include/prestudent.class.php

@@ -725,6 +725,12 @@ class prestudent extends person
 		
 	function getLastStatus($prestudent_id)
 	{
+		if($prestudent_id=='' || !is_numeric($prestudent_id))
+		{
+			$this->errormsg = 'Prestudent_id ist ungueltig';
+			return false;
+		}
+		
 		$qry = "SELECT * FROM public.tbl_prestudentrolle WHERE prestudent_id='$prestudent_id' ORDER BY datum DESC, insertamum DESC, ext_id DESC LIMIT 1";
 		if($result = pg_query($this->conn, $qry))
 		{