Better protection against SQL injection

mikebharris · Jun 25, 2018 · b26ac64 · b26ac64
1 parent 96a0af6
commit b26ac64
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.php b/index.php
@@ -30,7 +30,7 @@
   }
 
   $link = $result->fetch_array(MYSQLI_ASSOC);
-  $query = "UPDATE short_links SET count = count + 1, last_request = NOW() WHERE id = " . $link["id"];
+  $query = sprintf("UPDATE short_links SET count = count + 1, last_request = NOW() WHERE id = ''%s''", $link["id"]);
 
   $result = $mysqli->query($query);