diff --git a/htdocs/mrp/tpl/linkedobjectblock.tpl.php b/htdocs/mrp/tpl/linkedobjectblock.tpl.php index 31a0af8a10c..9374fc2e4d0 100644 --- a/htdocs/mrp/tpl/linkedobjectblock.tpl.php +++ b/htdocs/mrp/tpl/linkedobjectblock.tpl.php @@ -65,8 +65,8 @@ foreach ($TMoChilds as $key => $objectlink) { echo ''; // we want to make the link via element_element for delete action - $sql = ' Select rowid from ' . MAIN_DB_PREFIX . 'element_element'; - $sql .= ' WHERE fk_source = '. (int) $object->id . ' and fk_target = "' . $key .'"'; + $sql = " Select rowid from " . MAIN_DB_PREFIX . "element_element"; + $sql .= " WHERE fk_source = ". (int) $object->id . " and fk_target = '" . dol_escape_htmltag($key) ."'"; $resql = $db->query($sql); $k = 0;