[Noalyss-commit] [noalyss] 42/219: SQL : protection injection

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit 5d8289e2c0563e7cf7595d2c97d3261bd0b9d9b9
Author: Dany De Bontridder <address@hidden>
Date:   Mon Sep 11 19:01:26 2017 +0200

    SQL : protection injection
---
 include/class/anc_plan.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/class/anc_plan.class.php b/include/class/anc_plan.class.php
index 78b5715..e3c85d6 100644
--- a/include/class/anc_plan.class.php
+++ b/include/class/anc_plan.class.php
@@ -66,8 +66,8 @@ class Anc_Plan
     {
         if ( $this->id==0) return;
 
-        $sql="select pa_name,pa_description from plan_analytique where 
pa_id=".$this->id;
-        $ret= $this->db->exec_sql($sql);
+        $sql="select pa_name,pa_description from plan_analytique where 
pa_id=$1";
+        $ret= $this->db->exec_sql($sql,array($this->id));
         if ( Database::num_row($ret) == 0)
         {
             return;