From c4da8889e2cc12f56529720775ec9558ebb4b6b2 Mon Sep 17 00:00:00 2001
From: pero1203 <peter.hrvatin@gmail.com>
Date: Mon, 15 Feb 2021 09:16:36 +0100
Subject: [PATCH] Telefonska anketa - popravek poizvedbe, ki se je na veliki
 bazi izvajala minuto in pol

---
 admin/survey/classes/class.SurveyTelephone.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin/survey/classes/class.SurveyTelephone.php b/admin/survey/classes/class.SurveyTelephone.php
index 825e5e054..3c94787b1 100644
--- a/admin/survey/classes/class.SurveyTelephone.php
+++ b/admin/survey/classes/class.SurveyTelephone.php
@@ -3415,7 +3415,7 @@ class SurveyTelephone {
 			$res_row = mysqli_fetch_assoc($res_query);
 			
 			#preverimo ali že obstaja povezava med respondentom in userjem
-			$chk_user = "SELECT id, pass FROM srv_user WHERE inv_res_id='$usr_id'";
+			$chk_user = "SELECT id, pass FROM srv_user WHERE inv_res_id='$usr_id' AND ank_id='".$this->sid."'";
 			$chk_query = sisplet_query($chk_user);
 			$return['msg'] = $chk_user;
 			if (mysqli_num_rows($chk_query) > 0) {
@@ -3423,7 +3423,7 @@ class SurveyTelephone {
 				$user_data = mysqli_fetch_assoc($chk_query);
 				
 				# sestavimo še url za odpiranje izpolnjevanja ankete
-				$return['surveyUrl'] = $site_url.'a/'.Common::encryptAnketaID($this->sid).'&survey-'.$this->sid.'&code='.$user_data[pass];
+				$return['surveyUrl'] = $site_url.'a/'.Common::encryptAnketaID($this->sid).'&survey-'.$this->sid.'&code='.$user_data['pass'];
 				$return['error'] = '';
 			} 
 			else {