-
Notifications
You must be signed in to change notification settings - Fork 2
Open
Description
Login fails in the ADMIN_SERVER fails because ZitAdmin::ZitAdmin has an unquoted $id literal
that gets interrupted as a DB column
Patch below
diff --git a/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php b/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php
index 53c4dfd..b1dde3e 100755
--- a/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php
+++ b/OpenZIS/ADMIN_APPLICATION/models/ZitAdmin.php
@@ -38,8 +38,8 @@ class ZitAdmin
from
".DBConvertor::convertCase('zit_admin')." a,
".DBConvertor::convertCase('admin_level')." l
- where a.admin_level_id = l.level_id and a.admin_id = $id";
-
+ where a.admin_level_id = l.level_id and a.admin_id = '$id'";
+ error_log( $sql) ;
$result = $db->fetchAll($sql);
foreach($result as $row){
switch(DB_TYPE) {
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels