From ffe740c29ad7be76d28dcbc8eb908edb20f4d415 Mon Sep 17 00:00:00 2001
From: GZod01 <gzod01@gzod01.fr>
Date: Sun, 9 Mar 2025 19:11:15 +0100
Subject: [PATCH] qqsd

---
 index.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/index.php b/index.php
index 60475d2..93243a5 100644
--- a/index.php
+++ b/index.php
@@ -237,6 +237,7 @@ if (isset($_GET["admin"])) {
 $sub_event_code = "global";
 if (isset($_GET["sub_event_code"])) {
     $sub_event_code = $_GET["sub_event_code"];
+    $escaped_sub_evt_code=mysqli_real_escape_string($con, $sub_event_code);
     $sub_event_data_res = mysqli_query($con, "SELECT * FROM `sub_events` WHERE sub_event_code='$escaped_sub_evt_code'");
     if(mysqli_num_rows($sub_event_data_res)<1){
         die("<p><b>Ce sous-event n'existe pas</b> <a href='/?event_code=$event_code'>retourner à l'accueil de l'event.</a></p>");