More SQL rewrites, TODO: Put all table and column names in backticks (`)

[mailer.git] / modules.php

diff --git a/modules.php b/modules.php
index 325eb83108671abe9bc5440e084ddb794ad2307b..1788cf63b374c0c9f77ca146c116dd1c4f2a46d0 100644 (file)
--- a/modules.php
+++ b/modules.php
@@ -60,7 +60,7 @@ require("inc/config.php");
 // Check if logged in
 if (IS_MEMBER()) {
        // Is still logged in so we welcome him with his name
-       $result = SQL_QUERY_ESC("SELECT surname, family FROM "._MYSQL_PREFIX."_user_data WHERE userid=%s LIMIT 1",
+       $result = SQL_QUERY_ESC("SELECT surname, family FROM `"._MYSQL_PREFIX."_user_data` WHERE userid=%s LIMIT 1",
         array($GLOBALS['userid']), __FILE__, __LINE__);
        if (SQL_NUMROWS($result) == 1) {
                // Load surname and family's name and build the username