Complete security audit fixes

app/ics/api/engine/retrieve_rack.php

@@ -1,7 +1,6 @@
 <?php 
     session_start();
 
-    require '../../../preset.php';
     require '../../../assets/utils/db_auth.php';
 
     $id = (int)$data['id'];
@@ -10,18 +9,20 @@
     $sql = "SELECT * 
         FROM md_storage
         WHERE 
-            company_id = {$company_id} and 
-            warehouse = {$warehouse} and 
-            `zone` = '{$data["zone"]}' and 
-            '{$data["aisle"]}' between aisle_from and aisle_to
+            company_id = :company_id and 
+            warehouse = :warehouse and 
+            `zone` = :zone and 
+            :aisle between aisle_from and aisle_to
         ";
 
     $sth = $pdo2->prepare($sql);
-    $sth->execute();
-    if ($sth->errorInfo()[0] != "00000" && !empty($sth->errorInfo()[0])) {
-        $answer["message"] = (empty($sth->errorInfo()[2])) ? $sth->errorInfo()[0] : $sth->errorInfo()[2];
-        exit(json_encode($answer));
-    }
+    $sth->execute([
+        ":company_id" => $company_id,
+        ":warehouse" => $warehouse,
+        ":zone" => $data["zone"],
+        ":aisle" => $data["aisle"]
+    ]);
+    db_check($sth, $answer);
 
     $pre = $sth->fetchAll(PDO::FETCH_ASSOC);