mirror of
https://github.com/FH-Complete/FHC-Core.git
synced 2026-07-19 16:02:15 +00:00
system/Variable_model: replaced concatenation of names array with ? (parameter replacement by CI) to prevent SQL injections
This commit is contained in:
@@ -57,7 +57,7 @@ class VariableLib
|
||||
|
||||
if (!isEmptyString($uid) && !isEmptyString($name) && is_numeric($change))
|
||||
{
|
||||
$change = (int) $change;
|
||||
$change = (int)$change;
|
||||
$varres = $this->_ci->VariableModel->getVariables($uid, array($name));
|
||||
|
||||
if (isSuccess($varres))
|
||||
|
||||
Reference in New Issue
Block a user