	static public function customerHasTickets($_cid = 0) {

		if ($_cid != 0) {
			$result_stmt = Database::prepare("
				SELECT `id` FROM `" . TABLE_PANEL_TICKETS . "` WHERE `customerid` = :cid"
			);
			Database::pexecute($result_stmt, array('cid' => $_cid));

			$tickets = array();
			while ($row = $result_stmt->fetch(PDO::FETCH_ASSOC)) {
				$tickets[] = $row['id'];
			}

			return $tickets;
		}

		return false;
	}
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.