From 95c5441b5d9b4765bc344116748301374b289475 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ricardo=20Gonz=C3=A1lez?=
 <36200981+rickygzz@users.noreply.github.com>
Date: Tue, 12 Oct 2021 16:24:01 -0500
Subject: [PATCH] Update21.php

Remove single quotes for $user and $pass inside $query, since $pdo->quote() will quote the string for use in a query.
---
 11/21.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/11/21.php b/11/21.php
index db637d4..3e6d166 100644
--- a/11/21.php
+++ b/11/21.php
@@ -12,7 +12,7 @@
 
   $user  = mysql_entities_fix_string($pdo, $_POST['user']);
   $pass  = mysql_entities_fix_string($pdo, $_POST['pass']);
-  $query = "SELECT * FROM users WHERE user='$user' AND pass='$pass'";
+  $query = "SELECT * FROM users WHERE user=$user AND pass=$pass";
 
   //Etc…