[Mapbender-commits] r1799 - trunk/mapbender/http/javascripts

[svn_mapbender at osgeo.org]

Author: nimix
Date: 2007-11-12 06:01:30 -0500 (Mon, 12 Nov 2007)
New Revision: 1799

Modified:
   trunk/mapbender/http/javascripts/mod_selArea.php
Log:
use sql prep statement

Modified: trunk/mapbender/http/javascripts/mod_selArea.php
===================================================================
--- trunk/mapbender/http/javascripts/mod_selArea.php	2007-11-12 08:48:18 UTC (rev 1798)
+++ trunk/mapbender/http/javascripts/mod_selArea.php	2007-11-12 11:01:30 UTC (rev 1799)
@@ -21,7 +21,7 @@
 require_once(dirname(__FILE__)."/../../conf/mapbender.conf");
 $con = db_connect($DBSERVER,$OWNER,$PW);
 db_select_db(DB,$con);
-$sql = "SELECT e_src, e_target FROM gui_element WHERE e_id = 'selArea1' AND fkey_gui_id = '".$gui_id."'";
+$sql = "SELECT e_src, e_target FROM gui_element WHERE e_id = 'selArea1' AND fkey_gui_id = $1";
 $v = array($gui_id);
 $t = array('s');
 $res = db_prep_query($sql, $v, $t);