From 8f335230950fa6ba531bb7535bff64a5c7a6d524 Mon Sep 17 00:00:00 2001
From: Rudi Grinberg <rudi.grinberg@sourcefabric.org>
Date: Wed, 5 Sep 2012 17:35:08 -0400
Subject: [PATCH] cc-4347: PDO

---
 airtime_mvc/application/models/Schedule.php     |  2 +-
 airtime_mvc/application/models/ShowInstance.php | 11 ++++++++---
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/airtime_mvc/application/models/Schedule.php b/airtime_mvc/application/models/Schedule.php
index 63e594bb8..74a45da2d 100644
--- a/airtime_mvc/application/models/Schedule.php
+++ b/airtime_mvc/application/models/Schedule.php
@@ -1102,7 +1102,7 @@ SQL;
             ));
         }
         //$rows = $con->query($sql);
-        $rows->fetchAll();
+        $rows = $stmt->fetchAll();
 
         foreach ($rows as $row) {
             $start = new DateTime($row["starts"], new DateTimeZone('UTC'));
diff --git a/airtime_mvc/application/models/ShowInstance.php b/airtime_mvc/application/models/ShowInstance.php
index b90051c7f..d002ad5aa 100644
--- a/airtime_mvc/application/models/ShowInstance.php
+++ b/airtime_mvc/application/models/ShowInstance.php
@@ -663,7 +663,7 @@ FROM (
                 f.filepath AS filepath
          FROM cc_schedule AS s
          LEFT JOIN cc_files AS f ON f.id = s.file_id
-         WHERE s.instance_id = '{$this->_instanceId}'
+         WHERE s.instance_id = :instance_id1
            AND s.playout_status >= 0
            AND s.file_id IS NOT NULL)
       UNION
@@ -680,13 +680,18 @@ FROM (
          FROM cc_schedule AS s
          LEFT JOIN cc_webstream AS ws ON ws.id = s.stream_id
          LEFT JOIN cc_subjs AS sub ON ws.creator_id = sub.id
-         WHERE s.instance_id = '{$this->_instanceId}'
+         WHERE s.instance_id = :instance_id2
            AND s.playout_status >= 0
            AND s.stream_id IS NOT NULL)) AS temp
 ORDER BY starts;
 SQL;
 
-        $results = $con->query($sql)->fetchAll(PDO::FETCH_ASSOC);
+        $stmt = $con->prepare($sql);
+        $stmt->execute(array(
+            ':instance_id1' => $this->_instanceId,
+            ':instance_id2' => $this->_instanceId
+        ));
+        $results = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
         foreach ($results as &$row) {