fixed sql syntax

renky · renky · commit 4b7334b64c89 · 2015-09-02T21:32:26.000+02:00
diff --git a/interface/lib/classes/remote.d/aps.inc.php b/interface/lib/classes/remote.d/aps.inc.php
@@ -224,7 +224,9 @@ public function sites_aps_change_package_status($session_id, $primary_id, $param
 			return false;
 		}
 		
-		$app->db->query("UPDATE aps_packages SET package_status = ".$params['package_status']." WHERE id = '".$app->functions->intval($primary_id)."';");
+		$sql  = "UPDATE aps_packages SET package_status = ? WHERE id = ?";
+		$app->db->query($sql, $params['package_status'], $app->functions->intval($primary_id));
+		
 		return true;
 	}
 	

Original file line number	Diff line number	Diff line change
`@@ -224,7 +224,9 @@ public function sites_aps_change_package_status($session_id, $primary_id, $param`
`224`	`224`	`return false;`
`225`	`225`	`}`
`226`	`226`
`227`		`- $app->db->query("UPDATE aps_packages SET package_status = ".$params['package_status']." WHERE id = '".$app->functions->intval($primary_id)."';");`
	`227`	`+ $sql = "UPDATE aps_packages SET package_status = ? WHERE id = ?";`
	`228`	`+ $app->db->query($sql, $params['package_status'], $app->functions->intval($primary_id));`
	`229`	`+`
`228`	`230`	`return true;`
`229`	`231`	`}`
`230`	`232`