diff --git a/html/news.php b/html/news.php index 62978346..c1ef354a 100644 --- a/html/news.php +++ b/html/news.php @@ -48,7 +48,7 @@ if (filter_var($_GET['article'], FILTER_VALIDATE_INT)) { if ($article == "") { $bdd = connect($dbhost, $dbname, $dbuser, $dbpass); $search = isset($_GET['search']) ? htmlspecialchars($_GET['search']) : ""; - $req = $bdd->prepare("SELECT ID, titre, date FROM articles WHERE (titre LIKE '%:search%' OR ID LIKE '%:search%' OR auteur LIKE '%:search%') AND classification <= :accreditation ORDER BY date DESC"); + $req = $bdd->prepare("SELECT ID, titre, date FROM articles WHERE (titre LIKE :search OR ID LIKE :search OR auteur LIKE :search) AND classification <= :accreditation ORDER BY date DESC"); $req->bindParam(":search", $search); $req->bindParam(":accreditation", $_SESSION['accreditation']); $req->execute();