From ccfa69f9bcb0e285979b1b994830d309897c816c Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Mon, 25 Apr 2011 20:35:15 +0000
Subject: [PATCH] protect sql

---
 include/class_fiche.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/class_fiche.php b/include/class_fiche.php
index b1f9211d3..e87f2de37 100644
--- a/include/class_fiche.php
+++ b/include/class_fiche.php
@@ -1018,8 +1018,8 @@ class Fiche
     function getName()
     {
         $sql="select ad_value from fiche_detail
-             where ad_id=1 and f_id=".$this->id;
-        $Res=$this->cn->exec_sql($sql);
+             where ad_id=1 and f_id=$1";
+        $Res=$this->cn->exec_sql($sql,array($this->id));
         $r=Database::fetch_all($Res);
         if ( sizeof($r) == 0 )
             return 1;