Update: 2026-06-25 19:22:26

2026-06-25 19:22:26 +03:00
parent 35e54ea433
commit cdd1349aaf
1 changed files with 3 additions and 3 deletions
--- a/backend/ride/promo/getPromoBytody.php
+++ b/backend/ride/promo/getPromoBytody.php
@@ -10,12 +10,12 @@ $sql = "SELECT
 FROM
    `promos`
 WHERE
-    (passengerID = '$passengerID' OR passengerID LIKE '%all%')
+    (passengerID = :passengerID OR passengerID IN ('', 'none', 'all'))
    AND promos.validity_start_date <= CURDATE()
    AND promos.validity_end_date >= CURDATE();";

 $stmt = $con->prepare($sql);
-$stmt->execute();
+$stmt->execute([':passengerID' => $passengerID]);
 $result = $stmt->fetchAll(PDO::FETCH_ASSOC);

 if ($result) {