blackicedbear/FHC-Core
1
0
Fork 0
mirror of https://github.com/FH-Complete/FHC-Core.git synced 2026-10-24 12:46:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

fixed quoting-bug in interessentenimport.php

Browse Source
This commit is contained in:
Andreas Moik
2016-03-07 14:36:31 +01:00
parent ecf882e748
commit 42fca1820c
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
vilesci/personen/import/interessentenimport.php
+6 -5
View File
@@ -16,8 +16,9 @@
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307, USA.
*
* Authors: Christian Paminger <[email protected]>,
* Andreas Oesterreicher <[email protected]> and
* Rudolf Hangl <[email protected]>.
* Andreas Oesterreicher <[email protected]>,
* Rudolf Hangl <[email protected]> and
* Andreas Moik <[email protected]>.
*/
require_once('../../../config/vilesci.config.inc.php');
@@ -1188,19 +1189,19 @@ if($vorname!='' && $nachname!='')
{
if($where!='')
$where.=' OR';
$where.=" (LOWER(vorname)=LOWER('".$vorname."') AND LOWER(nachname)=LOWER('".$nachname."'))";
$where.=" (LOWER(vorname)=LOWER(".$db->db_add_param($vorname).") AND LOWER(nachname)=LOWER(".$db->db_add_param($nachname)."))";
}
elseif($nachname!='')
{
if($where!='')
$where.=' OR';
$where.=" LOWER(nachname)=LOWER('".$nachname."')";
$where.=" LOWER(nachname)=LOWER(".$db->db_add_param($nachname).")";
}
if($where!='')
{
$qry = "SELECT * FROM public.tbl_person WHERE $where ORDER BY nachname, vorname, gebdatum";
if($result = $db->db_query($qry))
{
echo '<table style="margin-top: 0px" class="tablesorter" id="t1"><thead><tr><th></th><th>Nachname</th><th>Vorname</th><th>Weitere<br/>Vornamen</th><th>GebDatum</th><th>SVNR</th><th>Geschlecht</th><th>Adresse</th><th>Status</th><th>Details</th></tr></thead>';