webinterface.git

@@ -119,21 +119,15 @@ function server_names()

 }

-// FIXME

-// Diese Funktion funktioniert nicht für preprared statements

 function maybe_null($value)

 {

-  if (config("enable_debug")) {

-    $backtrace = debug_backtrace();

-    warning("call to maybe_null() in {$backtrace[1]['file']} line {$backtrace[1]['line']}");

-  }

-  if ($value == NULL)

-    return 'NULL';

+  if (! $value)

+    return NULL;

   if (strlen( (string) $value ) > 0)

-    return "'".db_escape_string($value)."'";

+    return (string) $value;

   else

-    return 'NULL';

+    return NULL;

 }

@@ -37,23 +37,10 @@ function create_customer($data)

     return NULL;

   }

-  $anrede = db_escape_string($data['anrede']);

-  $firma = db_escape_string($data['firma']);

-  $vorname = db_escape_string($data['vorname']);

-  $nachname = db_escape_string($data['nachname']);

-  $email = db_escape_string($data['email']);

+  logger(LOG_INFO, 'modules/register/include/register', 'register', "Creating new account: ".print_r($data, true));

-  logger(LOG_INFO, 'modules/register/include/register', 'register', "Creating new account: {$anrede} / {$firma} / {$vorname} / {$nachname} / {$email}");

-  

-  $anrede = maybe_null($anrede);

-  $firma = maybe_null($firma);

-  $vorname = maybe_null($vorname);

-  $nachname = maybe_null($nachname);

-

-  db_query("BEGIN");

-  db_query("INSERT INTO kundendaten.kunden (firma, nachname, vorname, anrede, email, erstellungsdatum,status) VALUES ({$firma}, {$nachname}, {$vorname}, {$anrede}, {$email}, CURDATE(), 3)");

+  db_query("INSERT INTO kundendaten.kunden (firma, nachname, vorname, anrede, email, erstellungsdatum,status) VALUES (:firma, :nachname, :vorname, :anrede, :email, CURDATE(), 3)", $data);

   $customerno = db_insert_id();

-  db_query("COMMIT");

   return $customerno;

 }