small security fix

PrestaSafe · Dec 4, 2022 · 893cf9d · 893cf9d
1 parent b12f3d1
commit 893cf9d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/classes/PrettyBlocksModel.php b/classes/PrettyBlocksModel.php
@@ -80,7 +80,7 @@ private function removeConfig()
     {
         $id = $this->id_prettyblocks;
         $key = $id . "\_%_CONFIG";
-        $sql = 'SELECT name FROM ' . _DB_PREFIX_ . "configuration WHERE name LIKE '" . $key . "'";
+        $sql = 'SELECT name FROM ' . _DB_PREFIX_ . "configuration WHERE name LIKE '" . pSQL($key) . "'";
         $keys = Db::getInstance()->executeS($sql);
         if (count($keys) > 0) {
             foreach ($keys as $k) {