Merge pull request #67 from pagantis/INT-1092

Int 1092

Author: pgarcess

extension/app/code/community/Pagantis/Pagantis/controllers/NotifyController.php

@@ -468,7 +468,7 @@ protected function blockConcurrency($orderId)
         try {
             $conn = Mage::getSingleton('core/resource')->getConnection('core_write');
             $tableName = Mage::getSingleton('core/resource')->getTableName(self::CONCURRENCY_TABLENAME);
-            $sql = "INSERT INTO  " . $tableName . "  VALUE (" . $orderId. "," . time() . ")";
+            $sql = "INSERT INTO  " . $tableName . "  VALUE ('" . $orderId. "'," . time() . ")";
             $conn->query($sql);
         } catch (Exception $e) {
             if ($_SERVER['REQUEST_METHOD'] == 'POST') {
@@ -480,7 +480,7 @@ protected function blockConcurrency($orderId)
                     "SELECT TIMESTAMPDIFF(SECOND,NOW()-INTERVAL %s SECOND, FROM_UNIXTIME(timestamp)) as rest FROM %s WHERE %s",
                     self::CONCURRENCY_TIMEOUT,
                     $tableName,
-                    "id=$orderId"
+                    "id='$orderId'"
                 );
                 $resultSeconds = $dbObject->fetchOne($query);
                 $restSeconds = isset($resultSeconds) ? ($resultSeconds) : 0;
@@ -521,7 +521,7 @@ protected function unblockConcurrency($orderId = null)
                 $sql = "DELETE FROM " . $tableName . " WHERE timestamp <" .
                     (time() - self::CONCURRENCY_TIMEOUT);
             } else {
-                $sql = "DELETE FROM " . $tableName . " WHERE id  = " . $orderId;
+                $sql = "DELETE FROM " . $tableName . " WHERE id  ='" . $orderId."'";
             }
             $conn->query($sql);
         } catch (Exception $e) {

extension/app/code/community/Pagantis/Pagantis/etc/config.xml

@@ -3,7 +3,7 @@
 
     <modules>
         <Pagantis_Pagantis>
-            <version>8.3.9</version>
+            <version>8.3.10</version>
         </Pagantis_Pagantis>
     </modules>