From d349c21e68e2d1f4bb8ebbcabe71f8e0b9ca97ea Mon Sep 17 00:00:00 2001
From: chansizzle <14916599+chansizzle@users.noreply.github.com>
Date: Wed, 18 Sep 2019 13:18:05 -0600
Subject: [PATCH] Update user_dashboard.php (#4631)

---
 core/user_settings/user_dashboard.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/core/user_settings/user_dashboard.php b/core/user_settings/user_dashboard.php
index 28fd15318e..2e4bfef81e 100644
--- a/core/user_settings/user_dashboard.php
+++ b/core/user_settings/user_dashboard.php
@@ -564,10 +564,10 @@
 					if (is_array($assigned_extensions) && sizeof($assigned_extensions) != 0) {
 						$x = 0;
 						foreach ($assigned_extensions as $assigned_extension_uuid => $assigned_extension) {
-							$sql_where_array[] = "extension_uuid = extension_uuid_".$x;
-							$sql_where_array[] = "caller_id_number = caller_id_number_".$x;
-							$sql_where_array[] = "destination_number = destination_number_1_".$x;
-							$sql_where_array[] = "destination_number = destination_number_2_".$x;
+							$sql_where_array[] = "extension_uuid = :extension_uuid_".$x;
+							$sql_where_array[] = "caller_id_number = :caller_id_number_".$x;
+							$sql_where_array[] = "destination_number = :destination_number_1_".$x;
+							$sql_where_array[] = "destination_number = :destination_number_2_".$x;
 							$parameters['extension_uuid_'.$x] = $assigned_extension_uuid;
 							$parameters['caller_id_number_'.$x] = $assigned_extension;
 							$parameters['destination_number_1_'.$x] = $assigned_extension;