diff --git a/htdocs/product/dynamic_price/class/price_expression.class.php b/htdocs/product/dynamic_price/class/price_expression.class.php index 9a22313bc6c..5ce3068c144 100644 --- a/htdocs/product/dynamic_price/class/price_expression.class.php +++ b/htdocs/product/dynamic_price/class/price_expression.class.php @@ -121,6 +121,13 @@ class PriceExpression */ function fetch($id) { + // Check parameters + if (empty($id)) + { + $this->error='ErrorWrongParameters'; + return -1; + } + $sql = "SELECT title, expression"; $sql.= " FROM ".MAIN_DB_PREFIX.$this->table_element; $sql.= " WHERE rowid = ".$id;