Merge pull request #244 from PrestaShop/improve-sql-cast

Build 8.0.1

Author: jolelievre

config.xml

@@ -2,7 +2,7 @@
 <module>
     <name>productcomments</name>
     <displayName><![CDATA[Product Comments]]></displayName>
-    <version><![CDATA[8.0.0]]></version>
+    <version><![CDATA[8.0.1]]></version>
     <description><![CDATA[Allows users to post reviews and rate products on specific criteria.]]></description>
     <author><![CDATA[PrestaShop]]></author>
     <tab><![CDATA[front_office_features]]></tab>

productcomments.php

@@ -47,7 +47,7 @@ public function __construct()
     {
         $this->name = 'productcomments';
         $this->tab = 'front_office_features';
-        $this->version = '8.0.0';
+        $this->version = '8.0.1';
         $this->author = 'PrestaShop';
         $this->need_instance = 0;
         $this->bootstrap = true;

src/Repository/ProductCommentCriterionRepository.php

@@ -159,12 +159,13 @@ public function update(ProductCommentCriterion $criterion): int
     private function updateCategories($criterion): int
     {
         $res = 0;
-        $criterionId = $criterion->getId();
+        $criterionId = (int) $criterion->getId();
         foreach ($criterion->getCategories() as $id_category) {
             $res += $this->connection->executeUpdate(
                 'INSERT INTO `' .
                 _DB_PREFIX_ . 'product_comment_criterion_category` (`id_product_comment_criterion`, `id_category`)
-                VALUES(' . $criterionId . ',' . $id_category . ')'
+                VALUES(?, ?)',
+                [$criterionId, (int) $id_category]
             );
         }
 
@@ -174,12 +175,13 @@ private function updateCategories($criterion): int
     private function updateProducts($criterion): int
     {
         $res = 0;
-        $criterionId = $criterion->getId();
+        $criterionId = (int) $criterion->getId();
         foreach ($criterion->getProducts() as $id_product) {
             $res += $this->connection->executeUpdate(
                 'INSERT INTO `' .
                 _DB_PREFIX_ . 'product_comment_criterion_product` (`id_product_comment_criterion`, `id_product`)
-                VALUES(' . $criterionId . ',' . $id_product . ')'
+                VALUES(?, ?)',
+                [$criterionId, (int) $id_product]
             );
         }