parametrise unparametrised query

git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/trunk@533 4979c152-3d1c-0410-bac9-87ea11338e46

1 files changed, 2 insertions, 2 deletions

diff --git a/import_members.pl b/import_members.pl
index ef8b27cb..42da0c7f 100755
--- a/import_members.pl
+++ b/import_members.pl
@@ -213,9 +213,9 @@ sub save_member {
 		# add login to employee table if it does not exist
 		my $login = $self->{login};
 		$login =~ s/@.*//;
-		my $query = qq|SELECT id FROM employee WHERE login = '$login'|;
+		my $query = qq|SELECT id FROM employee WHERE login = ?|;
 		my $sth = $dbh->prepare($query);
-		$sth->execute;
+		$sth->execute($login);
 
 		my ($id) = $sth->fetchrow_array;
 		$sth->finish;