From c43f71c17752affc7fc3131694505c8ee6f3e18d Mon Sep 17 00:00:00 2001 From: Alexey Melnichuk Date: Wed, 23 Nov 2016 12:01:51 +0300 Subject: [PATCH] Add. Use params in vm/change_password.lua (#2156) --- .../resources/functions/change_password.lua | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/resources/install/scripts/app/voicemail/resources/functions/change_password.lua b/resources/install/scripts/app/voicemail/resources/functions/change_password.lua index 711932681d..0b6bab9f0a 100644 --- a/resources/install/scripts/app/voicemail/resources/functions/change_password.lua +++ b/resources/install/scripts/app/voicemail/resources/functions/change_password.lua @@ -32,15 +32,17 @@ dtmf_digits = ''; password = macro(session, "password_new", 20, 5000, ''); --update the voicemail password - sql = [[UPDATE v_voicemails - set voicemail_password = ']] .. password ..[[' - WHERE domain_uuid = ']] .. domain_uuid ..[[' - AND voicemail_id = ']] .. voicemail_id ..[[' + local sql = [[UPDATE v_voicemails + set voicemail_password = :password + WHERE domain_uuid = :domain_uuid + AND voicemail_id = :voicemail_id AND voicemail_enabled = 'true' ]]; + local params = {password = password, domain_uuid = domain_uuid, + voicemail_id = voicemail_id}; if (debug["sql"]) then - freeswitch.consoleLog("notice", "[voicemail] SQL: " .. sql .. "\n"); + freeswitch.consoleLog("notice", "[voicemail] SQL: " .. sql .. "; params:" .. json.encode(params) .. "\n"); end - dbh:query(sql); + dbh:query(sql, params); --has been changed to dtmf_digits = ''; macro(session, "password_changed", 20, 3000, password);