Merge branch 'patch-14' into 'dev-3.0'

Update daten.php

See merge request !17

content/intern/daten.php

@@ -2,7 +2,9 @@
 if (isset($_POST['anf_daten']) && isset($_POST['anf_email'])) {
         $_POST['anf_email'] = addslashes ($_POST['anf_email']);
 
-	$sql = sql::$db->query("SELECT `uid`,`emailadresse` FROM "._VMS_."_emaildaten WHERE emailadresse = '".$_POST['anf_email']."' LIMIT 1");
+	$sql = sql::$db->prepare("SELECT `uid`,`emailadresse` FROM "._VMS_."_emaildaten WHERE emailadresse = :anf_email LIMIT 1");
+	$sql -> bindParam(':anf_email', $_POST['anf_email'], PDO::PARAM_STR);
+	$sql -> execute();
 	$daten_anfordern = $sql->fetch();
 	if ($daten_anfordern['emailadresse']) {
     	$neues_passwort = create_code(8);