	static public function customerHasTickets($_cid = 0)
	{
		if ($_cid != 0) {
			$result_stmt = Database::prepare("
				SELECT `id` FROM `" . TABLE_PANEL_TICKETS . "` WHERE `customerid` = :cid");
			Database::pexecute($result_stmt, array(
				'cid' => $_cid
			));
			
			$tickets = array();
			while ($row = $result_stmt->fetch(PDO::FETCH_ASSOC)) {
				$tickets[] = $row['id'];
			}
			
			return $tickets;
		}
		
		return false;
	}
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.