Jan-Claas Dirks
2015-09-14 6c2436ec529ed4f75b1c57c0d43a3138c6fbff6f
correct backticking of columns in queries from soap interface
1 files modified
4 ■■■■ changed files
interface/lib/classes/remoting_lib.inc.php 4 ●●●● patch | view | raw | blame | history
interface/lib/classes/remoting_lib.inc.php
@@ -243,9 +243,9 @@
                if($key == '#OFFSET#') $sql_offset = $app->functions->intval($val);
                elseif($key == '#LIMIT#') $sql_limit = $app->functions->intval($val);
                elseif(stristr($val, '%')) {
                    $sql_where .= "? like ? AND ";
                    $sql_where .= "?? like ? AND ";
                } else {
                    $sql_where .= "? = ? AND ";
                    $sql_where .= "?? = ? AND ";
                }
                $params[] = $key;
                $params[] = $val;