Merge branch 'patch-7' into 'dev-3.0'

Update paidmail.php

See merge request !10

adminforce/content/werbesystem/paidmail.php

@@ -28,7 +28,9 @@ if ($_POST['versenden'] == 'Paidmail versenden!') {
     $senden = sql::$db->query("SELECT e.uid,e.emailadresse FROM
                                    " . _VMS_ . "_emaildaten e
                                    LEFT JOIN " . _VMS_ . "_kontodaten k ON k.uid=e.uid
-WHERE (e.freigabe_fuer = '3' or e.freigabe_fuer = '2') AND k.status=1 ORDER BY RAND() LIMIT " . $_POST['menge'] . "");
+WHERE (e.freigabe_fuer = '3' or e.freigabe_fuer = '2') AND k.status=1 ORDER BY RAND() LIMIT :menge");
+    $senden -> bindParam(':menge', $_POST['menge'], PDO::PARAM_INT);
+    $senden -> execute();
 
     while ($versendet = $senden->fetch() ) {
         $sql = sql::$db->prepare("INSERT INTO " . _VMS_ . "_paidmails_empfaenger (uid,gueltig,tan,status,aufendhalt) VALUES (?,?,?,?,?)");