fix two times sql injection possible
This commit is contained in:
parent
b4371f8db4
commit
9c236bba83
3 changed files with 4 additions and 2 deletions
|
@ -39,6 +39,7 @@ function blogPost($id, $conn)
|
|||
function blogPosts($count, $contentLength, $conn)
|
||||
{
|
||||
$response = [];
|
||||
$count = $conn->real_escape_string($count);
|
||||
$result = $conn->query("SELECT * FROM posts order by id desc limit $count");
|
||||
if ($result->num_rows > 0) {
|
||||
while ($row = $result->fetch_assoc()) {
|
||||
|
|
|
@ -18,6 +18,7 @@ $commentField = new ObjectType([
|
|||
function comments($article, $conn)
|
||||
{
|
||||
$response = [];
|
||||
$article = $conn->real_escape_string($article);
|
||||
$result = $conn->query("SELECT * FROM comments WHERE article='$article'");
|
||||
while ($row = $result->fetch_assoc()) {
|
||||
$commentElement = [
|
||||
|
|
Loading…
Reference in a new issue