Escape SQL

Automattic · Oct 25, 2024 · f7f4035 · f7f4035
1 parent 7d0721a
commit f7f4035
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/projects/plugins/crm/admin/dashboard/dashboard.ajax.php b/projects/plugins/crm/admin/dashboard/dashboard.ajax.php
@@ -69,7 +69,7 @@ function jetpackcrm_dash_refresh() {
 		);
 	}
 
-	$tz_offset = jpcrm_get_wp_timezone_offset();
+	$tz_offset = esc_sql( (string) jpcrm_get_wp_timezone_offset() );
 	$wpdb->query( 'SET time_zone = "' . $tz_offset . '";' );
 
 	// next we want the contact chart which is total contacts between the dates grouped by day, week, month, year