Fix PDO query in mail plugin.

7 years ago · 33c850f5ab
parent 8dedacf497
commit 33c850f5ab
1 changed files with 1 additions and 1 deletions
--- a/plugins/mail/init.php
+++ b/plugins/mail/init.php
@ -86,7 +86,7 @@ class Mail extends Plugin {
 		print_hidden("method", "sendEmail");

 		$sth = $this->pdo->prepare("SELECT email, full_name FROM ttrss_users WHERE
-			id = " . $_SESSION["uid"]);
+			id = ?";
 		$sth->execute([$_SESSION['uid']]);

 		if ($row = $sth->fetch()) {