fix query context #5263

www/include/monitoring/downtime/xml/broker/makeXMLForDowntime.php

@@ -99,8 +99,8 @@ if (!$service_id) {
     		  AND cancelled = 0
     		  AND end_time > UNIX_TIMESTAMP(NOW())
     		  ORDER BY actual_start_time";
-    $stmt = $pearDB->prepare($query);
-    $res = $pearDB->execute($stmt, array($dbb->escape($host_id)));
+    $stmt = $dbb->prepare($query);
+    $res = $dbb->execute($stmt, array((int)$host_id));
 } else {
     $query = "SELECT author, actual_start_time, end_time, comment_data, duration, fixed
     		  FROM downtimes
@@ -109,9 +109,11 @@ if (!$service_id) {
     		  AND cancelled = 0
     		  AND end_time > UNIX_TIMESTAMP(NOW())
     		  ORDER BY actual_start_time";
-    $stmt = $pearDB->prepare($query);
-    $res = $pearDB->execute($stmt, array($dbb->escape($host_id), $dbb->escape($service_id)));
+    $stmt = $dbb->prepare($query);
+    $res = $dbb->execute($stmt, array((int)$host_id, (int)$service_id));
 }
+
+
 $rowClass = "list_one";
 while ($row = $res->fetchRow()) {
     $row['comment_data'] = strip_tags($row['comment_data']);