Fixed issue #6881: SQL Error when sending e-mail invite from survey t…

…okens/participants list and using MSSQL
LimeSurvey · Nov 15, 2012 · 67da66a · 67da66a
1 parent b776008
commit 67da66a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/application/controllers/admin/tokens.php b/application/controllers/admin/tokens.php
@@ -1442,7 +1442,7 @@ function email($iSurveyId, $tokenids = null)
                             //Update central participant survey_links
                             if(!empty($emrow['participant_id']))
                             {
-                                $slquery = Survey_links::model()->find('participant_id = "'.$emrow['participant_id'].'" AND survey_id = '.$iSurveyId.' AND token_id = '.$emrow['tid']);
+                                $slquery = Survey_links::model()->find('participant_id = :pid AND survey_id = :sid AND token_id = :tid',array(':pid'=>$emrow['participant_id'],':sid'=>$iSurveyId,':tid'=>$emrow['tid']));
                                 $slquery->date_invited = dateShift(date("Y-m-d H:i:s"), "Y-m-d H:i", Yii::app()->getConfig("timeadjust"));
                                 $slquery->save();
                             }

diff --git a/application/helpers/frontend_helper.php b/application/helpers/frontend_helper.php
@@ -904,7 +904,7 @@ function submittokens($quotaexit=false)
                 if(!empty($participant_id))
                 {
                     //Update the survey_links table if necessary
-                    $slquery = Survey_links::model()->find('participant_id = "'.$participant_id.'" AND survey_id = '.$surveyid.' AND token_id = '.$token_id);
+                    $slquery = Survey_links::model()->find('participant_id = :pid AND survey_id = :sid AND token_id = :tid', array(':pid'=>$participant_id, ':sid'=>$surveyid, ':tid'=>$token_id));
                     if (!is_null($slquery))
                     {
                         $slquery->date_completed = $today;
@@ -925,7 +925,7 @@ function submittokens($quotaexit=false)
                 if(!empty($participant_id))
                 {
                     //Update the survey_links table if necessary, to protect anonymity, use the date_created field date
-                    $slquery = Survey_links::model()->find('participant_id = "'.$participant_id.'" AND survey_id = '.$surveyid.' AND token_id = '.$token_id);
+                    $slquery = Survey_links::model()->find('participant_id = :pid AND survey_id = :sid AND token_id = :tid', array(':pid'=>$participant_id, ':sid'=>$surveyid, ':tid'=>$token_id));
                     $slquery->date_completed = $slquery->date_created;
                     $slquery->save();
                 }