Aaaaaaaaaaaaaaand fix it

This commit is contained in:
Mark Schouten 2014-07-04 11:26:05 +02:00
parent 65dc663195
commit 340d297f71

View file

@ -119,9 +119,9 @@ function add_db_zone($zone, $owner) {
jtable_respond(null, 'error', "$zone is not a valid zonename"); jtable_respond(null, 'error', "$zone is not a valid zonename");
} }
$db = get_db(); $db = get_db();
$q = $db->prepare("INSERT OR REPLACE INTO zones (zone, owner) VALUES (':zone', (SELECT id FROM users WHERE emailaddress = ':ownwer'))"); $q = $db->prepare("INSERT OR REPLACE INTO zones (zone, owner) VALUES (? (SELECT id FROM users WHERE emailaddress = ?))");
$q->bindValue(':zone', $zone); $q->bindValue(1, $zone, SQLITE3_TEXT);
$q->bindValue(':owner', $owner); $q->bindValue(2, $owner, SQLITE3_TEXT);
$q->execute(); $q->execute();
$db->close(); $db->close();
} }
@ -131,8 +131,8 @@ function get_zone_owner($zone) {
jtable_respond(null, 'error', "$zone is not a valid zonename"); jtable_respond(null, 'error', "$zone is not a valid zonename");
} }
$db = get_db(); $db = get_db();
$q = $db->prepare("SELECT u.emailaddress FROM users u, zones z WHERE z.owner = u.id AND z.zone = ':zone'"); $q = $db->prepare("SELECT u.emailaddress FROM users u, zones z WHERE z.owner = u.id AND z.zone = ?");
$q->bindValue(':zone', $zone); $q->bindValue(1, $zone, SQLITE3_TEXT);
$result = $q->execute(); $result = $q->execute();
$zoneinfo = $result->fetchArray(SQLITE3_ASSOC); $zoneinfo = $result->fetchArray(SQLITE3_ASSOC);
$db->close(); $db->close();