Commit 4b7334b6 authored by Dominik's avatar Dominik

fixed sql syntax

parent a548e7d1
......@@ -224,7 +224,9 @@ class remoting_aps extends remoting {
return false;
}
$app->db->query("UPDATE aps_packages SET package_status = ".$params['package_status']." WHERE id = '".$app->functions->intval($primary_id)."';");
$sql = "UPDATE aps_packages SET package_status = ? WHERE id = ?";
$app->db->query($sql, $params['package_status'], $app->functions->intval($primary_id));
return true;
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment