Missing db_param call

mantisbt · Dec 21, 2008 · d032129 · d032129
1 parent 1016312
commit d032129
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/core/custom_field_api.php b/core/custom_field_api.php
@@ -719,7 +719,7 @@ function custom_field_destroy( $p_field_id ) {
 
 	# delete the definition
 	$query = "DELETE FROM $t_custom_field_table
-				  WHERE id=";
+				  WHERE id=" .  db_param();
 	db_query_bound( $query, Array( $c_field_id ) );
 
 	custom_field_clear_cache( $p_field_id );