Diverse SQL-Injection Lücken geschlossen

This commit is contained in:
Andreas Österreicher
2014-12-01 10:07:21 +00:00
parent 9325ebecbf
commit f670f45d2f
87 changed files with 4310 additions and 2015 deletions
+1 -1
View File
@@ -67,7 +67,7 @@ class note extends basis_db
return false;
}
$qry = "SELECT * FROM lehre.tbl_note WHERE note='".$note."'";
$qry = "SELECT * FROM lehre.tbl_note WHERE note=".$this->db_add_param($note);
if($this->db_query($qry))
{