otpenable: use pdo prepare()

7 years ago · e4291ba12f
parent 731ecac530
commit e4291ba12f
1 changed files with 1 additions and 1 deletions
--- a/classes/pref/prefs.php
+++ b/classes/pref/prefs.php
@ -888,7 +888,7 @@ class Pref_Prefs extends Handler_Protected {

 		if ($authenticator->check_password($_SESSION["uid"], $password)) {

-			$sth = $this->pdo->query("SELECT salt
+			$sth = $this->pdo->prepare("SELECT salt
 				FROM ttrss_users
 				WHERE id = ?");
 			$sth->execute([$_SESSION['uid']]);