From e9e2a8850f8f8a28b9f8bf592ce80efbb00a07d4 Mon Sep 17 00:00:00 2001 From: FLIO Date: Tue, 28 Mar 2023 16:50:44 +0200 Subject: [PATCH] fix the sql request, add (int) --- htdocs/core/ajax/ajaxstatusprospect.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/htdocs/core/ajax/ajaxstatusprospect.php b/htdocs/core/ajax/ajaxstatusprospect.php index 4cf540db1f6..481d8a9a1d9 100644 --- a/htdocs/core/ajax/ajaxstatusprospect.php +++ b/htdocs/core/ajax/ajaxstatusprospect.php @@ -53,8 +53,8 @@ if ($action === "updatestatusprospect") { $response = ''; $sql = "UPDATE ".MAIN_DB_PREFIX."societe SET "; - $sql .= "fk_stcomm=".$db->escape($idstatus); - $sql .= " WHERE rowid = ".$db->escape($idprospect); + $sql .= "fk_stcomm=".(int) $db->escape($idstatus); + $sql .= " WHERE rowid = ".(int) $db->escape($idprospect); $resql = $db->query($sql);