AS1024
/
itflow
mirror of https://github.com/itflow-org/itflow
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove unrequired trim & strip tags - only needs sql escape

This commit is contained in:
Marcus Hill 2023-01-02 14:31:29 +00:00
parent 2454961389
commit 8687f56eb0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/v1/clients/read.php
View File

@ -11,7 +11,7 @@ if (isset($_GET['client_id'])) {
// Specific client via name (single)
elseif (isset($_GET['client_name'])) {
$name = trim(strip_tags(mysqli_real_escape_string($mysqli, $_GET['client_name'])));
$name = mysqli_real_escape_string($mysqli, $_GET['client_name']);
$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_name = '$name' AND client_id LIKE '$client_id' AND company_id = '$company_id'");
}