svn commit: r394 - trunk/mapbender/http/include/dyn_js.php

[uli at osgeo.org]

Author: uli
Date: 2006-06-07 15:34:31+0000
New Revision: 394

Modified:
   trunk/mapbender/http/include/dyn_js.php

Log:
prepared Statements included

Modified: trunk/mapbender/http/include/dyn_js.php
Url: https://mapbender.osgeo.org/source/browse/mapbender/trunk/mapbender/http/include/dyn_js.php?view=diff&rev=394&p1=trunk/mapbender/http/include/dyn_js.php&p2=trunk/mapbender/http/include/dyn_js.php&r1=393&r2=394
==============================================================================
--- trunk/mapbender/http/include/dyn_js.php	(original)
+++ trunk/mapbender/http/include/dyn_js.php	2006-06-07 15:34:31+0000
@@ -1,8 +1,10 @@
 <?php
 if(isset($gui_id))
 {
-	$sql = "SELECT * FROM gui_element_vars WHERE fkey_e_id = '".$e_id_css."' AND fkey_gui_id = '".$gui_id."' and var_type='var'";
-   	$res = db_query($sql);
+	$sql = "SELECT * FROM gui_element_vars WHERE fkey_e_id = $1 AND fkey_gui_id = $2 and var_type='var'";
+	$v = array($e_id_css,$gui_id);
+	$t = array('s','s');
+   	$res = db_prep_query($sql,$v,$t);
 	$arrays = array();
 	echo "\n";
 	while($row = db_fetch_array($res))