Fix SQL injection vulnerability

stevejagodzinski · Nov 30, 2014 · b9de907 · b9de907
1 parent 49ac5b4
commit b9de907
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/php/data_access/RemoteHtmlContentDataAccess.php b/php/data_access/RemoteHtmlContentDataAccess.php
@@ -20,7 +20,7 @@ public static function getForUser($userId) {
     }
 
     public static function getByName($name) {
-        return self::getForQueryString("SELECT * FROM \"DevNewsAggregatorConfiguration_htmlcontent\" WHERE name = $name");
+        return self::getForQueryString("SELECT * FROM \"DevNewsAggregatorConfiguration_htmlcontent\" WHERE name = $1", array($name));
     }
 
     private static function getForQueryString($query, $params=array()) {