mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-07-31 14:00:31 +02:00
Code Issues Releases Wiki Activity

[ticket/13197] Correctly format sql query

Browse Source 
PHPBB3-13197
This commit is contained in:
Marc Alexander
2014-11-09 13:07:38 +01:00
parent b0942fe31d
commit 8dd32c2bb5
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
phpBB/phpbb/avatar/manager.php
View File

@@ -339,8 +339,8 @@ class manager
$result = $this->prefix_avatar_columns('user_', self::$default_row);
$sql = 'UPDATE ' . USERS_TABLE . '
SET ' . $db->sql_build_array('UPDATE', $result) . '
WHERE user_avatar = "' . $db->sql_escape($avatar_data['avatar']) . '"';
SET ' . $db->sql_build_array('UPDATE', $result) . "
WHERE user_avatar = '" . $db->sql_escape($avatar_data['avatar']) . "'";
$db->sql_query($sql);
}
}