From a52ee4a288ec57c2983173460237e4137440a873 Mon Sep 17 00:00:00 2001 From: cookie Date: Mon, 4 Dec 2006 19:54:51 +0000 Subject: SQL injektion behoben git-svn-id: svn://svn.cccv.de/engel-system@198 29ba0400-6e00-0410-a75a-ca02368028f8 --- www-ssl/admin/EngelType.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'www-ssl/admin/EngelType.php') diff --git a/www-ssl/admin/EngelType.php b/www-ssl/admin/EngelType.php index 03f89b85..192a0d91 100755 --- a/www-ssl/admin/EngelType.php +++ b/www-ssl/admin/EngelType.php @@ -47,7 +47,7 @@ function runSQL_log( $SQL, $commed) -$Sql = "SELECT * FROM `EngelType` ORDER BY NAME"; +$Sql = "SELECT * FROM `EngelType` ORDER BY `NAME`"; $Erg = mysql_query($Sql, $con); if( !IsSet($_GET["action"]) ) @@ -177,9 +177,9 @@ case 'changesave': case 'delete': if (IsSet($_GET["TID"])) { - if( runSQL_log( "DELETE FROM `EngelType` WHERE `TID`='". $_GET["TID"]. "'", "delate EngelType")) + if( runSQL_log( "DELETE FROM `EngelType` WHERE `TID`='". $_GET["TID"]. "'", "delete EngelType")) runSQL_log( "ALTER TABLE `Room` DROP `DEFAULT_EID_". $_GET["TID"]. "`;", - "delate EngelType in Room Table"); + "delete EngelType in Room Table"); } else echo "Fehlerhafter Aufruf"; -- cgit v1.3.1