mirror of
https://github.com/itflow-org/itflow
synced 2026-02-28 19:04:52 +00:00
Remove unrequired trim & strip tags - only needs sql escape
This commit is contained in:
@@ -11,7 +11,7 @@ if (isset($_GET['client_id'])) {
|
||||
|
||||
// Specific client via name (single)
|
||||
elseif (isset($_GET['client_name'])) {
|
||||
$name = trim(strip_tags(mysqli_real_escape_string($mysqli, $_GET['client_name'])));
|
||||
$name = mysqli_real_escape_string($mysqli, $_GET['client_name']);
|
||||
$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_name = '$name' AND client_id LIKE '$client_id' AND company_id = '$company_id'");
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user