Fix SQL injection risk in booking sync pickup_bool

2026-06-01 23:02:28 +02:00
parent 4945abfd8e
commit f2fc4f6f18
2 changed files with 3 additions and 2 deletions
@@ -200,6 +200,7 @@ class bookings_o extends db
        $washCertificateStatus = $db->escape_string($washCertificateStatus);
        $washCertificateUrl = $db->escape_string($washCertificateUrl);
        $status = $db->escape_string($status);
+        $pickup_bool = (int)$pickup_bool;
        // Check if the entry already exists
        $sql = "SELECT * FROM $this->table WHERE id = $id";
        $result = $db->query($sql);