Merge branch 'jonasled-master-patch-15565' into 'master'

fix two times sql injection possible

See merge request !10

public/API/queries/blogPost.php

@@ -39,6 +39,7 @@ function blogPost($id, $conn)
 function blogPosts($count, $contentLength, $conn)
 {
     $response = [];
+    $count = $conn->real_escape_string($count);
     $result = $conn->query("SELECT * FROM posts order by id desc limit $count");
     if ($result->num_rows > 0) {
         while ($row = $result->fetch_assoc()) {

public/API/queries/comments.php

@@ -18,6 +18,7 @@ $commentField = new ObjectType([
 function comments($article, $conn)
 {
     $response = [];
+    $article = $conn->real_escape_string($article);
     $result = $conn->query("SELECT * FROM comments WHERE article='$article'");
     while ($row = $result->fetch_assoc()) {
         $commentElement = [