[Noalyss-commit] [noalyss] 08/17: SQL protect

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit 07ca4dd6b49cb809d3a6c6976a32110902a40c18
Author: sparkyx <danydb@noalyss.eu>
AuthorDate: Sun Apr 30 18:10:06 2023 +0200

    SQL protect
---
 include/class/follow_up.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/class/follow_up.class.php 
b/include/class/follow_up.class.php
index 7e85ad42f..b1881ebb8 100644
--- a/include/class/follow_up.class.php
+++ b/include/class/follow_up.class.php
@@ -427,8 +427,8 @@ class Follow_Up
         $aDocMod->name='doc_mod';
         $aDocMod->value=$this->db->make_array('select md_id,dt_value||\' : 
\'||md_name as md_name'.
                 ' from document_modele join document_type on (md_type=dt_id)'.
-                " where md_affect ='GES' and md_type = ".$this->dt_id.
-                ' order by md_name');
+                " where md_affect ='GES' and md_type = $1 ".
+       ' order by md_name',0,[$this->dt_id]);
         $str_select_doc=$aDocMod->input();
         /* if no document then do not show the generate button */
         if (empty($aDocMod->value))