From 47152eb7fb9c4a5ed6be08ed8e6be94b86530b85 Mon Sep 17 00:00:00 2001 From: Mike Koch Date: Tue, 4 Apr 2017 12:11:17 -0400 Subject: [PATCH] Fix hesk_POST --- admin/admin_ticket.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/admin/admin_ticket.php b/admin/admin_ticket.php index b7fcfcb2..71100f3e 100644 --- a/admin/admin_ticket.php +++ b/admin/admin_ticket.php @@ -475,7 +475,7 @@ if (($can_reply || $can_edit) && isset($_POST['childTrackingId'])) { hesk_process_messages(sprintf($hesklang['is_already_linked'], $_POST['childTrackingId']), 'admin_ticket.php?track=' . $trackingID . '&Refresh=' . mt_rand(10000, 99999), 'NOTICE'); } - hesk_dbQuery('UPDATE `' . hesk_dbEscape($hesk_settings['db_pfix']) . 'tickets` SET `parent` = ' . intval($ticket['id']) . ' WHERE `trackid` = \'' . hesk_dbEscape(hesk_POST['childTrackingId']) . '\''); + hesk_dbQuery('UPDATE `' . hesk_dbEscape($hesk_settings['db_pfix']) . 'tickets` SET `parent` = ' . intval($ticket['id']) . ' WHERE `trackid` = \'' . hesk_dbEscape(hesk_POST('childTrackingId')) . '\''); hesk_process_messages(sprintf($hesklang['link_added'], $_POST['childTrackingId']), 'admin_ticket.php?track=' . $trackingID . '&Refresh=' . mt_rand(10000, 99999), 'SUCCESS'); }