From 1a9188c07bf46332f2fb5cd369bbc71aeff4fb95 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=BCrgen=20Meyer?= <juergen.meyer@dtfb.de>
Date: Sun, 8 Mar 2026 21:46:09 +0100
Subject: [PATCH] Beanstandung Copilot abgearbeitet 1

---
 src/structure/components/com_sportsmanager/admin.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/structure/components/com_sportsmanager/admin.php b/src/structure/components/com_sportsmanager/admin.php
index aaa7a0d..c58f498 100644
--- a/src/structure/components/com_sportsmanager/admin.php
+++ b/src/structure/components/com_sportsmanager/admin.php
@@ -10604,7 +10604,7 @@ function adminSaveBegegnungSpielplan(): void
 
 	//Spielbericht komplett loeschen
 	if ($benutzer_ist_moderator && $jInput->get('loeschen', false, 'BOOL')) {
-		adminDeleteMatchReportBegegnung($id);
+		adminDeleteMatchReportBegegnung($id,$veranstaltungId);
 		redirectSportsManagerURL('&task=admin_begegnungen&veranstaltungid=' . $veranstaltungId . '#id' . $id, Text::_('COM_SPORTSMANAGER_MATCH_REPORT_WAS_DELETED'));
 	}
 		
@@ -11072,7 +11072,7 @@ function adminSaveBegegnungSpielplan(): void
     }
 }
 
-function adminDeleteMatchReportBegegnung($id): void
+function adminDeleteMatchReportBegegnung($id,$veranstaltungId): void
 {
 	$db = getDatabase();
     $user_id = isExternalDatabase() ? 0 : (isJson() ? getUserID() : Factory::getContainer()->get(SiteApplication::class)->getIdentity()->id);
@@ -11231,7 +11231,7 @@ function adminDeleteMatchReportBegegnung($id): void
         $pin = decrypt($encrypted_pin, "a9cZ" . $veranstaltungId . "oDS7" . $id . "2eA");
 		
 		$query = "SELECT team_id FROM #__sportsmanager_team"
-			. "\n WHERE pin = '$pin' AND veranstaltung_id = $veranstaltungId;";
+			. "\n WHERE pin = " . $db->quote($pin) . " AND veranstaltung_id = $veranstaltungId;";
 		$team_id = loadResult($db, $query);
 		
 		$query = "INSERT INTO #__sportsmanager_begegnung_historie"