otpenable: use pdo prepare()

diff --git a/classes/pref/prefs.php b/classes/pref/prefs.php
index cf1322f4581cc93d8e4534db82712fdd79be3e4d..ab39b1e286d8c49a7146f1e3c70c11de21596372 100644 (file)
--- a/classes/pref/prefs.php
+++ b/classes/pref/prefs.php
@@ -888,7 +888,7 @@ class Pref_Prefs extends Handler_Protected {
 
                if ($authenticator->check_password($_SESSION["uid"], $password)) {
 
-                       $sth = $this->pdo->query("SELECT salt
+                       $sth = $this->pdo->prepare("SELECT salt
                                FROM ttrss_users
                                WHERE id = ?");
                        $sth->execute([$_SESSION['uid']]);