Fix SQL query when a user is limited to a subset of monitors and trie…

…s to view all zones.
ZoneMinder · Dec 17, 2024 · 6ec0b5a · 6ec0b5a
1 parent 4dcab65
commit 6ec0b5a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/skins/classic/views/zones.php b/web/skins/classic/views/zones.php
@@ -25,7 +25,7 @@
 } else if ( isset($_REQUEST['mids']) ) {
   $mids = array_map(function($mid){return validCardinal($mid);}, $_REQUEST['mids'] );
 } else {
-  $mids = dbFetchAll('SELECT Id FROM Monitors'.($user->unviewableMonitorIds() ? 'WHERE Id IN ('.$user->viewableMonitorIds().')' : ''), 'Id');
+  $mids = dbFetchAll('SELECT Id FROM Monitors'.($user->unviewableMonitorIds() ? ' WHERE Id IN ('.implode(',', array_map(function(){return '?';}, $user->viewableMonitorIds())).')' : ''), 'Id', $user->viewableMonitorIds());
 }
 
 if ( !($mids and count($mids)) ) {