- Always use the database abstraction layer.

diff --git a/includes/session.inc b/includes/session.inc
index ec4cd75..282d8ba 100644 (file)
--- a/includes/session.inc
+++ b/includes/session.inc
@@ -51,7 +51,7 @@ function sess_write($key, $value) {
 }
 
 function sess_destroy($key) {
-  db_query("DELETE FROM {sessions} WHERE sid = '$key'");
+  db_query("DELETE FROM {sessions} WHERE sid = '%d'", $key);
 }
 
 function sess_gc($lifetime) {