From: Dave Z <donotreply@example.com>
Date: Mon, 1 Jan 2018 18:33:58 +0000 (-0500)
Subject: Fix PDO query in mail plugin.
X-Git-Tag: 18.8~89^2~1
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=33c850f5ab7263466692d0ba9a43d3a471365040;p=tt-rss.git

Fix PDO query in mail plugin.
---

diff --git a/plugins/mail/init.php b/plugins/mail/init.php
index 045fd798..7da87ed5 100644
--- a/plugins/mail/init.php
+++ b/plugins/mail/init.php
@@ -86,7 +86,7 @@ class Mail extends Plugin {
 		print_hidden("method", "sendEmail");
 
 		$sth = $this->pdo->prepare("SELECT email, full_name FROM ttrss_users WHERE
-			id = " . $_SESSION["uid"]);
+			id = ?";
 		$sth->execute([$_SESSION['uid']]);
 
 		if ($row = $sth->fetch()) {