Fix(Core): Fix SQL query (#344)

Author: stonebuzz

inc/baseclass.class.php

@@ -58,8 +58,10 @@ public function __construct($config = [])
         global $DB, $LANG;
 
         //force MySQL DATE_FORMAT in user locale
-        $query = "SET lc_time_names = '" . $_SESSION['glpilanguage'] . "'";
-        $DB->doQuery($query);
+        $query = "SET lc_time_names = ?";
+        $stmt = $DB->prepare($query);
+        $stmt->bind_param("s", $_SESSION['glpilanguage']);
+        $stmt->execute();
 
         if (empty($config)) {
             return;