From 56fa094e5907e1f353878543b66281e9ded6e8bb Mon Sep 17 00:00:00 2001 From: Mark Crane Date: Thu, 3 Jul 2014 22:16:29 +0000 Subject: [PATCH] Prevent Conference Room Pin Number duplicates --- app/conference_centers/conference_room_edit.php | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/app/conference_centers/conference_room_edit.php b/app/conference_centers/conference_room_edit.php index d6ed249006..65aa5801c3 100644 --- a/app/conference_centers/conference_room_edit.php +++ b/app/conference_centers/conference_room_edit.php @@ -170,7 +170,9 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) { //make sure the moderator pin number is unique $sql = "select count(*) as num_rows from v_meetings "; $sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; - $sql .= "and meeting_uuid <> '".$meeting_uuid."' "; + if (strlen($meeting_uuid) > 0) { + $sql .= "and meeting_uuid <> '".$meeting_uuid."' "; + } $sql .= "and (moderator_pin = '".$moderator_pin."' or participant_pin = '".$moderator_pin."') "; $prep_statement = $db->prepare(check_sql($sql)); if ($prep_statement) { @@ -184,7 +186,9 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) { //make sure the participant pin number is unique $sql = "select count(*) as num_rows from v_meetings "; $sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; - $sql .= "and meeting_uuid <> '".$meeting_uuid."' "; + if (strlen($meeting_uuid) > 0) { + $sql .= "and meeting_uuid <> '".$meeting_uuid."' "; + } $sql .= "and (moderator_pin = '".$participant_pin."' or participant_pin = '".$participant_pin."') "; $prep_statement = $db->prepare(check_sql($sql)); if ($prep_statement) {