HOR-281 Fixes references to table and field names.
This commit is contained in:
@@ -199,7 +199,7 @@ if( isset($request) ){
|
|||||||
$field = mysql_real_escape_string($_GET['fld']);
|
$field = mysql_real_escape_string($_GET['fld']);
|
||||||
$field = str_replace("`", "", $field);
|
$field = str_replace("`", "", $field);
|
||||||
|
|
||||||
$query = "INSERT INTO {$_GET['table']} ({$_GET['pk']}, {$_GET['fld']}) VALUES (?, ?)"; // '$gKey', '{$_GET['value']}')";
|
$query = "INSERT INTO $tableName ($primaryKeyField, $field) VALUES (?, ?)"; // '$gKey', '{$_GET['value']}')";
|
||||||
|
|
||||||
$rs = $con->prepareStatement($query);
|
$rs = $con->prepareStatement($query);
|
||||||
$rs->set(1, $gKey);
|
$rs->set(1, $gKey);
|
||||||
|
|||||||
Reference in New Issue
Block a user