diff --git a/calendar/inc/class.socalendar.inc.php b/calendar/inc/class.socalendar.inc.php index 3d89043af6..b9e8a60f42 100755 --- a/calendar/inc/class.socalendar.inc.php +++ b/calendar/inc/class.socalendar.inc.php @@ -50,7 +50,6 @@ echo ''."\n"; } $this->cal = CreateObject('calendar.socalendar_'); - $this->db = &$this->db; foreach($this->cal->all_tables as $name => $table) { @@ -217,7 +216,7 @@ function find_uid($uid) { - $sql = " AND ($this->table.cal_uid=".(int)$uid.' )'; + $sql = " AND ($this->table.cal_uid=".$this->db->quote($uid).')'; $found = $this->cal->get_event_ids(False,$sql); if(!$found)