Replace direct mysql_xxx() calls with query_xxx() calls. Replace calls to mysql_insert_id()
with calls specific to the appdb or bugzilla database. Fixes a bug where a call to mysql_insert_id() can potentially retrieve an id from either the bugzilla or appdb database, depending on whichever database was last opened by mysql_connect().
This commit is contained in:
@@ -32,7 +32,7 @@ function build_prefs_list($oUser)
|
||||
$aTableRows = array();
|
||||
|
||||
$hResult = query_parameters("SELECT * FROM prefs_list ORDER BY id");
|
||||
while($hResult && $r = mysql_fetch_object($hResult))
|
||||
while($hResult && $r = query_fetch_object($hResult))
|
||||
{
|
||||
// skip admin options
|
||||
if(!$_SESSION['current']->hasPriv("admin"))
|
||||
|
||||
Reference in New Issue
Block a user