gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use ? for an SQL query to prevent SQL syntax errors

This commit is contained in:
acli 2003-01-25 20:05:20 +00:00
parent e662ba255d
commit ef50ee5217
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
C4/Search.pm
View File

@ -1,4 +1,5 @@
package C4::Search;
#require '/u/acli/lib/cvs.pl'; # XXX
# Copyright 2000-2002 Katipo Communications
#
@ -1973,10 +1974,10 @@ sub getboracctrecord {
my @acctlines;
my $numlines=0;
my $query= "Select * from accountlines where
borrowernumber=$params->{'borrowernumber'} order by date desc,timestamp desc";
borrowernumber=? order by date desc,timestamp desc";
my $sth=$dbh->prepare($query);
# print $query;
$sth->execute;
$sth->execute($params->{'borrowernumber'});
my $total=0;
while (my $data=$sth->fetchrow_hashref){
# if ($data->{'itemnumber'} ne ''){
@ -2175,6 +2176,8 @@ sub itemcount2 {
# sort for this?
if (my $data2=$sth2->fetchrow_hashref){
$counts{'not available'}++;
#my $x = "Not available, data2=" . (defined $data2? CGI::escapeHTML(cvs($data2)): "undef");
#$counts{$x}++; #XXX
} else {
$counts{$data->{'branchname'}}++;
}