Fixing #1288: adding db_quotes -> admin.php // to be tested

git-svn-id: file:///Users/Shitiz/Downloads/lssvn/source/stable_plus@3434 b72ed6b6-b9f8-46b5-92b4-906544132732
LimeSurvey · Oct 19, 2007 · f3b5b7d · f3b5b7d
1 parent ffde122
commit f3b5b7d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/admin/admin.php b/admin/admin.php
@@ -115,7 +115,7 @@
 
 if (isset($surveyid) && $surveyid)
 {
-$surquery = "SELECT * FROM {$dbprefix}surveys_rights WHERE sid=$surveyid AND uid = ".$_SESSION['loginID']; //Getting rights for this survey
+$surquery = "SELECT * FROM {$dbprefix}surveys_rights WHERE sid=".db_quote($surveyid)." AND uid = ".db_quote($_SESSION['loginID']); //Getting rights for this survey
 $surresult = db_execute_assoc($surquery);   
 $surrows = $surresult->FetchRow();
 }