Complete security audit fixes

app/ics/api/engine/product_search.php

@@ -1,22 +1,21 @@
 <?php 
     session_start();
 
-    require '../../../preset.php';
     require '../../../assets/utils/db_auth.php';
 
     $sql = "SELECT *
             FROM md_product
             WHERE 
-              company_id = {$company_id} and 
-              sku like '%{$data["keyword"]}%'
+              company_id = :company_id and 
+              sku like :keyword
             LIMIT 50
             ";
     $sth = $pdo2->prepare($sql);
-    $sth->execute();
-    if ($sth->errorInfo()[0] != "00000" && !empty($sth->errorInfo()[0])) {
-        $answer["message"] = (empty($sth->errorInfo()[2])) ? $sth->errorInfo()[0] : $sth->errorInfo()[2];
-        exit(json_encode($answer));
-    }
+    $sth->execute([
+        ":company_id" => $company_id,
+        ":keyword" => '%'.$data["keyword"].'%'
+    ]);
+    db_check($sth, $answer);
 
     $result = $sth->fetchAll(PDO::FETCH_ASSOC);
     $answer["result"] = $result;