Changed database access to PDO using prepared statements
This commit is contained in:
@@ -13,20 +13,12 @@ $assetclassgroup_id = sanitize($_GET['assetclassgroup_id']);
|
||||
|
||||
include("header.php");
|
||||
|
||||
$smarty->assign($lang);
|
||||
|
||||
$query = "SELECT
|
||||
assetclassgroup_id,
|
||||
assetclassgroup_name
|
||||
FROM
|
||||
assetclassgroup
|
||||
WHERE
|
||||
assetclassgroup_id=" . $assetclassgroup_id;
|
||||
|
||||
$assetclassgroup = $db->db_select($query);
|
||||
|
||||
$smarty->assign("assetclassgroup_id", $assetclassgroup[0]['assetclassgroup_id']);
|
||||
$smarty->assign("assetclassgroup_name", $assetclassgroup[0]['assetclassgroup_name']);
|
||||
$sql = "SELECT assetclassgroup_id AS id, assetclassgroup_name AS name
|
||||
FROM assetclassgroup
|
||||
WHERE assetclassgroup_id=?";
|
||||
$sth = $dbh->prepare($sql);
|
||||
$sth->execute([$assetclassgroup_id]);
|
||||
$smarty->assign("assetclassgroup", $sth->fetch(PDO::FETCH_OBJ));
|
||||
|
||||
$smarty->display("assetclassgroupdel.tpl");
|
||||
|
||||
|
||||
Reference in New Issue
Block a user