diff --git a/application/third_party/trainsystem/models/train_system_model.php b/application/third_party/trainsystem/models/train_system_model.php
index 32c0cd64..c426969b 100644
--- a/application/third_party/trainsystem/models/train_system_model.php
+++ b/application/third_party/trainsystem/models/train_system_model.php
@@ -145,7 +145,7 @@ class train_system_model extends CI_Model {
 	
 	//新增乘客
 	function add_passagers($data){
-		$sql = "IF EXISTS (select * from trainsystem_tickets where tst_ordernumber = '{$data->ordernumber}' and tst_numberid = '{$data->numberid}' and tst_realname = '{$data->realname}')
+		$sql = "IF EXISTS (select * from trainsystem_tickets where tst_ordernumber = '{$data->ordernumber}' and tst_numberid = '{$data->numberid}' and tst_realname = ?)
 				update 
 					trainsystem_tickets 
 				set 
@@ -163,7 +163,7 @@ class train_system_model extends CI_Model {
 				and 
 					tst_numberid = '{$data->numberid}'
 				and 
-					tst_realname = '{$data->realname}'
+					tst_realname = ?
 			else
 				INSERT INTO trainsystem_tickets (
 					tst_ordernumber,
@@ -180,7 +180,7 @@ class train_system_model extends CI_Model {
 				)VALUES(
 					'{$data->ordernumber}',
 					'{$data->status}',
-					'{$data->realname}',
+					?,
 					'{$data->identitytype}',
 					'{$data->numberid}',
 					'{$data->ticketype}',
@@ -191,7 +191,7 @@ class train_system_model extends CI_Model {
 					'{$data->lanhaiData}'
 				)
 			";
-		$query =$this->INFO->query($sql);
+		$query =$this->INFO->query($sql,array($data->realname,$data->realname,$data->realname));
 	}
 	
 	//更新订单信息
@@ -277,11 +277,11 @@ class train_system_model extends CI_Model {
 				where 
 					tst_ordernumber = '{$data->ordernumber}'
 				and
-					tst_realname = '{$data->realname}'
+					tst_realname = ?
 				and 
 					tst_numberid = '{$data->numberid}'
 				";
-		$query = $this->INFO->query($sql);			
+		$query = $this->INFO->query($sql,array($data->realname));			
 	}