From 325340159de0b386cec8640c2d67e334045323bb Mon Sep 17 00:00:00 2001
From: Muad Sakah <muadsakah@yahoo.com>
Date: Sun, 2 Feb 2025 07:09:04 +0000
Subject: [PATCH] fair_additional_materials database completed

---
 fair_additional_materials.inc.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/fair_additional_materials.inc.php b/fair_additional_materials.inc.php
index 2a679a65..e52c37b0 100644
--- a/fair_additional_materials.inc.php
+++ b/fair_additional_materials.inc.php
@@ -42,9 +42,9 @@ function fair_additional_materials($fair, $award, $year)
 	/* Grab a list of winners */
 	$q = $pdo->prepare("SELECT * FROM award_prizes
 				LEFT JOIN winners ON winners.awards_prizes_id=award_prizes.id
-			WHERE winners.year='$year' 
-				AND winners.fairs_id='{$fair['id']}'");
-	$q->execute();
+			WHERE winners.year=? 
+				AND winners.fairs_id=?");
+	$q->execute([$year, $fair['id']]);
 	while ($r = $q->fetch()) {
 		$pid = $r['projects_id'];
 		$rep->newPage('', '', 1);