FIX:スペシャルスキンパーツが削除できないバグを修正

[nucleus-jp/nucleus-next.git] / nucleus / libs / ADMIN.php

diff --git a/nucleus/libs/ADMIN.php b/nucleus/libs/ADMIN.php
index 0cfd4f2..453d624 100644 (file)
--- a/nucleus/libs/ADMIN.php
+++ b/nucleus/libs/ADMIN.php
@@ -3976,10 +3976,9 @@ class Admin
                        'skintype' => $skintype\r
                );\r
                $manager->notify('PreDeleteSkinPart', $data);\r
-               \r
                // delete part\r
-               $query = "DELETE FROM %s WHERE sdesc=%d AND stype='%s';";\r
-               $query = sprintf($query, sql_table('skin'), (integer) $skinid, (integer) $skintype);\r
+               $query = "DELETE FROM %s WHERE sdesc=%d AND stype=%s;";\r
+               $query = sprintf($query, sql_table('skin'), (integer) $skinid, DB::quoteValue($skintype) );\r
                DB::execute($query);\r
                \r
                $data = array(\r
@@ -4341,10 +4340,10 @@ class Admin
                        'skintype'      => $skintype\r
                );\r
                $manager->notify('PreDeleteAdminSkinPart', $data);\r
-               \r
+\r
                // delete part\r
-               $query = 'DELETE FROM %s WHERE sdesc = %d AND stype ="%s"';\r
-               $query = sprintf($query, sql_table('skin'), (integer) $skinid, $skintype);\r
+               $query = 'DELETE FROM %s WHERE sdesc = %d AND stype = %s ;';\r
+               $query = sprintf($query, sql_table('skin'), (integer) $skinid, DB::quoteValue($skintype) );\r
                DB::execute($query);\r
                \r
                $data = array(\r