quoteInto() only accepts '?' as place holder

Signed-off-by: Michael Tänzer <neo@nhng.de>

1 files changed, 6 insertions, 7 deletions

diff --git a/manager/application/controllers/AddPointsController.php b/manager/application/controllers/AddPointsController.php
index 891ee5d..b7f3541 100644
--- a/manager/application/controllers/AddPointsController.php
+++ b/manager/application/controllers/AddPointsController.php
@@ -103,16 +103,15 @@ class AddPointsController extends Zend_Controller_Action
         
         // Fix the assurer flag
         $where = array();
-        $query = '`users`.`id` = :user';
-        $query_params['user'] = $user['id'];
-        $where[] = $this->db->quoteInto($query, $query_params);
+        $query = '`users`.`id` = ?';
+        $where[] = $this->db->quoteInto($query, $user['id']);
         $query = 'exists(select * from `cats_passed` as `cp`, ' .
         	'`cats_variant` as `cv` where `cp`.`variant_id` = `cv`.`id` and ' .
-        	'`cv`.`type_id` = 1 and `cp`.`user_id` = :user';
-        $where[] = $this->db->quoteInto($query, $query_params);
-        $query = '(select sum(`points`) from `notary` where `to`= :user and ' .
+        	'`cv`.`type_id` = 1 and `cp`.`user_id` = ?';
+        $where[] = $this->db->quoteInto($query, $user['id']);
+        $query = '(select sum(`points`) from `notary` where `to`= ? and ' .
         	'`expire` > now()) >= 100';
-        $where[] = $this->db->quoteInto($query, $query_params);
+        $where[] = $this->db->quoteInto($query, $user['id']);
         $this->db->update('users', array('assurer' => 1), $where);
         
         return;