Fix a possible SQL injection

mybbgroup · Feb 16, 2021 · e8daa4f · e8daa4f
1 parent 4dd3308
commit e8daa4f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/upload/inc/plugins/isango.php b/upload/inc/plugins/isango.php
@@ -277,7 +277,7 @@ function isango_bridge()
 
 			if ($mybb->user['uid'] && $mybb->settings['isango_single_connection']) { // UCP Connection add request. Validate
 				global $db, $lang;
-				if ($db->fetch_field($db->simple_select("isango", "COUNT(cid) AS conn", "gateway='" . $gateway . "' AND uid='" . $mybb->user['uid'] . "'"), "conn")) {
+				if ($db->fetch_field($db->simple_select("isango", "COUNT(cid) AS conn", "gateway='" . $db->escape_string($gateway) . "' AND uid='" . $mybb->user['uid'] . "'"), "conn")) {
 					error($lang->sprintf($lang->isango_single_connection_error, ucwords($gateway)));
 				}
 			}