Skip to content
Snippets Groups Projects

Correction to varibale name mismatch in sql injections

Merged Uma requested to merge uma.s/vtigercrm:Security_SQL_Injections into master
+ 1
2
Compare changes
  • Side-by-side
  • Inline
Files
+ 0
1
@@ -1096,7 +1096,6 @@ class CRMEntity {
*/
function checkIfCustomTableExists($tablename) {
global $adb;
$table_name = Vtiger_Util_Helper::validateStringForSql($table_name);
$query = "select * from " . $adb->sql_escape_string($tablename);
$result = $this->db->pquery($query, array());
$testrow = $this->db->num_fields($result);
Loading