FSN#33658 potentiële SQL-injections aangepast
svn path=/Website/trunk/; revision=27927
This commit is contained in:
@@ -217,7 +217,7 @@ function sqlTracking(refkey, node)
|
||||
+ " , fac_srtnotificatie sn"
|
||||
+ " WHERE t.fac_srtnotificatie_key = sn.fac_srtnotificatie_key"
|
||||
+ " AND t.fac_tracking_refkey = " + refkey
|
||||
+ " AND sn.fac_srtnotificatie_xmlnode = " + safe.quoted_qsl(node)
|
||||
+ " AND sn.fac_srtnotificatie_xmlnode = " + safe.quoted_sql(node)
|
||||
+ " ) recentdatum";
|
||||
}
|
||||
else
|
||||
|
||||
Reference in New Issue
Block a user