Fix escape
This commit is contained in:
parent
4b7889b295
commit
2719c4eb43
@ -1338,7 +1338,7 @@ class Propal extends CommonObject
|
|||||||
|
|
||||||
if ($ref) {
|
if ($ref) {
|
||||||
$sql.= " AND p.entity IN (".getEntity('propal').")"; // Dont't use entity if you use rowid
|
$sql.= " AND p.entity IN (".getEntity('propal').")"; // Dont't use entity if you use rowid
|
||||||
$sql.= " AND p.ref='".$ref."'";
|
$sql.= " AND p.ref='".$this->db->escape($ref)."'";
|
||||||
}
|
}
|
||||||
else $sql.= " AND p.rowid=".$rowid;
|
else $sql.= " AND p.rowid=".$rowid;
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user