Do *not* quote prepared query params. Fixes glpi-project#3303

trasher · Dec 15, 2017 · 2875bbb · 2875bbb
1 parent 0b31728
commit 2875bbb
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/inc/savedsearch.class.php b/inc/savedsearch.class.php
@@ -1242,9 +1242,9 @@ static public function croncountAll($task) {
             $self = new self();
             $now = date('Y-m-d H:i:s');
             $stmt = $DB->prepare("UPDATE `".self::getTable()."`
-                                  SET `last_execution_time` = '?',
-                                      `last_execution_date` = '?'
-                                  WHERE `id` = '?'");
+                                  SET `last_execution_time` = ?,
+                                      `last_execution_date` = ?
+                                  WHERE `id` = ?");
 
             $DB->dbh->begin_transaction();
             while ($row = $iterator->next()) {