瀏覽代碼

[svn r13777] Fixed SQL query. Double quotes cannot be used to enclose strings in MySQL.

Yannick Warnier 17 年之前
父節點
當前提交
f4fa0b2668
共有 1 個文件被更改,包括 4 次插入6 次删除
  1. 4 6
      main/inc/lib/document.lib.php

+ 4 - 6
main/inc/lib/document.lib.php

@@ -537,12 +537,10 @@ class DocumentManager
 					
 					//Templates management
 					$table_template = Database::get_main_table(TABLE_MAIN_TEMPLATES);
-					$sql_is_template = 'SELECT id FROM '.$table_template.' 
-										WHERE course_code="'.$_course['id'].'" 
-										AND user_id="'.api_get_user_id().'"
-										AND ref_doc="'.$row['id'].'"
-										';
-					
+					$sql_is_template = "SELECT id FROM $table_template 
+										WHERE course_code='".$_course['id']."' 
+										AND user_id='".api_get_user_id()."'
+										AND ref_doc='".$row['id']."'";
 					$template_result = api_sql_query($sql_is_template);
 					if(mysql_numrows($template_result)>0){
 						$row['is_template'] = 1;