Complete security audit fixes

app/inventory/api/engine/manage_product.php

@@ -1,7 +1,6 @@
 <?php 
     session_start();
 
-    require '../../../preset.php';
     require '../../../assets/utils/db_auth.php';
 
     $id = (int)$data['id'];
@@ -10,14 +9,15 @@
     $sql = "SELECT `log` 
             FROM md_product
             WHERE
-                company_id = {$company_id} and 
-                id = {$id}";
+                company_id = :company_id and 
+                id = :id ";
     $sth = $pdo2->prepare($sql);
-    $sth->execute();
-    if ($sth->errorInfo()[0] != "00000" && !empty($sth->errorInfo()[0])) {
-        $answer["message"] = (empty($sth->errorInfo()[2])) ? $sth->errorInfo()[0] : $sth->errorInfo()[2];
-        exit(json_encode($answer));
-    }
+    $sth->execute([
+        ":company_id" => $company_id,
+        ":id" => $id
+    ]);
+    db_check($sth, $answer);
+    
     $row = $sth->fetch(PDO::FETCH_ASSOC);
 
     $table_log = json_decode($row['log'] ?? '[]', true);