Index: /home/patrick/_WhiskyEchoBravo/src/curiosae/curiosae-site/trunk/www/sites/all/modules/contrib/media_mover/media_mover_api.module
===================================================================
--- /home/patrick/_WhiskyEchoBravo/src/curiosae/curiosae-site/trunk/www/sites/all/modules/contrib/media_mover/media_mover_api.module	(révision 714)
+++ /home/patrick/_WhiskyEchoBravo/src/curiosae/curiosae-site/trunk/www/sites/all/modules/contrib/media_mover/media_mover_api.module	(copie de travail)
@@ -987,15 +987,19 @@
  */
 function media_mover_api_get_files($status, $cid = NULL, $num = NULL, $reset = FALSE) {
   $options = array();
+  $args = array($status);
+  
   if ($cid) {
-    $options[] = "AND cid = $cid";
+    $options[] = "AND cid = %d";
+    $args[] = $cid;
   }
   // set the limit queue
   if ($num) {
-    $options[] = 'LIMIT 0, '. $num;
+    $options[] = 'LIMIT 0, %d';
+    $args[] = $num;
   }
   // find all matching files
-  $results = db_query("SELECT mmfid FROM {media_mover_files} WHERE status = %d ". implode(' ', $options), $status);
+  $results = db_query("SELECT mmfid FROM {media_mover_files} WHERE status = %d ". implode(' ', $options), $args);
   // put files into an array
   $items = array();
   while ($result = db_fetch_array($results)) {
@@ -1021,9 +1025,12 @@
  */
 function media_mover_api_node_files_fetch($nid, $status = MMA_FILE_STATUS_COMPLETE_COMPLETE) {
   // if a status is being passed set an id
+  $where = array('nid = %d');
+  $args = array($nid);
   if ($status) {
     $status_id = "_$status";
-    $file_status = "AND status = $status ";
+    $where[] = 'status = %d';
+    $args[] = $status;
   }
 
   // create cache name
@@ -1033,7 +1040,7 @@
   // we can haz cache?
   if (! $data) {
     $data = array();
-    $results = db_query("SELECT mmfid, cid FROM {media_mover_files} WHERE nid = %d ". $file_status .' ORDER BY cid', $nid);
+    $results = db_query("SELECT mmfid, cid FROM {media_mover_files} WHERE ". implode(' AND ', $where) .' ORDER BY cid', $args);
     while ($result = db_fetch_array($results)) {
       $data[$result['cid']][] = media_mover_api_file_fetch($result['mmfid']);
     }