protect SQL

This commit is contained in:
Dany 2021-06-09 11:08:08 +00:00
parent d8ef319648
commit 848ea36065

View file

@ -59,7 +59,7 @@ $fmod_dbid=$http->post("FMOD_DBID","number",0);
if (isset($_POST["FMOD_NAME"]))
{
$encoding = $cn->get_value("select encoding from pg_database where " .
" datname='" . domaine . 'dossier' . sql_string($fmod_dbid) . "'");
" datname=$1",array(domaine . 'dossier' . $fmod_dbid));
if ($encoding != 6)
{