svn commit: r701 - trunk/mapbender/http/php/mod_zoomCoords_en.php

[astrid_emde at osgeo.org]

Author: astrid_emde
Date: 2006-07-26 14:01:08+0000
New Revision: 701

Modified:
   trunk/mapbender/http/php/mod_zoomCoords_en.php

Log:
prepared statements added

Modified: trunk/mapbender/http/php/mod_zoomCoords_en.php
Url: https://mapbender.osgeo.org/source/browse/mapbender/trunk/mapbender/http/php/mod_zoomCoords_en.php?view=diff&rev=701&p1=trunk/mapbender/http/php/mod_zoomCoords_en.php&p2=trunk/mapbender/http/php/mod_zoomCoords_en.php&r1=700&r2=701
==============================================================================
--- trunk/mapbender/http/php/mod_zoomCoords_en.php	(original)
+++ trunk/mapbender/http/php/mod_zoomCoords_en.php	2006-07-26 14:01:08+0000
@@ -87,8 +87,10 @@
 
 $con = db_connect($DBSERVER,$OWNER,$PW);
 db_select_db(DB,$con);
-$sql = "SELECT e_target FROM gui_element WHERE e_id = 'zoomCoords' AND fkey_gui_id = '".$_SESSION["mb_user_gui"]."'";
-$res = db_query($sql);
+$sql = "SELECT e_target FROM gui_element WHERE e_id = 'zoomCoords' AND fkey_gui_id = $1";
+$v = array($_SESSION["mb_user_gui"]);
+$t = array('s');
+$res = db_prep_query($sql,$v,$t);
 $cnt = 0;
 while($row = db_fetch_array($res)){
    $e_target = $row["e_target"];