From c5f082e7acfcd56948b1b7cdf7a7153d840dde1b Mon Sep 17 00:00:00 2001 From: Isaac Connor Date: Tue, 12 May 2020 09:06:57 -0400 Subject: [PATCH] fix escaping column names --- web/ajax/status.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/ajax/status.php b/web/ajax/status.php index 3821ac9ce..2a2c89d3e 100644 --- a/web/ajax/status.php +++ b/web/ajax/status.php @@ -257,7 +257,7 @@ function collectData() { } # end foreach element if ( count($fieldSql) ) { - $sql = 'SELECT '.join(', ', array_map($fieldSql, function($f){return '`'.$f.''''})).' FROM '.$entitySpec['table']; + $sql = 'SELECT '.join(', ', array_map($fieldSql, function($f){return '`'.$f.'`';})).' FROM '.$entitySpec['table']; if ( $joinSql ) $sql .= ' '.join(' ', array_unique($joinSql)); if ( $id && !empty($entitySpec['selector']) ) {