From 9114c8bf62414ebe321925e7a8297d8f89378a1c Mon Sep 17 00:00:00 2001
From: Ben Coleman <b.coleman@accelerateddesign.com>
Date: Wed, 17 Aug 2011 14:00:11 -0400
Subject: [PATCH] Correct IN parameter setup

---
 user_register_notify.module |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/user_register_notify.module b/user_register_notify.module
index ee81fa3..665a6d2 100644
--- a/user_register_notify.module
+++ b/user_register_notify.module
@@ -62,9 +62,9 @@ function user_register_notify_setup_email(&$edit, &$account, $action = 'insert')
         $emails = preg_split('/,[\w]+/', variable_get('user_register_notify_mailto', $from));
         // There is no break here for a reason.
       case 'Role':
-        $roles = implode(',', variable_get('user_register_notify_roles', array()));
+        $roles = variable_get('user_register_notify_roles', array());
         if (!empty($roles)) {
-          $result = db_query("SELECT mail FROM {users} AS u INNER JOIN {users_roles} AS r ON u.uid = r.uid WHERE r.rid IN(:role) and u.status = '1' ", array(':role' => $roles));
+          $result = db_query("SELECT mail FROM {users} AS u INNER JOIN {users_roles} AS r ON u.uid = r.uid WHERE r.rid IN(" . db_placeholders($roles, 'int') . ") and u.status = '1'", $roles);
           while ($mail = db_fetch_object($result)) {
             $emails[] = $mail->mail;
           }
-- 
1.7.4.msysgit.0