2
0
mirror of https://github.com/ACSPRI/queXS synced 2024-04-02 12:12:16 +00:00

Use qstr for operator id to allow for special characters

This commit is contained in:
Adam Zammit
2013-04-03 14:37:08 +11:00
parent 15dab90d86
commit b1bfb70c13

View File

@@ -800,7 +800,7 @@ function get_operator_id()
$sql = "SELECT operator_id
FROM operator
WHERE username = '{$_SERVER['PHP_AUTH_USER']}'
WHERE username = " . $db->qstr($_SERVER['PHP_AUTH_USER']) . "
AND enabled = 1";
$o = $db->GetRow($sql);