From d286e39a6fac8a7cfb0da0333e6f2a5c5f9c317d Mon Sep 17 00:00:00 2001 From: mattf Date: Tue, 5 Jan 2016 17:37:56 +0000 Subject: [PATCH] Fixed SQL errors in user group bulk change script git-svn-id: svn://192.168.202.10@2457 3d104415-ff17-0410-8863-d5cf3c621b8a --- agc_2-X/trunk/www/vicidial/user_group_bulk_change.php | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/agc_2-X/trunk/www/vicidial/user_group_bulk_change.php b/agc_2-X/trunk/www/vicidial/user_group_bulk_change.php index 8b10c752..eedd94e4 100644 --- a/agc_2-X/trunk/www/vicidial/user_group_bulk_change.php +++ b/agc_2-X/trunk/www/vicidial/user_group_bulk_change.php @@ -1,7 +1,7 @@ LICENSE: AGPLv2 +# Copyright (C) 2016 Matt Florell LICENSE: AGPLv2 # # CHANGES # 81119-0918 - First build @@ -15,6 +15,7 @@ # 130901-0837 - Changed to mysqli PHP functions # 141007-2112 - Finalized adding QXZ translation to all admin files # 141229-1820 - Added code for on-the-fly language translations display +# 160105-1232 - Fixed SQL errors # header ("Content-type: text/html; charset=utf-8"); @@ -220,7 +221,7 @@ if ($stage == "one_user_group_change") ##### GROUP CHANGE FOR ALL USERS IN THE SYSTEM EXCEPT FOR LEVEL > 6 AND ADMIN GROUP ##### if ($stage == "all_user_group_change") { - $stmt="UPDATE vicidial_users set user_group='" . mysqli_real_escape_string($link, $group) . "' where user_group!='ADMIN' and user_group < 7 $LOGadmin_viewable_groupsSQL;"; + $stmt="UPDATE vicidial_users set user_group='" . mysqli_real_escape_string($link, $group) . "' where user_group!='ADMIN' and user_level < 7 $LOGadmin_viewable_groupsSQL;"; $rslt=mysql_to_mysqli($stmt, $link); echo _QXZ("All non-Admin Users changed to the")." $group "._QXZ("User Group")."
\n"; @@ -229,7 +230,7 @@ if ($stage == "all_user_group_change") $SQL_log = "$stmt|"; $SQL_log = preg_replace('/;/', '', $SQL_log); $SQL_log = addslashes($SQL_log); - $stmt="INSERT INTO vicidial_admin_log set event_date='$NOW_TIME', user='$PHP_AUTH_USER', ip_address='$ip', event_section='USERGROUPS', event_type='MODIFY', record_id='$group', event_code='ADMIN BULK USER GROUP CHANGE', event_sql=\"$SQL_log\", event_notes='ALL NON-ADMIN;"; + $stmt="INSERT INTO vicidial_admin_log set event_date='$NOW_TIME', user='$PHP_AUTH_USER', ip_address='$ip', event_section='USERGROUPS', event_type='MODIFY', record_id='$group', event_code='ADMIN BULK USER GROUP CHANGE', event_sql=\"$SQL_log\", event_notes='ALL NON-ADMIN';"; if ($DB) {echo "|$stmt|\n";} $rslt=mysql_to_mysqli($stmt, $link);