Fix PDO query in mail plugin.

diff --git a/plugins/mail/init.php b/plugins/mail/init.php
index 045fd7986f257bdea355c715a5bb046d216d2a68..7da87ed575b5610a184eda96385948d91a5ab86d 100644 (file)
--- a/plugins/mail/init.php
+++ b/plugins/mail/init.php
@@ -86,7 +86,7 @@ class Mail extends Plugin {
                print_hidden("method", "sendEmail");
 
                $sth = $this->pdo->prepare("SELECT email, full_name FROM ttrss_users WHERE
-                       id = " . $_SESSION["uid"]);
+                       id = ?";
                $sth->execute([$_SESSION['uid']]);
 
                if ($row = $sth->fetch()) {