Problems sql injection

[Ariel Bra]

I have a problem which is as follows. I hired a company to do a security scan on my site, and their report came that I am having problems with SQL Injection in my Prestashop Version 1.3.0.1 , but specifically in cart.php.

See algunas examples of tests that came in the reports:

url: http://www.meusite.com/cart.php?add=&id_product=97&ipa=0&op=down') OR NULL IS NULL &token=69116700ef7cc80d0343b8c4c8b5202c
variants: 4
matched: True condition:

http://www.meusite.com/cart.php?add=&id_product=97&ipa=0&op=down') OR NULL IS NULL &token=69116700ef7cc80d0343b8c4c8b5202c

False condition:

http://www.meusite.com/cart.php?add=&id_product=97&ipa=0&op=down') OR 4 IS NULL &token=69116700ef7cc80d0343b8c4c8b5202c

Do you know how can I fix this?

[Rémi Gaillard]

Hi,

There is no SQL injection here.
The company which you have asked have give to you bad results, the op variable is never used in SQL requests.

Regards,

[safa]

The domain meusite.com is for sale

this is spam :-S