Merge branch 'patch-4' into 'dev-3.0'

Update buchungen.php

See merge request !7

adminforce/content/usersystem/buchungen.php

@@ -4,14 +4,16 @@
             <td align="center"><b>Buchungs Id</b></td>
             <td align="center"><b>Datum</b></td>
             <td align="center"><b>Zeit</b></td>
-            <td align="center"><b>FuCos</b></td>
+            <td align="center"><b><?php echo $system['waehrung'];?></b></td>
             <td align="center"><b>Verwendungszweck</b></td>
         </tr>
         <?php
-        $buchungen_lesen = db_query("SELECT * FROM " . $db_prefix . "_buchungen WHERE uid=" . $_GET['uid'] . " ORDER BY buchungszeit DESC LIMIT 250");
-        while ($buchung_schreiben = mysql_fetch_array($buchungen_lesen)) {
-            $buchcolor = '#000000';
-            if ($buchung_schreiben['buchungsmenge'] < 0) $buchcolor = '#cc0000';
+        $buchungen_lesen = sql::$db->prepare("SELECT * FROM " . _VMS_ . "_buchungen WHERE uid=:uid ORDER BY buchungszeit DESC LIMIT 250");
+        $buchungen_lesen->bindParam(':uid', $_GET['uid'], PDO::PARAM_INT);
+        $buchungen_lesen->execute();
+        while ($buchung_schreiben = $buchungen_lesen->fetch() ) {
+            $buchcolor = $system['positiv_farbe'];
+            if ($buchung_schreiben['buchungsmenge'] < 0) $buchcolor = $system['negativ_farbe'];
             echo '<tr bgcolor="#fafafa">
                 <td align="left">&nbsp;'.$buchung_schreiben['buchungs_id'].'</td>
                 <td align="center">&nbsp;'.date("d.m.Y",$buchung_schreiben['buchungszeit']).'&nbsp;</td>