diff --git a/threadr/boards/thread.php b/threadr/boards/thread.php index 7fabf26..5572294 100644 --- a/threadr/boards/thread.php +++ b/threadr/boards/thread.php @@ -22,9 +22,9 @@ $navbar="boards"; $error = false; $error_message = ""; if (!$error) { - $statement = $pdo->prepare("SELECT * FROM boards WHERE id=$_GET['id']"); - $statement->execute(); - $result = $statement->fetchAll(); + $statement = $pdo->prepare("SELECT * FROM boards WHERE id=:id"); + $statement->execute(array("id"=>$_GET['id'])); + $result = $statement->fetch(); echo $result; } if (!$result) {