Fixed opendocman#197 - PDOException due to typo in prepared statement

soewarsono · Feb 7, 2015 · 0e4cad5 · 0e4cad5
1 parent 971e4e2
commit 0e4cad5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Settings_class.php b/Settings_class.php
@@ -56,9 +56,9 @@ function save($data)
                 $query = "
                   UPDATE
                     {$GLOBALS['CONFIG']['db_prefix']}settings
-                  SET VALUE = '$value'
+                  SET VALUE = :value
                   WHERE
-                    name = '$key'
+                    name = :key
                 ";
                 $stmt = $this->connection->prepare($query);
                 $stmt->execute(array(