replacing hardwired quotes with db->Quote call for element AES_DECRYP…

…T in getAsField_html
sylbel · Oct 12, 2011 · 4982167 · 4982167
1 parent b94c2e4
commit 4982167
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/components/com_fabrik/models/element.php b/components/com_fabrik/models/element.php
@@ -359,14 +359,14 @@ function getAsField_html(&$aFields, &$aAsFields, $opts = array())
 		$k = $db->nameQuote($dbtable).".".$db->nameQuote($this->_element->name);
 		$secret = JFactory::getConfig()->getValue('secret');
 		if ($this->encryptMe()) {
-			$k = "AES_DECRYPT($k, '".$secret."')";
+			$k = "AES_DECRYPT($k, ".$db->Quote($secret).")";
 		}
 
 		if ($this->isJoin()) {
 
 			$jkey = $this->_element->name;
 			if ($this->encryptMe()) {
-				$jkey = "AES_DECRYPT($jkey, '".$secret."')";
+				$jkey = "AES_DECRYPT($jkey, ".$db->Quote($secret).")";
 			}
 			$jointable = $this->getJoinModel()->getJoin()->table_join;
 			$fullElName = JArrayHelper::getValue($opts, 'alias', $db->nameQuote("$jointable" . "___" . $this->_element->name));
@@ -384,7 +384,7 @@ function getAsField_html(&$aFields, &$aAsFields, $opts = array())
 			}
 			$k = $db->nameQuote($dbtable).".".$db->nameQuote($this->_element->name);
 			if ($this->encryptMe()) {
-				$k = "AES_DECRYPT($k, '".$secret."')";
+				$k = "AES_DECRYPT($k, ".$db->Quote($secret).")";
 			}
 
 			if ($this->isJoin()) {