Conservancy/voting
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use explicit column name in elec_get_results

Browse source
This commit is contained in:
Tobias Mueller 2009-06-06 17:43:24 +02:00
parent a9b12101dc
commit ac50b1afb4
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
foundation.gnome.org/vote/include/election-sql.php
View file

@ -209,7 +209,7 @@ function elec_get_results ($handle, $election_id) {
$escaped_election_id = mysql_real_escape_string ($election_id, $handle); $escaped_election_id = mysql_real_escape_string ($election_id, $handle);
$query = "SELECT * FROM " . $results_table; //FIXME: Don't use wildcards $query = "SELECT result FROM " . $results_table;
$query .= " WHERE election_id = '".$escaped_election_id."'"; $query .= " WHERE election_id = '".$escaped_election_id."'";
$result = mysql_query ($query, $handle); $result = mysql_query ($query, $handle);