search

vfremaux / moodle-local_shop

core plugin for a moodle integrated shop system. this is the community version
4 stars 3 forks source link

parameters including in in-line sql #1

Open danmarsden opened 6 years ago

danmarsden commented 6 years ago

https://github.com/vfremaux/moodle-local_shop/blob/master/bills/bills.controller.php#L200

https://github.com/vfremaux/moodle-local_shop/blob/master/bills/bills.controller.php#L272

Please ensure correct DML syntax is used, passing using placeholders instead of injecting parameters into inline sql.

danmarsden commented 6 years ago

https://github.com/vfremaux/moodle-local_shop/blob/master/classes/Catalog.class.php#L297

danmarsden commented 6 years ago

https://github.com/vfremaux/moodle-local_shop/blob/master/classes/Catalog.class.php#L321