Escape plate in recommended order SQL lookup

2026-06-01 22:37:55 +02:00
parent 4945abfd8e
commit c43618351e
1 changed files with 2 additions and 1 deletions
@@ -431,6 +431,7 @@ class orders_o extends db
    {
        global /** @var db $db */
        $db;
+        $plate = $db->escape_string($plate);
        $sql = "SELECT id FROM $this->table WHERE reg_1 = '$plate' OR reg_2 = '$plate' OR reg_3 = '$plate' AND deleted_at IS NULL ORDER BY id DESC LIMIT 5";
        $result = $db->query($sql);
        $orders = $db->fetch_all($result);
@@ -1624,4 +1625,4 @@ class orders_o extends db
        }
        return $orders;
    }
-}
+}