Skip to content

Commit

Permalink
Fixed issue #9720: SQL injection vulnerability in data entry
Browse files Browse the repository at this point in the history
  • Loading branch information
@c-schmitz
c-schmitz committed Jun 26, 2015
1 parent 11c233f commit 09ff3be
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion application/controllers/admin/dataentry.php
View file
Expand Up @@ -1716,7 +1716,7 @@ public function insert()
{
if (isset($usesleft) && $usesleft<=1)
{
$utquery .= "SET usesleft=usesleft-1, completed='$submitdate'\n";
$utquery .= "SET usesleft=usesleft-1, completed=".dbQuoteAll($submitdate);
}
else
{
Expand Down

2 comments on commit 09ff3be

@Shnoulle
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We really need to update all this "update" to Yii PDO .... BUt ls3 ....

@c-schmitz
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yep

Please sign in to comment.