From ff98ba8064efe86315ccc95a56dd71cc9db9140f Mon Sep 17 00:00:00 2001 From: Dany De Bontridder Date: Sun, 22 Apr 2018 11:00:00 +0200 Subject: [PATCH] html_page_start : protect query, improve code --- include/lib/ac_common.php | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/include/lib/ac_common.php b/include/lib/ac_common.php index 6a910e4ef..9ace668a1 100644 --- a/include/lib/ac_common.php +++ b/include/lib/ac_common.php @@ -270,9 +270,11 @@ function html_page_start($p_theme="", $p_script="", $p_script2="") if ($p_theme != "") { $Res = $cn->exec_sql("select the_filestyle from theme - where the_name='" . $p_theme . "'"); + where the_name=$1" ,[$p_theme]); if (Database::num_row($Res) == 0) - $style = "style-classic.css"; + { + $style = "style-classic7.css"; + } else { $s = Database::fetch_array($Res, 0); @@ -281,7 +283,7 @@ function html_page_start($p_theme="", $p_script="", $p_script2="") } else { - $style = "style-classic.css"; + $style = "style-classic7.css"; } // end if $title="NOALYSS";