Update api_products.class.php

This commit is contained in:
Laurent Destailleur 2020-09-20 19:33:18 +02:00 committed by GitHub
parent 75b46dd535
commit 9522b12da1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1360,7 +1360,7 @@ class Products extends DolibarrApi
$sql = 'SELECT ';
$sql .= 'v.fk_product_attribute, v.rowid, v.ref, v.value FROM '.MAIN_DB_PREFIX.'product_attribute_value as v';
$sql .= " WHERE v.fk_product_attribute IN (SELECT rowid FROM ".MAIN_DB_PREFIX."product_attribute WHERE ref LIKE '".trim($ref)."')";
$sql .= " WHERE v.fk_product_attribute IN (SELECT rowid FROM ".MAIN_DB_PREFIX."product_attribute WHERE ref LIKE '".$this->db->escape(trim($ref))."')";
$resql = $this->db->query($sql);