diff --git a/modules/Calendar/actions/Feed.php b/modules/Calendar/actions/Feed.php index f34b61ac292d71cda6a487c8d2b5bf9f8517b56e..c053754e48a1480f865d2b2f600b149e4731d9ba 100644 --- a/modules/Calendar/actions/Feed.php +++ b/modules/Calendar/actions/Feed.php @@ -411,9 +411,11 @@ class Calendar_Feed_Action extends Vtiger_BasicAjax_Action { $hideCompleted = $currentUser->get('hidecompletedevents'); if($hideCompleted) $query.= "vtiger_activity.status != 'Completed' AND "; - $query.= " ((date_start >= '$start' AND due_date < '$end') OR ( due_date >= '$start'))"; - $params = $userAndGroupIds; - $query.= " AND vtiger_crmentity.smownerid IN (".generateQuestionMarks($params).")"; + $query.= " ((date_start >= ? AND due_date < ? ) OR ( due_date >= ? ))"; + $params=array($start,$end,$start); + $userIds = $userAndGroupIds; + $query.= " AND vtiger_crmentity.smownerid IN (".generateQuestionMarks($userIds).")"; + $params=array_merge($params,$userIds); $queryResult = $db->pquery($query,$params); while($record = $db->fetchByAssoc($queryResult)){