[Noalyss-commit] [noalyss] 11/46: protect SQL

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit 848ea360652188aff226c4c06fbc761c848ffeaf
Author: Dany <danydb@noalyss.eu>
AuthorDate: Wed Jun 9 11:08:08 2021 +0000

    protect SQL
---
 include/modele.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/modele.inc.php b/include/modele.inc.php
index 4b30a5b..46b9222 100644
--- a/include/modele.inc.php
+++ b/include/modele.inc.php
@@ -59,7 +59,7 @@ $fmod_dbid=$http->post("FMOD_DBID","number",0);
 if (isset($_POST["FMOD_NAME"]))
 {
         $encoding = $cn->get_value("select encoding from pg_database  where " .
-                       " datname='" . domaine . 'dossier' . 
sql_string($fmod_dbid) . "'");
+                       " datname=$1",array(domaine . 'dossier' . $fmod_dbid));
 
        if ($encoding != 6)
        {