Permalink
Browse files

Fixed: Missing quoting in State::StateGetStatesByType() (bug#10158).

  • Loading branch information...
1 parent 7cfaec7 commit c4ec9205bde9c49770ddad94c1a980c006164949 @mgruner mgruner committed Jan 14, 2014
Showing with 3 additions and 0 deletions.
  1. +1 −0 CHANGES.md
  2. +2 −0 Kernel/System/State.pm
View
1 CHANGES.md
@@ -1,4 +1,5 @@
#3.2.14 201?-??-??
+ - 2014-01-14 Fixed bug#[10158](http://bugs.otrs.org/show_bug.cgi?id=10158) - Missing quoting in State::StateGetStatesByType().
- 2014-01-14 Fixed bug#[8969](http://bugs.otrs.org/show_bug.cgi?id=8969) - FAQ module Language files installation fails (Kernel/Language permissions).
- 2014-01-07 Fixed bug#[9959](http://bugs.otrs.org/show_bug.cgi?id=9959) - & breaks ExpandCustomerName.
- 2013-12-20 Fixed bug#[10099](http://bugs.otrs.org/show_bug.cgi?id=10099) - Missing challenge token checks on customer interface.
View
2 Kernel/System/State.pm
@@ -418,6 +418,8 @@ sub StateGetStatesByType {
}
}
+ @StateType = map { $Self->{DBObject}->Quote($_) } @StateType;
+
my $SQL = ''
. 'SELECT ts.id, ts.name, tst.name'
. ' FROM ticket_state ts, ticket_state_type tst'

0 comments on commit c4ec920

Please sign in to comment.