diff options
Diffstat (limited to 'frontends/php/include/users.inc.php')
| -rw-r--r-- | frontends/php/include/users.inc.php | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/frontends/php/include/users.inc.php b/frontends/php/include/users.inc.php index b807e89118c..a24d76cb33f 100644 --- a/frontends/php/include/users.inc.php +++ b/frontends/php/include/users.inc.php @@ -178,7 +178,9 @@ function change_group_status($userGroupIds, $usersStatus) { if ($grant) { return DBexecute( - 'UPDATE usrgrp SET users_status='.$usersStatus.' WHERE '.dbConditionInt('usrgrpid', $userGroupIds) + 'UPDATE usrgrp'. + ' SET users_status='.zbx_dbstr($usersStatus). + ' WHERE '.dbConditionInt('usrgrpid', $userGroupIds) ); } else { @@ -203,7 +205,7 @@ function change_group_gui_access($userGroupIds, $guiAccess) { if ($grant) { return DBexecute( - 'UPDATE usrgrp SET gui_access='.$guiAccess.' WHERE '.dbConditionInt('usrgrpid', $userGroupIds) + 'UPDATE usrgrp SET gui_access='.zbx_dbstr($guiAccess).' WHERE '.dbConditionInt('usrgrpid', $userGroupIds) ); } else { @@ -225,7 +227,7 @@ function change_group_debug_mode($userGroupIds, $debugMode) { zbx_value2array($userGroupIds); return DBexecute( - 'UPDATE usrgrp SET debug_mode='.$debugMode.' WHERE '.dbConditionInt('usrgrpid', $userGroupIds) + 'UPDATE usrgrp SET debug_mode='.zbx_dbstr($debugMode).' WHERE '.dbConditionInt('usrgrpid', $userGroupIds) ); } |