === "remote_address()") {
+																				$sql .= ':'.$k.", ";
+																				$params[$k] = $_SERVER['REMOTE_ADDR'];
+																			}
+																			else {
+																				$k = self::sanitize($k);
+																				if ($k != 'insert_user' &&
+																				$k != 'insert_date' &&
+																				$k != 'update_user' && 
+																				$k != 'update_date') {
+																					$sql .= ':'.$k.", ";
+																					$params[$k] = trim($v);
+																				}
 																			}
 																		}
 																	}