Update nickpage.php

-secured PDO query with bindParam

content/nickpage.php

 <?php
-$_GET['nick'] = addslashes($_GET['nick']);
-
-$sql = sql::$db->query("SELECT u.angemeldet_seit,k.klicks,k.kv,k.angebettelt,k.bv FROM "._VMS_."_kontodaten k LEFT JOIN "._VMS_."_userdaten u ON u.uid = k.uid WHERE u.nickname='".$_GET['nick']."' LIMIT 1");
+$sql = sql::$db->prepare("SELECT u.angemeldet_seit,k.klicks,k.kv,k.angebettelt,k.bv FROM "._VMS_."_kontodaten k LEFT JOIN "._VMS_."_userdaten u ON u.uid = k.uid WHERE u.nickname=:nick LIMIT 1");
+$sql -> bindParam(':nick', $_GET['nick'], PDO::PARAM_STR);
+$sql -> execute();
 $np = $sql->fetch(PDO::FETCH_ASSOC);
 head("Nickpage von ".$_GET['nick']);
     echo'<b>Angemeldet seit:</b> '.date("d.m.Y - H:i",$np['angemeldet_seit']).'<br>