From f165d5ce0bf2aec898591e51f132d20f2ae463ca Mon Sep 17 00:00:00 2001
From: Stanislas Kita <skita@teclib.com>
Date: Thu, 5 Feb 2026 14:42:19 +0100
Subject: [PATCH] Fix(Core): Fix SQL query

---
 inc/baseclass.class.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/inc/baseclass.class.php b/inc/baseclass.class.php
index cee06b0e..cea02ea2 100644
--- a/inc/baseclass.class.php
+++ b/inc/baseclass.class.php
@@ -58,8 +58,10 @@ public function __construct($config = [])
         global $DB, $LANG;
 
         //force MySQL DATE_FORMAT in user locale
-        $query = "SET lc_time_names = '" . $_SESSION['glpilanguage'] . "'";
-        $DB->doQuery($query);
+        $query = "SET lc_time_names = ?";
+        $stmt = $DB->prepare($query);
+        $stmt->bind_param("s", $_SESSION['glpilanguage']);
+        $stmt->execute();
 
         if (empty($config)) {
             return;