implemented db_placeholders for the SELECT query

xwuxin · Oct 10, 2011 · a59359f · a59359f
1 parent b066e77
commit a59359f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pclzip_d7.module b/pclzip_d7.module
@@ -76,7 +76,8 @@ function pclzip_library_exists() {
 function pclzip_get_fields() {
   // get the fields names
   $fields_names = array();
-  $result = db_query("SELECT field_name FROM {field_config} WHERE type IN (:files)",array(':files'  =>  variable_get('pclzip_field_types', "'image','file'")));
+  $field_types = variable_get('pclzip_field_types', "'image','file'");
+  $result = db_query("SELECT field_name FROM {field_config} WHERE type IN (" . db_placeholders($field_types, 'varchar') . ")");
   foreach ($result as $field) {
     $fields_names[$field->field_name] = $field->field_name;
   }