Complete security audit fixes

This commit is contained in:
Thanakorn S
2026-03-09 14:31:39 +07:00
parent 93d903c4b2
commit 7cb78d013b
33 changed files with 317 additions and 313 deletions
+4 -2
View File
@@ -34,10 +34,12 @@ class mailer{
return $input["smtp"];
}
$sql = "SELECT * FROM smtp_setting WHERE company_id = '{$revise["company_id"]}'";
$sql = "SELECT * FROM smtp_setting WHERE company_id = :company_id ";
$sth = $this->pdo2->prepare("$sql");
$sth->execute();
$sth->execute([
":company_id" => $revise["company_id"]
]);
$res = $sth->fetch(PDO::FETCH_ASSOC);