From a54dcd76ab764b5389fba8434e0d04ebab5ae146 Mon Sep 17 00:00:00 2001
From: Sergiusz Paprzycki <serek@walcz.net>
Date: Mon, 7 Sep 2015 15:45:27 +0100
Subject: [PATCH] Leaflet map permissions check #1855; SQL/query modified as
 requested

---
 html/includes/common/worldmap.inc.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/html/includes/common/worldmap.inc.php b/html/includes/common/worldmap.inc.php
index 7feae55a5..dea7224e7 100644
--- a/html/includes/common/worldmap.inc.php
+++ b/html/includes/common/worldmap.inc.php
@@ -66,10 +66,10 @@ else {
             LEFT JOIN `locations` ON `devices`.`location`=`locations`.`location`
             WHERE `disabled`=0 AND `ignore`=0 AND `lat` != '' AND `lng` != ''
             AND `devices`.`device_id` = `devices_perms`.`device_id`
-            AND `devices_perms`.`user_id` = '".$_SESSION['user_id']."'
+            AND `devices_perms`.`user_id` = ?
             ORDER BY `status` ASC, `hostname`";
 }
-foreach (dbFetchRows($sql) as $map_devices) {
+foreach (dbFetchRows($sql, array($_SESSION['user_id'])) as $map_devices) {
     $icon = 'greenMarker';
     if ($map_devices['status'] == 0) {
         $icon = 'redMarker';