From 848ea360652188aff226c4c06fbc761c848ffeaf Mon Sep 17 00:00:00 2001
From: Dany <danydb@noalyss.eu>
Date: Wed, 9 Jun 2021 11:08:08 +0000
Subject: [PATCH] protect SQL

---
 include/modele.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/modele.inc.php b/include/modele.inc.php
index 4b30a5b5e..46b9222df 100644
--- a/include/modele.inc.php
+++ b/include/modele.inc.php
@@ -59,7 +59,7 @@ $fmod_dbid=$http->post("FMOD_DBID","number",0);
 if (isset($_POST["FMOD_NAME"]))
 {
         $encoding = $cn->get_value("select encoding from pg_database  where " .
-			" datname='" . domaine . 'dossier' . sql_string($fmod_dbid) . "'");
+			" datname=$1",array(domaine . 'dossier' . $fmod_dbid));
 
 	if ($encoding != 6)
 	{