fix #3842 - fix security problem in eventlog page when use do not che…

…ck status options for alerts (up, down, warning, etc...) -> all logs are available for all user even if they have ACL

www/include/eventLogs/GetXmlLog.php

@@ -506,18 +506,15 @@
         if ($str_unitH != "" && $str_unitSVC != "") {
             $str_unitSVC = " OR " . $str_unitSVC;
         }
-    } 
-    if ($str_unitH != "" || $str_unitSVC != "") {
-        $req .= " AND (".$str_unitH.$str_unitSVC.")";
-    }
-
+        if ($str_unitH != "" || $str_unitSVC != "") {
+            $req .= " AND (".$str_unitH.$str_unitSVC.")";
+        }
+    } else {
+      $req .= "AND 0 ";
+    }    
     $req .= $host_search_sql . $service_search_sql;
 
 }
-//if ($str_unitH  == "" && $str_unitSVC == "") {
-//    $req = "";
-//}
-
 
 /*
  * calculate size before limit for pagination
@@ -529,10 +526,9 @@
      */
     $req .= $suffix_order;
 
-    if ($num < 0)
+    if ($num < 0) {
         $num = 0;
-
-    //        print $req;
+    }
 
     if (isset($csv_flag) && ($csv_flag == 1)) {
         $DBRESULT = $pearDBO->query($req . " LIMIT 0,64000"); //limit a little less than 2^16 which is excel maximum number of lines