SQL injektion behoben

git-svn-id: svn://svn.cccv.de/engel-system@195 29ba0400-6e00-0410-a75a-ca02368028f8
This commit is contained in:
cookie 2006-12-03 22:13:38 +00:00
parent 6ac183b6fe
commit 30ee094c86
1 changed files with 1 additions and 1 deletions

View File

@ -22,7 +22,7 @@ if( IsSet( $_GET["text"]))
}
}
$SQL = "SELECT * FROM news_comments where Refid = ". $_GET["nid"]. " ORDER BY 'ID'";
$SQL = "SELECT * FROM news_comments where Refid = '". $_GET["nid"]. "' ORDER BY 'ID'";
$Erg = mysql_query($SQL, $con);
echo mysql_error( $con);
// anzahl zeilen