	public function Update() {

		// Update "main" ticket
		$upd_stmt = Database::prepare('
			UPDATE `' . TABLE_PANEL_TICKETS . '` SET
                `priority` = :priority,
                `lastchange` = :lastchange,
                `status` = :status,
                `lastreplier` = :lastreplier
                WHERE `id` = :tid'
		);
		$upd_data = array(
			'priority' => $this->Get('priority'),
			'lastchange' => $this->Get('lastchange'),
			'status' => $this->Get('status'),
			'lastreplier' => $this->Get('lastreplier'),
			'tid' => $this->tid
		);
		Database::pexecute($upd_stmt, $upd_data);
		return true;
	}
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.