aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/acp/acp_users.php
diff options
context:
space:
mode:
authorHenry Sudhof <kellanved@phpbb.com>2007-06-22 16:47:23 +0000
committerHenry Sudhof <kellanved@phpbb.com>2007-06-22 16:47:23 +0000
commit1e2db705ca061228ddedd312e00d99cfce2a2ae6 (patch)
treed7e9de18fa086a1d094c250a34cf56b565206ff9 /phpBB/includes/acp/acp_users.php
parent409749f85770cfd4ce47962ec71681e44f03b614 (diff)
downloadforums-1e2db705ca061228ddedd312e00d99cfce2a2ae6.tar
forums-1e2db705ca061228ddedd312e00d99cfce2a2ae6.tar.gz
forums-1e2db705ca061228ddedd312e00d99cfce2a2ae6.tar.bz2
forums-1e2db705ca061228ddedd312e00d99cfce2a2ae6.tar.xz
forums-1e2db705ca061228ddedd312e00d99cfce2a2ae6.zip
Fixing a few things for postgres. Thanks to wagnerch for researching the issue and providing a patch.
#12587 git-svn-id: file:///svn/phpbb/trunk@7787 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/includes/acp/acp_users.php')
-rw-r--r--phpBB/includes/acp/acp_users.php5
1 files changed, 3 insertions, 2 deletions
diff --git a/phpBB/includes/acp/acp_users.php b/phpBB/includes/acp/acp_users.php
index a3ae85cf3b..122d1d9e35 100644
--- a/phpBB/includes/acp/acp_users.php
+++ b/phpBB/includes/acp/acp_users.php
@@ -1831,7 +1831,7 @@ class acp_users
// Select auth options
$sql = 'SELECT auth_option, is_local, is_global
FROM ' . ACL_OPTIONS_TABLE . "
- WHERE auth_option LIKE '%\_'";
+ WHERE auth_option LIKE '%" . $db->sql_escape('\_') . "'";
if ($db->sql_layer == 'mssql' || $db->sql_layer == 'mssql_odbc')
{
@@ -1843,6 +1843,7 @@ class acp_users
$result = $db->sql_query($sql);
$hold_ary = array();
+
while ($row = $db->sql_fetchrow($result))
{
$hold_ary = $auth_admin->get_mask('view', $user_id, false, false, $row['auth_option'], 'global', ACL_NEVER);
@@ -1856,7 +1857,7 @@ class acp_users
{
$sql = 'SELECT auth_option, is_local, is_global
FROM ' . ACL_OPTIONS_TABLE . "
- WHERE auth_option LIKE '%\_'";
+ WHERE auth_option LIKE '%" . $db->sql_escape('\_') . "'";
if ($db->sql_layer == 'mssql' || $db->sql_layer == 'mssql_odbc')
{