Db: quote data before passing to pgsql

2016-05-23 15:40:12 +02:00 · 2016-05-23 15:40:12 +02:00 · d5b3f25de9
parent 05919baf5d
commit d5b3f25de9
1 changed files with 3 additions and 1 deletions
--- a/library/Director/Db.php
+++ b/library/Director/Db.php
@ -273,7 +273,9 @@ class Db extends DbConnection
    public function fetchActivityLogIdByChecksum($checksum)
    {
        $sql = 'SELECT id FROM director_activity_log WHERE checksum = ?';
-        return $this->db()->fetchOne($sql, $this->quoteBinary($checksum));
+        return $this->db()->fetchOne(
+            $this->db()->quoteInto($sql,  $this->quoteBinary($checksum))
+        );
    }

    public function fetchActivityLogEntry($checksum)