makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-28 14:18:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

[ticket/13197] Correctly format sql query

Browse source 
PHPBB3-13197
This commit is contained in:
Marc Alexander 2014-11-09 13:07:38 +01:00
parent b0942fe31d
commit 8dd32c2bb5
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
phpBB/phpbb/avatar/manager.php
View file

@ -339,8 +339,8 @@ class manager
$result = $this->prefix_avatar_columns('user_', self::$default_row);
$sql = 'UPDATE ' . USERS_TABLE . '
SET ' . $db->sql_build_array('UPDATE', $result) . '
WHERE user_avatar = "' . $db->sql_escape($avatar_data['avatar']) . '"';
SET ' . $db->sql_build_array('UPDATE', $result) . "
WHERE user_avatar = '" . $db->sql_escape($avatar_data['avatar']) . "'";
$db->sql_query($sql);
}
}