C4::Context->preference was not using placeholders and was potentially vulnerable to a SQL injectin attack. This patch refactors the method to use placeholders. Added some tests for C4::Context. Signed-off-by: Joshua Ferraro <jmf@liblime.com> |
||
|---|---|---|
| .. | ||
| preference.pm | ||