Use placeholder in LikeHandler::loadLikeStatus()

diff --git a/wcfsetup/install/files/lib/system/like/LikeHandler.class.php b/wcfsetup/install/files/lib/system/like/LikeHandler.class.php
index ed7a2cb0021636915a74d2632e57e940ca8133a9..cf0b9a021b6d5570b335da01447398d7ec379bd9 100644 (file)
--- a/wcfsetup/install/files/lib/system/like/LikeHandler.class.php
+++ b/wcfsetup/install/files/lib/system/like/LikeHandler.class.php
@@ -502,12 +502,13 @@ class LikeHandler extends SingletonFactory {
                                        CASE WHEN like_table.likeValue IS NOT NULL THEN like_table.likeValue ELSE 0 END AS liked
                        FROM            wcf".WCF_N."_like_object like_object
                        LEFT JOIN       wcf".WCF_N."_like like_table
-                       ON              (like_table.objectTypeID = ".$likeObject->objectTypeID."
+                       ON              (like_table.objectTypeID = ?
                                        AND like_table.objectID = like_object.objectID
                                        AND like_table.userID = ?)
                        WHERE           like_object.likeObjectID = ?";
                $statement = WCF::getDB()->prepareStatement($sql);
                $statement->execute([
+                       $likeObject->objectTypeID,
                        $user->userID,
                        $likeObject->likeObjectID
                ]);