From 7ddf89bce8a6715f246d9317a4160af9ded04ee7 Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Sat, 26 Nov 2016 11:48:58 +0100
Subject: [PATCH] =?UTF-8?q?s=C3=A9curit=C3=A9=20Task=20#8=20-=20S=C3=A9cur?=
 =?UTF-8?q?it=C3=A9=20protection=20SQL?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 include/class/class_anc_operation.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/class/class_anc_operation.php b/include/class/class_anc_operation.php
index 0276b2820..bc0d5e6e6 100644
--- a/include/class/class_anc_operation.php
+++ b/include/class/class_anc_operation.php
@@ -901,8 +901,8 @@ class Anc_Operation
      */
     function delete_by_jid($p_jid)
     {
-        $sql="delete from operation_analytique where j_id=$p_jid";
-        $this->db->exec_sql($sql);
+        $sql="delete from operation_analytique where j_id=$1";
+        $this->db->exec_sql($sql,array($p_jid));
     }
     /*\brief Display a table with analytic accounting in
      *       detail of operation