Moved person::getByName() into new db

Issue #20
jeroenrnl · Apr 17, 2015 · 1ea8b28 · 1ea8b28
1 parent 23f82af
commit 1ea8b28
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/php/classes/person.inc.php b/php/classes/person.inc.php
@@ -489,11 +489,13 @@ public static function getByName($name) {
         if(empty($name)) {
             return false;
         }
+        $qry=new select(array("ppl" => "people"));
+        $qry->addFields(array("person_id"));
+        $where=new clause("CONCAT_WS(\" \", lower(first_name), lower(last_name))=lower(:name)");
+        $qry->addParam(new param(":name", $name, PDO::PARAM_STR));
+        $qry->where($where);
 
-        $sql = "SELECT person_id FROM " . DB_PREFIX . "people WHERE " .
-            "CONCAT_WS(\" \", lower(first_name), lower(last_name))=" .
-            "lower(\"" . escape_string($name) . "\")";
-        return self::getRecordsFromQuery($sql);
+        return self::getRecordsFromQuery($qry);
     }
 
     /**