From b3e6c950e4e0142b1dba4745b57e1cdf777586f1 Mon Sep 17 00:00:00 2001
From: Christian Paminger <pam@technikum-wien.at>
Date: Thu, 2 Oct 2014 06:28:18 +0000
Subject: [PATCH] Statistik

---
 include/statistik.class.php | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/include/statistik.class.php b/include/statistik.class.php
index df91fd0a6..7373e4fa1 100644
--- a/include/statistik.class.php
+++ b/include/statistik.class.php
@@ -417,7 +417,21 @@ class statistik extends basis_db
 			$sql = $this->sql;
 			foreach($_REQUEST as $name=>$value)
 			{
-				$sql = str_replace('$'.$name,addslashes($value),$sql);
+				//echo '<pre>'.var_dump($name).'</pre>';
+				if (is_array($value))
+				{
+					$modifier="'";
+					if (is_numeric($value[0]))
+						$modifier="";
+					$in='';
+					foreach ($value as $v)
+						$in.=$modifier.addslashes($v).$modifier.',';
+					$in=substr($in,0,-1);
+					$sql = str_replace('$'.$name,$in,$sql);
+					echo '<pre>'.var_dump($sql).'</pre>';
+				}
+				else
+					$sql = str_replace('$'.$name,addslashes($value),$sql);
 			}
 			
 			if($this->data = $this->db_query($sql))