diff --git a/index.php b/index.php index 4d96623..9a34a98 100644 --- a/index.php +++ b/index.php @@ -53,7 +53,8 @@ function generate_short($url, $mysqli) { } function find_short($hash, $mysqli) { - $result = mysqli_query($mysqli, "SELECT * FROM " . DB_TABLE . " WHERE id='" . mysqli_real_escape_string($mysqli, $hash) . "'"); + $hash = mysqli_real_escape_string($mysqli, $hash); + $result = mysqli_query($mysqli, "SELECT * FROM " . DB_TABLE . " WHERE id='$hash'") . "'"); if ($row = mysqli_fetch_assoc($result)) { $link = $row['url']; mysqli_query($mysqli, "UPDATE " . DB_TABLE . " SET count='" . ($row['count'] + 1) . "' WHERE id='" . $row['id'] . "'");