Update confirm.php

SQL Inject Patch
jianminglok · Sep 25, 2017 · 3f4160a · 3f4160a
1 parent 63e9c9a
commit 3f4160a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/confirm.php b/confirm.php
@@ -2,7 +2,7 @@
 
 	include_once 'dbconnect.php';
 
-	$confirm_key = $_GET["key"];
+	$confirm_key = mysqli_real_escape_string($con,$_GET["key"]);
 
 	$check = mysqli_query($con, "SELECT email FROM confirm WHERE confirm_key = '$confirm_key'");
 	$row=mysqli_fetch_array($check,MYSQLI_ASSOC);
@@ -27,4 +27,4 @@
 		echo $msg;
 	}
 
-?>
+?>