Try to fix SQL injections

back/src/controllers/administrateur.controller.js

 const mysql = require('mysql');
 const fetch = require('node-fetch');
-const sql = require('../tools/sql.js')
 var secrets = require('../secrets.js');
 var dbhost = secrets.dbhost;
 var dbuser = secrets.dbuser;
@@ -45,9 +44,10 @@ function addNewAdministrateur(req, res) {
 
 function updateAdministrateur(req, res) {
   var con = mysql.createConnection(dbConfig);
-  var query = "UPDATE Admin SET login = '" + req.body.login + "' WHERE id=" + req.body.id + ";"
+  var query = "UPDATE Admin SET login = ? WHERE id=?;"
+  var inserts = [req.body.login, req.body.id];
   con.connect();
-  con.query(query, (err, result) => {
+  con.query(query, inserts, (err, result) => {
     if (err) {
       console.log(err)
       return res.send({ success: false })

back/src/tools/sql.js

-exports.preparer = function (mysql, requete_sql, inserts) {
-    requete_sql = mysql.format(requete_sql, inserts)
-        // nous utilisons la méthode .remplace avec une expression régulière
-        // pour supprimer les accents graves et les points
-        .replace(/`/g, "'")
-        .replace(/'\.'/g, ".")
-        .replace(/'/g, "\\'");
-    return requete_sql;
-}
\ No newline at end of file