| @@ -1,4 +1,4 @@ | ||
| 1 | 1 | <?php /** |
| 2 | 2 | * @version 1.0 |
| 3 | 3 | * @package Booking Calendar |
| 4 | 4 | * @category Data Engine for Booking Listing / Calendar Overview pages |
| @@ -1116,14 +1116,19 @@ | ||
| 1116 | 1116 | $sql_where = " WHERE bk.booking_id > " . $wh_booking_id . " "; |
| 1117 | 1117 | |
| 1118 | 1118 | } |
| 1119 | 1119 | |
| 1120 | - else if ( strpos( $wh_booking_id, ',' ) !== false ) { | |
| 1121 | - $sql_where = " WHERE bk.booking_id IN (" . $wh_booking_id . ") "; | |
| 1122 | - | |
| 1123 | - } else { | |
| 1124 | - $sql_where = " WHERE bk.booking_id = " . $wh_booking_id . " "; | |
| 1125 | - } | |
| 1120 | + else if ( strpos( $wh_booking_id, ',' ) !== false ) { | |
| 1121 | + $booking_ids = array_filter( array_map( 'absint', explode( ',', $wh_booking_id ) ) ); | |
| 1122 | + $booking_ids = array_values( array_unique( $booking_ids ) ); | |
| 1123 | + $sql_where = empty( $booking_ids ) | |
| 1124 | + ? ' WHERE bk.booking_id = -1 ' | |
| 1125 | + : ' WHERE bk.booking_id IN (' . implode( ',', $booking_ids ) . ') '; | |
| 1126 | + | |
| 1127 | + } else { | |
| 1128 | + $booking_id = ( '-1' === (string) $wh_booking_id ) ? -1 : absint( $wh_booking_id ); | |
| 1129 | + $sql_where = ' WHERE bk.booking_id = ' . $booking_id . ' '; | |
| 1130 | + } | |
| 1126 | 1131 | |
| 1127 | 1132 | // Check if searching booking is belonging to specific user in Booking Calendar MultiUser version |
| 1128 | 1133 | $sql_where = apply_bk_filter('update_where_sql_for_getting_bookings_in_multiuser', $sql_where ); |
| 1129 | 1134 | |
