From 9c54d6f6ffc1b0e16f0c0363ce91211fa203cabb Mon Sep 17 00:00:00 2001
From: Amirreza Ebrahimi <aabrahimi1718@gmail.com>
Date: Sun, 30 Jun 2024 15:49:28 +0330
Subject: [PATCH] Update Helper File

---
 Contact-Us-Form-English/controller/helper.php | 12 +++++++++---
 Contact-Us-Form-Persian/controller/helper.php | 13 +++++++++----
 2 files changed, 18 insertions(+), 7 deletions(-)

diff --git a/Contact-Us-Form-English/controller/helper.php b/Contact-Us-Form-English/controller/helper.php
index 2d90f97..dac2048 100644
--- a/Contact-Us-Form-English/controller/helper.php
+++ b/Contact-Us-Form-English/controller/helper.php
@@ -13,7 +13,11 @@ function seveMessage($name, $phone, $email, $message)
     global $connect;
     $sql = "INSERT INTO contacts (name,phone,email,message) VALUES (:name,:phone,:email,:message);";
     $stmt = $connect->prepare($sql);
-    $stmt->execute([':name' => $name, ':phone' => $phone, ':email' => $email, ':message' => $message]);
+    $stmt->bindParam(':name', $name,PDO::PARAM_STR);
+    $stmt->bindParam(':phone', $phone,PDO::PARAM_STR);
+    $stmt->bindParam(':email', $email,PDO::PARAM_STR);
+    $stmt->bindParam(':message', $message,PDO::PARAM_STR);
+    $stmt->execute();
     $result = $stmt->rowCount();
     return $result;
 }
@@ -48,8 +52,9 @@ function allContacts($page)
 function contact($id)
 {
     global $connect;
-    $sql = "SELECT * FROM contacts WHERE id = $id;";
+    $sql = "SELECT * FROM contacts WHERE id = :id;";
     $stmt = $connect->prepare($sql);
+    $stmt->bindParam(':id', $id,PDO::PARAM_STR);
     $stmt->execute();
     $result = $stmt->fetch(PDO::FETCH_OBJ);
     return $result;
@@ -59,8 +64,9 @@ function contact($id)
 function updateStatus($id)
 {
     global $connect;
-    $sql = "UPDATE contacts SET status = 'read' WHERE id = $id;";
+    $sql = "UPDATE contacts SET status = 'read' WHERE id = :id;";
     $stmt = $connect->prepare($sql);
+    $stmt->bindParam(':id', $id,PDO::PARAM_STR);
     $stmt->execute();
     $result = $stmt->rowCount();
     return $result;
diff --git a/Contact-Us-Form-Persian/controller/helper.php b/Contact-Us-Form-Persian/controller/helper.php
index 9eef14e..dac2048 100644
--- a/Contact-Us-Form-Persian/controller/helper.php
+++ b/Contact-Us-Form-Persian/controller/helper.php
@@ -13,7 +13,11 @@ function seveMessage($name, $phone, $email, $message)
     global $connect;
     $sql = "INSERT INTO contacts (name,phone,email,message) VALUES (:name,:phone,:email,:message);";
     $stmt = $connect->prepare($sql);
-    $stmt->execute([':name' => $name, ':phone' => $phone, ':email' => $email, ':message' => $message]);
+    $stmt->bindParam(':name', $name,PDO::PARAM_STR);
+    $stmt->bindParam(':phone', $phone,PDO::PARAM_STR);
+    $stmt->bindParam(':email', $email,PDO::PARAM_STR);
+    $stmt->bindParam(':message', $message,PDO::PARAM_STR);
+    $stmt->execute();
     $result = $stmt->rowCount();
     return $result;
 }
@@ -48,8 +52,9 @@ function allContacts($page)
 function contact($id)
 {
     global $connect;
-    $sql = "SELECT * FROM contacts WHERE id = $id;";
+    $sql = "SELECT * FROM contacts WHERE id = :id;";
     $stmt = $connect->prepare($sql);
+    $stmt->bindParam(':id', $id,PDO::PARAM_STR);
     $stmt->execute();
     $result = $stmt->fetch(PDO::FETCH_OBJ);
     return $result;
@@ -59,8 +64,9 @@ function contact($id)
 function updateStatus($id)
 {
     global $connect;
-    $sql = "UPDATE contacts SET status = 'read' WHERE id = $id;";
+    $sql = "UPDATE contacts SET status = 'read' WHERE id = :id;";
     $stmt = $connect->prepare($sql);
+    $stmt->bindParam(':id', $id,PDO::PARAM_STR);
     $stmt->execute();
     $result = $stmt->rowCount();
     return $result;
@@ -82,5 +88,4 @@ function redirect($Url)
 Developed by Hero Expert 
 Telegram channel: @HeroExpert_ir 
 */
-
 ?>
\ No newline at end of file