gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 11549: (follow-up) interpolated variables into SQL statements should not be allowed 

Signed-off-by: Sonia BOUIS <sonia.bouis@univ-lyon3.fr>
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
(cherry picked from commit 6e861c5563)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
This commit is contained in:
Jonathan Druart 2014-01-14 12:13:31 +01:00 committed by Fridolin Somers
parent facb734e4a
commit 2d697ec0ca
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
C4/Acquisition.pm
View File

@ -1805,7 +1805,7 @@ sub TransferOrder {
my $dbh = C4::Context->dbh;
my ($query, $sth, $rv);
$query = qq{
$query = q{
UPDATE aqorders
SET datecancellationprinted = CAST(NOW() AS date)
WHERE ordernumber = ?
@ -1824,7 +1824,7 @@ sub TransferOrder {
WHERE ordernumber = ?
}, {}, $newordernumber );
$query = qq{
$query = q{
UPDATE aqorders_items
SET ordernumber = ?
WHERE ordernumber = ?