please use placeholders in sql queries

[danmarsden]

moodle-mod_hva/classes/HVA.php

Line 105 in eca57c5

WHERE cm_s.id = $cmid AND cm_a.deletioninprogress = 0 AND cm_s.module = (SELECT id FROM {modules} WHERE name = 'scorm')",

Please do not inject variables into inline sql - use placeholders to prevent sql injection vulnerabilities and to follow moodle codiing guidelines - more info see:
https://moodledev.io/docs/apis/core/dml

[Lhannecart]

I have checked all the requests and added a placeholder for each of them in the plugin where necessary.