fix two-factor authenticaton

diff --git a/classes/pref/prefs.php b/classes/pref/prefs.php
index fac4b941bb9f99219d6f23ab988c56c1fd785cde..1eb28ba200a34978d06b272a2086285a90d33c52 100644 (file)
--- a/classes/pref/prefs.php
+++ b/classes/pref/prefs.php
@@ -887,7 +887,7 @@ class Pref_Prefs extends Handler_Protected {
 
                if ($authenticator->check_password($_SESSION["uid"], $password)) {
 
-                       $sth = $this->pdo->query("SELECT salt
+                       $sth = $this->pdo->prepare("SELECT salt
                                FROM ttrss_users
                                WHERE id = ?");
                        $sth->execute([$_SESSION['uid']]);