SQL injektion behoben
git-svn-id: svn://svn.cccv.de/engel-system@195 29ba0400-6e00-0410-a75a-ca02368028f8
This commit is contained in:
parent
6ac183b6fe
commit
30ee094c86
|
@ -22,7 +22,7 @@ if( IsSet( $_GET["text"]))
|
|||
}
|
||||
}
|
||||
|
||||
$SQL = "SELECT * FROM news_comments where Refid = ". $_GET["nid"]. " ORDER BY 'ID'";
|
||||
$SQL = "SELECT * FROM news_comments where Refid = '". $_GET["nid"]. "' ORDER BY 'ID'";
|
||||
$Erg = mysql_query($SQL, $con);
|
||||
echo mysql_error( $con);
|
||||
// anzahl zeilen
|
||||
|
|
Loading…
Reference in New Issue