- Escaped all the parameters concatenated to a query

- Added parameter titel to Studiengang2->getAppliedStudiengang
- Added parameter titel to Studiengang_model->getAppliedStudiengang
This commit is contained in:
Paolo
2017-04-06 11:13:16 +02:00
parent a2d2296f33
commit 811f5d395d
2 changed files with 26 additions and 22 deletions
@@ -88,16 +88,16 @@ class Studiengang2 extends APIv1_Controller
{
$person_id = $this->get('person_id');
$studiensemester_kurzbz = $this->get('studiensemester_kurzbz');
$status_kurzbz = $this->get('status_kurzbz');
$titel = $this->get('titel');
if (isset($person_id) && isset($studiensemester_kurzbz) && isset($status_kurzbz))
if (isset($person_id) && isset($studiensemester_kurzbz) && isset($titel))
{
$this->load->model('organisation/Studiengang_model', 'StudiengangModel');
$result = $this->StudiengangModel->getAppliedStudiengang(
$person_id,
$studiensemester_kurzbz,
$status_kurzbz
$titel
);
$this->response($result, REST_Controller::HTTP_OK);