fix: added missing escapting of value

thorsten · Mar 2, 2024 · 1b68a5f · 1b68a5f
1 parent 1f9d46e
commit 1b68a5f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/phpmyfaq/src/phpMyFAQ/News.php b/phpmyfaq/src/phpMyFAQ/News.php
@@ -286,7 +286,7 @@ public function addNewsEntry(array $data): bool
             $this->configuration->getDb()->escape($data['header']),
             $this->configuration->getDb()->escape($data['content']),
             $this->configuration->getDb()->escape($data['authorName']),
-            $data['authorEmail'],
+            $this->configuration->getDb()->escape($data['authorEmail']),
             $data['dateStart'],
             $data['dateEnd'],
             $data['active'],
@@ -332,7 +332,7 @@ public function updateNewsEntry(int $id, array $data): bool
             $this->configuration->getDb()->escape($data['header']),
             $this->configuration->getDb()->escape($data['content']),
             $this->configuration->getDb()->escape($data['authorName']),
-            $data['authorEmail'],
+            $this->configuration->getDb()->escape($data['authorEmail']),
             $data['dateStart'],
             $data['dateEnd'],
             $data['active'],