CMXX - Update contract security
This commit is contained in:
@@ -76,15 +76,15 @@ if(isset($criterias['totals']) && $criterias['totals'] ==''){
|
||||
}
|
||||
elseif (isset($criterias['list']) && $criterias['list'] =='') {
|
||||
//SQL for Paging
|
||||
$sql = 'SELECT * FROM contracts c JOIN users u ON c.createdby = u.username '.$whereclause.'';
|
||||
$sql = 'SELECT c.* FROM contracts c JOIN users u ON c.createdby = u.username '.$whereclause.'';
|
||||
}
|
||||
elseif (isset($criterias['p']) && $criterias['p'] =='all') {
|
||||
//SQL for Paging
|
||||
$sql = 'SELECT * FROM contracts c JOIN users u ON c.createdby = u.username '.$whereclause.'';
|
||||
$sql = 'SELECT c.* FROM contracts c JOIN users u ON c.createdby = u.username '.$whereclause.'';
|
||||
}
|
||||
else {
|
||||
//SQL for Paging
|
||||
$sql = 'SELECT * FROM contracts c JOIN users u ON c.createdby = u.username '.$whereclause.' LIMIT :page,:num_products';
|
||||
$sql = 'SELECT c.* FROM contracts c JOIN users u ON c.createdby = u.username '.$whereclause.' LIMIT :page,:num_products';
|
||||
}
|
||||
|
||||
$stmt = $pdo->prepare($sql);
|
||||
|
||||
Reference in New Issue
Block a user