mirror of
https://github.com/ACSPRI/queXS
synced 2024-04-02 12:12:16 +00:00
Use qstr for operator id to allow for special characters
This commit is contained in:
@@ -800,7 +800,7 @@ function get_operator_id()
|
||||
|
||||
$sql = "SELECT operator_id
|
||||
FROM operator
|
||||
WHERE username = '{$_SERVER['PHP_AUTH_USER']}'
|
||||
WHERE username = " . $db->qstr($_SERVER['PHP_AUTH_USER']) . "
|
||||
AND enabled = 1";
|
||||
|
||||
$o = $db->GetRow($sql);
|
||||
|
||||
Reference in New Issue
Block a user