mirror of
https://github.com/ACSPRI/queXS
synced 2024-04-02 12:12:16 +00:00
Use qstr for operator id to allow for special characters
This commit is contained in:
@@ -800,7 +800,7 @@ function get_operator_id()
|
|||||||
|
|
||||||
$sql = "SELECT operator_id
|
$sql = "SELECT operator_id
|
||||||
FROM operator
|
FROM operator
|
||||||
WHERE username = '{$_SERVER['PHP_AUTH_USER']}'
|
WHERE username = " . $db->qstr($_SERVER['PHP_AUTH_USER']) . "
|
||||||
AND enabled = 1";
|
AND enabled = 1";
|
||||||
|
|
||||||
$o = $db->GetRow($sql);
|
$o = $db->GetRow($sql);
|
||||||
|
|||||||
Reference in New Issue
Block a user